SalesShortcut.ai – Privacy Policy

1.1 Information You Provide

• Name
• Email address
• Phone number
• Account credentials
• Business information
• Message content and communication preferences

1.2 Messaging Data

• Mobile phone number
• Consent timestamp and opt-in source
• Message logs
• Opt-out requests

1.3 Automatically Collected Data

• IP address
• Device information
• Browser type
• Usage data
• Cookies and tracking technologies

10.1 YouTube API Services

SalesShortcut.ai uses YouTube API Services to provide features that connect to your YouTube account and retrieve YouTube content and account data that you authorize us to access. By using these features, you acknowledge and agree that your information will be handled as described in this Privacy Policy.

Please review the Google Privacy Policy and the YouTube Terms of Service, which also govern the use of these features.

Through the YouTube API Services, we may access and store:

• Your YouTube channel identifier and channel name;
• Video titles, descriptions, and related metadata you authorize us to access;
• OAuth authorization tokens required to maintain the connection.

SalesShortcut.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In addition to our normal procedures for deleting stored data, you can revoke SalesShortcut.ai's access to your YouTube data at any time via the Google security settings page.

11.1 Information We Receive from TikTok

When you connect a TikTok account to SalesShortcut.ai, we may receive information that you authorize TikTok to share with us. This may include:

• Your TikTok account identifier, username, display name, profile image, and account type;
• The permissions you granted during authorization;
• Video and post identifiers, captions, thumbnails, publishing settings, publishing status, and error details;
• Comments, replies, commenter usernames, timestamps, engagement information, and moderation status.

SalesShortcut.ai stores the OAuth access tokens and refresh tokens required to maintain the connection. We do not receive or store your TikTok password.

You also provide the following directly to SalesShortcut.ai when you use these features:

• Video files;
• Captions and hashtags;
• Scheduled publication times;
• Reply drafts;
• AI instructions, brand voice, and knowledge-base information;
• Publishing and moderation history.

11.2 Information About TikTok Commenters

When providing comment-management features, SalesShortcut.ai processes publicly available information relating to people who comment on a connected TikTok account, including their public username, profile information made available through TikTok, comment text, replies, timestamps, and related identifiers. People who comment on a connected account are generally not SalesShortcut.ai users and have not created an account with us.

We process this information only to provide comment monitoring, reply drafting, moderation, analytics, security, and related services to the authorized TikTok account owner.

11.3 How We Use TikTok Information

We use TikTok information to:

• Authenticate and maintain the connected account;
• Display the connected account and the videos it owns;
• Retrieve, organize, and display comments;
• Draft, edit, submit, and track comment replies;
• Upload, schedule, publish, and monitor videos;
• Display publishing status and errors;
• Detect spam, abuse, or comments that require attention;
• Generate analytics and activity logs;
• Maintain security and troubleshoot the integration;
• Comply with legal and platform requirements.

SalesShortcut.ai accesses and uses TikTok information only for the purposes described in this Privacy Policy and only within the permissions granted by the account owner.

11.4 AI Processing

SalesShortcut.ai uses artificial-intelligence service providers to analyze selected comments, captions, account information, business information, and other context in order to generate suggested replies, captions, classifications, summaries, and content recommendations. AI-generated content may be inaccurate and should be reviewed before publication.

AI-generated replies and posts are not published automatically unless you have expressly enabled and configured an automation rule for that specific type of action. You can edit, approve, reject, or disable AI-generated suggestions at any time.

Our current AI service provider is Google LLC (Gemini models accessed through Google Vertex AI). We use API arrangements under which the provider does not use customer content to train its models, and under which prompts are retained only for the limited period needed for abuse monitoring and service delivery. A current list of our AI subprocessors is available on request at [email protected].

Comments submitted by TikTok users may occasionally contain health, financial, legal, or other sensitive information. Where that occurs, such comments may be processed by these providers as part of generating a suggested reply.

11.5 Sharing and Service Providers

We may disclose TikTok-related information to hosting, database, storage, security, automation, customer-support, analytics, and artificial-intelligence service providers that process information on our behalf. We require service providers to process the information only for authorized purposes and subject to appropriate confidentiality and security obligations.

When you instruct SalesShortcut.ai to publish a video, submit a reply, or perform another TikTok action, the relevant content and instructions are transmitted to TikTok.

We do not sell TikTok account information, and we do not use TikTok comments for unrelated advertising or independent profiling.

11.6 Retention of TikTok Data

We retain TikTok OAuth credentials while the account remains connected, or until the credentials expire or are revoked. We retain comments, commenter information, uploaded media, captions, reply history, publishing records, and activity logs for as long as reasonably necessary to provide the Services.

After you disconnect a TikTok account or make a valid deletion request, we delete or de-identify TikTok integration data within 30 days, except where retention is required for security, legal compliance, or dispute resolution. Backup copies may persist for up to 90 days before they are overwritten in the normal course of backup rotation.

Security and audit logs recording which account performed which action are retained for up to 12 months for fraud prevention and incident investigation.

11.7 Disconnecting TikTok and Deleting Your Data

You may disconnect your TikTok account at any time, either through SalesShortcut.ai or through TikTok:

• In SalesShortcut.ai, open the integration settings for your business, select the connected TikTok account, and choose Disconnect;
• To request deletion of stored TikTok data, email [email protected] from the address associated with your account;
• In TikTok, revoke SalesShortcut.ai's access at any time from your TikTok account settings.

After disconnection, SalesShortcut.ai stops making new requests on behalf of that account, revokes or invalidates the authorization credentials available to us, and processes the associated data in accordance with the retention and deletion practices described above.

11.8 Your Control and Authorization

TikTok allows you to grant, decline, or later revoke individual permissions. SalesShortcut.ai will not attempt to bypass your selection or to obtain access beyond the permissions you have authorized. If you decline a permission, the features that depend on it will be unavailable, but the remainder of the Services will continue to work.

11.9 Security and International Processing

We protect TikTok integration data using measures including:

• Encryption of data in transit using TLS;
• Encryption of stored OAuth access and refresh tokens at rest;
• Access restricted to personnel who need it to operate and support the Services;
• Logical separation of each customer's data from other customers' data;
• Security logging and monitoring of integration activity;
• A documented process for investigating and responding to security incidents.

Our infrastructure and service providers operate in the European Union and the United States, which means TikTok integration data may be transferred to and processed in those countries. Where information is transferred out of the European Economic Area or the United Kingdom, we rely on appropriate transfer safeguards, including the European Commission's Standard Contractual Clauses.

No method of transmission or storage is completely secure, and we do not claim that our systems cannot be compromised.