1. Who we are
StreetCred is a reputation management platform for small and medium-sized businesses. It is operated by Street Cred Technology Limited (Company No. 17281550), registered at 27 Front Street, North Shields, England, NE29 9LH, accessible at street-cred.co.uk and app.street-cred.io.
For the purposes of UK and EU data protection law, Street Cred Technology Limited is the data controller.
Contact: team@street-cred.co.uk
2. What data we collect and why
Account and billing data — When you register and subscribe, we collect your name, email address, and payment details. Payment transactions are processed by Stripe — we do not store card details on our servers. We collect this data to provide you with access to the platform and manage your subscription.
Business profile data — We collect information about your business including its name, industry, and the review platforms you connect. This is necessary to deliver the core service.
Usage data — We collect standard technical data about how you use the platform including IP address, browser type, device type, pages visited, and session duration. This is used to maintain platform security, diagnose issues, and improve the service.
Email communications — We collect your email address to send you service notifications, review alerts, and where you have opted in, product updates and marketing emails. You can unsubscribe at any time via the unsubscribe link in any email.
Connected platform data — When you connect third-party platforms including Google, Facebook, TikTok, Yelp, and Trustpilot, we access data from those platforms on your behalf via their official APIs and OAuth authorisation flows. This includes: reviews and ratings left about your business, comments on your own TikTok videos (where TikTok is connected), your business's video metadata from TikTok, your TikTok display name and profile avatar, reviewer and commenter names and profile information where provided by the platform. All connected platform data is collected only when you explicitly authorise the connection via OAuth. We do not collect any platform data without your authorisation. We access only the data necessary to display and analyse your reviews. We do not access personal feeds, follower lists, or any content beyond your own business content and its associated reviews and comments.
3. Legal basis for processing (UK GDPR)
Contract — Processing necessary to provide the service you have subscribed to.
Legitimate interests — Platform security, fraud prevention, product improvement, and ensuring service reliability.
Consent — Marketing emails and optional product communications — you can withdraw consent at any time.
Legal obligation — Where we are required to retain data by law.
4. How we use your data
We use the data we collect to: provide and maintain your StreetCred account and subscription, display reviews and comments from connected platforms in your dashboard, analyse the sentiment of reviews and comments including TikTok comments to provide reputation insights, send service notifications and review alerts, process payments and manage billing, improve platform performance and develop new features, comply with legal obligations.
We do not use your data for advertising, profiling, or any purpose beyond delivering StreetCred to you.
5. Connected platform integrations
Google — Where you connect your Google Business Profile, we access your business reviews and ratings via the Google My Business API. We use this data to display your Google reviews within your StreetCred dashboard. Our use of Google APIs is subject to the Google API Services User Data Policy. By connecting your Google account you acknowledge that data is exchanged with Google in accordance with their terms.
Facebook / Meta — Where you connect your Facebook Business Page, we access your business reviews and ratings via the Meta Graph API. Where reply posting is enabled, we post responses on your behalf only when you explicitly submit a reply through the StreetCred dashboard. No automated posting occurs. Our integration is subject to Meta's Platform Terms.
Trustpilot — Where you connect your Trustpilot account, we access your business reviews and ratings via the Trustpilot API. We use this data to display your Trustpilot reviews within your StreetCred dashboard. Our integration is subject to Trustpilot's API Terms of Use.
Yelp — Where you connect your Yelp account, we access your business reviews and ratings via the Yelp Fusion API. We use this data to display your Yelp reviews within your StreetCred dashboard. Our integration is subject to Yelp's API Terms of Use.
TikTok — TikTok requires us to provide specific disclosure about our use of their API. Please read this section carefully. When you choose to connect your TikTok account, you will be redirected to TikTok's own authorisation page where you explicitly grant StreetCred access. We use TikTok's official Display API via OAuth 2.0. We request the following scopes: user.info.basic, video.list, comment.list, comment.list.manage. We use TikTok data solely to display your comments and sentiment analysis within your StreetCred dashboard. We do not share TikTok data with any third party beyond those listed in section 6. We do not use TikTok data for advertising. We do not post content to TikTok without your explicit action. Where your TikTok account is connected, we sync your videos and comments automatically every 6 hours. You can disconnect your TikTok account at any time from Settings > Platforms. Disconnecting will revoke our API access. Your stored TikTok data will be deleted from our systems within 30 days of disconnection. StreetCred is an independent platform. We are not affiliated with, endorsed by, or part of TikTok.
7. Data retention
Account data — Retained for as long as your subscription is active. Deleted within 30 days of account closure, except where required for legal or financial compliance. Transaction records are retained for 7 years in line with HMRC requirements.
TikTok data — Refreshed automatically every 6 hours while your TikTok account remains connected. Deleted within 30 days of disconnection or account closure.
Review data (other platforms) — Retained while your account remains active and deleted within 30 days of account closure.
8. How we store and protect your data
Your data is stored securely using Supabase, which operates on infrastructure within the European Economic Area. We apply row-level security policies to ensure no user can access another user's data. All data in transit is encrypted using TLS. Access to production systems is restricted to authorised personnel only.
9. Your rights under UK GDPR
Access, Rectification, Erasure, Restriction, Portability, Objection, Withdraw consent. To exercise any of these rights, contact us at team@street-cred.co.uk. We will respond within 30 days. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
11. International transfers
Some of our third-party processors may transfer data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as required by UK GDPR.
12. Children
StreetCred is a business tool intended for use by adults operating businesses. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has provided us with personal data, contact us at team@street-cred.co.uk and we will delete it promptly.
13. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. The date at the top of this page reflects the most recent update.
14. Contact
Street Cred Technology Limited (Company No. 17281550)
27 Front Street, North Shields, England, NE29 9LH
street-cred.co.uk