TikTok Integration Data Protection Statement
Effective Date: August 26, 2025
Version: 1.0
Applicable To: TikTok Shop Integration Users via yptuan.com Platform
1. Introduction
This Data Protection Statement explains how we handle and protect TikTok Shop merchant data that we access, collect, store, or process through our integration with TikTok Shop APIs. This document is specifically designed to meet TikTok’s USDS compliance requirements and is separate from our general website privacy policy.
We, Yptuan Technology Co., Ltd., operating under the domain www.yptuan.com, are committed to ensuring the security and lawful processing of all TikTok merchant data that is shared with us via authorized access.
2. Purpose of Data Processing
We access TikTok Shop merchant data solely to enable cross-border e-commerce services. Our platform allows merchants to:
-
Authorize their TikTok Shop store via OAuth
-
Synchronize product listings, inventory, orders, and store settings
-
Publish products from our platform to their TikTok Shop
All actions are performed only after explicit authorization by the merchant via TikTok’s OAuth process.
3. Data We Access and Process
Depending on user authorization, we may access and process the following TikTok Shop merchant data:
-
Product information (titles, descriptions, prices, SKUs, images)
-
Inventory and stock status
-
Order information (non-personal order metadata)
-
Store profile and credentials (shop ID, access token)
-
Delivery templates, fulfillment options
We do NOT collect, store, or process any TikTok end-user or customer personal data.
4. Legal Basis for Processing
Our data processing is based on the following lawful grounds:
-
Consent: Merchants explicitly authorize access via OAuth.
-
Contractual Necessity: To deliver platform functionality requested by the merchant.
-
Legitimate Interests: To ensure the secure and efficient integration with TikTok Shop.
5. Data Storage and Transfer
-
Storage Location: TikTok Shop merchant data is stored securely in the United States, utilizing cloud infrastructure (e.g., AWS US-East region).
-
Access Location: Our authorized technical personnel based in China Mainland may access the data strictly for technical support and integration purposes.
All data access is:
-
Logged and monitored
-
Restricted by role-based permissions
-
Enforced under internal access control and security policies
6. Data Security Measures
We have implemented the following safeguards:
-
Data encryption at rest and in transit (HTTPS, TLS)
-
Role-based access control and least privilege principles
-
Endpoint protection and antivirus (including on server platforms like BT Panel)
-
Security baselines: screen locks, password policies, MFA
-
Regular vulnerability assessments and system audits
-
Network protection, firewall isolation, and threat detection
7. Data Retention and Deletion
Merchant data is retained only as long as required to provide services. Upon the termination of authorization or merchant account deactivation:
-
All stored TikTok data is deleted within 90 days
-
Merchants can request earlier deletion by contacting us
8. Merchant Rights
Merchants have the right to:
-
Request access to their stored TikTok merchant data
-
Request correction or deletion of data
-
Withdraw authorization at any time
-
Lodge complaints regarding data handling practices
For all privacy-related inquiries, merchants may contact us at:
📧 zhailiancan@outlook.com
9. Data Sharing and Disclosure
We do not sell, rent, or share TikTok merchant data with third parties. Data may be disclosed only in the following limited scenarios:
-
To comply with legal or regulatory requirements
-
To authorized service providers under strict confidentiality agreements (e.g., for infrastructure hosting)
10. Changes to This Statement
This Data Protection Statement may be updated from time to time to reflect changes in technology, legal requirements, or our data practices. Any changes will be posted with a revised effective date.
Contact Us:
Yptuan Technology Co., Ltd.
曲靖市麒麟区品智科技有限公司
zhailiancan@outlook.com