1. Introduction
Shenzhen Fangfei Culture Communication Co Ltd ("Company," "we," "us," or "our") respects the privacy and security of personal information and business data.
This Privacy Policy describes how we collect, use, store, protect, share, and delete information in connection with our website, software integration services, and applications, including integrations with TikTok Shop through authorized APIs.
Our services are designed to help authorized merchants manage and analyze their e-commerce operations, including product information, inventory, sales performance, order information, and shoppable video analytics.
We are committed to responsible data handling, transparency, and compliance with applicable data protection laws and relevant platform policies.
2. Information We Collect
Depending on the services enabled, permissions granted, and applicable platform restrictions, we may collect and process the following categories of information.
2.1 Merchant and Account Information
We may collect business names, seller identifiers, authorized shop identifiers, business contact information, account configuration details, and information necessary to establish and maintain authorized integrations.
2.2 Product and Inventory Information
We may process product identifiers, product descriptions, SKU information, inventory quantities, pricing, product status, and warehouse-related inventory information.
2.3 Order and Transaction Information
Where authorized and necessary for the relevant service, we may process order identifiers, transaction dates, order statuses, purchased product details, quantities, sales amounts, refunds, and related operational information.
Buyer personal information will be accessed only where specifically authorized, necessary for an approved service purpose, and permitted by applicable platform rules.
2.4 Analytics and Performance Data
We may collect authorized analytics information, including product performance, video views, shoppable video sales performance, order metrics, gross merchandise value (GMV), product clicks, and other available performance indicators.
Such information may include creator or marketing account identifiers and publicly or platform-authorized performance metrics.
2.5 Technical and Security Information
When users access our website or services, we may process technical information necessary for service operation and security, such as IP addresses, access timestamps, system error records, authentication events, and application activity logs.
We do not intentionally collect information beyond what is reasonably necessary for our legitimate service purposes.
3. How We Obtain Information
We obtain information from merchants and authorized users, from TikTok Shop APIs following valid authorization, from other service providers where authorized, and from technical interactions with our website or applications.
We access TikTok Shop data only through permissions granted to our application and subject to TikTok Shop's applicable API policies and access restrictions.
Merchants may revoke applicable authorizations through the relevant platform mechanisms.
4. How We Use Information
We use information to provide and support authorized e-commerce integration services, including product and inventory monitoring, operational reporting, order and sales analysis, video performance analysis, historical data synchronization, technical maintenance, security monitoring, and service improvement.
We may also use limited business contact information to respond to service inquiries, provide relevant support, and communicate material service or privacy updates.
We do not sell merchant data or buyer personal information.
We do not use TikTok Shop API data for unrelated advertising, unauthorized profiling, or purposes outside the applicable authorization and permitted service scope.
Data belonging to different merchants or legal entities will not be combined, disclosed, or used across merchant boundaries unless appropriately authorized and permitted under applicable law and platform rules.
5. Legal Basis and Data Processing Roles
Where applicable data protection laws require a lawful basis, our processing may rely on the performance of a contract, compliance with legal obligations, legitimate interests, or consent where legally required.
The specific lawful basis depends on the nature of the information, the relevant processing activity, and the applicable jurisdiction.
When processing personal information on behalf of an authorized merchant, we may act as a data processor or service provider under that merchant's instructions. The merchant may act as the data controller or equivalent responsible party.
For information collected directly for our own website administration, service security, account management, or business communications, we may act as an independent controller.
Where legally required, appropriate data processing agreements will govern these relationships.
6. Data Sharing and Third-Party Service Providers
We may share information with authorized infrastructure providers, hosting providers, database or storage services, security vendors, and other technical service providers where necessary to operate our services.
Such sharing must be limited to legitimate service purposes and subject to appropriate confidentiality, contractual, and security requirements.
We may disclose information where required by applicable law, lawful regulatory requests, or to protect the security and integrity of our services.
We do not disclose one merchant's confidential business data to another merchant without appropriate authorization.
TikTok Shop and other third-party platforms operate under their own privacy policies and terms. Our integration services do not replace those policies.
7. Data Storage, Security, and International Transfers
We take a risk-based approach to protecting information against unauthorized access, disclosure, alteration, loss, or misuse.
Our technical and organizational safeguards include encrypted communications, role-based and least-privilege access controls, protection of credentials, access logging, restricted administrative access, and secure backups. We apply storage and access separation to EU user-related data where required by the service configuration.
Access to merchant information is restricted to authorized personnel and systems with a legitimate operational need.
The public website is delivered through Cloudflare Pages and may be served from Cloudflare's global network. Merchant and TikTok Shop API data is hosted and processed in Hong Kong. We disclose any other processing locations and relevant transfer arrangements to affected merchants before they apply.
Where personal information is transferred internationally, we will comply with applicable cross-border data protection requirements and implement appropriate transfer safeguards where required.
No information system can guarantee absolute security. We review security risks and take reasonable corrective action when issues are identified.
If a data security incident occurs, we will investigate and respond according to applicable legal, contractual, and platform notification requirements.
8. Data Retention and Deletion
We retain information only for as long as reasonably necessary to fulfill the authorized purposes for which it was collected, comply with legal obligations, resolve disputes, and maintain service security.
Our standard retention periods are as follows, subject to a longer period where required by law or a merchant agreement:
Merchant account information: For the duration of the service relationship and up to 30 days after account closure or service termination.
Product, inventory, transaction, and analytics records: For the duration of the applicable authorization and up to 90 days after authorization is revoked or the service ends.
Technical and security logs: Up to 90 days after creation, unless needed longer to investigate a security incident or comply with a legal obligation.
Backups: Deleted data may remain in access-restricted backups for up to an additional 30 days before scheduled removal, unless a longer period is legally required.
When a merchant revokes authorization or requests service termination, we will stop collecting new information through the revoked authorization and process existing information according to the applicable retention policy, contractual obligations, and legal requirements.
Information that is no longer required will be deleted, anonymized, or otherwise securely disposed of according to applicable procedures. Backup copies may remain temporarily until their scheduled deletion where legally permitted.
9. Individual Privacy Rights
Depending on the applicable jurisdiction, individuals may have rights to request access to their personal information, correction of inaccurate information, deletion, restriction of processing, data portability, or objection to certain processing activities.
Where processing depends on consent, individuals may have the right to withdraw that consent.
Requests may be submitted to the privacy contact provided below. We will review and respond according to applicable legal requirements.
Where we process information solely on behalf of a merchant, we may refer the request to that merchant or assist the merchant in fulfilling its legal obligations.
Individuals may also have the right to lodge a complaint with a competent data protection authority.
10. Cookies and Website Technologies
Our website may use cookies or similar technologies that are necessary for website functionality, session management, security, and, where enabled, performance analysis.
Where applicable law requires consent for non-essential cookies, we will obtain the necessary consent before using such technologies.
Information about the specific cookies and analytics tools in use will be made available through our website where required.
11. Children's Privacy
Our services are intended for businesses and authorized business users, not children.
We do not knowingly collect personal information directly from children through our business services. If we become aware of inappropriate collection of children's personal information, we will take appropriate steps to address it in accordance with applicable law.
12. Privacy Policy Review and Updates
We are committed to keeping this Privacy Policy accurate and relevant to our actual data processing activities.
Our policy is to review this document at least once every 12 months and whenever material changes occur in our services, data processing practices, applicable legal requirements, or third-party platform obligations.
Material changes will be reflected in an updated version of this Privacy Policy, together with a revised "Last Updated" date.
Where required by applicable law, we will provide additional notice or obtain appropriate consent before implementing material changes.
13. Contact Information
For privacy-related questions, requests, or concerns, please contact:
Company Name: Shenzhen Fangfei Culture Communication Co Ltd
Privacy Contact Email: policy@fangfei.com
Website: https://fangfei-culture-site.pages.dev/
We will review legitimate privacy inquiries and respond in accordance with applicable legal requirements.