TikuHub智联隐私政策

Contact for privacy, access, correction and deletion requests: liuyandong9528@gmail.com.

We process phone/SMS authentication, assigned-account credentials, account identity, shop identifiers and authorization confirmations, selected product and creator information, invitation content, templates, filters, task progress and necessary security records. Relevant business data is stored by our service and is scoped to the authorized company and shop. Private shop data is not automatically shared with other registered users. The current extension uses the existing signed-in TikTok page session; this is not an Open Platform OAuth verification.

Clicking the seller-page shortcut opens the affiliate page and checks the native shop identity before opening the workspace. Navigation hints stay in device-local extension session storage for at most five minutes. This does not automatically bind shops or start or resume tasks. The extension reads necessary page-accessible shop/region Cookie fields and lets the browser send its normal same-origin TikTok session. It cannot read HttpOnly Cookies and does not upload the TikTok Cookie string or password to TikuHub. TikuHub login tokens are stored in the workbench and, in newer extensions, copied to device-local extension storage to restore a valid login after browser restart or cleared website storage. The copy keeps the original expiry (at most 30 days), stops restoring after sign-out and is not synced to other devices. Short-lived task credentials remain only in extension session storage. Verified phone users may optionally set a password and sign in with their phone number and password. Setting or resetting a password requires SMS verification and invalidates earlier sessions on other devices. Both user-set and assigned passwords are verified using Argon2 password hashes; plaintext passwords are not saved in browser storage or returned by APIs. HTTPS is used for business transmission.

Automation code ships in the extension package. The remote workbench provides the ordinary account interface, forms and task views through an isolated web-origin iframe and a bounded message bridge. Aliyun provides SMS and CAPTCHA services. If AI generation is enabled, the service/provider domain and transferred input are shown before the user confirms a request. Inputs include product description, optional company introduction, commission, sample choices, language and style; private creator lists and TikTok session credentials are not appended. Users may explicitly authorize future generation requests with the current provider. TikuHub stores the provider origin, disclosure version, grant time and revocation time for each account. Authorization can be reviewed or revoked in the AI window; revoked authorization blocks new requests. A changed provider or data-processing disclosure requires confirmation again.

Data is used for the visible service, security, authorized support and applicable legal requirements. We do not sell personal data or use it for unrelated advertising, creditworthiness or lending. TikuHub智联's use and transfer of data received from browsers and related websites adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Business data is retained as required to provide the service, security and legal obligations. Closing the workbench, uninstalling the extension or unlinking a shop does not automatically delete cloud history. Contact us to request access, correction, export or deletion; we verify your authority and explain any required retention. Backups follow the applicable backup lifecycle.

You may decline the initial disclosure, close the workbench, stop tasks, sign out or uninstall. New data purposes or material permission changes require updated disclosure and consent where applicable. Ordinary users and assigned test accounts follow the same business access rules.