Privacy Policy

1. Operator and scope

GMV Compass is operated by 北京佳视宏硕文化传媒有限公司, registered at 北京市海淀区中关村东路18号1号楼13层C-1608. This notice covers our website, merchant workspace, browser extension, and supporting backend. Security and privacy coordination is assigned to 赵峰, Co-founder and CTO.

Contact: zhaofeng2007@gmail.com. Registered users may also submit a data request in the merchant workspace.

2. Information and purposes

We process merchant account email addresses, password hashes, authentication sessions, registration requests, and support requests to provide and secure the service. When a merchant authorizes TikTok Shop access, we process authorization credentials, shop identifiers, granted permissions, and authorized product information to retrieve product cards and provide analysis.

The extension stores its GMV Compass login session and preferences locally. It reports an installation identifier, extension version, configured shop label, and limited supported-page context for service operation. It does not require TikTok account passwords or browser cookie access. Product and shop analysis is initiated by the user; it is not permission to collect unrelated browsing history.

The initial service focuses on shop and product analysis. Product writes are disabled by default per shop and require merchant enablement plus confirmation of each specific request. The current write workflow supports drafts, not automatic publication. We do not require buyer order, payment, address, or customer-service data for the product-write workflow.

3. Shop performance data (orders, fulfillment, returns, finance)

If you ask the service to show shop performance, we retrieve your own shop’s order, fulfillment, return and settlement records from the TikTok Shop APIs you authorized, in order to compute and display operational metrics such as sales, order counts, average order value, on-time shipment rate, seller-caused cancellation rate, return rate, refunds and settlements, together with period-over-period comparisons.

We strip customer-identifying fields at ingestion. The following fields are removed before any storage, display, log or analysis, and are never retained: buyer name, nickname, avatar, email and messages; recipient address; payment method name; delivery option name; address-change flags; and buyer user identifiers. The order-side fields we keep are limited to order status, order status timestamps, monetary totals, cancellation reason and initiator, fulfillment and shipment attributes, product identifiers/SKUs belonging to your own catalogue, and sample/replacement flags.

We use this data only to produce performance metrics and recommendations for your own shop. We do not sell it, do not use it for advertising, and do not use it to train our own general-purpose AI models. Aggregated metrics may be computed with, but never share, another merchant’s data.

Retention: daily performance snapshots and the SKU-to-product mapping needed to attribute returns are retained while your account is active and are removed when you disconnect the shop or delete your account. No customer-identifying field is included in those records. Shop performance figures and our own stage/health estimates are informational only and are not an official TikTok Shop rating.

If you do not want shop performance data processed, do not connect a shop for this purpose; disconnecting stops collection. Read-only analysis never writes back to your shop.

4. AI and service providers

When you request AI analysis, relevant product text, attributes, SKU information and selected product images are sent to DeepSeek. Do not include customer personal information or secrets in product inputs. AI output may be inaccurate; verify facts before use. AI output does not itself execute a product change.

We use Tencent Cloud for the Singapore backend, Resend for registration email delivery, and Tailscale for restricted operational connectivity. TikTok Shop receives authorized API requests. Emailing our contact address also involves the email provider. Provider processing locations, retention and contractual terms must be considered separately from the backend location; we do not represent that all processing occurs only in Singapore or that external AI providers have zero retention. Contact us for current provider details before supplying data subject to location restrictions.

We use service data to provide, support and secure GMV Compass, not to sell merchant data or train our own general-purpose AI models. External provider handling is governed by the applicable provider terms and our arrangements with them; we do not claim a provider no-training guarantee without verification.

5. Access and protection

Website API connections use HTTPS. OAuth credentials and MFA secrets are encrypted at the application layer and restricted to backend access. Administrative data access requires password authentication and a verified second factor. Merchant endpoints enforce account ownership. These measures reduce risk but do not guarantee absolute security; cloud, endpoint and backup controls are maintained separately.

6. Retention and deletion

We retain account and connection data while needed for the service. On local disconnect, use of that connection stops and its credentials and shop mappings are removed from active storage. Local disconnect does not remove the authorization record at TikTok; use TikTok Shop authorization management to revoke it there.

Account deletion removes active account, session, device, registration and connection records. Minimal pseudonymous security and deletion records are retained for up to 90 days. Inactive device telemetry is removed after 30 days. Write previews expire after five minutes and are purged by the hourly cleanup task. Product API responses and analysis outputs are not intentionally retained as a server-side product history by this release.

Controlled maintenance backups expire within 30 days. Deletion records must be reapplied before restored data is returned to service. Requests concerning provider-held data are handled with the provider; local deletion does not by itself erase provider records. Any necessary legal retention is limited, documented and explained to the requester where permitted. We do not promise immediate deletion of every backup or third-party copy.

7. Your requests

You may request access, correction or deletion through the authenticated workspace or contact email. We verify identity and authority using proportionate information, handle requests within applicable deadlines, and explain any lawful limitations. Do not send passwords, tokens or identity documents unless a justified verification process specifically requires them. For data handled on a seller's behalf, we assist the seller with relevant requests.

8. Incidents, updates and audience

Our response procedure assigns responsibility for investigating incidents, containing impact, and notifying affected sellers and other required parties in accordance with applicable obligations. This service is intended for business users and not directed to children. We update this notice when practices materially change and identify the effective date.