YOSTEPS
Sign inGet started

Last updated: 25 June 2026

Privacy Policy

This Privacy Policy explains how Yosteps ("we", "us") collects, uses, stores and protects your personal data, including data accessed through the TikTok API. We act as data controller and apply the GDPR for users based in the European Union.

1. Data we collect

  • Account: email, password (hashed), role.
  • Profile: name, bio, country, city, dance styles, languages, pricing.
  • TikTok data (when you connect your TikTok account): see Section 4.
  • Submissions: the dance videos you upload to Yosteps for review before they are published to TikTok.
  • Transactions: balance history, payments and Stripe withdrawals.
  • Technical: IP address and basic log data, used for security, fraud prevention and abuse detection.

2. Why we use your data

  • Operate the Platform (matching, reviews, payments).
  • Publish your video to TikTok when you request it (see Section 4).
  • Send transactional messages (pitch received, video approved).
  • Prevent fraud and abuse, and meet legal obligations.

We do not use your data for third-party advertising, and we do not sell your data.

3. Legal bases (GDPR)

  • Contract: providing the Platform you signed up for.
  • Consent: connecting your TikTok account and publishing on your behalf. You can withdraw consent at any time.
  • Legitimate interest: security and fraud prevention.
  • Legal obligation: accounting and tax records.

4. TikTok data and API use

Yosteps uses TikTok's official APIs (Login Kit and Content Posting API) in compliance with the TikTok Developer Terms of Service. We only access the scopes you approve when connecting your account:

  • user.info.basic / user.info.profile: your TikTok open ID, username, display name and avatar — used to identify and display your dancer profile.
  • user.info.stats: your public follower, like and video counts — used to show your reach to artists.
  • video.list: your public video list — used to let you pick a video to feature on your profile.
  • video.publish: used solely to publish a video to your TikTok account when you explicitly initiate the post from Yosteps, including the caption and hashtags you write. We never post without your action.

In compliance with the TikTok Developer Terms:

  • No data sale: we do not sell, rent or transfer any data obtained from the TikTok API to advertising networks, data brokers or any other unauthorized party.
  • Limited use: TikTok data is used exclusively to provide Yosteps features described above.
  • Revoking access:you can disconnect your TikTok account from your Yosteps profile, or revoke Yosteps' access directly in TikTok (Settings > Security & permissions > Manage app permissions).
  • Deletion: upon account deletion or when you disconnect your TikTok account, all associated TikTok data is permanently deleted from our servers within 30 days.

5. Who we share data with

We share data only with the processors needed to run the service:

  • Supabase — authentication, database and file storage (EU).
  • Stripe — payments and dancer withdrawals.
  • Vercel — web hosting.
  • Soundcharts — music catalog metadata (artists only).

No data is resold to third parties for advertising purposes.

6. International transfers

Where data is processed outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Your rights (GDPR)

At any time, you can:

  • Access your data (export on request)
  • Correct it directly in your profile
  • Request its deletion
  • Object to or restrict processing
  • Withdraw your consent

Send your request to privacy@yosteps.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority.

8. Cookies

Strictly necessary cookies only (session, preferences). No third-party advertising cookies.

9. Retention

Your data is kept while your account is active. On deletion, personal data is erased within 30 days, except where a legal obligation requires longer (invoices and accounting: up to 10 years). TikTok data is deleted within 30 days of disconnection or account deletion.

10. Security

TLS encryption in transit, hashed passwords (via Supabase), encrypted storage of access tokens and restricted database access. No sensitive data is transmitted by email.

11. Children

Yosteps is not intended for anyone under 18. We do not knowingly collect data from minors; if we learn that we have, we delete it.

12. Changes

We may update this Policy. Material changes will be notified by email or through the Platform.

13. Contact

Data protection contact: privacy@yosteps.com