Privacy policy

Last updated: 7 Sep 2026

1. Controller

The controller responsible for processing personal data in connection with Yvila is:

BeforeSunrise Internetagentur e.K.
Registered under HRA 202005, Amtsgericht Hannover (Hanover Local Court)
Owner and responsible contact: Tobias Lorenz
Wennigser Str. 1 b, 30974 Wennigsen
Email: info@beforesunrise.de
Phone: +49 5109 56 30 40 5
VAT identification number: DE813849538

2. Purpose of Yvila

Yvila is a web service for registered users. It helps users organise and find their own TikTok videos, analyse performance data and collect ideas for new content.

3. Data processed

When using Yvila, the following data in particular may be processed:

  • Yvila account data, such as name, email address, login status and password hash.
  • Registration data, in particular the time of agreement to the terms of service and privacy policy and the status of email confirmation.
  • Technical access data, such as IP address, time of access, browser information and server logs.
  • Session data required for login.
  • Data from a TikTok connection, where the user actively establishes that connection.
  • Video data that is publicly available or provided through the TikTok API, such as video IDs, descriptions, titles, publication times, links, preview images and metrics such as views, likes, comments or shares.
  • Transcripts, summaries, search data and notes, where the corresponding features are used.

4. TikTok login and TikTok data

When a user connects their TikTok account, this takes place through TikTok's official login and authorisation process. Yvila does not receive TikTok passwords. Depending on the permissions granted, profile and video data from the connected TikTok account may be processed to build the user's private Yvila workspace.

5. Legal bases

Where necessary, data is processed to provide the service and to take pre-contractual or contractual measures. Where users actively establish a TikTok connection, processing is also based on the authorisation granted by the user. Technical security and server log data is processed on the basis of legitimate interests in the secure and stable operation of the service.

6. Cookies and tracking

Yvila uses technically necessary session cookies for login. When a Yvila Friends link is opened, a functional, signed referral token is also stored in a cookie for up to 90 days so that the expressly selected referral is retained across yvila.de, app.yvila.de, registration and a later login. The token contains no email address and no unprotected internal user ID. Cloudflare Turnstile is used to protect public registration against automated submissions. Turnstile is used for security checks, not advertising. No advertising cookies or external marketing tracking are used.

When you select a language, we store your preference in the yvila_language cookie for up to one year. We also save the language preference in your user account and use it for the interface and our account-related emails. You can change it at any time using the language selector.

7. Yvila Friends

A public Friends profile is created only when an eligible user expressly sets up Yvila Friends. We store the chosen public name and Friends handle used for the link and code separately from the private account name. A TikTok name or handle may be suggested, without obligation, and is not published without confirmation. Individual Friends pages are not intended to be indexed by search engines.

If you add payout details for Yvila Friends, we store your legal name, address, account holder, IBAN and, where applicable, BIC in encrypted form. These details are not public and are used to prepare, account for and carry out your payout. The operator has access for this purpose; necessary details are shared with the accounting and banking providers used when processing statements and transfers. You confirm changes with your Yvila password. You can edit or remove your current details in your Friends area. Details already recorded for specific statements are stored separately so that payouts remain traceable; they are retained only as long as necessary for processing, evidence or legal obligations.

For Yvila Friends, we also store the association between the referring and referred accounts, the Friends code or signed referral token used, the time of attribution, the Creator subscription status, the number of Creator months actually paid for and the resulting Friends shares. This is used to grant the first free Creator month, prevent abuse and prepare annual statements.

In their protected Friends area, the referrer can see the referred creator's name and, if connected, TikTok handle, their subscription status in a user-friendly form, paid months and resulting shares. Email address, billing address, payment methods, Stripe customer ID and complete invoices are not displayed. Link visits alone are not logged as advertising tracking.

The provisional referral before registration expires after no more than 90 days or is deleted when expressly removed. The permanent account attribution and minimal billing-related snapshots, in particular display names, invoice reference, amount, period and rate, are retained in accordance with existing legal and accounting retention obligations; videos, transcripts and other creator content are not retained for longer as a result.

8. Recipients and service providers

Yvila runs on server infrastructure required to operate the web service. Cloudflare Turnstile, provided by Cloudflare, Inc., is used for the registration security check. This may involve processing technically necessary connection, browser and device data. Additional technical service providers may be used for individual features. If transcription or AI features are used, content or audio data may be transmitted to a corresponding service provider for this purpose. Data is not shared for advertising purposes.

9. Retention period

Personal data is stored only for as long as necessary to provide Yvila, analyse errors, maintain security and traceability, or meet legal obligations. Users may request deletion of their Yvila account or removal of a TikTok connection. Unconfirmed registration requests are deleted after the confirmation link expires. Free trial accounts, together with their stored content, may be permanently deleted after three months of inactivity. Yvila sends a notice to the registered email address at least 14 days in advance. Logging in again or continuing to use Yvila ends the period of inactivity. Paid accounts and administrator accounts are excluded from this automatic deletion. After a Creator subscription ends, the associated workspace is first suspended and then deleted together with its content after 14 days, unless the subscription is renewed before then.

10. Rights of data subjects

Under the General Data Protection Regulation, data subjects have, in particular, rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, that consent may be withdrawn with effect for the future.

11. Right to lodge a complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority. The State Commissioner for Data Protection of Lower Saxony may, in particular, be the competent authority.

12. Contact for privacy questions

Questions about privacy at Yvila can be sent by email to info@beforesunrise.de .

Legal notice Terms of service Back to homepage