Privacy Policy

At ZufaTech, we operate the TikTok Ads Connector (referred to as "the App" or "ZufaTech Connector"). We are committed to protecting the privacy and security of your data. This Privacy Policy describes how we access, collect, use, and process your information when you connect your TikTok Ads account to our App to read ad accounts and measure campaign performance in Google Looker Studio.

Strict Privacy Guarantee: The App accesses your data using read-only API calls. We do not store, copy, share, sell, or monetize your campaign details or advertising metrics. Your data remains strictly within your session context and Google Looker Studio environment.

1. Information We Access via TikTok APIs

When you authorize the App using your TikTok Ads account, we request your explicit authorization to access data via TikTok's Marketing API. The permissions we request include:

• advertiser.read: Allows the App to read your TikTok Ads advertiser accounts, campaigns, ad groups, and individual ad parameters.
• Performance Metrics: Allows the App to retrieve analytical insights and performance metrics (e.g., impressions, reach, click-through rate, cost-per-click, conversion rates, spend, CPM, and video engagement stats) for your ad accounts.
• Advertiser ID: Used solely to identify which ad account to query — not stored beyond your session.

2. How We Use Your Information

We process the accessed data strictly for the following purposes:

• To display and aggregate your TikTok Ads campaign metrics in Google Looker Studio.
• To assist you in measuring ad performance, conversion rates, and Return on Ad Spend (ROAS).
• To generate reports and visualizations for your digital marketing optimization.
• To display your data within Google Looker Studio in your own environment. ZufaTech does not have access to your Looker Studio reports or workspaces.

We do not use your data to display advertisements to you, nor do we build profiles based on your campaign metrics for marketing purposes.

3. Data Storage and Retention

Our infrastructure is designed to avoid unnecessary storage of personal data:

• No Server-Side Storing: Your TikTok Marketing API access tokens and performance statistics are processed in real-time via Google Apps Script. They are stored securely in Google's per-user PropertiesService — never on ZufaTech servers.
• Short-Lived Cache: A performance cache of up to 6 minutes may be held within Google Apps Script's CacheService to reduce API calls. This expires automatically and is accessible only to you.
• Token Revocation: Once you disconnect the App or revoke access in TikTok, all associated tokens are invalidated immediately.

4. Data Sharing and Third-Party Disclosure

We do not sell, rent, trade, or share your data with third parties. All data retrieved through the TikTok Marketing API is kept strictly confidential and remains in your possession. We do not integrate with third-party analytical companies that scan your TikTok metrics.

5. Your Rights and Data Control

You have full control over your data and access settings:

• Revoking Access: You can disconnect the App at any time by navigating to your TikTok account Settings > Security > Authorized Apps, locating Campaign Performance, and clicking Remove. You can also disconnect directly from the Looker Studio data source settings.
• Data Deletion Requests: Because we do not store your data on our servers, there is no database from which to delete your information. However, if you believe we hold any persistent information, you can check our Data Deletion Instructions page or contact us at info@zufatech.com.

6. Security

We use industry-standard Secure Socket Layer (SSL/HTTPS) encryption to secure the transmission of all tokens and API calls between your browser, Google's infrastructure, and TikTok's Marketing API endpoints. OAuth 2.0 tokens are stored only within Google's secure PropertiesService — never transmitted to or stored on ZufaTech servers. We continuously review our security measures to prevent unauthorized data exposure.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We recommend checking this page periodically to stay informed about how we are protecting your data.

8. Children's Privacy

Our App is not directed at children under the age of 13. We do not knowingly collect, store, or process personal data from minors. If you believe a minor has used our App, please contact us at info@zufatech.com and we will take immediate action.