Privacy Policy

This policy explains what data GiveAway (“we”, “us”), operated by Serdar, collects when you use the website at https://yeniji.ishbul.org and the GiveAway mobile app (together, the “Service”), why, and what choices you have.

1. Who this applies to

• Organizers — people who sign in and run giveaways on their own Instagram or TikTok posts.
• Participants — people who commented on an organizer’s post that is used for a giveaway. Participants do not use the Service directly.

2. Data we collect from organizers

• Account connection. When you sign in with Instagram (via Facebook Login for Business) or TikTok, we receive an access token, the permissions you granted and an account identifier (the Instagram business account ID or your TikTok open ID). With TikTok we also receive a refresh token. Tokens are encrypted at rest (AES-256-GCM) and used only to perform the actions described below.
• Posts you submit. The link you paste, and the post/video identifier we resolve from it.
• Giveaway records. Status, participant counts, draw results and timestamps.
• Payments. For paid giveaways: amount, currency, status and the payment provider’s transaction reference. Card details are handled entirely by the payment provider; we never see or store them.
• Mobile app. If you allow notifications, a push token for your device, used only to tell you when a giveaway is ready.

3. How we use Instagram data

We use the Instagram Graph API to list the media of the connected business/creator account (to confirm a submitted post belongs to you) and to read the comments of the post you choose (username, comment text and time). We do not post, reply, like, send messages or read any other content.

4. How we use TikTok data

• Login Kit — user.info.basic: to sign you in and identify your account by its open ID.
• video.list: to confirm that a video you submit for a giveaway was published by your own account. We query only the video you submit.

We do not publish content, access direct messages or share your TikTok data with other parties. You can revoke access at any time in the TikTok app (Settings and privacy → Security → Manage app permissions).

5. Participant data

To run a giveaway we process the public usernames and comment text of people who commented on the organizer’s post. This data is used only to build the participant list for that giveaway, remove duplicate entries and pick a winner. The winner’s username and comment appear on the giveaway’s results page, which the organizer may share publicly. Participants can ask us to remove their data using the contact below.

6. Cookies

We use only strictly necessary cookies: an httpOnly session cookie that keeps you signed in and short-lived cookies that protect the sign-in flow. We do not use advertising or tracking cookies.

7. Service providers

We share data only as needed to operate the Service: Meta (Instagram) and TikTok to access the connected accounts, our payment provider for paid giveaways, Expo for delivering mobile push notifications, and our hosting providers. We do not sell personal data.

8. Retention

Account connections and giveaway data are kept while your account is active. Disconnecting an account deletes its stored tokens. You may ask us to delete your account and its data at any time; payment records may be kept as long as required by law.

9. Security

Access tokens are encrypted at rest, connections use HTTPS, sessions use signed, httpOnly cookies (web) or the device’s secure keychain (mobile).

10. Your rights

You can request access to, correction of, or deletion of your personal data, and object to its processing, by emailing serikabdurahman@gmail.com. We respond within 30 days.

11. Children

The Service is not intended for anyone under 18.

12. Changes

We will post any changes on this page and update the effective date. See also our Terms of Service.

13. Contact

Serdar — serikabdurahman@gmail.com