TikTok collects the actual content of messages you send and receive through its messaging feature, as well as metadata about those messages including timing, read receipts, and who the participants are.
This analysis describes what TikTok Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Collection of message content, not just metadata, means private communications on TikTok's platform are stored and processed by TikTok, which is a materially different privacy posture than end-to-end encrypted messaging services.
The updated policy changed the controlling entity from TikTok USDS Joint Venture LLC to TikTok Pte. Ltd., a Singapore-registered company. The U.S.-specific privacy policy language was replaced with terms covering "other regions." Users previously governed under U.S. privacy protections are now subject to different jurisdictional terms.
View change record →The content of private messages you send through TikTok is collected and stored by TikTok, meaning your direct communications are not end-to-end encrypted in a way that prevents TikTok from accessing them; this data is subject to TikTok's retention practices and may be disclosed to law enforcement.
How other platforms handle this
to withdraw your consent to our processing of your data (where such processing is based on consent)
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
It also means we are unable to provide any information about messages in your Revolut Messenger even if you ask us for it.
"We collect information you provide when you compose, send, or receive messages through the Platform's messaging functionalities and the associated metadata, subject to applicable laws. They include messages you send or receive through our chat functionality when communicating with sellers who sell goods to you, and your use of virtual assistants when purchasing items through the Platform. That information includes the content of the message and information about the message, such as when it was sent, received, or read, and message participants.Excerpt from TikTok Ads's TikTok Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages the Electronic Communications Privacy Act (ECPA) in the United States (governing access to stored electronic communications), GDPR Article 6 (lawful basis for processing communications content), the EU ePrivacy Directive …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Collection of message content, not just metadata, means private communications on TikTok's platform are stored and processed by TikTok, which is a materially different privacy posture than end-to-end encrypted messaging services.
The content of private messages you send through TikTok is collected and stored by TikTok, meaning your direct communications are not end-to-end encrypted in a way that prevents TikTok from accessing them; this data is subject to TikTok's retention practices and may be disclosed to law enforcement.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok Ads.