Privacy policy · Leap Group

1. Who we are

Leap Group ("we", "us") runs this website, Leap accounts at auth.leap-group.uk, the Leap apps and staff tools, and the Discord bots for our creator agencies, StaySocial and LeapAgency (together, "the Service"). We are the data controller for the personal data described here. Questions go to us through our contact form.

2. What we collect

Your Leap account: your name, email address and profile picture, and your Discord user ID and username when you sign in with Discord.
Your TikTok username, which you give us so we can match you to your agency and your TikTok LIVE stats.
Agency membership: which agency you're in, your role, whether your account is approved, who recruited you, and your induction progress.
Performance data: TikTok LIVE figures such as LIVE days, hours and diamonds, from the exports TikTok gives agencies.
Messages: what you send in the Leap apps, questions you ask Andy (our assistant), and messages in our agencies' Discord servers that Andy learns from.
Voice: we connect voice calls in the Leap apps (through LiveKit) but don't record them.
Forms: what you send us through this website's contact and join forms.
Technical data: IP address, browser or app details, and server logs, for security and troubleshooting.

3. How we use it

To sign you in, approve your account and place you in your agency. When you give us your TikTok username we look at your public TikTok profile to check the account exists.
To add you to your agency's Discord server and give you the right roles there.
To show you, your coaches and your agency's staff your stats, campaigns and progress.
To run chat, Andy, notifications and the other features of the Service.
To answer enquiries and applications.
To keep the Service secure, fix problems and meet our legal obligations.

4. Our legal bases

Under UK GDPR we rely on contract (providing the Service to you as part of an agency),legitimate interests (running and securing our agencies and the Service, balanced against your rights), consent where we ask for it, and legal obligation where the law requires us to keep or share data.

5. Who sees it

Your agency: its staff and coaches see your profile and performance data. Staff of one agency can't see another agency's data.
Discord, when you sign in with it, under its own privacy policy. We don't connect to your TikTok account: we only use your public username.
Our providers, who process data for us: hosting (Contabo, UK), file storage (Cloudflare), email (Resend), Andy's answers (Anthropic) and search (Voyage AI), voice calls (LiveKit) and app notifications (Expo).
Authorities, where the law requires it.

We don't sell your personal data.

6. International transfers

Some providers process data outside the UK, for example in the United States. Where they do, we rely on safeguards recognised under UK law, such as the UK International Data Transfer Addendum or adequacy regulations.

7. How long we keep it

Your account and agency data: while you have an account, and for a reasonable time after for records and disputes.
Discord messages Andy learns from: 365 days unless we set a different period. If we make it longer, we'll update this policy.
Enquiries and applications: as long as we need them to deal with them.
Security logs and audit records: for a limited period.

8. Your rights

You can ask to see, correct or delete your data, to restrict or object to how we use it, to get a copy of it, and to withdraw consent you've given. Use our contact form. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

9. Cookies

auth.leap-group.uk uses essential cookies to keep you signed in. We don't use advertising cookies.

10. Age

The Service is for TikTok LIVE creators and the people who work with them, and isn't meant for anyone under 18. If you think we hold a child's data, contact us and we'll delete it.

11. Changes

If we change this policy, we'll update the date at the top and tell you about important changes through the Service.