Privacy Policy

Last updated: 10 November 2026

This policy explains how Bath (بثّ) — “we” — collects, uses and protects your personal data through bath.1xo.net. Bath is an independent agency and is not TikTok. This policy covers our website and services only; the TikTok app is governed by TikTok's own privacy policy.

1. Data we collect

• Join form: your name, TikTok username, country, follower range, preferred contact method and phone number or email, site language, and your consent to this policy.
• Technical data for security: IP address, browser type and submission time — used only to stop spam and abuse.
• Messages: anything you send us on WhatsApp or by email.

We will never ask for your TikTok password or the password of any other account.

2. Why we use it

• To review your application and contact you about it (based on your consent).
• If you are accepted and agree, to send the agency invitation to your account and to coach and support you.
• To protect the site from spam and abuse (legitimate interest).

We do not sell your data, use it for advertising, or send you marketing without your permission.

3. Who we share it with

• TikTok: only your username, and only when you ask to link your account to the agency (step 3), because linking happens through TikTok's agency system.
• Hosting and email providers that run the site and mail for us, on servers in Germany (EU), under confidentiality obligations.
• Cloudflare to protect and speed up the site, and Google Fonts to load fonts (it receives your IP address when the page loads).
• Authorities, where the law requires it.

4. How long we keep it

Applications that are not accepted are deleted within 12 months. If you join, we keep your data for the length of our cooperation and 12 months after it ends, unless the law requires longer. Security logs are deleted within 30 days.

5. Your rights

You may ask for a copy of your data, correct it, delete it, or withdraw your consent at any time. Email info@bath.1xo.net or WhatsApp +971 50 690 6157; we reply within 30 days.

6. Cookies

We use no tracking or advertising cookies. We only store your language preference in your browser (localStorage). Cloudflare may set strictly necessary security cookies.

7. Age

Our services are for people aged 18 or over only. If we learn we have received data from a minor, we delete it.

8. Security

The site runs over HTTPS. Applications are stored on a protected server and can be read only by the Bath team members who review them.

9. Changes and contact

We may update this policy and will show the new date at the top. Questions: info@bath.1xo.net.