Privacy Policy

FirstMovers Alert ("we," "us," "our") is a product intelligence and automation service for TikTok Shop affiliates and partners, operated from Bronx, New York, United States. We build data and automation tools that integrate with e-commerce platforms, including TikTok Shop.

For any privacy question or request, contact: omar.firstmovers@gmail.com

This policy explains what information we handle, why, how we protect it, and what rights you have. It applies to our applications, automation workflows, and any integrations we operate on behalf of authorized sellers, creators, or partners.

Platform data. When a seller, creator, or partner authorizes our application, we access data through the platform's official API using scoped OAuth tokens. This may include:

• Product information — titles, images, categories, pricing, inventory
• Affiliate information — commission rates, collaboration status, campaign participation, sample availability
• Affiliate promotion links generated on behalf of the authorizing party
• Aggregate performance metrics such as units sold

Account and contact information. If you contact us or become a client, we hold your name, email address, and business details for the purpose of communicating with you and delivering services.

We do not collect consumer personal data, payment card information, or end-customer records unless a specific authorized integration requires it, in which case it is handled under the safeguards described below.

• To deliver the functionality the authorizing party has asked us to provide
• To synchronize and display product, commission, and affiliate link information to authorized users
• To operate, maintain, secure, and improve our services
• To meet legal and platform-policy obligations

We do not use platform data for advertising, profiling, or any purpose beyond the functionality authorized by the data owner.

We do not sell, rent, or trade any data. We do not share platform data with third parties for their own purposes.

We use managed cloud infrastructure providers to host and run our systems. These providers process data solely on our instruction as service providers and have no independent right to use it. All such infrastructure is located in the United States.

We may disclose information where required by law, or to protect our legal rights.

All data is accessed, processed, and stored on infrastructure located in the United States. We do not transfer platform data outside the United States.

• All data in transit is encrypted using TLS/HTTPS
• Data at rest is encrypted using provider-managed encryption
• API credentials and tokens are stored server-side in encrypted environment variables, never exposed to client applications
• Access is restricted to the sole owner-operator and protected by multi-factor authentication
• Systems are kept patched and dependencies monitored for published vulnerabilities

Our full controls are documented in our Information Security & Data Protection Policy, available on request.

We retain data only as long as necessary to provide the authorized functionality. Upon revocation of authorization, termination of our relationship, or a deletion request, we permanently delete all associated data from production systems and backups within 30 days, and revoke all associated credentials immediately.

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of information we hold about you, and to object to or restrict certain processing.

To exercise any of these rights, email omar.firstmovers@gmail.com. We will respond within the timeframe required by applicable law. We will also assist sellers and platform operators in fulfilling data access, update, or deletion requests from their end users.

In the event of a data breach affecting personal data, we will notify affected parties, the relevant platform operator, and any applicable regulatory authority within 72 hours of discovery, as required by law and platform policy.

Our services are business tools intended for commercial use and are not directed at children. We do not knowingly collect information from anyone under 18.

We review this policy at least annually and will update it as our practices or legal obligations change. The effective date at the top reflects the most recent revision. Next scheduled review: July 12, 2027.