Privacy Policy
This policy explains how Amet Hakeen Media (SSM 202603007216 (003810621-K)), a business registered in Malaysia ("we", "us"), handles personal data in TerokaData, our affiliate analytics service, currently for TikTok Shop (website, API and future mobile apps). If we add other platforms, we will update this policy first. We follow Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, password (stored only as a secure hash), language preference, two-factor settings | You |
| Workspace | Workspace name, members and their roles, invitations | You and your team |
| Uploaded exports | Product, sales and affiliate figures in CSV/Excel files you upload | You |
| Connected TikTok Shop | Shop name and ID, product listings, and daily sales totals per product calculated from your orders | TikTok Shop Open API, with your authorisation |
| Technical | Session and security cookies, IP address and logs needed to keep the service secure | Your browser/device |
| Audit records | Records of sensitive actions (for example connecting a shop, exports, ownership changes) | The service |
Buyer data: TikTok's order data includes your buyers' names, addresses and phone numbers. We read orders only to add up sales per product per day. We never store buyer names, addresses, phone numbers, user IDs or messages.
Market data: TikTok's Bestsellers lists (top products, creators, videos and LIVE sessions) are shown to you live and kept only in a short-lived cache (about 30 minutes). They are not stored in our database.
2. How we use data
- To provide the service: show your products, sales, watchlists and exports to your workspace.
- To keep accounts and workspaces secure, prevent abuse and investigate problems.
- To send service emails (for example email verification, password reset, workspace invitations).
- To meet legal obligations.
We do not sell personal data. We do not use your workspace's data for any other customer. We do not currently send your data to artificial intelligence (AI) providers; if we add AI features we will update this policy first and only use data where the data source allows it.
3. Who can see your data
- Your workspace: members of a workspace can see that workspace's data. Data is never shared with other workspaces.
- Service providers who process data for us under contract, such as hosting, database backup and email delivery providers. They may be located outside Malaysia (for example in Singapore).
- Authorities, when required by law.
4. How long we keep data
- Deleting your account removes your personal data immediately. Shared workspaces must first be handed over or deleted, so your teammates do not lose their data.
- Deleted workspaces can be restored for 30 days, then they and all their data are permanently deleted.
- Disconnecting a TikTok Shop deletes its access tokens immediately. Products and sales already synced stay in the workspace until you delete them or the workspace. You can also revoke our access in TikTok Shop Seller Center.
- Uploaded files are deleted after their rows are imported; the imported figures stay in the workspace.
- Security logs and audit records are kept as long as needed for security and legal purposes.
5. Security
Passwords are hashed, TikTok access tokens are encrypted, connections use HTTPS, and every workspace's data is isolated. Sensitive actions require your password and are recorded. No system is perfectly secure, but we work to protect your data and will notify affected users and authorities of a serious breach as the law requires.
6. Cookies
We use only cookies needed to run the service: a session cookie to keep you signed in, a security (CSRF) cookie, and cookies that remember your language and light/dark appearance. We do not use advertising or tracking cookies.
7. Your rights
Under the PDPA you may ask to access or correct your personal data, withdraw consent, or limit how it is processed. You can update or delete most data yourself in TerokaData's settings. For anything else, contact us — we will respond within 21 days.
8. Children
TerokaData is a business service and is not intended for anyone under 18.
9. Changes
We will post changes on this page and update the date above. Significant changes will also be announced in the service.
10. Contact
Amet Hakeen Media, Malaysia · privacy@terokadata.com
If this policy and its Malay version differ, the English version applies.