Privacy Policy

Last updated: March 19, 2026

1. Scope

This policy explains how AliTok collects, uses, stores, and discloses personal data when you visit the website, create an account, connect seller systems, or contact AliTok for support. It applies to data processed through the AliTok application and public website.

2. Information We Collect

AliTok collects information you provide directly and information generated through use of the service. This may include:

• Account information such as name, email address, and authentication identifiers
• Organization details, team membership, and authorization settings
• Product, order, shipping, and integration metadata made available by connected platforms
• Support requests, contact messages, and operational logs needed to run the service

3. How We Use Personal Data

AliTok uses personal data only for legitimate business purposes related to providing the service:

• Provide and maintain user accounts, organization workspaces, and connected integrations
• Sync operational data from authorized third-party platforms such as TikTok Shop and AliExpress
• Secure the service, investigate incidents, prevent misuse, and enforce access controls
• Respond to support, privacy, security, and compliance requests
• Comply with contractual, legal, or regulatory requirements

4. Legal Bases and Sharing

AliTok does not sell personal data. Personal data may be processed or disclosed when required to provide the service, comply with law, or protect the platform. Depending on the jurisdiction, the legal basis for processing may include contract performance, legitimate interests, consent, or legal obligation.

• Infrastructure and platform providers that host or secure the service
• Third-party platforms you explicitly connect and authorize
• Professional advisers or authorities where disclosure is legally required

5. Third-Party Integrations

AliTok integrates with external commerce services, including TikTok Shop and AliExpress-related workflows. When you connect an account:

• AliTok requests only the access needed to perform the seller-authorized workflow
• Data received from the platform is used only for the feature set you have enabled
• You may revoke access through the relevant platform or by disconnecting the integration

6. Security Measures

AliTok applies administrative, technical, and organizational measures designed to reduce unauthorized access, disclosure, alteration, or loss. These include:

• TLS-protected traffic and vendor-managed encryption protections for hosted data
• Authentication controls, role-based access restrictions, and tenant isolation
• Secret management through environment variables and restricted server-side credentials
• Security review of changes affecting production access, webhooks, and scheduled jobs

7. Data Retention

AliTok retains personal data only for as long as needed to provide the service, maintain account integrity, resolve disputes, meet legal obligations, or protect against abuse. When an account is closed or a valid deletion request is received, AliTok will delete or anonymize the relevant data within a reasonable period unless retention is legally required.

8. Your Rights

Depending on applicable law, you may have the right to:

• Request access to personal data held about you
• Request correction, deletion, or restriction of processing
• Object to certain processing activities or withdraw consent where applicable
• Request assistance with seller data update or deletion requests

9. Cookies and Basic Analytics

AliTok uses essential browser storage, session management, and limited operational analytics needed to keep the application functional and secure. You may control cookies through your browser, although disabling certain functions may affect the service.

10. International Transfers

AliTok may use infrastructure or support providers located in different countries. Where cross-border transfers occur, AliTok relies on contractual, technical, or organizational safeguards appropriate to the data and jurisdiction.

11. Children's Privacy

AliTok is a business software product and is not directed to children. AliTok does not knowingly collect personal data directly from children.

12. Changes to This Policy

AliTok may update this policy as the product or regulatory requirements change. Material updates will be reflected by revising the "Last updated" date on this page.

13. Contact

For privacy requests, security questions, or seller data assistance, contact AliTok through the public support channel below: