Privacy Policy
Last updated: 20 July 2026
This Privacy Policy explains how Larna ("Larna", "we", "us") collects, uses, and protects your personal data when you use getlarna.xyz and related services (the "Service"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and French data protection law.
1. Data controller
The data controller is Soumy Batra, based in Paris, France.
Contact: batrasoumy@gmail.com
2. Data we collect
Waitlist signup
- Email address, provided by you when you join the waitlist
TikTok login (Login Kit)
- Basic TikTok profile information: display name and avatar (scope: user.info.basic), provided through TikTok when you authorize the connection
- If you grant the additional permissions, public profile details and account statistics such as follower count, likes count, and video count (scopes: user.info.profile, user.info.stats)
- We do not access your private messages or posting capabilities, and we never receive your TikTok password
Publicly available creator data
- Where relevant to our creator discovery features, we may process publicly available information about creator accounts, such as username, follower count, and engagement metrics, obtained from licensed third-party data providers
- This data is used only to identify and evaluate potential creator partnerships, and is replaced by consented data once a creator joins Larna
Technical data
- Standard server log data such as IP address, browser type, and access timestamps, collected automatically when you visit the site
3. How we use your data and legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Managing the waitlist and contacting you about Larna's launch | Email address | Consent (Art. 6(1)(a)) |
| Authenticating you and verifying ownership of your TikTok account | TikTok display name and avatar | Performance of a contract / pre-contractual steps (Art. 6(1)(b)) |
| Displaying your profile within Larna | TikTok display name and avatar | Performance of a contract (Art. 6(1)(b)) |
| Displaying and evaluating creator account statistics you have authorized us to access | TikTok follower count, likes count, video count | Performance of a contract (Art. 6(1)(b)) |
| Identifying and evaluating potential creator partnerships | Publicly available creator data | Legitimate interest (Art. 6(1)(f)) |
| Ensuring security and preventing abuse of the Service | Technical data | Legitimate interest (Art. 6(1)(f)) |
We do not sell your personal data. We do not use your data for third-party advertising.
4. TikTok data
When you sign in with TikTok, we receive only the information you authorize through TikTok's consent screen. At minimum this is your display name and avatar; if you grant the additional permissions, it also includes your public profile details and account statistics (follower count, likes count, video count). This data is used solely to create and display your Larna profile, confirm that you own the TikTok account linked to it, and match you with relevant brand campaigns.
If we have obtained publicly available information about your creator account from a third-party data provider before you joined Larna, we will inform you of this no later than when we first contact you, in line with Article 14 GDPR. You can object to this processing at any time by emailing us.
Your relationship with TikTok is governed by TikTok's own Terms of Service and Privacy Policy. You can revoke Larna's access to your TikTok account at any time in your TikTok app settings under Settings and privacy, Security and permissions, Apps and websites.
5. Data sharing
We share personal data only with:
- Service providers that host our website, store our data, or supply publicly available creator data (acting under contractual safeguards)
- Brands, limited to your Larna creator profile and the statistics you have chosen to display, for the purpose of campaign matching
- Authorities, where required by law
We do not share your data with any other third parties.
6. International transfers
Your data is stored within the European Union where possible. If any service provider processes data outside the EU/EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.
7. Data retention
- Waitlist emails: kept until Larna launches and you create an account, or until you ask us to delete your email, whichever comes first
- TikTok profile and statistics data: kept for as long as your Larna profile is active; deleted when you disconnect your TikTok account or request deletion
- Publicly available creator data used for discovery: kept for up to 12 months, or deleted earlier if you object or if a partnership does not materialize
- Technical logs: kept for up to 12 months
8. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, email batrasoumy@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
9. Data security
We use appropriate technical and organizational measures to protect your data, including HTTPS encryption in transit and access controls on stored data. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.
10. Cookies
The Service uses only cookies that are strictly necessary for it to function, such as session cookies for authentication. We do not use advertising or cross-site tracking cookies. If we introduce analytics or other non-essential cookies in the future, we will ask for your consent first and update this policy.
11. Children
The Service is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. For significant changes, we will notify you by email where we have it.
13. Contact
For any privacy questions or requests, contact us at batrasoumy@gmail.com.