Privacy Policy
Last Updated: October 16, 2026
JoinData (“we,” “our,” or “us”) provides SaaS software for profit analytics and inventory management tailored for TikTok Shop sellers, brands, and agencies. We are committed to protecting your information and maintaining transparency about how we collect, use, and safeguard data.
This Privacy Policy applies to all users of our website (joindata.io), our web application, and our TikTok Shop integrations.
1. Data We Collect
From TikTok Shop (via official OAuth APIs)
When you connect your TikTok Shop account, we may access:
- Orders: IDs, SKUs, product details, timestamps, order value, discounts, refunds, shipping/handling fees.
- Products: SKUs, product IDs, names, pricing, inventory levels, listing metadata.
- Financials: TikTok commissions, transaction fees, taxes, promotions, payouts.
- Advertising: TikTok Ads spend & performance (if authorized).
From you directly:
- Account information: name, email, password (hashed with bcrypt/argon2).
- Business inputs: cost of goods (COGS), supplier info, inventory adjustments, purchase orders.
- Billing details: subscription plan, invoices, payment details (processed securely by Stripe; we do not store card numbers).
- Support communications: messages via email or chat.
Automatically collected
- Device/browser type, IP, approximate geolocation.
- Session data, login timestamps, usage logs, crash/error reports.
- Analytics on feature usage for product improvement.
Cookies
- Essential: authentication, session, security.
- Analytics: usage tracking via Google Analytics and Microsoft Clarity (masked -- no personal data recorded).
- Advertising & referral: Google Ads, Meta Pixel, Meta Conversions API, and affiliate (PromoteKit) technologies. These optional tools are used only after you choose advertising measurement. Meta Pixel is limited to eligible public website pages and does not load inside the signed-in app; confirmed account milestones may be measured server-side only while that choice remains active.
2. Purposes of Processing
We process collected data to:
- Deliver dashboards, profit analytics, inventory tracking, and alerts.
- Provide user support via email (support@joindata.io) and (optionally) chat.
- Improve reliability, security, and features of the platform.
- Ensure compliance with TikTok Developer Terms, GDPR, CCPA, and other regulations.
- Communicate service updates and, with explicit consent, send marketing emails. With your advertising choice, measure campaigns, create retargeting audiences, attribute visits and confirmed account milestones, and deliver more relevant advertising.
3. Legal Basis for Processing (GDPR)
- Contract: to deliver the services you subscribed to.
- Legitimate interests: to improve services, prevent fraud, and ensure security.
- Consent: for optional marketing communications, advertising measurement, retargeting cookies, and audience creation.
- Legal obligations: when required by law or regulator.
4. Data Sharing & Subprocessors
We do not sell personal data. We share information only with trusted subprocessors, each bound by Data Processing Agreements (DPAs):
- Hosting: AWS (secure data centers).
- Payments: Stripe (PCI-DSS certified).
- Analytics, advertising and measurement: Google Analytics (anonymized). Google Ads and Meta, including Meta Pixel and Meta Conversions API, are used only when you choose advertising measurement. Meta may receive website event data, advertising identifiers, and hashed contact information for matching, measurement, audience creation, and ad delivery. We do not send passwords, payment details, or TikTok Shop content through these advertising tools.
- Support: email (support@joindata.io); chat (e.g., Intercom or Crisp).
- Monitoring & error tracking: Sentry (errors) and Datadog (infrastructure monitoring).
5. Security Measures
We follow industry best practices to protect your data:
- Encryption: TLS 1.2+ in transit; AES-256 at rest.
- Passwords: hashed and salted (bcrypt/argon2).
- Access control: Role-Based Access Control (RBAC), least-privilege model, audit logs.
- Monitoring: real-time monitoring, anomaly detection, incident response protocols.
- Backups: encrypted, rotated, retained only as necessary.
- Employee training: regular security & privacy training.
- Testing: penetration tests by independent security experts.
6. Data Retention & Deletion
- Account data: retained while your account is active.
- TikTok data: deleted automatically within 30 days of app uninstall.
- Manual deletion requests: via support@joindata.io
- Backups: purged securely within 60 days of account termination.
- Billing records: retained up to 7 years (tax compliance).
7. Your Rights
Depending on your jurisdiction (GDPR, CCPA, PIPEDA, etc.), you may:
- Access your personal data.
- Rectify incorrect or incomplete data.
- Request erasure (“right to be forgotten”).
- Restrict or object to certain processing.
- Port your data to another provider in machine-readable format.
- Withdraw optional analytics or advertising consent at any time through the Privacy choices control on our website.
You can also manage how Meta uses activity from other businesses in Meta Accounts Center (https://www.facebook.com/off_facebook_activity/) and use industry opt-out tools such as YourAdChoices (https://optout.aboutads.info/).
We respond to verified requests within 30 days. Under CCPA, you may appoint an authorized agent.
8. International Transfers
Your data may be processed in the United States, Canada, or the EU. For transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs), or Adequacy decisions by the European Commission.
9. Children’s Privacy
JoinData is intended for business use and not for individuals under 18. We do not knowingly collect data from minors; if such data is identified, it will be deleted.
10. Data Breach & Incident Response
We maintain a formal incident response plan.
In case of a breach, we notify affected users within 72 hours (GDPR). We cooperate with regulators and take mitigation steps.
11. Complaint Handling
If you believe your privacy rights were violated, you may:
Contact us at support@joindata.io
Contact our Data Protection Officer (DPO) at support@joindata.io
File a complaint with your local Data Protection Authority.
12. Updates
We may update this Privacy Policy periodically. Updates will appear at joindata.io/privacy-policy with a new “Last Updated” date. Significant changes will also be notified via email.
13. Contact
JoinData Support
support@joindata.io
JoinData (“we,” “our,” or “us”) provides SaaS software for profit analytics and inventory management tailored for TikTok Shop sellers, brands, and agencies. We are committed to protecting your information and maintaining transparency about how we collect, use, and safeguard data.
This Privacy Policy applies to all users of our website (joindata.io), our web application, and our TikTok Shop integrations.
1. Data We Collect
From TikTok Shop (via official OAuth APIs)
When you connect your TikTok Shop account, we may access:
- Orders: IDs, SKUs, product details, timestamps, order value, discounts, refunds, shipping/handling fees.
- Products: SKUs, product IDs, names, pricing, inventory levels, listing metadata.
- Financials: TikTok commissions, transaction fees, taxes, promotions, payouts.
- Advertising: TikTok Ads spend & performance (if authorized).
From you directly:
- Account information: name, email, password (hashed with bcrypt/argon2).
- Business inputs: cost of goods (COGS), supplier info, inventory adjustments, purchase orders.
- Billing details: subscription plan, invoices, payment details (processed securely by Stripe; we do not store card numbers).
- Support communications: messages via email or chat.
Automatically collected
- Device/browser type, IP, approximate geolocation.
- Session data, login timestamps, usage logs, crash/error reports.
- Analytics on feature usage for product improvement.
Cookies
- Essential: authentication, session, security.
- Analytics: usage tracking via Google Analytics and Microsoft Clarity (masked -- no personal data recorded).
- Advertising & referral: Google Ads, Meta Pixel, Meta Conversions API, and affiliate (PromoteKit) technologies. These optional tools are used only after you choose advertising measurement. Meta Pixel is limited to eligible public website pages and does not load inside the signed-in app; confirmed account milestones may be measured server-side only while that choice remains active.
2. Purposes of Processing
We process collected data to:
- Deliver dashboards, profit analytics, inventory tracking, and alerts.
- Provide user support via email (support@joindata.io) and (optionally) chat.
- Improve reliability, security, and features of the platform.
- Ensure compliance with TikTok Developer Terms, GDPR, CCPA, and other regulations.
- Communicate service updates and, with explicit consent, send marketing emails. With your advertising choice, measure campaigns, create retargeting audiences, attribute visits and confirmed account milestones, and deliver more relevant advertising.
3. Legal Basis for Processing (GDPR)
- Contract: to deliver the services you subscribed to.
- Legitimate interests: to improve services, prevent fraud, and ensure security.
- Consent: for optional marketing communications, advertising measurement, retargeting cookies, and audience creation.
- Legal obligations: when required by law or regulator.
4. Data Sharing & Subprocessors
We do not sell personal data. We share information only with trusted subprocessors, each bound by Data Processing Agreements (DPAs):
- Hosting: AWS (secure data centers).
- Payments: Stripe (PCI-DSS certified).
- Analytics, advertising and measurement: Google Analytics (anonymized). Google Ads and Meta, including Meta Pixel and Meta Conversions API, are used only when you choose advertising measurement. Meta may receive website event data, advertising identifiers, and hashed contact information for matching, measurement, audience creation, and ad delivery. We do not send passwords, payment details, or TikTok Shop content through these advertising tools.
- Support: email (support@joindata.io); chat (e.g., Intercom or Crisp).
- Monitoring & error tracking: Sentry (errors) and Datadog (infrastructure monitoring).
5. Security Measures
We follow industry best practices to protect your data:
- Encryption: TLS 1.2+ in transit; AES-256 at rest.
- Passwords: hashed and salted (bcrypt/argon2).
- Access control: Role-Based Access Control (RBAC), least-privilege model, audit logs.
- Monitoring: real-time monitoring, anomaly detection, incident response protocols.
- Backups: encrypted, rotated, retained only as necessary.
- Employee training: regular security & privacy training.
- Testing: penetration tests by independent security experts.
6. Data Retention & Deletion
- Account data: retained while your account is active.
- TikTok data: deleted automatically within 30 days of app uninstall.
- Manual deletion requests: via support@joindata.io
- Backups: purged securely within 60 days of account termination.
- Billing records: retained up to 7 years (tax compliance).
7. Your Rights
Depending on your jurisdiction (GDPR, CCPA, PIPEDA, etc.), you may:
- Access your personal data.
- Rectify incorrect or incomplete data.
- Request erasure (“right to be forgotten”).
- Restrict or object to certain processing.
- Port your data to another provider in machine-readable format.
- Withdraw optional analytics or advertising consent at any time through the Privacy choices control on our website.
You can also manage how Meta uses activity from other businesses in Meta Accounts Center (https://www.facebook.com/off_facebook_activity/) and use industry opt-out tools such as YourAdChoices (https://optout.aboutads.info/).
We respond to verified requests within 30 days. Under CCPA, you may appoint an authorized agent.
8. International Transfers
Your data may be processed in the United States, Canada, or the EU. For transfers outside the EEA, we rely on Standard Contractual Clauses (SCCs), or Adequacy decisions by the European Commission.
9. Children’s Privacy
JoinData is intended for business use and not for individuals under 18. We do not knowingly collect data from minors; if such data is identified, it will be deleted.
10. Data Breach & Incident Response
We maintain a formal incident response plan.
In case of a breach, we notify affected users within 72 hours (GDPR). We cooperate with regulators and take mitigation steps.
11. Complaint Handling
If you believe your privacy rights were violated, you may:
Contact us at support@joindata.io
Contact our Data Protection Officer (DPO) at support@joindata.io
File a complaint with your local Data Protection Authority.
12. Updates
We may update this Privacy Policy periodically. Updates will appear at joindata.io/privacy-policy with a new “Last Updated” date. Significant changes will also be notified via email.
13. Contact
JoinData Support
support@joindata.io
.svg)
.svg)
.png)