1. Introduction
Eleven Signal ("Eleven Signal," "we," "us," or "our") is an advertising performance dashboard that enables marketing teams to connect their TikTok Ads Manager accounts and view campaign, ad group, and ad performance data in a single interface.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data. By creating an account or connecting your TikTok Ads Manager account to Eleven Signal, you agree to the practices described in this policy.
If you have questions, contact us at info@elevensignal.com.
2. Information We Collect
2.1 Account Information
When you create an Eleven Signal account, we collect:
- Name and email address
- Company or brand name
- Password (stored in hashed form — we never store plaintext passwords)
2.2 TikTok Advertising Data (via TikTok Marketing API)
When you connect your TikTok Ads Manager account to Eleven Signal, we access your TikTok advertising data through the TikTok API for Business (Marketing API). We request only the minimum permissions necessary to provide the service:
We do not request permissions to:
- Post content or create ads on your behalf
- Access your personal TikTok profile or followers
- Access your TikTok payment methods or billing information
- Modify or delete any campaign, ad group, or ad
The data we retrieve and store includes:
- TikTok Advertiser ID — the unique identifier for your TikTok Ads Manager account
- Campaign data — campaign names, IDs, status, objectives, budgets, and date ranges
- Ad group data — ad group names, IDs, targeting parameters, bids, and schedules
- Ad data — ad names, IDs, creative details, status, and performance metrics (impressions, clicks, spend, etc.)
- OAuth credentials — access tokens required to retrieve your data (stored encrypted, server-side only)
2.3 Usage Data
We automatically collect limited technical information when you use Eleven Signal, including:
- Pages visited and features used within the application
- Browser type and operating system
- IP address and approximate location (country/region)
- Timestamps of logins and data syncs
We use this data to operate, maintain, and improve the service. We do not sell it.
3. How We Use Your Information
We use the information we collect solely to provide and improve the Eleven Signal service:
We do not:
- Sell, license, or trade your data to third parties
- Use your advertising data for purposes outside of displaying it to you
- Use your data to train machine learning models for third parties
- Share your TikTok advertiser data with any other client of Eleven Signal
4. Third-Party Services
4.1 TikTok
Eleven Signal integrates with the
TikTok API for Business to retrieve your advertising data. Your use of TikTok Ads Manager is governed by TikTok's own
Terms of Service and
Privacy Policy. We are not responsible for TikTok's data practices.
When you authorize Eleven Signal via TikTok OAuth, you grant us permission to access your ad account data using the scopes listed in Section 2.2. You may revoke this access at any time by:
- Going to TikTok Ads Manager → Settings → Authorized Apps
- Removing Eleven Signal from the list of authorized applications
Revoking access in TikTok Ads Manager will prevent Eleven Signal from syncing new data. You can also request deletion of your stored data by contacting us at info@elevensignal.com.
4.2 Infrastructure and Storage
We use the following sub-processors to operate Eleven Signal:
All data is stored and processed in the United States. Our infrastructure providers maintain their own security certifications and data protection practices.
5. Data Retention
When you delete your account, we will remove your personal information and TikTok credentials from our active systems within 30 days. Some data may be retained in backup archives for up to 90 additional days before permanent deletion.
6. Your Privacy Rights
Regardless of where you are located, you have the following rights with respect to your data:
- Access — Request a copy of the personal data we hold about you
- Correction — Request that we correct inaccurate data
- Deletion — Request that we delete your account and associated data
- Restriction — Request that we stop processing your data while a dispute is resolved
- Portability — Request a machine-readable export of your data
- Revoke TikTok Authorization — Disconnect your TikTok Ads Manager account at any time (see Section 4.1)
To exercise any of these rights, email us at info@elevensignal.com. We will respond within 30 days. We may ask you to verify your identity before processing the request.
6.1 California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you specific rights regarding your personal information. This section describes those rights and how we handle California residents' personal information.
Categories of personal information we collect
In the past 12 months, we have collected the following categories of personal information, as defined by the CCPA:
We process your TikTok advertising data (campaign, ad group, and ad records) on your behalf as your service provider. That data is your business content, and we use it only to display it back to you.
Sensitive personal information
We collect your account login credentials (hashed password) and TikTok OAuth tokens, which the CCPA treats as sensitive personal information. We use this information only to authenticate you and to retrieve your TikTok data on your behalf. We do not use sensitive personal information to infer characteristics about you, and we do not use or disclose it for any purpose other than providing the service. Because of this limited use, the CCPA "right to limit" the use of sensitive personal information does not change how we handle your data, but you may still contact us with any request.
Business purposes for collection
We collect and use the categories above to authenticate and authorize your account, sync and display your TikTok advertising data, operate and secure the platform, respond to support requests, and send service communications. These purposes are described in Section 3.
Disclosure of personal information
We disclose personal information to service providers who process it on our behalf for the business purposes above. In the past 12 months, we have disclosed identifiers, internet activity, and account credentials to our infrastructure sub-processors (Supabase and Vercel, listed in Section 4.2).
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. We have not sold or shared personal information in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Your California rights
- Right to know / access. Request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties to whom we disclose it.
- Right to delete. Request deletion of personal information we collected from you, subject to legal exceptions.
- Right to correct. Request correction of inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but you may confirm this with us at any time.
- Right to limit use of sensitive personal information. As described above, we already limit our use of sensitive personal information to providing the service.
- Right to non-discrimination. We will not deny you service, charge you a different price, or provide a different level of service because you exercised any of these rights.
How to exercise your rights
Email us at info@elevensignal.com with the subject line "California Privacy Request." We will confirm receipt and respond within 45 days. If we need more time, we may extend this by an additional 45 days and will notify you of the extension and the reason.
To protect your information, we will verify your identity before fulfilling a request, typically by confirming control of the email address associated with your account.
Authorized agents. You may use an authorized agent to submit a request on your behalf. We will require written proof that you authorized the agent to act for you, and we may still verify your identity directly.
7. Cookies and Tracking
Eleven Signal uses essential cookies to maintain your logged-in session. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but doing so will prevent you from staying logged in.
8. Children's Privacy
Eleven Signal is a business tool intended for adults. We do not knowingly collect personal information from anyone under the age of 16. If we become aware that we have collected data from a minor, we will delete it promptly.
We also do not knowingly use the TikTok advertising data you connect to identify or target individuals under the age of 18, and we limit our processing of that data to displaying it back to you.
9. Security
We take reasonable technical and organizational measures to protect your data, including:
- Encryption of OAuth tokens and credentials at rest
- HTTPS for all data in transit
- Server-side token storage — tokens are never exposed to client browsers
- Access controls limiting which team members can access production data
No system is completely secure. In the event of a data breach that affects your rights or freedoms, we will notify affected users and relevant authorities as required by applicable law.
10. Changes to This Policy
We may update this Privacy Policy as Eleven Signal evolves. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you by email if the change is significant
Continued use of Eleven Signal after the effective date of a revised policy constitutes your acceptance of the changes.
11. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy, please contact: