Privacy Policy

1. Introduction

TikSync Pro Ltd ("we", "us", "our") operates tiksyncpro.com and the TikSync Pro application (collectively, the "Service"). This Privacy Policy describes what personal data we collect, how we use it, who we share it with, and what rights you have over your data.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Our registered address and primary point of contact for data matters is: support@tiktokpro.com. For the purposes of GDPR, TikSync Pro Ltd is the data controller.

2. Information We Collect

We collect the following categories of personal and business data:

2.1 Account Data

Full name and email address (provided at registration)
Password (stored as a bcrypt hash — we never store your plaintext password)
Account role and subscription plan
Date of account creation and last login

2.2 Business & Credentials Data

TikTok Shop API credentials (access tokens and seller IDs)
Shopify API keys and store URLs
WooCommerce consumer keys, secrets, and store URLs
All API keys and credentials are stored AES-256 encrypted at rest. We decrypt them only during active sync operations.

2.3 Product, Order & Inventory Data

Product listings, SKUs, variants, prices, and stock levels synced from your connected platforms
Order data including order IDs, quantities, shipping addresses, and statuses (synced for sync-accuracy purposes)
Inventory adjustment logs and sync history

2.4 Usage Data

Pages and features you visit within the application
Sync job logs (timestamp, duration, items synced, errors)
Feature interaction data (e.g., which sync rules you create)
Error and crash reports for product improvement

2.5 Payment Data

Subscription plan and billing history (amounts, dates)
PayPal transaction IDs (for reference purposes)
We do not store card numbers, CVVs, or bank account details. All payment processing is handled by PayPal. See PayPal's privacy policy at paypal.com/us/legalhub/privacy-full.

2.6 Social Login Data

If you register or log in using Google, Facebook, or TikTok OAuth, we receive the following from those providers:

Display name
Email address
Provider user ID (used to link your account)
Profile photo URL (optional, used for your account avatar)

We do not receive your social media passwords or access to post on your behalf through OAuth login.

2.7 Technical Data

IP address (logged on login and for security purposes)
Browser type and version
Operating system and device type
Session cookies and CSRF tokens
Referring URL

3. How We Use Your Data

We use the data we collect for the following purposes:

Provide the Service: Authenticating your account, executing sync jobs between your connected platforms, and delivering the core TikSync Pro functionality.
Transactional communications: Sending sync alerts, trial expiry reminders, billing receipts, and critical service notifications to your registered email address.
Customer support: Responding to your support requests and diagnosing issues using sync logs and account data.
Product improvement: Analysing aggregated usage patterns to identify bugs, improve performance, and develop new features.
Security: Detecting and preventing fraud, unauthorised access, and abuse of the Service.
Legal compliance: Fulfilling our obligations under applicable laws, including tax record-keeping and responding to lawful requests from authorities.

We rely on the following legal bases under GDPR for processing your personal data:

Contract performance — processing necessary to provide the Service you signed up for
Legitimate interests — product improvement, security, and fraud prevention
Legal obligation — compliance with applicable laws
Consent — where we have requested and received your explicit consent (e.g., optional marketing emails)

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We share data with the following categories of third parties solely to operate the Service:

PayPal Inc. — payment processing. Privacy Policy
Google LLC — OAuth authentication and Google Fonts (font delivery). Privacy Policy
Meta Platforms Inc. (Facebook) — OAuth authentication only. Privacy Policy
TikTok Ltd / ByteDance — OAuth authentication and TikTok Shop API integration (your authorised store data). Privacy Policy
Shopify Inc. — Shopify API integration (your authorised store data). Privacy Policy
WooCommerce (Automattic Inc.) — WooCommerce REST API integration (your authorised store data). Privacy Policy
Email provider (SMTP) — transactional email delivery (sync alerts, billing notifications). Data shared is limited to your email address and the content of transactional messages.

We may also disclose your data to law enforcement or regulatory authorities if required by law, or to protect the rights, property, or safety of TikSync Pro Ltd, our users, or the public.

5. Data Retention

Active accounts: We retain your account data, credentials, and product/order data for as long as your account is active.
Deleted accounts: When you delete your account, we purge your personal data within 30 days. Some anonymised aggregate data may be retained for analytical purposes.
Sync logs: Detailed sync job logs are retained for 90 days, then automatically purged.
Audit logs: Security and access audit logs are retained for 12 months to support fraud investigation and legal compliance.
Billing records: Financial records (subscription history, PayPal transaction IDs) are retained for 7 years to comply with tax and accounting obligations.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data. Most data can be updated directly in your account settings.
Right to erasure ("right to be forgotten"): You can request deletion of your personal data, subject to legal retention obligations.
Right to data portability: You can request your data in a machine-readable format (JSON or CSV) for transfer to another provider.
Right to restriction of processing: You can ask us to restrict how we process your data in certain circumstances.
Right to object: You can object to processing based on legitimate interests. We will cease unless we have compelling legitimate grounds to continue.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at support@tiktokpro.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (e.g., the ICO in the UK at ico.org.uk).

7. Your Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
Right to delete: You may request deletion of your personal information, subject to certain exceptions permitted by law.
Right to opt out of sale: We do not sell your personal information and have no plans to do so.
Right to non-discrimination: We will not discriminate against you (e.g., by denying services or charging different prices) for exercising your CCPA rights.

To submit a CCPA request, email support@tiktokpro.com with the subject line "CCPA Request". We will respond within 45 days.

8. Cookies

We use a small number of essential cookies to operate the Service. We do not use advertising or behavioural tracking cookies. For full details on the cookies we use and how to control them, please read our Cookie Policy.

Essential cookies (session state and CSRF tokens) cannot be opted out of, as they are required for the Service to function. You can disable all cookies in your browser settings, but this will prevent you from logging in.

9. Data Security

We take the security of your data seriously and employ the following measures:

Passwords: Hashed using bcrypt with a strong work factor. We never store or transmit plaintext passwords.
API keys & credentials: Stored encrypted using AES-256. Decrypted only in memory during active sync operations.
Transport encryption: All traffic between your browser and our servers is encrypted via HTTPS (TLS 1.2+).
Access control: Application and database access is restricted to authorised personnel on a need-to-know basis.
Backups: Data is backed up regularly. Backups are encrypted and stored securely.
Monitoring: We monitor for unusual access patterns and potential security threats.

No system is 100% secure. In the event of a data breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law (within 72 hours under GDPR where feasible).

10. International Data Transfers

TikSync Pro Ltd may store and process your data in the European Union and the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Transfers to providers certified under equivalent frameworks

Third-party providers (PayPal, Google, TikTok, etc.) process data in accordance with their own international transfer mechanisms. Links to their privacy policies are provided in Section 4 above.

11. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at support@tiktokpro.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes — such as new categories of data collected or new sharing arrangements — we will notify you by email at least 30 days before the changes take effect. The updated policy will always be available at tiksyncpro.com/legal/privacy.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

13. Contact Us

For any questions, data requests, or privacy concerns, please contact us:

Email: support@tiktokpro.com
Company: TikSync Pro Ltd
Response time: We aim to respond to all privacy requests within 30 days.