Privacy Policy

1. Who we are

Goji is operated by MeStyle Labs Co., Ltd., a company registered in Thailand. This policy explains how we handle personal data for our website and platform.

2. Data we collect

Contact details you submit (name, business name, phone, email, location), optional social links and messages, and — for platform users — campaign, content, and connected social-account data needed to operate Goji.

3. How we use data

To contact you about Goji, operate campaigns, verify creators, process payouts, and improve the service.

4. TikTok account data

Creators may connect their TikTok account to Goji using TikTok Login Kit. When a creator authorises this connection, Goji requests access to the following TikTok data:

• TikTok unique ID (open_id) — used to identify and link the TikTok account to the creator's Goji profile and to prevent duplicate account connections.
• Display name and profile image URL — shown in the creator's Goji profile after connection.
• Follower count, total likes, and video count — used to determine whether a creator meets the minimum audience threshold required to join campaigns.
• Recent video list (view counts, like counts, comment counts, share counts) — used to calculate average engagement and to compute performance-based payout amounts for completed campaigns.

What Goji does not collect from TikTok: private videos, draft content, direct messages, payment information, email addresses, or phone numbers. Goji never posts, comments, or takes any action on TikTok on the creator's behalf.

5. How TikTok data is stored and protected

TikTok data is stored in Goji's PostgreSQL database, hosted by Supabase on AWS in the Asia Pacific (Singapore) region. TikTok access tokens and refresh tokens are stored in a separate, access-controlled table that is only readable by Goji's server-side processes using a privileged service key — they are never exposed to client devices or third parties. Row-level security policies ensure creators can only access their own data. Admin staff may view creator statistics for the purposes of campaign verification.

6. Retention of TikTok data

TikTok-sourced data (profile metrics, video stats, access tokens) is retained for the lifetime of the creator's Goji account. When a creator disconnects TikTok or deletes their Goji account, all associated TikTok tokens and profile data are permanently removed from Goji's database within 30 days. Certain financial transaction records linked to TikTok-verified campaigns may be retained for up to 5 years as required by Thai accounting regulations; these records do not contain TikTok credentials or personal profile data.

7. Disconnecting TikTok

Creators can disconnect their TikTok account at any time from within the Goji mobile app under Profile → Connected Accounts → Disconnect TikTok. This immediately deletes the TikTok access token, refresh token, and account identifiers from Goji's database. The creator's Goji account remains active; only the TikTok connection is removed. To also revoke Goji's authorisation on TikTok's side, visit TikTok → Settings and Privacy → Security → Authorized Apps and remove Goji.

8. Sharing

We do not sell your personal data, including TikTok data. We share data only with infrastructure service providers (database hosting, cloud services) required to operate Goji, and as required by applicable law. Anonymised, aggregate engagement statistics derived from TikTok data (e.g. average engagement rate across a campaign) may be shown to businesses as part of campaign performance reporting; individual creator credentials are never shared.

9. Your rights (PDPA)

You may request access, correction, or deletion of your data, and withdraw consent, by contacting admin@gojipartners.com. To request full account and data deletion, see our Data Deletion page. For a full explanation of your rights under Thailand's Personal Data Protection Act, see our PDPA notice.

10. Contact

For privacy questions or data requests, email admin@gojipartners.com.

Operated by MeStyle Labs Co., Ltd., Thailand. Contact: admin@gojipartners.com.