AllySign in

Loan Factory Privacy Policy

Last updated: 2026-09-08

This Privacy Policy describes how Loan Factory, Inc. ("we," "us"), collects, uses, stores, and discloses information when you use Loan Factory — also offered under the product name "Ally" — to connect and publish to third-party platforms, including TikTok and Google (Gmail).

1. Information We Collect from TikTok

When you connect your TikTok account to Loan Factory via TikTok's OAuth flow, we collect:

  • Your TikTok open ID and union ID — opaque identifiers TikTok issues to identify your account to our app. We do not receive your TikTok password.
  • Your TikTok display name and avatar URL — to show you which TikTok account is connected inside Loan Factory.
  • Access and refresh tokens — encrypted credentials issued by TikTok that allow Loan Factory to publish on your behalf. We never share these tokens with third parties.
  • The list of TikTok scopes you granted — so we know which actions you have authorized.

We request only the scopes required for the features you use:

  • user.info.basic — to display your TikTok identity inside Loan Factory.
  • video.publish — to publish videos you create in Loan Factory to your TikTok account.
  • video.upload — to upload video files to TikTok for publishing.

We do not request or store: your TikTok password, your private messages, your followers list, your followings, your likes, your watch history, or any other information beyond the scopes listed above.

2. Information We Collect from Google (Gmail)

When you connect your Google account to Ally via Google's OAuth flow, we collect:

  • Your Google account ID and email address — to show you which Gmail account is connected inside Ally. We do not receive your Google password.
  • Access and refresh tokens — encrypted credentials issued by Google that allow Ally to send email from your Gmail account on your behalf. We never share these tokens with third parties.
  • The list of Google scopes you granted — so we know which actions you have authorized.

We request only the scopes required for the features you use:

  • gmail.send — to send email messages that you compose in Ally and explicitly ask us to send, from your Gmail account. This scope only permits sending; it does not allow Ally to read your mailbox.
  • email — to identify the Google account you connected and display its address inside Ally.

We do not read, store, index, or analyze the contents of your Gmail inbox, and we do not request any scope that would allow us to. We do not request or store: your Google password, your contacts, your calendar, your Drive files, or any other information beyond the scopes listed above.

Ally's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No Loan Factory employee reads or accesses the messages you send through Ally, except with your explicit permission to resolve a support request, for security or abuse investigation, or where required by law. We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models, and we do not serve advertisements based on it.

3. Information We Collect from You Directly

  • Account information — when you create a Loan Factory account: your name, email, and password (hashed, never stored in plain text).
  • Content you publish — videos, captions, hashtags, and metadata you create or upload in Loan Factory for the purpose of publishing to TikTok.
  • Publishing history — records of which content was published to which TikTok account at what time, including success/failure status returned by TikTok.
  • Emails you compose and send through Ally — the recipients, subject, body, and send status — so you can review your sending history inside Ally.

4. How We Use Your Information

We use the information above only to:

  • Authenticate you to your TikTok or Google account via that platform's OAuth flow.
  • Publish content you have explicitly authorized to your connected TikTok account.
  • Send email messages you compose and explicitly ask us to send, from your connected Gmail account.
  • Show you the status (queued, published, failed) of your publishing requests.
  • Display your connected TikTok and Google identities inside Loan Factory so you can confirm you are publishing or sending from the right account.
  • Diagnose and fix technical issues with the publishing pipeline.
  • Comply with legal obligations.

We do not sell your information. We do not use TikTok or Google data to build advertising profiles. We do not share TikTok or Google access tokens with third parties.

5. How We Store Your Information

  • TikTok and Google access and refresh tokens are encrypted at rest using industry-standard encryption (AES-256) and are only decrypted in memory at the moment a publishing or sending request is made.
  • Your content (videos, captions, and emails you compose) is stored on encrypted cloud storage operated by our infrastructure provider, only for as long as needed to complete the publishing or sending request and to display your history.
  • Logs containing diagnostic metadata are retained for up to 90 days for debugging and abuse prevention.

6. How We Share Your Information

We share your information only:

  • With TikTok, when you ask us to publish content on your behalf — this is the entire purpose of the integration.
  • With Google, when you ask us to send an email from your Gmail account — the message is transmitted to Google's Gmail API for delivery and to no one else.
  • With our infrastructure providers (e.g. cloud hosting, database, storage), under contracts that require them to protect your data and use it only to provide services to Loan Factory.
  • When required by law, e.g. a valid subpoena or court order.

We never share your TikTok or Google information with advertisers, data brokers, or any party outside the categories above.

7. Data Retention and Deletion

  • Disconnect your TikTok account at any time from the Loan Factory settings page. Disconnection immediately revokes our access and refresh tokens with TikTok and deletes them from our database.
  • Disconnect your Google account at any time from the Ally settings page. Disconnection immediately revokes our access and refresh tokens with Google and deletes them from our database.
  • Delete your Loan Factory account by contacting ai.assistant@loanfactory.com. We will delete your account, your stored content, and all associated TikTok and Google credentials within 30 days. Backups containing residual copies are purged on a rolling 90-day cycle.
  • You may also revoke Loan Factory's access directly from your TikTok account settings (Settings & Privacy → Security & Login → Manage app permissions).
  • You may also revoke Ally's access directly from your Google Account (Security → Third-party apps & services, or https://myaccount.google.com/permissions).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information.
  • Object to or restrict certain processing.
  • Receive a copy of your data in a portable format.

To exercise any of these rights, contact ai.assistant@loanfactory.com. We will respond within 30 days.

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect information from children under 18. If you believe we have collected information from a child, contact ai.assistant@loanfactory.com and we will delete it.

10. International Transfers

Your information may be processed in countries other than the one in which you reside. Where required by law, we use appropriate safeguards (e.g. Standard Contractual Clauses) for cross-border transfers.

11. Security

We use industry-standard technical and organizational measures to protect your information, including encryption at rest and in transit, principle-of-least-privilege access controls, and regular security reviews. No system is perfectly secure, however, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or email. Continued use of the Service after changes take effect constitutes acceptance.

13. Contact

Privacy questions, deletion requests, or rights requests: ai.assistant@loanfactory.com

Loan Factory, Inc.
2195 Tully Road, San Jose, CA 95122