Privacy Policy

1. Overview

This Privacy Policy explains how BonusOS, operated by KMD - Desigin for Mduck Agency, collects, uses, stores, and protects personal and operational data related to platform users.

2. Data We Collect

We may collect account, operational, and integration-related information, including:

• name, email address, login credentials, and account role
• TikTok account identifiers and profile information authorized by the user
• creator association data such as handle, TikTok code, and internal relationship data
• agency operational metrics imported from TikTok Backstage exports, such as diamonds, live duration, valid live days, followers, and related performance indicators
• system access logs, audit records, and administrative activity history

3. How We Use Data

We use collected information to:

• authenticate users and manage access levels
• associate creators with agency and system accounts
• calculate bonus rules, level progression, and reward eligibility
• display dashboards, reports, and creator history
• audit operational changes and maintain system integrity
• support TikTok account connection features and official integration flows

4. TikTok Data

When a user connects their TikTok account through official TikTok authentication, BonusOS only accesses the data permitted by TikTok and by the scopes granted by the user. TikTok data is used exclusively for platform functionality, creator identification, operational dashboards, and program management.

5. Legal Basis and Operational Necessity

Data processing is carried out for account administration, execution of agency operational processes, performance monitoring, bonus program administration, compliance, fraud prevention, and legitimate business interests related to the operation of the platform.

6. Sharing of Data

We do not sell personal data. Data may be shared only with authorized administrators, infrastructure providers, integration providers, legal authorities when required, or service providers strictly necessary to operate the platform.

7. Data Retention

Data is retained for as long as necessary to operate the program, maintain audit history, comply with legal or contractual obligations, resolve disputes, and ensure continuity of agency operations.

8. Security Measures

Reasonable technical and organizational safeguards are adopted to protect data, including access control, role restrictions, auditability, and secure credential handling. However, no internet-based system can guarantee absolute security.

9. User Rights

Where applicable under local law, users may request access, correction, deletion, restriction, or clarification regarding their personal data, subject to operational, legal, and contractual limitations.

10. Cookies and Session Data

BonusOS may use cookies or session mechanisms strictly necessary for authentication, account continuity, and secure operation of the platform.

11. Policy Updates

This Privacy Policy may be updated periodically. Continued use of the platform after an update means acknowledgment of the revised version.

12. Contact

Questions related to privacy, data processing, or account information may be directed to Mduck Agency through its official support or administrative channels.