Back to site
Legal

Privacy Policy

Effective date: October 18, 2026

Sitta LLC ("Sitta," "we," "us") operates the following products:

  • Sitta Studio: a tool for managing Facebook Pages and TikTok accounts, including publishing content and viewing insights.
  • Tomahawk: a tool for managing Instagram professional accounts linked to Facebook Pages, including automated replies to comments, automated direct messages, and account and post insights.

This policy explains what information we collect through these products, how we use it, and the choices available to you. It applies to the businesses and people who connect their Facebook Pages, Instagram accounts and TikTok accounts to our products ("Account Owners"), and to people who interact with those accounts on Facebook or Instagram ("Third-Party Users"), such as people who comment on a post.

Our products use official Meta and TikTok platform APIs and comply with the Meta Platform Terms and Developer Policies and the TikTok Developer Terms of Service.

Sitta Studio and Tomahawk are independent products of Sitta LLC. They are not affiliated with, endorsed by, or sponsored by TikTok, ByteDance, or Meta. TikTok is a trademark of its owners.

1. Information we collect

From Account Owners (both products)

  • Account information: name, email address, and the Facebook Pages, Instagram accounts and TikTok accounts connected to our products, through Facebook Login, Meta Business Manager, or TikTok Login Kit.
  • Access tokens issued by Meta and TikTok to authorize our products. These are stored in encrypted form.
  • Page and account information from Meta: Page and Instagram account IDs, usernames, profile pictures, follower counts, and lists of posts.
  • Settings you create: automations, keywords, reply and message templates, links, and dashboard preferences (for example, light or dark theme).

Sitta Studio

  • Facebook Page insights, such as reach, views, engagement and follower counts.
  • Content published through Sitta Studio, and its performance data.

Sitta Studio (TikTok)

When a creator connects a TikTok account to Sitta Studio using TikTok Login Kit, they choose which permissions to grant on TikTok's authorization screen. We request only the permissions Sitta Studio needs, and collect:

  • Basic profile information (user.info.basic): open ID, display name and avatar, so we can show which TikTok account is connected and which account content will be posted to.
  • Account statistics (user.info.stats): follower count, following count, likes count and video count, to show account analytics.
  • Video list and metrics (video.list): the creator's TikTok videos and their metrics, such as views, likes, comments and shares, to show video analytics in the Sitta Studio dashboard.
  • Content to post (video.publish / video.upload): videos, captions and post settings (such as privacy level and whether comments, Duet and Stitch are allowed) that the creator uploads to Sitta Studio to post to their own TikTok account.
  • TikTok access and refresh tokens, which are stored in encrypted form and used only to call the TikTok APIs on the creator's behalf.

We use TikTok data only to provide these Sitta Studio features to the creator who connected the account.

Tomahawk

  • Comments on connected Instagram posts: comment text, comment ID, the commenter's Instagram username and user ID, and the time of the comment.
  • Messages: the automated replies and direct messages Tomahawk sends on the Account Owner's behalf, and delivery and "seen" status where Meta provides it.
  • Insights: account and post metrics, such as views, reach, likes, comments, shares, saves, profile activity and link taps.
  • Audience demographics: country, city, age range and gender, in aggregated form as provided by Meta. These are totals, not information about individual people.

Tracked link clicks (Tomahawk)

When someone clicks a link sent by Tomahawk in a direct message, or a Tomahawk bio link, we record:

  • the time of the click,
  • the link clicked,
  • the approximate country and city, derived from the IP address,
  • the device type and referring website.

We use the IP address only to determine the approximate location and do not store the IP address itself.

Cookies

Our websites use essential cookies only, to keep you signed in and remember your settings. We do not use advertising or tracking cookies.

2. How we use information

We use information only to provide and improve our products:

  • to publish content to Facebook Pages and TikTok accounts, and to send the replies and messages that Account Owners set up, on their own accounts. Content is posted to TikTok only when the creator reviews it and chooses to post it; we never post to TikTok automatically or without the creator's express action;
  • to show analytics dashboards for connected accounts;
  • to prevent duplicate replies, enforce rate limits, and keep the service safe and reliable;
  • to provide support and communicate with Account Owners about the service.

We do not sell personal information. We do not use it for advertising, and we do not use Meta platform data to build profiles of individuals.

We do not sell TikTok data, we do not use it for advertising or marketing, we do not share it with third parties except as described in this policy, and we do not use it to build profiles of individuals. We do not add watermarks, logos or promotional branding to content posted to TikTok. Depending on the creator's TikTok account settings and TikTok's review of our integration, posts made through Sitta Studio may initially be visible only to the creator (private), and may take a few minutes to appear on their TikTok profile.

3. Legal basis (users in the UK and EU)

  • Contract: to provide the service an Account Owner uses.
  • Legitimate interests: to send replies and messages that a Third-Party User has prompted by commenting on a post, and to keep the service secure.
  • Consent: where required, for example when authorizing our products through Facebook Login or TikTok Login Kit.

4. How we share information

We share information only with:

  • Service providers that host and operate our products, such as cloud hosting and database providers, under contracts that protect the data;
  • Meta Platforms, Inc., as needed to operate the APIs, for example to post a reply or send a message;
  • TikTok, as needed to operate its APIs, for example to upload and publish a video to the creator's TikTok account;
  • Authorities, where required by law, or to protect the rights and safety of users or Sitta.

Our staff and our support team, including contractors who may be located outside the United States, may access data only as needed to operate and support the service.

5. Data retention

  • Comments and link-click records: kept for 90 days, then reduced to aggregated statistics that do not identify individuals.
  • Detailed daily analytics: kept for 90 days, then kept as monthly totals.
  • Access tokens: Meta and TikTok access and refresh tokens are kept until the account is disconnected or the token expires.
  • TikTok data: TikTok profile information, video lists and metrics are kept only while the TikTok account is connected. Videos uploaded for posting are kept only as long as needed to post them to TikTok. When a creator disconnects or revokes access, we stop accessing their TikTok account and delete their TikTok data within 30 days.
  • Account and settings data: kept until the Account Owner deletes their account or asks us to delete it.

6. Data deletion

You can request deletion of your data at any time:

  • Disconnect through Meta:
    • On Facebook: Settings & privacy → Settings → Business integrations (or Apps and websites) → remove Sitta Studio or Tomahawk.
    • On Instagram: Settings → Apps and websites → remove the app.
    • Meta notifies us automatically and we delete your data.
  • Disconnect through TikTok:
    • On TikTok: Settings and privacy → Security & permissions → Apps and services permissions → remove Sitta Studio.
    • Revoking access stops our access to your TikTok account immediately. We delete your TikTok data on request, or automatically within 30 days after access is revoked.
  • Email us at contact@sitta.llc with the Page, Instagram account or TikTok account you connected.

We delete the data, including TikTok data, within 30 days of the request. That includes account information, tokens, settings, and stored comments, messages and analytics. A small amount of data may be kept where the law requires it.

Third-Party Users (for example, someone who commented on a post) can email contact@sitta.llc to request deletion of any of their comments or messages we hold.

7. Security

We protect data with:

  • HTTPS encryption in transit,
  • encryption of Meta and TikTok access and refresh tokens at rest,
  • API credentials (such as app secrets) kept confidential on our servers and never exposed in the browser,
  • access controls limited to authorized staff.

No system is completely secure, but we work to protect information and will notify affected users of any breach as required by law.

8. International transfers

Sitta LLC is based in the United States, and our team operates in more than one country. Information may be processed outside your own country, with appropriate safeguards.

9. Your rights

Depending on where you live, you may have the right to:

  • access, correct or delete your personal information,
  • object to or restrict certain processing,
  • receive a copy of your data.

To use these rights, email contact@sitta.llc. Residents of the UK and EU may also complain to their local data protection authority. California residents: we do not sell or share personal information as those terms are defined under California law.

10. Children

Our products are business tools, not directed to anyone under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date and, for significant changes, notify Account Owners by email or in the app.

12. Contact

Questions about this policy, including how we handle TikTok data, can be sent to contact@sitta.llc. We aim to respond within 30 days.

Sitta LLC
3705 W Pico Blvd #456
Los Angeles, California 90019-3451
United States
Email: contact@sitta.llc
Website: https://sitta.llc