ByteDance.com Privacy Policy
Effective Date (U.S.): July 1, 2023
Effective Date (Non-U.S.): August 15, 2023. Click here to view our prior privacy policy.
Introduction
Welcome to ByteDance.com. This privacy policy (“Privacy Policy”) applies to the
ByteDance.com website (the “Website”). The Website is provided and controlled by Bytedance
Ltd. (“we” or “us”) with address at P.O. Box 31119 Grand Pavilion, Hibiscus Way, 802 West Bay
Road, Grand Cayman, KY1 - 1205 Cayman Islands. This Privacy Policy only applies to theWebsite and does not apply to any products or services from ByteDance Ltd., its subsidiaries oraffiliated entities, that may display or reference their own privacy policies. If you submit anapplication or sign into the jobs section of this Website, your Information is subject to thePrivacy Policy for Job Applicants. If you are located in the EU and have any questions about
how we use your personal information, please contact our EU representative or our Data
Protection Officer at global_privacy@bytedance.com
What Information We Collect
We collect certain personal information when you visit the Website or choose to interact with us.
More information about the categories and sources of personal information is provided below.
Information We Collect Automatically● Device Information. When you visit the Website, our web servers automatically log
personal information about your device such as your Internet Protocol (IP) address,
device identifiers, device type, device’s operating system, browser and other software
including type, version, language, settings, and configuration.
● Location Information. When you use our Website, we may infer your general location
information (such as city, state, and country), for example, by using your internet
protocol (IP) address.
● Cookies. We use cookies and similar tracking technologies to operate and provide theWebsite. For example, we use cookies to remember your language preferences, and for
security purposes. We will obtain your consent to our use of cookies where required bylaw. Please see the Cookies section below, for more information about cookies.
Information You Choose to Provide● Communications with us. If you contact us directly, we may receive additional
information about you. For example, when you contact us for support, we may receive
your name, email address, the contents of a message that you may send to us, andother information you choose to provide.
How We Use Your Information
We use the information listed above to operate, administer, and improve the Website and forother legitimate business purposes, including:

●
●

●
●
●
●

Providing the Website. To provide and administer the Website, including securing andtroubleshooting the site.
Business Operations. To operate our business, such as improving our operations,securing our systems, detecting fraudulent or illegal activity, and meeting our legal
obligations.
Website Improvement, Development, and Research. To improve our Website,
develop new Website features, and conduct research.
Personalization. To understand you and your preferences to enhance your experienceand enjoyment using our Website.
Support and Inquiries. To respond to your questions, concerns or feedback and toprovide support related to our Website and services.
Communications. To send you information, including support and administrative
messages, as well as updates about our Website and services, including promotional
materials.

We may aggregate or de-identify the personal information we collect in such a way that it cannot
be associated with an identifiable individual.
How We Share Your Information
We do not sell any Information collected from the Website. However, there are some limited
circumstances in which we may share the information with third parties as described below.
Service Providers
We share information with service providers acting as agents on our behalf, as necessary forthem to help us with our business operations. For example, these may include web hosting,customer support or auditing vendors.
Within Our Corporate GroupWe may share information with a parent, subsidiary, or other affiliate of our corporate group.
In Connection with a Sale, Merger, or Other Business Transfer
We may also share information in connection with a corporate transaction, such as the sale ofasset or shares, a merger, consolidation, reorganization, financing, change of control,
acquisition of all or a portion of our business, or in the unlikely event of bankruptcy, or othersimilar business arrangement in which information may be among the transferred assets, as
permitted by applicable law.
For Legal Reasons
We may disclose information to comply with the law and respond to subpoenas, court orders,legal process, law enforcement requests, legal claims, or government inquiries, and to protect
and defend our rights, interests, safety, and security as well as those of our users and the
public.

With Your Consent
We may share information for other purposes with your consent or at your direction.
Your Choices and Rights
There are several ways you can control the collection and use of information. For example, you
may be able to use operating system and web browser controls to prevent certain types ofautomatic data collection and to limit the information shared with the websites you visit. You canalso configure your web browser to block or delete cookies. Furthermore, depending on where
you live, you may have certain rights with respect to your personal information such as a right toknow and be informed on how we collect and use your personal information. You may also havea right to access, update, rectify and change your data, object to its processing, request a copyof your authorization, file complaints before the competent authorities, withdraw your consent, or
limit our collection and use of your personal information as well as to request that we delete it,and potentially others. In certain circumstances, you can also ask us to provide additional
information about our collection and use of your personal information.
Please contact us by using the contact information provided in the “Contact” section if you would
like to exercise any of your rights. We will respond to your request consistent with applicable law
and subject to proper verification.
If you receive promotional emails or SMS messages from us and would like to stop receiving
them, you can do so by following the directions in that message. Note that these choices do not
apply to replies to communications you send us or to any mandatory service communications
we may send.
International Data Transfer
The personal information we collect from you may be stored on a server located outside of thecountry where you live. We store the information we collect in secure servers located in the
United States and Singapore. Where we transfer any personal information out of the country
where you live, including for one or more of the purposes as set out in this Policy, we will do soin accordance with the requirements of applicable data protection laws.
Data Security
We use reasonable measures to help protect information from loss, theft, misuse andunauthorized access, disclosure, alteration, and destruction. However, please be aware that nodata storage or transmission system can be guaranteed to be completely secure.
Data Retention
We retain information for as long as necessary to provide and operate the Website, respond to
your inquiries, comply with our legal obligations, resolve disputes, enforce our agreements, andother legitimate and lawful business purposes. When determining the specific retention period,
we take into account various criteria, such as the type of service provided to you, the nature andlength of our relationship with you, and mandatory retention periods provided by law. If data isno longer needed in an identifiable form, we may retain certain information in an aggregatedand anonymized form.
Cookies“Cookies” are small files which, when placed on your device, enable us to collect certain
information from you to provide certain features and functionality. Depending on the jurisdiction
from which you access the Website, we and our service providers and business partners use
Cookies to collect data and recognize you and your device(s) on the Website and elsewhereacross your different devices. We do this to measure the traffic and functionality of our website
and we will obtain your consent to our use of cookies where required by law.
You have the option to change your device's cookie settings at any time, usually through yourbrowser's "options" or "preferences" menu. However, please note that if you choose to refuse,disable, or delete Cookies, some of the functionality of the Website may no longer be available
to you.
Privacy Policy Changes
When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at
the top of this policy, posting the new Privacy Policy, and providing any other notice required byapplicable law. We recommend that you regularly review the Privacy Policy to stay informed ofour privacy practices.
Information Relating to Minors
The Website is not directed at children under the age of 13. The minimum age to use theWebsite may differ depending on the country or region that you are in. If you believe that wehave collected personal information from a minor under the minimum age, please contact us at
global_privacy@bytedance.com.
Contact
Questions, comments and requests regarding this policy may be sent toglobal_privacy@bytedance.com.

SUPPLEMENTAL TERMS– JURISDICTION SPECIFIC
In the event of a conflict between the provisions of the Supplemental Terms – Jurisdiction
Specific that are relevant to your jurisdiction from which you access or use the Website, and therest of the Privacy Policy, the relevant jurisdiction’s Supplemental Terms – Jurisdiction Specificwill supersede and control.
European Economic Area (“EEA”), Switzerland, and UK
If you are using the Website in the EEA, Switzerland or the UK (the “European Region”), thefollowing additional terms apply:
Legal bases for processing
We use your personal data only as permitted by law. Our legal bases for processing yourpersonal data described in this Privacy Policy are described in the table below.
How we use yourinformation

Legal basis forprocessing yourinformation

Information categories
that we use

To provide and administer
the Website and tounderstand you and yourpreferences to enhanceyour experience andenjoyment using our
Website and personalize
the Website.

Processing is necessary to
perform the contract
governing our provision of
the Website.

<Information We Collect
Automatically><Information You Choose
To Provide>

To provide you withcustomer support andrespond to your questions,and send you information,
including service andadministrative messages.

Processing is necessary to
perform the contract
governing our provision of
the Website.

<Information We Collect
Automatically><Information You Choose
To Provide>

To improve our Website,
develop new Website
features, and conduct
research.

The processing isnecessary for our legitimate
interests, namely, toimprove and develop theWebsite.

<Information We Collect
Automatically><Information You Choose
To Provide>

To conduct troubleshooting,including by identifying andcombating technical issues
such as technical bugs andspam.

The processing isnecessary for our legitimate
interests, namely to ensure
the ongoing stability andsecurity of the Website andto ensure the Website iscontinuously available andfunctioning.

<Information We Collect
Automatically><Information You Choose
To Provide>

To detect fraudulent orillegal activity and ensure
the safety and security of
our Website.

The processing isnecessary for our legitimate
interests, namely to ensure
the Website is safe andsecure and to identify
misuse of the Website.

<Information We Collect
Automatically><Information You Choose
To Provide>To comply with any legal
obligation, including where
necessary to assist in law
enforcement andinvestigations conducted byany governmental and/or
regulatory authority.

In some cases, we may
aggregate or anonymize
your information and use it
in a way that is designed to
be unable to identify you, forresearch, statistical, or otherpurposes, to the extent
allowed by applicable law.

This processing isnecessary in order tocomply with our legal
obligations under European
Union or Member State law.
This includes situations
where we have obligations
to take measures to ensure
the safety of our users orcomply with a valid legal
request such as an orderfrom law enforcement
agencies or courts. Similarly
processing may benecessary to respond to
regulatory requests
requiring the processing of
information under Chapters
IV and VI of the GDPR.
In other circumstances, theprocessing is necessary for
our legitimate interests,
namely, to disclose andshare information withregulators or othergovernment entities.
The processing isnecessary for our legitimate
interests, namely for
research, statistical or otherpurposes and to protect
personal information
through aggregation oranonymization, consistent
with data minimization andprivacy by design principles.

<Information We Collect
Automatically><Information You Choose
To Provide><Information We Collect
Automatically><Information You Choose
To Provide>To protect your or someone
else's life, physical integrity,
or safety. This could include
providing law enforcement
agencies or emergency
services with information inurgent situations to protect
health or life.

The processing isnecessary to protect thevital interests of you or otherindividuals.

<Information We Collect
Automatically><Information You Choose
To Provide>

We may use yourinformation where it isnecessary to perform a task
in the public interest,
including undertaking
research, preventing anddetecting crime,
safeguarding children andpromoting public safety,
security, and integrity as
laid down by applicable law.

We process yourinformation where it isnecessary to perform a task
in the public interest.

<Information We Collect
Automatically><Information You Choose
To Provide>

International data transfers
If you normally reside in the European Region, the personal data that we collect about you may
be further transferred to, and stored at, a destination outside of the European Region (forinstance, to our service providers and partners). For example, we may store the information that
we collect in secure servers located in the United States and Singapore.
When we transfer your information outside of the European Region, we ensure it benefits froman adequate level of data protection by relying on:● Adequacy decisions. These are decisions from the European Commission under Article
45 GDPR (or equivalent decisions under other laws) where they recognise that a country
offers an adequate level of data protection. We transfer your information to somecountries with adequacy decisions; or● Standard contractual clauses. The European Commission has approved contractual
clauses under Article 46 of the GDPR that allows companies in the EEA to transfer data
outside the EEA. These (and their approved equivalent for the UK and Switzerland) arecalled standard contractual clauses. We rely on standard contractual clauses to transfer
your information to certain entities in our corporate group and third parties in countries
without an adequacy decision.
If you wish to enquire further about these safeguards, please contact us at:
global_privacy@bytedance.com.

Your rights
You have the following rights:● The right to request free of charge (i) confirmation of whether we process yourpersonal data and (ii) access to a copy of the personal data retained;● The right to request proper rectification or erasure of your personal data;● Where processing of your personal data is either based on your consent ornecessary for the performance of a contract with you and processing is carried out
by automated means, the right to receive the personal data concerning you in a
structured, commonly used and machine-readable format or to have your personal
data transmitted directly to another company, where technically feasible (dataportability);● Where the processing of your personal data is based on your consent, the right towithdraw your consent at any time (withdrawal will not impact the lawfulness of dataprocessing activities that have taken place before such withdrawal);● The right not to be subject to any automatic individual decisions, including profiling,which produces legal effects on you or similarly significantly affects you unless wehave your consent, this is authorized by European Union or Member State law or thisis necessary for the performance of a contract;● The right to object to processing if we are processing your personal data on the basisof our legitimate interest unless we can demonstrate compelling legitimate grounds
which may override your right. If you object to such processing, we ask you to state
the grounds of your objection in order for us to examine the processing of yourpersonal data and to balance our legitimate interest in processing and your objection
to this processing;● The right to request the restriction of the processing of your information where (a)you are challenging the accuracy of the information, (b) the information has been
unlawfully processed, but you are opposing the deletion of that information, (c) where
you need the information to be retained for the pursuit or defence of a legal claim, or(d) you have objected to processing and you are awaiting the outcome of that
objection request.
● The right to object to processing your personal data for direct marketing purposes;
and● The right to lodge complaints before your local data protection authority.
Before we can respond to a request to exercise one or more of the rights listed above, you may
be required to verify your identity or your account details.
Please send an email to us if you would like to exercise any of your rights: at
global_privacy@bytedance.com.
Representatives
If you are based in the United Kingdom, our designated GDPR representative is:
Cosmo Technology Private Limited
2 Temple Back East
Temple Quay

Bristol
United Kingdom
BS1 6EGIf you are based in the EEA or Switzerland, our designated GDPR representative is:
Mikros Information Technology Ireland Limited
Mespil Business Centre
Mespil House
Sussex Road
Dublin 4
Ireland
Australia
Certain entities in our corporate group, located outside of Australia, are given limited remote
access to your information so that they can provide certain functions, as described in the section
on "How We Share Your Information."
BrazilIf you are using the Website in Brazil, the following additional terms apply:
Exercise of data protection rights. Brazilian law provides certain rights to individuals withregard to their personal data. Thus, we seek to ensure transparency and access controls toallow users to benefit from the mentioned rights.
We will respond and/or fulfill your requests for the exercise of your rights below, according to theapplicable law and when applicable, to the Brazilian General Data Protection Law - LGPD:
●
●
●
●
●
●
●
●
●
●

confirmation of whether your data are being processed;
access to your data;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or erasure of data;
portability of personal data to a third party;
object to the processing of personal data;
information of public and private entities with which we shared data;
information about the possibility to refuse providing personal data and the respective
consequences, when applicable;
withdrawal of your consent;
request an analysis of decisions taken exclusively based on the automatedprocessing of personal data that affect your interests, including decisions taken to
define your personal, professional, consumer or credit profile, or aspects of yourpersonality.

Verifying your identity. For your safety and to allow us to make sure that we do not disclose
any of your personal data to unauthorized third parties, in order to verify your identity andguarantee the adequate exercise of your rights, we may request specific information and/or
documents from you before we can properly respond to a request received concerning yourdata. All data and documents received from you in the process of responding to your requests
will be used for the strict purposes of analyzing your request, authenticating your identity, andfinally responding to your request.
Limitations to your rights. In certain situations, we may have legitimate reasons not to comply
with some of your requests. For instance, we may choose not to disclose certain information to
you when a disclosure could adversely impact our business whenever there is a risk of violation
to our trade secrets or intellectual property rights. In addition, we may refrain from complying
with a request for erasure when the maintenance of your data is required for complying withlegal or regulatory obligations or when such maintenance is required to protect our rights andinterests in case a dispute arises. Whenever this is the case and we are unable to comply with arequest you make, we will let you know the reasons why we cannot fulfill your request.
In case of doubt about your privacy, your rights or how to exercise them, please contact ususing the information in the "DPO" section. If you have any questions about the processing ofyour personal data, we would like to clarify them.
International Transfer of Data. We share your personal data globally with companies of ourbusiness group to carry out the activities specified in this Policy. We may also subcontract theprocessing of data involved in the Website or share your personal data with third parties locatedin other countries. Your personal data may therefore be subject to privacy laws other than those
applicable in your country. Whenever we transfer your personal data to third parties located inother countries, we will ensure that these companies comply with applicable data protection
laws and we will take all measures that are reasonably necessary to ensure the existence ofadequate safeguards to protect your personal data and to ensure that it is processed safely.
Language. The Policy may have been prepared in the English language and in the Portuguese
language. If you are a user located in Brazil, you shall refer to the Portuguese version, whichshall prevail.
DPO. If you wish to contact the Data Protection Officer, please contact us:
dpobrasil@bytedance.com
CanadaIf you are using the Website in Canada, the following additional terms apply.
Your Rights. Subject to limited exceptions under applicable law, you have the right to access,update, rectify and correct inaccuracies in your personal information in our custody and control
and to withdraw your consent to our collection, use and disclosure of your personal information.
To exercise these rights, you may contact us using the contact information set out below. We
may require certain personal information for the purpose of verifying the identity of the individual
making the request.

Your Choices. You can unsubscribe from our marketing emails at any time by clicking the“unsubscribe” link included at the bottom of each email we send.
Transfer Outside Your Jurisdiction. We and our service providers (including members,
subsidiaries, or affiliates of our corporate group) may access, store and otherwise process
personal information outside of Canada (and, for residents of Quebec, outside of Quebec),
including in the United States and Singapore, and other foreign jurisdictions where we or ourservice providers are located. For information about the manner in which we or our service
providers (including service providers outside Canada) process personal data, please contact
us using the contact information set out below.
Contact. If you are a resident of Canada, you can contact our Privacy Office using the contact
information provided in the “Contact” section.
Argentina
If you are using our services in Argentina, the following additional terms apply. In the event of
any conflict between the following additional terms and the provisions of the main body of thisPolicy, the following terms shall prevail.
Your rights and options. According to Law No. 25,326, Regulatory Decree No. 1558/2001 andthe provisions and/or binding resolutions issued by the Agency for Access to Public Information("AAIP"), you have the following rights with respect to your personal data: access, rectificationand deletion regarding data protection. If you have any questions about your privacy rights or
how to exercise them, please contact us using the information in the "Contact Us" section. If you
have any questions about the processing of your personal data, we would like to clarify them.
We encourage you to contact us if you are not satisfied with how we have responded to any ofyour rights requests. You also have the right to lodge a complaint with the AAIP. You cancontact AAIP through the site: https://www.argentina.gob.ar/aaip/datospersonales/derechos.
MexicoIf you use our services in Mexico, the following additional terms apply. In the event of a conflict
between the following additional terms and the provisions of the main body of this policy, thefollowing terms shall prevail.
Data Controller. Bytedance Ltd. with address at P.O. Box 31119 Grand Pavilion, Hibiscus Way,802 West Bay Road, Grand Cayman, KY1 - 1205 Cayman Islands.
How we use your personal data. Almost all of the purposes of the processing data indicatedabove in the main section of this Privacy Policy are necessary purposes. However, the following
are secondary purposes:● To provide you with personalized advertising.

The above purposes is/are not necessary to provide the Platform, but allows us to provide youwith a better experience. We offer you the ability to make choices about how we use anddisclose your personal data. You can always limit the secondary purposes of personalized
advertising by using the tools in the Settings that allow you to limit certain features.
We use both human and automated means to process your data.
How we share your personal data. We may share your personal data with a third party for
purposes other than processing on our behalf. We will obtain your consent to such disclosure as
required by applicable laws.
By providing us with your personal data and using our Platform, you agree to transfers that
require your consent. You can always revoke your consent and exercise your rights as outlined
below.
Language. The Policy may have been prepared in the English language and in the Spanish
language. If you are a user located in Mexico, you shall refer to the Spanish version, which shallprevail.
Your Rights. You have the following rights with respect to your personal data: access,rectification, cancellation, objection, consent withdrawal, limitation of use and disclosure of yourdata. You may exercise your rights by sending your request to global_privacy@bytedance.com.
To learn about the applicable requirements and the procedure for exercising your rights, pleasecontact us at the above email address. If you are under 18 years of age, you may exercise yourrights through a parent or guardian. Requests to exercise for your rights will be resolved assoon as possible according to the applicable data protection law and the nature of your request.
Information relating to minors. You may review our parental consent section in the Terms ofService.
United States
If you are using our Website in the United States, the following additional terms apply:
Your Rights and Choices
Depending on where you live, you may be entitled to certain rights with respect to your personal
information, as described below:●●●

Right to Know. You may have the right to know what personal information we havecollected about you, including the categories of personal information, the categories ofsources from which it is collected, the business or commercial purposes for collecting,selling, or sharing it, and the categories of third parties to whom we disclose it.
Access and Data Portability. Subject to certain exceptions, you may have the right torequest a copy of the personal information that we collected about you..
Deletion. You may have the right to request that we delete information that we collectedfrom or about you, subject to certain exceptions.

●

Correct Inaccurate Information. You may have the right to request that we correct
inaccuracies in the personal information we maintain about you.

For United States users, the Website does not sell your personal information or share yourpersonal information with third parties for purposes of cross-context behavioral advertisingwhere restricted by applicable law.
You may exercise these rights by submitting your request via email:global_privacy@bytedance.com.
You may be entitled, in accordance with applicable law, to submit a request through an
authorized agent. To designate an authorized agent to exercise choices on your behalf, pleaseprovide evidence that you have given such agent power of attorney or that the agent otherwise
has valid written authority to submit requests to exercise rights on your behalf.
We will respond to your request consistent with applicable law and subject to proper verification.
We will verify your request by asking you to send it from the email address associated with youraccount or to provide information necessary to verify your account.
You may appeal any decision we have made about your request by replying to thecommunication you receive from us communicating your decision. We will not discriminate
against you for exercising your rights and choices, although some of the functionality andfeatures available on the Website may change or no longer be available to you.
Other California Rights● You can request that we disclose the categories of personal information we have sharedwith third parties for the third parties’ direct marketing purposes. Requests may besubmitted via the methods listed in the “Contact Us” section above.
● Your browser may offer you a “Do Not Track” option, which allows you to signal tooperators of websites and web applications and services that you do not wish suchoperators to track certain of your online activities over time and/or across different
websites. Our products do not support Do Not Track requests at this time.

Egypt
If you are using our Websitein Egypt, the following additional terms apply:● You declare that you are over the age of 18. If you are under the age of 18, please haveyour parent or legal guardian read this with you. If you are reviewing these terms as theparent/legal guardian of a user who is under the age of 18, you hereby declare that suchuser is above the age of 13 and that you have read and acknowledged this Privacy
Policy and Terms of Use and agree to the use by your child of the Website andregistration for an account.

Indonesia
If you are using our Website in Indonesia, the following additional terms apply. In the event of
any conflict between the following additional terms and the provisions of the main body of thisPolicy, the following terms shall prevail.
Age, Parental and Guardian Consent. By accessing and/or using our Website, you represent
that you are at least 21 years of age or married or not under guardianship. If you are below 21
years old and you are not married, or under guardianship:● you must obtain approval from your parent(s) or legal guardian(s); and● your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection
with your access to and use of the Website; (ii) your compliance with this policy; and (iii)
ensuring that any of your participation in the Website will not, in any event, result in any
violation of applicable laws and regulations relating to child protection.
If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or
guardian(s) is not willing to open the account under their name, you must cease accessing
and/or using the Website.
Your Choices. You may withdraw your consent to our disclosure of personal data to third
parties. Upon your request, we will display, publish, transmit, disseminate, and/or open theaccess to your personal data to third parties. Please note that by withdrawing your consent to
the disclosure and/or collection of your personal data, we may not be able to fulfill your requests
and you may not be able to use some of Bytedance.com’s features and functionality.
You may request that we: (i) disclose the history of personal data that we have collected; and/or(ii) erase and dispose of your personal data that we have collected on our server. Please notethat by requesting us to erase and dispose of your personal data, you may not be able to usesome of ByteDance.com's features and functionality.
To exercise any of your rights, contact us at: global_privacy@bytedance.com
Notification. In the event of any breach of personal data, we will notify you and provide youwith information regarding such breach of personal data.
Data retention. We retain your information for as long as it is necessary to provide you with theservice. Where we do not need your information in order to provide the service to you, we retain
it only for so long as we have a legitimate business purpose in keeping such data. However,there are occasions where we are likely to keep this data for five (5) years (or longer if required)in accordance with our legal obligations or where it is necessary for the establishment, exercise
or defence of legal claims.
After you have terminated your use of our Website and the five (5) years retention period has
lapsed, we store your information in an aggregated and anonymised format. Non-personallyidentifiable information may be retained indefinitely for analytics.
India
If you are using our Website in India, the following additional terms apply. Your continued
access to or use of the Website after the date of the updated Privacy Policy constitutes youracceptance of the updated policy. If you do not agree to the updated policy, you must stop
accessing or using the Website.
Grievance Officer For India. In accordance with Information Technology Act 2000 and rules
framed thereunder, a Grievance Officer has been appointed and a complaint or other issue
faced by a user of our platform or other issue faced may be submitted through the email
provided in the “Contact Us” section.
The complaint should provide: (i) username of the relevant account holder (ii) specific content
that is of concern and (iii) reason(s) for the request.
IsraelIf you are using our Website in Israel, these additional terms apply. You declare that you areover the age of 18. If you are under the age of 18, please have your parent or legal guardian
read this with you. If you are reviewing these terms as the parent/legal guardian of a user who isunder the age of 18, you hereby declare that such user is above the age of 13 and that you
have read and acknowledged ByteDance.com’s Privacy Policy and Terms of Use and agree tothe use by your child of the Website and registration for an account.
Philippines
If you are using our Website in Philippines, the following additional terms shall apply pursuant to
the relevant laws, rules and regulations and issuances by the Philippines National Privacy
Commission (“NPC”) on data privacy.
Your Rights. To the extent that the relevant laws, rules and regulations on data privacy
recognize your rights and freedoms as data subjects, you shall have the right to information,
object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages
and data portability. Before we can respond to a request to exercise one or more of the rights
listed above, you may be required to verify your identity or your account details.
RussiaLegal grounds for data processing. When we process your personal data, we rely on yourconsent, performance of a contract, our legitimate interest, and obligations to process personaldata, when required by law.
By signing up and using the Website, you consent to the processing of personal data inaccordance with this Privacy Policy.
Where we store your personal data. Your personal data may be transferred from Russia to
Singapore and stored in that location, outside of the country where you live.
Public profiles. We rely on your consent to public distribution of personal data, when youraccount settings are 'Public Profile'. You can change your profile to private by changing yoursettings to 'Private Account' in “Manage my account” settings.

South Africa
If you are using our Website in South Africa, the following additional terms apply:
You declare that you are over the age of 18. If you are under the age of 18, please have yourparent or legal guardian read this with you. If you are reviewing these terms as the parent/legal
guardian of a user who is under the age of 18, you hereby declare that such user is above theage of 13 and that you have read and acknowledged this Privacy Policy and Terms of Use andagree to the use by your child of the Website and registration for an account.
South Korea
If you are using our Website in South Korea, the following additional terms apply:
Data retention. We destroy personal data whose purpose of collection as consented to by you
have been achieved, or whose periods of and use to which you consented to or which were
provided in the Policy have expired; provided, however, we will continue to store your personal
data for the following statutorily-prescribed periods, where applicable, including, but not limitedto:● Act on Consumer Protection in Electronic Commerce:○ Records on your cancellation of an order, your payment on a purchased item, andour supply of a good/service: 5 years○ Records on the handling of consumer complaints or disputes: 3 years○ Records on advertisements and labels: 6 months● Protection of Communications Secrets Act○ Records on your visits to our website: 3 months
Destruction of Personal data. We destroy your personal data in a manner that renders it
unrestorable by the relevant department.
Your Rights● Data rights. You have the right to access personal data we hold about you, to rectify
any personal data held about you that is inaccurate, to request the deletion of personal
data held about you, and the right to request the suspension of the processing of yourpersonal data. You can exercise your rights by contacting us at
global_privacy@bytedance.com.
● Data Security. We work hard to protect ByteDance.com and our users fromunauthorized access to or unauthorized alteration, disclosure or destruction of
information we hold. To this end, we have in place technical, managerial and physicalsafeguards, including internal policy for data protection, limiting the access to personal
data on a need-to-know basis and controlling access to the facilities where personal data
is processed.
● Information Relating to Children. ByteDance.com is not directed at children under theage of 14.
● Entrustment and/or Overseas Transfer of Personal Data. We entrust your data to ouraffiliates, cloud storage providers, IT service providers, and data centers, some of whom
are located abroad, subject to your consents or notifications to you, if applicable. The

entities receiving and processing your data are committed to using and storing personal
data in compliance with domestic and international regulations and to taking all available
physical and technical measures to protect personal data. You may opt-out of suchtransfer so long as the transfer is not necessary to provide you with the Website, by
contacting global_privacy@bytedance.com.
TürkiyeIf you are using our Website in Türkiye, the following additional terms:
Data Controller Representative. You may contact our data controller representative in Türkiye
by email to handle questions and complaints in connection with the processing of your personal
data if you are in Türkiye.
Legal bases for processing your personal data. We rely on the following legal bases while
processing your personal data in accordance with Article 5 of the Law No. 6698 on Protection of
Personal Data:● processing is explicitly laid down or dictated by laws
● processing of your personal data is necessary provided that it is directly related to theconclusion or fulfillment of the contract between us● processing is mandatory for us to be able to comply with our legal obligations● the relevant data is made available to the public by yourself● processing is mandatory for the establishment, exercise or protection of a right● processing is mandatory for our legitimate interests, provided that it does not violate yourfundamental rights and freedoms● your explicit consent (Please note that we rely on this legal basis only when we require
your consent for the processing and we do not rely on this legal basis if and when werely on one of the other legal grounds above)Your rights. According to Article 11 of the Data Protection Law, you have the following rights
with respect to your personal data:● the right to learn whether we process your personal data,● the right to request information with regard to such processing, if we process yourpersonal data,● the right to learn the purposes of the processing and whether they are used for such
purpose or not;● the right to know the third parties within or outside the country, to whom we transfer yourpersonal data,● the right to request correction of incomplete or inaccurate personal data,● the right to request deletion or destruction of your personal data under the conditions set
forth in Article 7 of the Data Protection Law,
● the right to request that we notify the third parties, to whom we transferred your personaldata, about the correction, deletion and/or destruction of your personal data per yourrequest within the scope of the foregoing two items,● the right to object to the negative results about you that are due to the analysis of yourpersonal data processed solely by automated means,●the right to claim indemnification for damages incurred due to illegal processing of yourpersonal data.
If you would like to exercise your rights, please contact us at global_privacy@bytedance.com
The requests found in your application will be resolved as soon as possible according to thenature of your request and within thirty days at the latest free of charge. However, if yourrequest incurs additional cost to our company, then you may be charged over the tariff fee
determined by the Turkish Personal Data Protection Board.
Language. The Policy may have been prepared in the English language and in the Turkish
language. If you are a user located in Turkey, you shall refer to the Turkish version, which shallprevail.
United Arab Emirates
If you are using the Website in the United Arab Emirates (“UAE”), the following additional terms
apply:
How we share your personal data
In addition to the main text of this policy, by using the Website in the UAE you agree to theterms of this Privacy Policy and consent to our sharing of your personal data in line with themain text of this Privacy Policy.
Governing law and dispute resolution
By using our Website in the UAE, this Privacy Policy will be governed by and interpreted inaccordance with the laws of the UAE. In the event of a dispute arising between the parties inconnection with this Privacy Policy:● where the dispute relates to a claim for a sum within the limits specified by the DIFC
Small Claims Tribunal from time to time, then the dispute shall be referred by either party
to the said Tribunal; and● for all other disputes, the parties shall seek settlement of that dispute by mediation inaccordance with the Mediation Rules of the DIFC-LCIA Arbitration Centre, which Rules
are deemed to be incorporated by reference to this clause. If the dispute is not settled bymediation within 30 days of the commencement of the mediation, or such further period
as the parties shall agree in writing, the dispute shall be referred to and finally resolved
by arbitration under the Arbitration Rules of the DIFC-LCIA Arbitration Centre, which
Rules are deemed to be incorporated by reference to this clause. The language to be
used in the mediation and in the arbitration, shall be English. In any arbitrationcommenced pursuant to this clause the number of arbitrators shall be one and thearbitration shall be conducted in Dubai.
VietnamIf you are using our Website in Vietnam, the following additional terms apply:Age, Parental and Guardian Consent. By accessing and/or using the Website, you represent
that you are at least 16 years of age or not under guardianship. If you are below 16 years old or
under guardianship:

you must obtain approval from your parent(s) or legal guardian(s); andyour parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection
with your access to and use of the Website; (ii) your compliance with this policy; and (iii)
ensuring that any of your participation in the Website will not, in any event, result in any
violation of applicable laws and regulations relating to child protections.
If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or legal
guardian(s) is not willing to open the account under their name, you must cease accessing theWebsite.
●●