Privacy Policy

This Privacy Policy explains how Xvelox ("Xvelox," "we," "us," or "our") collects, uses, stores, and shares information in connection with Affiliate Manager, a web application used to manage affiliate marketing operations, content workflows, product review assets, and related TikTok integrations.

Affiliate Manager is intended for authorized business users. It is not directed to children and is not intended for personal, household, medical, financial, or sensitive consumer profiling use.

Information We Collect

• Account information, such as name, username, email address, role, authentication status, and access logs.
• Business workflow data, such as tasks, projects, product references, affiliate campaign notes, generated assets, and operational metadata.
• TikTok-related data that an authorized user chooses to connect or process through the app, which may include TikTok account identifiers, authorization tokens, scopes granted, creator or shop references, product IDs, campaign metadata, content publishing status, performance metrics, and API responses available under the approved TikTok permissions.
• Technical data, such as IP address, browser type, device information, timestamps, request logs, security events, diagnostics, and error reports.
• Cookies and local storage used for authentication, security, language preferences, theme preferences, and session continuity.

How We Use Information

• Provide, secure, operate, and improve Affiliate Manager.
• Authenticate users, enforce access controls, audit actions, and prevent misuse or unauthorized access.
• Enable requested TikTok integration features, such as account connection, affiliate campaign management, product and content workflows, analytics review, and publishing or reporting actions authorized by the user.
• Maintain logs, debug failures, monitor system health, and comply with applicable legal, platform, and security obligations.
• Communicate administrative, security, compliance, and service-related notices.

TikTok Data

We access TikTok information only after an authorized user grants permission through TikTok or another approved TikTok flow. We use TikTok data only for the features requested by the user and permitted by the approved scopes, TikTok Developer Terms, TikTok policies, and applicable law.

We do not sell TikTok user data. We do not use TikTok data for unrelated advertising, credit eligibility, employment decisions, sensitive profiling, or resale to data brokers. Users can disconnect TikTok access where the product interface provides that option or by contacting us. Revoking access may limit or disable TikTok-dependent features.

Sharing and Service Providers

We share information only as needed to operate Affiliate Manager, comply with law, protect rights and security, or complete user-requested integrations. Service providers may include hosting, storage, authentication, analytics, logging, security, communications, AI processing, and platform integration vendors. These providers may process information only for the services they provide to us.

We may disclose information if required by law, legal process, platform compliance review, security investigation, or to protect Xvelox, users, TikTok, or third parties from fraud, abuse, or harm.

Retention and Security

We retain information for as long as needed to provide the service, maintain business records, satisfy legal or platform obligations, resolve disputes, enforce agreements, and protect security. We use administrative, technical, and organizational safeguards designed to protect information, including access controls, session security, audit logging, and encrypted transport where applicable. No system is perfectly secure, and users should protect their credentials and connected accounts.

Your Choices and Rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding your personal information. You may also request that we disconnect or delete TikTok-related data associated with your account, subject to retention required for legal, security, audit, or platform compliance purposes.

International Processing

Information may be processed in countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. The effective date above identifies the latest version. Material changes will be communicated through the service or another reasonable method.

Contact

For privacy requests or questions, contact Xvelox at contact@xvelox.com.