Privacy policy
A design draft, not legal text.
The structure and tone are finished; the content needs a lawyer to read it before this is published.
Legal
Last updated: 9/14/2026
This policy explains what data Tikgraph collects from people who use the platform, why, how long it is kept and how you exercise your rights. It does not cover the public TikTok Shop content we process. That is section 4.
1. Who the controller is
Tikgraph is the controller of the personal data handled on the platform. The registered entity and company number go here before publication. Data protection contact: privacy@tikgraph.com.
2. What we collect
The minimum needed to run the account and bill for usage:
- Sign-up: name, email and a password stored as a scrypt hash. Signing in with Google gives us a name and an email.
- API usage: route called, time, status, latency and which key was used. Kept for 90 days.
- Billing: what the payment provider returns to us. Card details never touch our servers.
- Support: the content of messages you send us and the history of the conversation.
3. Legal bases and purposes
Sign-up and usage data are processed to perform the contract: authenticating you, applying your plan limit and billing. Security and fraud-prevention logs rest on legitimate interest. Marketing messages only with consent, revocable in one click.
We do not sell personal data and we do not use your API traffic to train models.
4. About the TikTok Shop data
Our catalogue is assembled from public storefront information: product, price, category, video and creator handle. We do not collect, store or make available any personal buyer data: no name, no address, no individual purchase history.
Creator handles are treated as public professional data. A creator may request removal of their aggregated profile at privacy@tikgraph.com.
5. Sharing and subprocessors
We use third parties for cloud infrastructure, payment processing, transactional email and image delivery. The subprocessor list, with hosting country, is published before launch. Data may be transferred outside Brazil under standard contractual clauses.
6. Retention
Account data is kept while the account exists. Usage records, 90 days. The credit ledger is never deleted: it is what reconstructs a balance and answers a billing dispute. Tax records follow the statutory period.
7. Your rights
You may ask for confirmation of processing, access, correction, anonymisation, portability, deletion and information about sharing. We answer within 15 days. Much of it you can do yourself in the dashboard; the rest by email.
8. Changes to this policy
We give 30 days notice by email and in the dashboard when a change affects how we handle your data.