Privacy Policy

1. Data Controller

The data controller is

2. Scope

This Privacy Policy describes personal data processing within Weblo TTS - the WooCommerce and TikTok Shop integration service.

3. Categories of Data Collected

• User and store administrator account data.
• Order data, statuses, and catalog synchronization data.
• Technical data, system logs, and device information.

4. Data Processed via TikTok Shop API

• Seller, store, and listing identifiers.
• Order, payment, and shipment data shared by TikTok.
• OAuth2 tokens and PKCE authorization session metadata.
• Webhook notifications verified through HMAC signatures.

5. Purposes of Processing

• Provision, maintenance, and improvement of Weblo TTS.
• Synchronization of products, inventory, and orders.
• Security, audit, and legal compliance management.
• Customer support and communication handling.

6. Legal Bases

• Performance of a contract (Article 6(1)(b) GDPR).
• Compliance with legal obligations (Article 6(1)(c) GDPR).
• Legitimate interests (Article 6(1)(f) GDPR).
• Consent where required (Article 6(1)(a) GDPR).

7. Data Sharing

Data may be shared with entities supporting service delivery, including TikTok as the sales platform, hosting providers, analytics tools, and technical support vendors under appropriate agreements.

8. Retention Period

Data is retained for as long as necessary to fulfill the relevant purposes, legal obligations, and defense of claims in line with the retention policy.

9. International Transfers

Where data is transferred outside the EEA, appropriate safeguards are applied, including standard contractual clauses and technical and organizational measures.

10. Data Security

We apply risk-appropriate safeguards, including TLS encryption in transit, access control, event monitoring, and regular security testing.

11. Data Subject Rights

• Right of access, rectification, erasure, and restriction.
• Right to data portability and to object.
• Right to lodge a complaint with a competent supervisory authority.

12. Cookies and Similar Technologies

The service may use necessary, analytics, and functional cookies. Details depend on the store environment and supporting tools configuration.

13. Children's Data

The service is not intended for children. We do not knowingly process personal data of persons under 16 without a valid legal basis.

14. Policy Changes

This policy may be updated. Material changes are communicated in the service or by electronic means.

Contact: [email protected].

TikTok Shop API Addendum

Weblo TTS provides WooCommerce and TikTok Shop integration through the official TikTok Shop API.

• Authentication and authorization are handled through OAuth2 with PKCE.
• Access and refresh tokens are stored and processed under least-privilege controls.
• TikTok webhooks are validated using HMAC signatures before any processing.
• Confidential data is handled in line with TikTok Business Partner Code section 3.11.
• Security incidents are reported to [email protected] within 24 hours and to TikTok as required by the agreement.

Document Approval

This document has been approved by the Management Board of TIME4IT Sp. z o.o.

Version: 1.0

Approval date: 22 June 2026

Contact

For questions regarding this document, security or privacy: