Privacy Policy

1. Overview

This Privacy Policy applies to all services provided by TKOS Hub (the "Platform"), operated by Beijing Zhicai Yunlian Trading Co., Ltd. ("we", "us"). We are committed to protecting your personal information. By using the Platform, you agree to the data practices described in this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, and password (encrypted) provided during registration.
• TikTok Authorization Data: Advertising account IDs, access tokens (AES-256 encrypted), and related ad/shop data obtained via TikTok OAuth.
• Usage Data: Log information about your interactions with the Platform, including access times and feature usage.
• Device Information: Browser type, operating system, IP address, and other technical information.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Platform's services
• Process your TikTok advertising and shop data to generate analytics reports
• Enable product listing, editing, and order management via TikTok Shop API
• Send service notifications, security alerts, and support messages
• Detect and prevent fraud or abuse
• Comply with legal and regulatory requirements

4. TikTok Data Processing

The Platform accesses your authorized data through TikTok's official API only within the scope you have explicitly authorized, including ad campaigns, ad groups, creatives, shop products, orders, and related reporting data. We will not sell your TikTok data to third parties or use it for any purpose unrelated to providing the Platform's services.

You may revoke TikTok authorization at any time in Settings. Upon revocation, we will immediately stop fetching new data. Previously stored data will be deleted within 90 days or upon your request.

When a user revokes authorization through TikTok's platform, TikTok will notify us via our Data Deletion Callback URL, and we will automatically delete all associated tokens and data.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• All data transmission encrypted via HTTPS/TLS
• TikTok access tokens and refresh tokens encrypted with AES-256
• Passwords hashed with bcrypt, never stored in plaintext
• Regular security audits and vulnerability scanning
• Strict access controls — only authorized personnel can access user data

6. Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Trusted third-party providers (e.g., cloud hosting) who assist in operating the Platform, bound by confidentiality agreements.
• Legal Requirements: When required by law or to protect our legitimate interests.
• Business Transfers: In the event of a merger or acquisition, with prior notice to you.

7. Your Rights

You have the following rights regarding your data:

• Access: Request to view the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your account and associated data.
• Withdraw Consent: Revoke TikTok authorization or close your account at any time.

To exercise these rights, please contact us using the information below.

8. Cookies

The Platform uses necessary cookies to maintain your login session and security. We do not use third-party tracking or advertising cookies. You may manage cookies through your browser settings, but disabling necessary cookies may affect Platform functionality.

9. Children's Privacy

The Platform is not directed to individuals under 18. If we become aware that we have collected personal information from a minor, we will delete it immediately.

10. Data Retention

We retain your personal data for the following periods:

• Account Information: Deleted within 30 days after account closure.
• TikTok Advertising & Shop Data: Retained during authorization; deleted 90 days after revocation or upon data deletion callback from TikTok.
• Activity Logs: Automatically purged after 180 days.
• Payment Records: Retained for 5 years as required by Chinese financial regulations.

You may request early deletion of your data at any time through account settings or by contacting us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For significant changes, we will notify you via in-platform notifications or email. Continued use of the Platform constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Company: Beijing Zhicai Yunlian Trading Co., Ltd.
• Email: 13262108895@163.com
• Address: Room 3203, Building C6, No.1 Huangchang West Road, Dougezhang, Chaoyang District, Beijing, China