This internal policy sets out how ADSMCP AI LLC (“we”), the company that operates GMVize, protects personal data. Our public Privacy Policy tells customers and website visitors what we collect and why; this policy sets the rules we follow to keep those promises. It applies to everyone who works on GMVize and to every system that processes GMVize data.
1. Our role
For data from TikTok Shop accounts our customers connect, we act as a service provider (processor) to the seller: we process it only to provide GMVize to that seller, on their instructions and within TikTok Shop's policies for partner applications. For our own website, early-access applicants and customer account contacts, we decide how data is used (controller).
2. Principles
- Purpose: we use TikTok Shop data only to provide GMVize features to the shop that authorized us. We never sell it, use it for advertising, or use one customer's data to serve another.
- Minimisation: we request only the TikTok Shop permissions our features need, and store only the fields we use. We do not store buyers' names, addresses, contact or payment details.
- Accuracy: shop data is refreshed from TikTok Shop on a schedule rather than edited by hand.
- Storage limitation: data is kept only as long as section 5 allows.
- Security: data is protected as set out in our Information Security Policy.
3. Personal data we process
| Data | Why | Where it comes from |
|---|---|---|
| Seller account details: seller and shop name, shop identifiers, region | Sign-in and showing the right shop | TikTok Shop authorization |
| Public creator profile fields: username, display name, follower count, audience summary, GMV range | Creator search, shortlists and reports | TikTok Shop affiliate APIs |
| Affiliate orders by creator: order identifiers, product, quantities, sales and commission amounts | Creator GMV and sample reports | TikTok Shop affiliate APIs |
| Collaborations, sample requests and messages the seller sends through GMVize | Invites, sample review and follow-ups | The seller's actions in GMVize |
| Early-access form answers and work email | Contacting applicants | Our website form |
4. Where data is stored and processed
- GMVize runs on Cloudflare's global network; requests may be handled at the Cloudflare location nearest the user.
- The application database is hosted by Cloudflare in the European Union, in a database created under Cloudflare's EU jurisdiction so that it is stored and processed only within the EU. Early-access submissions are stored in the same database.
- The service is administered remotely by our founder, currently located in the People's Republic of China, using a company device, encrypted connections and multi-factor authentication. Administrative access is limited to operating the service, support the customer asked for, and incident response.
- Where data from the UK or EU is transferred to other countries, we rely on our providers' transfer safeguards, such as standard contractual clauses.
5. Retention and deletion
- TikTok Shop data is kept only while the shop is connected to GMVize.
- When a seller disconnects GMVize — in GMVize, by removing the app in TikTok Shop Seller Center, or when the authorization expires — we delete that shop's data from active systems. Deletion runs automatically when we detect the disconnection and completes within 30 days.
- When our contract with a customer ends, we delete all data we hold for them in the same way.
- Copies in backups are overwritten within a further 30 days.
- Early-access submissions are kept until the person asks us to remove them, or for up to 24 months.
- We keep a minimal deletion record (shop identifier, date, reason) to show that deletion happened. It contains no other shop data.
6. Requests from individuals, sellers and TikTok Shop
- Requests to access, correct, delete or export personal data go to support@gmvize.com or through our Data deletion page. We respond within 30 days.
- Where we act for a seller, we help the seller, and TikTok Shop where its policies require, to answer requests about data we hold, and act on their instructions to delete, update or provide data within 10 business days.
7. Service providers
We share personal data only with providers that help us run GMVize (listed in our Privacy Policy), under terms that require them to protect it. We review a provider's security and privacy terms before using it.
8. Breaches
Suspected personal data breaches are handled under our Incident Response Policy, including notifying TikTok Shop and affected sellers within 72 hours.
9. Accountability
- We have not appointed a statutory Data Protection Officer; as a small company we are not currently required to. The founder is responsible for data protection and can be reached at support@gmvize.com.
- Anyone given access to GMVize data in future must read and accept this policy first.
- This policy is reviewed at least once a year, and whenever we add a feature that processes new kinds of personal data.