Personal Information Protection Standard

Command Center may collect the following information:

• Name
• Email address
• Command Center account information
• Shop and seller information
• TikTok Shop identifiers
• Product and SKU information
• Inventory information
• Order and sales information
• Revenue and transaction-related information
• Shop performance and analytics information
• Information necessary to authenticate and maintain your connection to TikTok Shop
• Basic technical information necessary to operate and secure our Services

We only collect information that is reasonably necessary to operate Command Center and provide our analytics services.

You directly provide Command Center with most of the personal information we collect.

We collect and process information when you:

• Register for a Command Center account
• Provide your name or email address
• Log in to your account
• Connect your TikTok Shop account
• Contact us for support
• Submit feedback or communicate with us
• Use or view our website or application

Command Center may also receive data indirectly when you authorize a third-party service to provide information to us.

Our primary third-party source of shop information is TikTok Shop.

When you connect your TikTok Shop account, information is provided to Command Center through authorized TikTok Shop APIs based on the permissions you grant.

Command Center collects your information so that we can:

• Create and manage your Command Center account
• Authenticate you when you access the Services
• Connect your authorized TikTok Shop account
• Provide sales and revenue analytics
• Provide inventory analytics
• Provide product and SKU analytics
• Provide shop performance information
• Generate reports and dashboards
• Maintain and improve the Services
• Diagnose technical problems
• Provide customer support
• Protect our systems and users against fraud, abuse, or unauthorized access
• Comply with applicable legal requirements

TikTok Shop information is used to provide services to the shop owner or authorized user who connected the shop.

Command Center does not sell TikTok Shop data or personal information.

Command Center does not use TikTok Shop information for unrelated advertising or independent marketing purposes.

Command Center stores information using systems and service providers selected to operate our website, application, databases, authentication systems, and analytics services.

We take reasonable technical and organizational precautions designed to prevent unauthorized access, disclosure, alteration, loss, or destruction of information.

These protections may include:

• Access controls
• Authentication requirements
• Encryption in transit
• Encryption at rest where supported
• Restricted database access
• Secure storage of credentials and API secrets
• Logging and monitoring
• Software and security updates
• Separation of production credentials from public source code

Access to personal information and TikTok Shop data is limited to individuals and systems that reasonably require access to operate Command Center.

Command Center takes reasonable measures designed to protect the confidentiality and integrity of information processed through the Services.

Employees, contractors, developers, and administrators with access to protected information are expected to:

• Access information only when necessary for authorized work
• Keep passwords and credentials confidential
• Avoid sharing user information with unauthorized individuals
• Protect authentication tokens and API credentials
• Report suspected security incidents
• Follow appropriate security procedures when handling personal information

Access tokens, passwords, encryption keys, database credentials, and similar security information must not intentionally be exposed through public repositories or publicly accessible portions of the Services.

No internet-based system can guarantee absolute security. However, Command Center works to maintain safeguards appropriate to the information we process.

Command Center may contact users regarding their accounts, the Services, security notices, important product updates, or other operational communications.

If Command Center sends optional promotional or marketing communications, users may request to stop receiving those communications.

Operational, security, legal, or account-related communications may still be sent when necessary to provide or protect the Services.

Command Center does not sell TikTok Shop data to advertisers.

Command Center wants users to understand the rights they may have regarding their personal information.

Depending on applicable law, those rights may include:

• The right to access – You may request information about the personal information Command Center maintains about you.
• The right to correction – You may request that Command Center correct information you believe is inaccurate or incomplete.
• The right to deletion – You may request deletion of your personal information, subject to applicable legal or legitimate retention requirements.
• The right to restrict processing – Where applicable, you may request restrictions on certain processing of your personal information.
• The right to object to processing – Where applicable, you may object to certain uses of your personal information.
• The right to data portability – Where applicable, you may request a copy of certain information you provided to Command Center in a reasonably usable format.
• The right to withdraw authorization – You may disconnect your TikTok Shop account or otherwise revoke Command Center's authorization to access your shop.

To exercise a privacy right, contact us at:

We may need to verify your identity or authority over the applicable account before completing a request.

Cookies are small files that may be stored on your computer or device when you visit a website.

Cookies and similar technologies can be used to maintain website functionality, remember a user session, and understand how a website or application is being used.

Command Center may use cookies and similar technologies for purposes such as:

• Keeping users signed in
• Maintaining authenticated sessions
• Remembering user preferences
• Providing website functionality
• Protecting user accounts
• Detecting suspicious activity
• Understanding how the Services are being used

We do not use cookies to obtain TikTok Shop information that a shop owner has not authorized us to access.

Command Center may use the following types of cookies:

Functionality Cookies

These cookies help the website recognize users, maintain sessions, and remember certain preferences.

They may be necessary for features such as account login and navigation.

Security and Authentication Cookies

These cookies or similar technologies may help authenticate users and protect Command Center accounts against unauthorized access.

Analytics Cookies

If enabled, these cookies may help us understand how users interact with our website so that we can improve performance and usability.

You may configure your browser to refuse or delete cookies.

Disabling certain cookies may prevent some parts of Command Center from working correctly, particularly features involving authentication, sessions, or account preferences.

Your browser's settings generally provide controls for viewing, deleting, blocking, or restricting cookies.

The Command Center website or application may contain links to websites or services operated by third parties.

This Personal Information Protection Standard applies to information processed by Command Center.

If you visit another website or use another service, you should review that organization's privacy policy and terms.

Command Center is not responsible for the privacy practices of independent third-party websites.

Command Center integrates with third-party services, including TikTok Shop.

You must authorize Command Center before we access information from your TikTok Shop account.

The information we receive depends on the permissions granted through TikTok Shop.

When you authorize a connection, Command Center may receive information necessary to provide analytics regarding:

• Products
• Inventory
• Orders
• Sales
• Revenue
• Transactions
• Shop performance
• Other authorized commerce information

You may revoke your authorization or disconnect your shop.

After authorization is revoked, Command Center will stop requesting new TikTok Shop information associated with that authorization.

Command Center is an independent service and is not owned or operated by TikTok.

Your use of TikTok Shop remains subject to TikTok's own terms, policies, and privacy practices.

Command Center keeps personal information and TikTok Shop information only for as long as reasonably necessary to:

• Provide the Services
• Maintain your account
• Provide requested analytics
• Protect the security of the Services
• Resolve disputes
• Meet applicable legal obligations

When you disconnect a TikTok Shop account, Command Center will stop collecting new information through that authorization.

Stored access credentials associated with a revoked connection will be removed or invalidated as appropriate.

If you close your Command Center account or submit a valid deletion request, associated personal information and shop information will be deleted or anonymized when it is no longer reasonably necessary to retain it.

Certain limited information may be retained where required for security, legal compliance, dispute resolution, or other legitimate obligations.

You may request deletion by contacting:

Access to personal information is limited according to business need.

Command Center follows the principle of least privilege, meaning users, employees, contractors, and systems should only receive the level of access reasonably necessary to perform their authorized functions.

Access should be removed when it is no longer required.

Sensitive credentials such as:

• Passwords
• Database credentials
• API keys
• Access tokens
• Refresh tokens
• Encryption keys

must be appropriately protected and must not knowingly be disclosed to unauthorized individuals.

If Command Center becomes aware of suspected unauthorized access, disclosure, loss, alteration, or destruction of personal information, we will investigate the incident and take reasonable measures to contain and address it.

Depending on the circumstances, these actions may include:

• Disabling compromised accounts
• Revoking credentials or tokens
• Correcting affected systems
• Investigating unauthorized activity
• Restoring systems or data
• Notifying affected parties where appropriate or legally required
• Taking measures intended to prevent a similar incident

Security concerns may be reported to:

Command Center keeps its privacy and information-protection practices under review.

We may update this Standard when our Services, technology, data practices, legal requirements, or third-party integrations change.

When this document is updated, the Effective Date at the beginning of the document will also be updated.

Material changes may also be communicated through our website, application, email, or another reasonable method.

If you have questions about this Personal Information Protection Standard, the information Command Center maintains about you, or your privacy rights, please contact us.

If you believe your personal information has been handled in violation of applicable privacy law, you may have the right to submit a complaint to the privacy or regulatory authority responsible for enforcing privacy law in your jurisdiction.

We encourage users to contact Command Center first so that we have an opportunity to review and address their concerns.

Contact Command Center: