Privacy Policy

Effective date: 17 July 2026. Version 2026-07-17.2. This Privacy Policy explains how The Lone Wolf Agency ("we", "us", "our") collects and uses personal data when you interact with our website and the Wolf Hub creator platform ("Wolf Hub").

1. Who we are

The Lone Wolf Agency is a TikTok LIVE creator agency based in the United Kingdom. We are the data controller for the personal data described in this policy. You can contact us at thelonewolf.management@gmail.com.

We are (or will shortly be) registered with the UK Information Commissioner's Office (ICO) as a data controller. Our registration number is [ICO NUMBER — to be added]. Until this number is published here, you may still exercise every right set out below and we will respond within the statutory timeframe.

For a full inventory of cookies and browser storage we use, see our Cookie Policy.

2. Scope

This policy covers personal data processed when you visit thelonewolfagency.co.uk, register for and use Wolf Hub, contact us, or interact with our Agency Discord where linked from Wolf Hub.

3. Data we process

Account & profile. Email address, password (stored as a one-way hash by our authentication provider), display name, TikTok username, and — if you complete it — extended profile fields such as bio, socials, niches and availability. Optional avatar and banner images if you upload them.

Membership state. Approval status (pending, approved, rejected, left agency), assigned role, badges, XP and level, onboarding acknowledgements, and internal notes management records against your account (for example a removal reason).

Legal acceptance records. Which version of the Terms, Privacy Policy, NDA and Acceptable Use Policy you accepted, the timestamp, the IP address, and the user agent. For the NDA we also record the electronic signature (typed name) you provided.

Creator performance statistics. Figures uploaded by management from TikTok agency reports — diamonds, valid LIVE days, LIVE hours, LIVE streams and new followers — both as the current snapshot and per calendar month. Detailed stats are visible only to you and to agency administrators; only aggregate rank/username/avatar appears on the internal Leaderboard.

Content you submit. Creative-request briefs and attachments, showcase submissions, testimonials, success-story submissions, notices you post, Talk to Wolf messages, friend (Pack) requests, in-app notifications you generate, and reactions to Pack Feed announcements.

Trading feature (opt-in). If you connect the optional trading feature: your cTrader OAuth connection metadata and short-lived state tokens, trading positions, journal entries, watchlist, alerts, weekly reviews, market reads, execution requests, an AI usage counter (used to enforce fair use), and your autonomous-mode settings and the decisions it records. Broker credentials are never stored — only OAuth tokens issued by cTrader.

Push notifications (opt-in). If you enable push, your Web Push subscription (endpoint and public keys), and a record of each push we send you together with its delivery result.

Communications metadata. The email sending log (recipient, template, status, timestamps), unsubscribe preferences, and any suppression entries (for example bounces, spam complaints or unsubscribes).

Wolf AI (admin-only feature). Prompts and responses sent to the Wolf AI assistant and creative generator by administrators are stored so we can compute usage and improve quality. This feature is not available to creators.

Technical, security and audit data. IP address, user agent, request timestamps, standard server logs used for security and abuse prevention, ad-hoc rate limiting on sensitive endpoints, and administrator audit events (who did what admin action, when, on which record). We do not run any third-party web analytics, ad networks or marketing trackers.

First-party feature-usage events. When you use Wolf Hub we record lightweight events against your user ID — for example opening the Pack directory, viewing another creator's profile, or opening a notification. These are visible only to agency administrators and are used solely to understand which Wolf Hub features are valuable.

We do not knowingly collect special-category personal data (for example health or biometric data) and we do not collect payment card data — creator earnings are paid by TikTok directly, not by us.

4. How we collect it

Directly from you (registration, profile, uploads, messages, feature use), automatically (technical data, feature events, audit logs when administrators act, delivery status of emails and push messages), and from integrations you connect (cTrader OAuth).

5. Why we process it and our legal bases

• Contract (delivering Wolf Hub to you): account, profile, content, trading feature, push delivery, transactional emails.
• Legitimate interests (running and securing the Agency): admin audit logs, moderation, fraud and abuse prevention, first-party product analytics, aggregate performance data. You may object at any time.
• Legal obligation: retaining legal-acceptance records, responding to lawful requests, and tax or accounting where relevant.
• Consent: push notifications, agency marketing emails (occasional announcements, events, competitions and feature updates sent to your account email), promotional use of your likeness (Featured Creator, Success Story, Testimonial), and any other optional communications. Consent is only recorded when you actively choose "Yes" — creating an account, signing in or dismissing the prompt does not count as consent. You can withdraw consent at any time from your Wolf Hub dashboard or by using the one-click unsubscribe link in any campaign email.

Essential account emails — including authentication, password resets, security alerts, approval decisions, legal re-acceptance requests and other service messages — are sent on the basis of contract and legal obligation and are not affected by your marketing-email choice.

6. Who we share your data with

We do not sell your personal data and we do not share it with advertisers. We share it only with the following categories of processor, each under a data-processing agreement:

• Our hosting and backend provider (Lovable Cloud, powered by Supabase): hosts the database, authentication, file storage and server-side functions that power Wolf Hub. EU/UK region.
• Our edge network (Cloudflare): serves the site and provides DDoS protection.
• Our email delivery provider (Resend, via our Lovable email pipeline): delivers transactional emails such as authentication, approval notifications, password resets and announcements.
• cTrader / Spotware (only if you connect the trading feature): OAuth token exchange and market data.
• Web Push services operated by your browser vendor (Google, Mozilla, Apple, Microsoft): used solely to deliver push notifications you have opted into.
• Authorised agency administrators at The Lone Wolf Agency: have access to your full profile and stats in order to manage the agency relationship.

We may also disclose data where required by law, to protect our rights, or in connection with an Agency reorganisation.

7. International transfers

Where personal data leaves the UK/EEA (for example Resend US infrastructure or browser-vendor push endpoints), we rely on UK adequacy decisions or Standard Contractual Clauses with the UK IDTA addendum.

8. Other creators and public visibility

Approved creators can see an internal leaderboard that shows TikTok usernames, profile pictures and rank for the top performers. Individual diamonds, hours and other detailed stats are never exposed to other creators — only to you and to agency administrators.

The public Creator Showcase on our marketing pages only includes creators an administrator has explicitly chosen to feature, marked as active, and for whom we have a recorded consent confirmation. The same consent requirement applies to any testimonial or success story attributed to you. To withdraw previously given consent, email thelonewolf.management@gmail.com.

9. Retention

• Account and profile data: while your account is active, then up to 30 days after a deletion request completes.
• Legal acceptance records: 7 years after account closure (evidence of consent).
• Admin audit events: 2 years.
• Talk to Wolf messages: until you delete them, or 12 months after account closure.
• Trading data: while the trading feature is connected, then 12 months.
• Push subscriptions: until revoked, or until the browser vendor invalidates the endpoint.
• Suppression list (bounces, complaints, unsubscribes): retained to prevent re-sending.
• Encrypted backups: rolled on a maximum 35-day cycle.

10. Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict the processing of, port and object to the processing of your personal data, and to withdraw consent at any time. Contact thelonewolf.management@gmail.com. You may also complain to the ICO at ico.org.uk.

11. Security

Passwords are hashed and salted by our authentication provider. Data in transit is encrypted (TLS). Row-level security enforces per-user access in the database. Administrator actions are audited. We use strong sender authentication (SPF, DKIM, DMARC) on outbound email.

12. Children

Wolf Hub is not intended for anyone under 18.

13. Automated decision-making

If you enable it, trading autonomous mode can take automated actions on your cTrader account within limits you configure. It is not solely-automated decision-making with legal effect under UK GDPR Article 22 — you configure it, you can pause it at any time, and it only affects your own connected broker account.

14. Changes

We will notify you of material changes via Wolf Hub and require re-acceptance on your next sign-in where the substance of processing changes.

15. Contact

The Lone Wolf Agency — thelonewolf.management@gmail.com.