Legal
Privacy Policy
AlvaxRealtors ("we", "us", or "our") operates this website and the AlvaxRealtors application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read it carefully. By using AlvaxRealtors, you consent to the practices described in this policy.
Information We Collect
When you use AlvaxRealtors, we may collect the following categories of information:
- Account Information: Name and email address provided during registration.
- TikTok OAuth Tokens: Access tokens issued by TikTok's authorization server after you grant permission via TikTok's OAuth 2.0 flow. We never receive or store your TikTok password.
- Uploaded Photos: The two property photographs you upload for video generation. These are processed transiently and deleted after video creation.
- Usage Data: Information about how you use our service, including posts created, plan type, and general app usage metrics.
- Payment Information: Billing details processed by Stripe. We do not store credit card numbers on our servers.
How We Use Your Data
We use your information exclusively to:
- Provide the photo-to-video conversion and TikTok auto-posting service.
- Manage your account and subscription plan.
- Send transactional emails (billing receipts, service alerts).
- Improve service performance and reliability (aggregated, anonymized analytics only).
We do not use your property photos to train AI models, for advertising, or for any purpose beyond generating your requested video.
TikTok API Data
AlvaxRealtors integrates with TikTok through the official TikTok for Developers API using OAuth 2.0. We request only the following scopes:
video.upload— to upload the generated video file.video.publish— to publish the video to your TikTok profile.
We never access your TikTok password, direct messages, follower list, personal contacts, or any data beyond what is necessary to post videos. Your TikTok access tokens are stored encrypted (AES-256) and can be revoked at any time from your TikTok account settings under Settings → Security → Manage app permissions.
Data Retention & Deletion
- Uploaded photos: Deleted within 24 hours of video generation, typically immediately after posting.
- Generated videos: Not stored by us. They exist only on your TikTok profile.
- Account data: Retained until you delete your account, then removed within 30 days.
- TikTok tokens: Deleted immediately upon account disconnection or account deletion.
To request immediate deletion of your data, email privacy@alvax.com.br.
Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing. We share data only with:
- TikTok API: To fulfill your posting requests per your authorization.
- Stripe: Payment processing under their own Privacy Policy.
- Cloud infrastructure: Encrypted storage and processing under GDPR-compliant data processing agreements.
Security
All data is transmitted via TLS 1.2+. API tokens are stored encrypted at rest (AES-256). We conduct regular security audits. Report security vulnerabilities to security@alvax.com.br.
Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion ("right to be forgotten").
- Withdraw consent and revoke TikTok authorization.
- Data portability.
- Lodge a complaint with a supervisory authority.
Submit requests to privacy@alvax.com.br. We respond within 30 days.
Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you by email or in-app notice at least 14 days before material changes take effect. Continued use of the service constitutes acceptance of the updated policy.