Privacy Policy

Last updated 10 September 2026

This policy covers Treehouse, reporting software operated by Jungle Creations Limited, registered in England at 6 Batty Street, London, E1 1RH. Jungle Creations Limited is the data controller. It sits alongside the Jungle Creations group privacy policy, which covers the company more widely.

Treehouse reports the performance and earnings of social media accounts and websites that Jungle Creations owns, in one place. There is no public sign-up: accounts are created by an administrator for people who work with Jungle Creations. Treehouse holds no data about members of the public who view our content.

What we hold, and why

• Staff accounts. Name, work email address, role, and a hashed password, so people can sign in and see what their role permits. Plus sign-in and page-view records, to operate and secure the system.
• Our own social accounts' performance data. Views, engagement, follower counts, posts and revenue for accounts Jungle Creations owns, read from the platforms those accounts are on. This is business data about our own accounts, not about individual viewers.
• Business contacts. Names and work contact details of people at brands and agencies we work with, for managing those relationships.

Our lawful basis is legitimate interests: running and reporting on our own business. For staff data it is also the performance of the employment or engagement contract.

TikTok

Treehouse connects to TikTok accounts that Jungle Creations owns, using TikTok's Login Kit and Data Portability API. Specifically:

• An administrator starts the connection, and the person who holds the TikTok account authorises it on TikTok's own consent screen. Nobody else's account can be connected, and no third-party creator's data is involved.
• We store the resulting access and refresh tokens, and the account's open_id, which we use solely to confirm which of our accounts granted the authorisation. We do not use the avatar or display name that scope also exposes.
• We request the account's own data archive and read the earnings transaction history from it, so that TikTok revenue can be reported beside our other platforms. We store those transactions: date, amount, currency, status, programme and TikTok's transaction identifier.
• This data is not shared with anyone outside Jungle Creations, is not sold, is not combined with data about any other TikTok user, and is not used for advertising or profiling.
• An administrator can disconnect an account at any time from within Treehouse, and the account holder can withdraw the authorisation in their TikTok settings. Either stops all further collection.
• The data can be deleted. An administrator can erase everything Treehouse holds for a TikTok account from the TikTok earnings page. Treehouse states how many transactions and archive records will go, asks for confirmation, and then confirms what was removed. Deleting the data and revoking the connection are separate actions, so either can be done without the other. If you would rather we did it for you, use the contact address below.

Who we share it with

Nobody, other than the service providers that host and run Treehouse on our behalf under contract: our cloud hosting provider, our database provider, and the analytics and AI services named in our group policy. We do not sell data and we do not share it for advertising.

Where it is held, and for how long

Data is held in the United Kingdom and the European Economic Area. Where a provider processes data outside the UK or EEA, that transfer is covered by appropriate safeguards.

Staff account data is deleted when access is withdrawn, other than records we must keep for security or legal reasons. Performance and revenue data is kept as business records for as long as it is useful for reporting and comparison.

Your rights

You can ask for a copy of your personal data, ask us to correct or delete it, or object to our processing of it. Contact privacy@junglecreations.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Data obtained from a TikTok account does not have to wait on a request: an administrator can delete it in Treehouse at any time, as described above.

Changes

If this policy changes, the date at the top changes with it.