Privacy and data handling

For TikTok Shop Partner Center, developer, and App Review identity purposes, the legal entity provided is FOUR PISTON AND WHEEL COMPANY.

Current service state

Creator Affiliate OS is in review preparation. It does not currently connect Creator accounts, retrieve TikTok Shop data, publish content, or use unapproved TikTok API scopes.

Public demo and website

The public demo uses synthetic fixtures and temporary page memory only. It does not request sign-in, TikTok credentials, cookies or local storage. Mock notes disappear when the page closes or reloads; Delete all mock session data clears them immediately. Do not type real personal or account information. Cloudflare hosts this public site and may process ordinary request metadata to deliver it; no application analytics or advertising tracker is installed.

Optional product reviewer access

The dedicated product testing login uses a separate synthetic-review account, never a personal TikTok account. A server-side encrypted configuration holds only its salted password verifier and session-signing key. Submitted passwords are checked in memory and are not logged or saved as plaintext. An essential first-party Secure, HttpOnly, SameSite session cookie lasts up to 30 minutes and can access only the mock workspace. Ending the session clears the browser cookie; a copied session would expire within 30 minutes. Public pages and the public demo remain accessible without login. No production secrets, Creator data or TikTok API access are available to this account.

Proposed data after authorization

The first review proposes only basic authorized Creator Affiliate information and permitted collaboration/product discovery information, including related order workflow fields supported by creator.affiliate_collaboration.read. Processing is not enabled. No Showcase write, content publishing, expanded commission API or other scope is requested in this round.

Security and retention

At this review-preparation stage, no Creator authorization has been completed and no TikTok Creator data is being collected or stored by this service. Before any Creator authorization or data processing is enabled, this policy will be updated to describe the actual data handled, retention periods, security controls, and deletion procedure for the released features.

Your choices

You may ask questions or request deletion of information sent to the support contact through Support. There is no currently connected Creator authorization to revoke. A released production service must provide unlinking, access/correction and deletion controls before collecting real Creator data. See Data Deletion Instructions.