This Privacy Policy explains how COKESIR processes information when teams use our commerce analytics, AI insights, TikTok creator statistics, and content publishing tools.
1. Information we process
We process account names, password hashes, sessions, team membership and roles; shop names, markets, currencies and time zones; daily sales, orders, visitors, conversion, add-to-cart, bounce, affiliate, advertising, refund and traffic metrics; product report periods, exact product IDs, exposure, click, add-to-cart, conversion, refund and channel metrics; product diagnostic baselines, monitoring snapshots and recorded optimization actions; import metadata; analysis reports and audit logs; product SKUs, titles, descriptions, pricing, inventory quantities, product images and downloadable product packages; operator assignments, commission rules, settlement currencies, exchange rates, customer-service and live-host metrics, supervisor assignments and performance rankings; and order dates, order numbers, buyer names, SKUs, quantities and tracking numbers entered or imported by authorized team members; creator handles, display names, business contact details, cooperation status, commission settings, notes and monthly attributed content, views, orders, sales and commission data assigned to a shop; supplier names, contacts, phone numbers, email addresses, addresses and payment terms; purchase requests, purchase orders, Seller SKUs, quantities, unit prices, tracking numbers, carriers, expected arrivals, payment status and due dates; bank-receipt references, receivables, payables, purchase payments, expenses, reconciliation matches and month-close snapshots; and exception tasks, synchronization run status and backup metadata. COKESIR does not request or store online-banking passwords through these ERP features.
When you authorize TikTok, we may process account identifiers, display name, avatar, authorized statistics, OAuth tokens, scopes, posting settings, video metadata, publish IDs, status and webhook events. For authorized advertising accounts, this may also include advertiser, campaign, ad group and ad identifiers; spend, impressions, clicks, engagement, conversions, cost and return metrics; reporting periods; Business Center assets, members, roles and permissions; approved creative metadata; configured measurement events and attribution results; lawful first-party audience references; catalogs, products and product sets; authorized TikTok Store performance; and Creator Marketplace profiles, collaboration records and campaign results. Selected files upload directly from your browser to TikTok; COKESIR does not retain the video bytes or imported spreadsheet files. Product-report workbooks are parsed in the browser and only the structured metrics required for diagnosis and monitoring are submitted. Product images and product packages are retained only to provide catalog and download features.
2. How we use information
We use information to authenticate users, enforce team permissions, administer manually activated customer subscriptions, authorization periods and enabled modules, maintain shop records, aggregate performance, generate requested rule-based or AI analysis, operate TikTok features, secure the service, prevent abuse and provide support. We do not sell personal data or use TikTok data for unrelated advertising or unrelated purposes. Procurement, finance, task and system data is used to operate authorized purchasing, stock receiving, reconciliation, exception management, auditing, backup and recovery workflows. Commission estimates and rankings are visible only according to team roles; other operators' commission amounts are not disclosed to ordinary members.
3. Legal bases
Where applicable, processing relies on consent, performance of our agreement, legitimate interests in providing and securing the service, and legal obligations. You may withdraw consent without affecting earlier lawful processing.
4. AI processing and providers
For AI analysis, we send only an anonymous shop reference, aggregated current and comparison-period metrics, and rule-analysis results to our AI provider. We do not send account names, TikTok IDs, credentials, tokens, or original spreadsheet uploads. When you actively use pricing-parameter recognition, the selected settlement screenshot is sent to our AI provider to extract visible fee amounts. COKESIR does not store that screenshot after the request. Crop buyer names, order numbers and other unnecessary personal information before uploading. We may also use vetted hosting, infrastructure and security providers under contractual restrictions.
5. International transfers
Information may be processed outside your country. Where required, we use appropriate contractual and organizational safeguards.
6. Retention and deletion
We retain workspace data while the relevant team uses the service and as reasonably needed for security, dispute resolution and law. Expiry or suspension of a paid authorization stops access and synchronization but does not automatically delete workspace data or TikTok authorization; access may be restored after renewal. TikTok credentials remain only while connected. On a valid request or authorization removal, we delete or de-identify applicable data unless limited retention is legally required; backups expire through normal rotation. Processed product-report details are normally retained for three months, while compact snapshots for products actively selected for monitoring may be retained longer to support before-and-after comparisons. Server database backups are normally retained for up to 95 days.
7. Security
Measures include HTTPS, encrypted TikTok token storage, one-way password hashing, secure cookies, role-based access, audit logs and restricted access. No system is absolutely secure.
8. Your rights and choices
Depending on location, including under GDPR and CCPA/CPRA, you may request access, correction, deletion, restriction, objection, portability, withdrawal or appeal. You may disconnect TikTok in COKESIR or revoke access in TikTok settings. We do not discriminate for exercising privacy rights.
9. Children and changes
The service is not directed to children and we do not knowingly collect children’s personal information. We may update this Policy and will publish the new effective date.
10. Contact
For privacy requests, contact COKESIR at 878872221kl@gmail.com. We may verify identity and authority.