Privacy Policy · Storewy

This Privacy Policy explains how Storewy (“Storewy”, “we”, “us”, operated by [Legal Entity]) collects, uses, shares, retains, and deletes personal data when you use www.storewy.comand the related platform (the “Service”). Storewy is a platform for building and operating ecommerce brands, including generating and publishing marketing content to connected social media accounts such as TikTok.

By using the Service you agree to this Policy. If you do not agree, do not use the Service.

1. Who this Policy covers

This Policy applies to operators and team members who hold a Storewy account and use the Service to build, manage, and publish content for ecommerce brands. Storefronts created with Storewy publish their own separate privacy notice to their end customers.

2. Information we collect

Account data. Information you provide when you create and use an account, such as your name, email address, and authentication credentials.
TikTok account data. When you connect a TikTok account, we access basic profile information you authorize through the user.info.basic scope — your TikTok Open ID, username, and avatar — which we use to display and identify the connected account.
TikTok authorization tokens. We receive OAuth access and refresh tokens that let us act on your behalf for the scopes you grant (currently user.info.basic and video.upload). These tokens are stored encrypted at rest.
Content you create. Product information and the marketing media (including AI-generated images and videos) that you create in, and choose to upload through, the Service.
Publicly available trend data. We collect publicly available, non-personal trend signals (for example public hashtag and video engagement metrics) to inform product and content research. We do not collect private TikTok data through this process.
Usage and technical data. Information automatically collected when you use the Service, such as IP address, device and browser type, language settings, and log data, together with essential cookies used to keep you signed in.

3. How we use information

To provide, operate, secure, and improve the Service.
To publish or upload the content you direct us to send to your connected TikTok account(s) using the TikTok Content Posting API.
To display your connected TikTok account and the status of your uploads.
To conduct product and content research using publicly available trend data.
To prevent fraud and abuse, comply with legal obligations, and enforce our Terms of Service.

Where applicable law (such as the EU/UK GDPR) requires a legal basis, we rely on performance of our contract with you, your consent (for example, when you authorize a TikTok connection), and our legitimate interests in operating and securing the Service.

4. How we use data from TikTok

We access data through the TikTok APIs solely to provide the features you request — authenticating your TikTok connection and uploading or publishing content on your behalf. We use this data in accordance with the TikTok Developer Terms of Service and TikTok’s platform policies. We do not use TikTok data for purposes unrelated to the features you authorize, we do not sell it, and we do not use it to build advertising profiles.

5. How we share information

We do not sell your personal data. We share data only with service providers that process it on our behalf to run the Service, under appropriate confidentiality and data-protection terms:

Hosting and infrastructure (e.g. Cloudflare) to serve and operate the platform.
Database and storage (e.g. Supabase) to store account and content data.
AI providers to generate marketing content from the inputs you provide.
TikTok, when you direct us to upload or publish content to your connected account.

We may also disclose data where required by law or to protect the rights, safety, and security of Storewy, our users, or the public.

6. Data retention

We keep account data for as long as your account is active. TikTok authorization tokens are retained only while your TikTok connection is active; when you disconnect an account or revoke access, the associated tokens are deleted and we stop accessing that account. We delete or anonymize data when it is no longer needed, subject to legal retention requirements.

7. Your rights and choices

Access, correct, export, or delete your personal data, and object to or restrict certain processing.
Disconnect TikTok at any time from within the Service, which deletes the stored authorization tokens for that account.
Revoke access directly with TikTok through your TikTok account settings, which immediately ends our ability to act on your behalf.
Withdraw consent where processing is based on consent.

To exercise these rights, or to request deletion of data we obtained through TikTok, contact us at contact@storewy.com. We respond to verified requests as required by applicable law.

8. Security

We protect data with measures including encryption in transit (HTTPS) and encryption at rest for sensitive credentials such as TikTok authorization tokens. No method of transmission or storage is completely secure, but we work to protect your information and review our practices regularly.

9. International transfers

We and our service providers may process data in countries other than your own. Where required, we put appropriate safeguards in place for such transfers.

10. Children

The Service is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from children.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Effective” date above and, where appropriate, notify you.

12. Contact us

For any privacy question or request, contact us at contact@storewy.com.