Privacy and Data Security Policy

Operator

This website and the LitFox service are operated by Qingdao Gaoyi Zhenxuan Network Technology Co., Ltd. (“LitFox”, “we”, “us”, or “our”). You can contact us at support@taocredit.xyz.

Data we process

We process account, store, product, advertising, creative, and reporting data only when a customer provides the data or grants customer authorization through an approved platform connection. This may include advertiser account information, campaign reporting, TikTok Shop product context, creative metadata, and workflow content created inside LitFox.

For TikTok Shop data, we limit collection to authorized shop information, product catalog data, product status, category, price, inventory, product images or URLs, OAuth tokens, and related operational data needed to provide LitFox features. We do not request payment card data, buyer payment information, government IDs, or other unnecessary sensitive personal data.

How we use data

We use authorized data to provide analytics dashboards, creative performance insights, reporting workflows, content optimization recommendations, script and storyboard workflows, and customer support. We do not sell TikTok data or use it for unrelated third-party advertising purposes.

Information Security Program

We maintain internal information security policies and operating procedures covering production access, credential handling, data protection, incident response, employee responsibilities, and secure operation of the LitFox service. These procedures are reviewed and updated as our services, legal requirements, and platform requirements evolve.

Access Control

Access to production systems, customer data, platform data, credentials, and OAuth tokens is limited to authorized personnel based on job responsibilities and the principle of least privilege. Administrative access is restricted, reviewed when roles change, and removed when no longer needed.

Data Classification and Encryption

We maintain internal data classification and handling procedures for customer data, platform credentials, OAuth tokens, media assets, logs, and operational data. Data is encrypted in transit using HTTPS/TLS. Persistent media files are stored using AWS-hosted storage controls such as Amazon S3 server-side encryption, and database access is restricted to production services and authorized administrators.

Credentials and access tokens

Access tokens, refresh tokens, API credentials, and other sensitive data are stored in backend systems with restricted access. Customers may disconnect connected accounts, and we will stop using the related access tokens after disconnection or expiration.

Data sharing

We share data only with service providers that help operate LitFox, such as hosting, storage, analytics, and support infrastructure, and only as needed to provide the service. We do not disclose customer TikTok data to unrelated third parties for resale or independent advertising use.

Incident Response

We maintain an internal incident response procedure covering responsible operators, escalation paths, investigation, containment, remediation, customer or platform notification, and post-incident review. Suspected security or privacy incidents can be reported to support@taocredit.xyz.

Data Deletion and Retention

Customers can request access, correction, disconnection, update, or deletion of data controlled by LitFox. When a contractual relationship ends, we delete or de-identify customer data under our control, including authorized shop and product data and stored credentials, subject to applicable law, contractual obligations, platform requirements, and limited retention needed for security, audit, billing, or legal purposes.

Contact

Customers can request access, correction, disconnection, or deletion by contacting support@taocredit.xyz. We will review requests according to applicable law, contract requirements, and platform policies.