Privacy Policy

Overview

Welcome to Ptech Media ("Company", "we", "us", or "our"). We operate the Ptech Media multichannel e-commerce management platform, available at ptechmedia.com and through related applications (collectively, the "Service").

This Privacy Policy describes how Ptech Media collects, uses, stores, shares, and protects information about you when you use our Service, visit our website, or communicate with us. It also describes your rights and choices with respect to your information.

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please discontinue using our Service.

Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Account Registration: Name, business name, email address, password, phone number, and business address.
• Payment Information: Billing address and payment method details (processed securely by our PCI-DSS compliant payment processor; we do not store full card numbers).
• Communications: Messages, support tickets, emails, and survey responses you send us.
• Professional Information: Company size, industry, website URL, and platforms you sell on.

2.2 Information We Collect Automatically

• Log Data: IP address, browser type, operating system, pages visited, timestamps, and referring URLs.
• Device Information: Device type, device identifiers, and screen resolution.
• Usage Data: Features used, actions taken within the platform, session duration, and error logs.
• Cookies & Tracking Technologies: As described in Section 9 below.

2.3 Information from Third-Party Platforms

When you connect your marketplace accounts to our Service, we collect data through authorized API connections, including:

• TikTok Shop: Shop information, product listings, order data, customer shipping information (names and addresses for fulfillment only), inventory levels, affiliate data, and promotional data.
• Etsy: Shop details, product listings, order data, and fulfillment information.
• eBay: Seller account data, listings, orders, and transaction records.
• Shopify / WooCommerce: Store settings, products, orders, customer data (for fulfillment), inventory, and analytics.
• Amazon: Seller Central data, ASIN listings, orders, and performance metrics.

How We Use Your Information

We use the information we collect for the following lawful purposes:

3.1 Service Provision

• Creating and managing your account
• Synchronizing product listings, inventory, and orders across your connected platforms
• Processing and routing orders to fulfillment services
• Generating analytics reports and performance dashboards
• Sending order confirmation, shipping updates, and service notifications

3.2 Service Improvement

• Analyzing usage patterns to improve platform features
• Debugging and resolving technical issues
• Conducting internal research and development
• Personalizing your experience based on usage patterns

3.3 Business Operations

• Processing subscription payments and managing billing
• Providing customer support and responding to inquiries
• Complying with legal obligations and enforcing our Terms of Service
• Protecting against fraud, abuse, and security threats

3.4 Marketing & Communications (with Consent)

• Sending newsletters and product update emails (opt-in only)
• Informing you about new features, integrations, or promotions
• You may opt out of marketing emails at any time via the unsubscribe link

TikTok Shop API Data

Ptech Media is an authorized TikTok Shop developer and partner. When you connect your TikTok Shop account, we access your store data through TikTok's official API under the following conditions:

4.1 Data We Access via TikTok Shop API

• Shop profile information (name, verification status, region)
• Product catalog data (titles, descriptions, images, prices, stock)
• Order data (order IDs, items, quantities, shipping addresses for fulfillment)
• Shipping and logistics information
• Promotion and campaign data
• Seller performance metrics (with your permission)

4.2 How We Handle TikTok Data

• We access TikTok Shop data solely to provide you with the features of our Service.
• We do not use TikTok customer data for advertising, profiling, or reselling purposes.
• TikTok customer shipping addresses are used only for order fulfillment and are not shared with third parties outside of the logistics chain.
• All TikTok API credentials (access tokens) are encrypted at rest and in transit.
• We revoke API access immediately upon your account deactivation or upon request.

4.3 Compliance with TikTok Developer Policies

Our use of the TikTok Shop API is governed by TikTok's Developer Terms of Service and Data Security & Privacy Review (DSPR) requirements. We maintain compliance with:

• TikTok Shop Partner Center Developer Agreement
• TikTok's Data Security & Privacy Review (DSPR) standards
• Applicable data minimization and purpose limitation requirements
• TikTok's prohibition on unauthorized data sharing or commercialization

Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following limited circumstances:

5.1 Service Providers (Processors)

We work with trusted third-party vendors who process data on our behalf, bound by confidentiality and data processing agreements:

• Cloud Hosting: Infrastructure and storage (e.g., AWS, DigitalOcean)
• Payment Processing: Secure billing (e.g., Stripe) — they handle payment data directly
• Email Communications: Transactional and marketing emails (e.g., SendGrid)
• Analytics: Platform usage analytics (e.g., Google Analytics with anonymization)
• Customer Support: Helpdesk software to manage support tickets

5.2 Legal Compliance

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to:

• Comply with applicable laws or regulations
• Protect the rights, property, or safety of Ptech Media, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before such a transfer and ensure the receiving party is bound by this Privacy Policy.

5.4 With Your Consent

We share data in any other circumstances only with your explicit prior consent.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the duration of your subscription plus 90 days after account closure, to allow re-activation.
• Order & Transaction Data: Retained for 7 years for financial and tax compliance purposes.
• API Access Tokens: Stored encrypted and deleted within 24 hours of account disconnection or deactivation.
• Log Data: Retained for up to 12 months for security and performance analysis.
• Marketing Communications: Retained until you unsubscribe or request deletion.
• Support Communications: Retained for up to 3 years for quality assurance.

When data is no longer needed, we securely delete or anonymize it in accordance with industry standards.

Security

We implement industry-standard technical and organizational security measures to protect your data, including:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2/1.3.
• Encryption at Rest: Sensitive data, including API tokens and passwords (hashed), is encrypted at rest using AES-256.
• Access Control: Role-based access control (RBAC) ensures employees can only access data necessary for their role.
• Two-Factor Authentication (2FA): Available and encouraged for all user accounts.
• Regular Security Audits: We conduct regular vulnerability assessments and penetration testing.
• Incident Response: We have a documented breach notification procedure and will notify affected users within 72 hours of becoming aware of a breach.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

8.1 GDPR Rights (EEA / UK Users)

• Right of Access: Request a copy of personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: Request we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

8.2 CCPA Rights (California Residents)

• Right to Know: Request information about the categories and specific pieces of personal information we collect.
• Right to Delete: Request deletion of personal information (subject to exceptions).
• Right to Opt-Out: We do not sell personal information, so this right is already guaranteed.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to requests within 30 days (GDPR) or 45 days (CCPA). We may ask you to verify your identity before processing a request.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Service. Types of cookies we use:

• Strictly Necessary Cookies: Essential for authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences (language, timezone, settings).
• Analytics Cookies: Help us understand how users interact with our platform (e.g., Google Analytics with IP anonymization).
• Marketing Cookies: Used to show relevant content (only with your consent).

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect the functionality of our Service.

Children's Privacy

Our Service is intended for business users and is not directed to children under the age of 16 (or 13 in the United States). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at [email protected] and we will take steps to delete such information.

International Data Transfers

Ptech Media operates primarily in the United States and Vietnam. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, your information may be transferred to and processed in countries that may not have the same data protection laws as your country.

Where we transfer personal data from the EEA to countries outside the EEA that are not recognized as providing an adequate level of data protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (if the changes are material) at least 30 days before they take effect
• Display a prominent notice on our website for 30 days

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For European users, if you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.