Privacy policy

Last updated: 6 Oct 2026

1. Controller

The controller responsible for processing personal data in connection with Yvila is:

BeforeSunrise Internetagentur e.K.
Registered under HRA 202005, Amtsgericht Hannover (Hanover Local Court)
Owner and responsible contact: Tobias Lorenz
Wennigser Str. 1 b, 30974 Wennigsen
Email: info@beforesunrise.de
Phone: +49 5109 56 30 40 5
VAT identification number: DE813849538

2. Purpose of Yvila

Yvila is a web service for registered users. It helps users organise and find their own TikTok videos, analyse performance data and collect ideas for new content.

3. Data processed

When using Yvila, the following data in particular may be processed:

  • Yvila account data, such as name, email address, login status and password hash.
  • Registration data, in particular the time of agreement to the terms of service and privacy policy and the status of email confirmation.
  • Technical access data, such as IP address, time of access, browser information and server logs.
  • Session data required for login.
  • Data from a TikTok connection, where the user actively establishes that connection.
  • Video data that is publicly available or provided through the TikTok API, such as video IDs, descriptions, titles, publication times, links, preview images and metrics such as views, likes, comments or shares.
  • Transcripts, summaries, search data and notes, where the corresponding features are used.
  • Payment and subscription data, such as the booked plan, archive setup, invoice references, payment status and Friends attribution.
  • Usage data for content recognition, used for billing, cost control and technical operation.

4. TikTok login and TikTok data

When a user connects their TikTok account, this takes place through TikTok's official login and authorisation process. Yvila does not receive TikTok passwords. Depending on the permissions granted, profile and video data from the connected TikTok account may be processed to build the user's private Yvila workspace.

Automatic TikTok favourites import

After you authorise access in TikTok, Yvila automatically imports your own videos and favourites. For favourites, TikTok provides a full data archive that may also contain other private data. Yvila imports only favourite links, video IDs and reliably identifiable save dates, and adds publicly available video information. Other archive contents are not added to Yvila. The archive is stored temporarily in a protected location and deleted after processing; interrupted transfers are cleaned up automatically.

If your plan limit has been reached, favourite links not yet saved may be retained to continue after an upgrade, for no longer than seven days after the export request. Favourite samples stored for targeted troubleshooting are limited to what is necessary and deleted at the next cleanup after seven days.

You can turn off the favourites import or disconnect TikTok; saved inspirations remain available, while pending link lists are removed. For deleted inspirations, the video ID is retained until account deletion to prevent automatic re-imports. Importing favourites does not start AI recognition or change any data in TikTok.

5. Legal bases

Account management, the archive, inspirations and agreed recognition features are processed to perform the contract or take pre-contractual steps under Article 6(1)(b) GDPR. The TikTok authorisation determines which TikTok data Yvila may access. Security and server logs and operational usage data are processed on the basis of our legitimate interest in secure and economically sustainable operation under Article 6(1)(f) GDPR. Legally required invoice and accounting records are processed under Article 6(1)(c) GDPR.

Storage and access on your device that are strictly necessary are based on section 25(2), no. 2 TDDDG. Optional remembering of Friends referrals in the browser is based on your consent under section 25(1) TDDDG and, where personal data is processed, Article 6(1)(a) GDPR. You can withdraw this consent at any time with future effect using Cookie settings.

6. Cookies and settings on your device

The app uses a technically necessary session cookie for sign-in and security. It contains your session identifier and lasts for the browser session. No advertising networks or external marketing and audience analytics tools are embedded.

If you enable “Stay signed in”, Yvila stores a protected sign-in cookie on this device. The associated identifier and sign-in, usage and expiry times are linked to your account. The sign-in expires after 90 days without active use and no later than 365 days after your last password confirmation. You can turn it off under “My account” or sign out.

Language and your selected view are remembered in functional cookies for up to one year or in local browser storage. Temporary interface settings last for the current tab. You can delete local storage using your browser’s website data controls. These settings are not used for advertising profiles.

Remembering a Friends referral is optional. Turning it off deletes the relevant cookies. A Friends relationship already confirmed in your account remains in place.

Remember a referral for later

With your consent, we remember the Friends referral in cookies for up to 90 days. You can still receive the benefit when signing up directly without saving the referral.

Remembering is off.

You can withdraw consent at any time using Cookie settings in the footer. Cookie settings

7. Yvila Friends

A public Friends profile is created only when you choose to set it up. Your chosen Friends name and the short name used for your link and code are public. Your private account name is not published automatically.

To provide the Friends benefit and calculate rewards, we store the account relationship, referral record, subscription and payment status, paid Creator months and rewards earned. In their private area, the referrer can see your name, your TikTok handle if connected, subscription status, paid months and their rewards. They cannot see your email address, address, payment details or invoices. Visits to a referral link are not recorded for advertising tracking.

For payouts, we store your name, address, account holder, IBAN and, where needed, BIC in encrypted form. Only the operator and the accounting and banking providers needed to settle and transfer payments receive these details. You can change or remove your current details in the Friends area. The confirmed account relationship and accounting records are retained for as long as needed to settle payments or meet statutory retention obligations. This does not extend the retention of Creator content.

8. Recipients and service providers

We operate Yvila on the server infrastructure required for the website and app. Access is limited to people and technical service providers where needed for operation, support, security or the features you use. Creator content is not shared for advertising purposes.

Payments via Stripe

Paid bookings and subscription management are handled by Stripe. Stripe processes contact, billing and payment data. Yvila receives the customer, invoice and subscription references, payment status and amounts required for attribution and administration. Full card details are not stored in Yvila.

Stripe privacy policy

Content recognition with OpenAI

Yvila uses the OpenAI API for text recognition, transcription and matching archive videos. Depending on the feature, selected video frames, audio, captions or recognised text are transmitted. Your own archive videos are recognised during preparation. For inspirations, advanced recognition starts only after your explicit selection; simply opening a page does not start a new recognition.

OpenAI states that API content is not used for model training by default. Security logs may generally be retained for up to 30 days, with exceptions for specific processing and legal obligations. Details are provided in the linked documentation.

OpenAI API data processing information

Security checks with Cloudflare Turnstile

Cloudflare Turnstile is used for public registration and password resets. Connection, browser and device data may be processed to detect automated or abusive requests. The check protects these features and is not used for advertising.

Cloudflare privacy policy

These international providers may process data outside the EU and EEA, particularly in the USA. Details are available in the linked provider information. You can request information on the transfer safeguards applicable to Yvila through our privacy contact.

9. Retention period

Personal data is stored only for as long as necessary to provide Yvila, analyse errors, maintain security and traceability, or meet legal obligations. Users may request deletion of their Yvila account or removal of a TikTok connection. Unconfirmed registration requests are deleted after the confirmation link expires. Free trial accounts, together with their stored content, may be permanently deleted after three months of inactivity. Yvila sends a notice to the registered email address at least 14 days in advance. Logging in again or continuing to use Yvila ends the period of inactivity. Paid accounts and administrator accounts are excluded from this automatic deletion. After a Creator subscription ends, the associated workspace is first suspended and then deleted together with its content after 14 days, unless the subscription is renewed before then.

10. Rights of data subjects

Under the General Data Protection Regulation, data subjects have, in particular, rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, that consent may be withdrawn with effect for the future.

11. Right to lodge a complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority. The State Commissioner for Data Protection of Lower Saxony may, in particular, be the competent authority.

12. Contact for privacy questions

Questions about privacy at Yvila can be sent by email to info@beforesunrise.de .

Legal notice Terms of service Back to homepage