Privacy Policy
This Privacy Policy explains how SHIRTKING STORE LLC ("SHIRTKING", "we", "us"), a limited liability company registered in New Mexico, United States, with its address at 1209 Mountain Road PL NE Ste N, Albuquerque, NM 87110, collects, uses, stores, and deletes information when you use the SHIRTKING platform at shirtking.world and its subdomains (the "Service").
1. Who this policy covers
- Account users — merchants and their team members who create a SHIRTKING account.
- Merchant shop data — data we receive from TikTok Shop on a merchant's behalf after the merchant authorizes a connection.
- Buyers — end customers of connected shops. We process limited buyer data solely so the merchant can fulfill orders; buyers are not users of the Service.
2. Information we collect
2.1 Information you give us
- Account details: name, email address, password (stored as a salted hash), company name.
- Billing details: plan, billing contact, and payment records. Card numbers are handled by our payment processor and never stored on our servers.
- Support messages you send us.
2.2 Information received from TikTok Shop with your authorization
When you connect a TikTok Shop through TikTok's official authorization flow, we receive data through the TikTok Shop API limited to the permission scopes shown on TikTok's consent screen. Depending on the scopes you approve, this includes:
| Category | Examples | Why we process it |
|---|---|---|
| Shop profile | Shop name, shop ID, region, authorization status | To display and manage your connected shops |
| Product data | Listings, variants, categories, attributes, images, stock levels, prices | To sync your catalog and update inventory |
| Order data | Order ID, line items, order status, amounts, timestamps | To display and process orders in your queue |
| Buyer delivery data | Recipient name, shipping address, contact details provided for delivery | Solely to generate shipping labels and fulfill the order |
| Fulfillment data | Packages, shipping providers, label files, tracking numbers | To print labels and return tracking to the shop |
| Return data | Return and cancellation requests, reasons, statuses | To let you review and resolve returns |
We do not request scopes we do not use. API access tokens are encrypted at rest and are never shown to any user, including you.
2.3 Information collected automatically
- Log data: IP address, browser type, pages visited, timestamps — used for security and debugging.
- Cookies: strictly necessary cookies for sign-in and session integrity. We do not use advertising cookies.
3. How we use information
- To provide, operate, and maintain the Service.
- To sync listings, process orders, print labels, and manage returns as directed by you.
- To secure accounts, prevent abuse, and comply with legal obligations.
- To respond to support requests and send service notices (not marketing, unless you opt in).
We do not sell personal information. We do not share merchant or buyer data for advertising. We do not use your shop data to compete with you or to benefit any other merchant.
4. How we share information
- TikTok Shop — we send data back to TikTok (for example, tracking numbers and status updates) as required to perform the actions you initiate.
- Shipping providers — recipient and package details required to purchase and print a label, only when you request the label.
- Service providers — cloud hosting and payment processing vendors bound by confidentiality obligations, and only to the extent needed to run the Service.
- Legal — if required by law, or to protect the rights, safety, and integrity of the Service.
5. Data retention and deletion
- Shop data (products, orders, buyer delivery data, returns) is retained while a shop is connected.
- When you disconnect a shop or delete your account, related shop data is deleted from our production systems within 90 days, and from encrypted backups within a further 35 days.
- Buyer delivery data is retained no longer than needed for fulfillment, dispute, and legal record-keeping purposes.
- You may request deletion earlier by writing to support@shirtking.world.
6. Security
- All connections use TLS 1.2 or higher.
- API tokens and shop data are encrypted at rest (AES-256).
- Access inside SHIRTKING is role-based and limited to personnel who need it to operate the Service.
- Inbound webhooks are verified by signature before processing.
7. International transfers
We are a United States company. Our engineering and support operations may access the Service from outside the United States under the same confidentiality and access controls described above. Data is hosted in the United States.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information we hold about you. Merchants can exercise most of these directly in the Service; for anything else, contact us and we will respond within 30 days. Buyers should direct requests to the merchant they purchased from; we will assist the merchant in fulfilling them.
9. Children
The Service is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.
10. Changes to this policy
If we make material changes, we will notify account owners by email and update the date at the top of this page before the changes take effect.
11. Contact
SHIRTKING STORE LLC
1209 Mountain Road PL NE Ste N, Albuquerque, NM 87110, United States
support@shirtking.world