Privacy Policy

We collect the following categories of information:

• Account information — such as your name, email address, and authentication details, provided when you sign up or sign in.
• Store and content data — products, media, pages, captions, and other content you create, upload, or generate within the Service.
• Connected platform data — when you connect a third-party account (such as TikTok, Instagram, Facebook, YouTube, or Pinterest), we access the information and permissions you authorize. See “Social media connections” below.
• Usage and technical data — such as log data, device and browser information, and how you interact with the Service, used to operate, secure, and improve it.

When you choose to connect a social media account, you authorize Stovima — through that platform’s official authorization flow (OAuth) — to access specific information on your behalf. The exact data depends on the platform and the permissions you grant, and may include:

• Basic profile information — such as your account display name, username, and avatar, used to show you which account is connected.
• Content publishing — the ability to upload or draft posts (images and videos) to your account when you ask Stovima to do so.
• Performance metrics — engagement data for content published through Stovima (such as views, likes, comments, and shares) so we can report analytics back to you.

TikTok specifically. If you connect TikTok, Stovima uses TikTok’s Login Kit to obtain your basic profile information, the Content Posting API to upload videos to your TikTok account or drafts at your direction, and the video list/data permissions to retrieve performance metrics for those videos. Stovima only accesses TikTok data with your explicit authorization and only to provide the features you request. Stovima’s use and transfer of information received from TikTok APIs adheres to TikTok’s Developer Terms and policies. We do not sell TikTok data or use it for advertising to you.

TikTok Ads. If you connect your TikTok Ads account, Stovima uses the TikTok Marketing API — with your explicit authorization — to read advertising performance metrics (such as spend, impressions, clicks, conversions, and ROAS), to create and manage ad campaigns, ad groups, and creatives at your direction, and to send server-side conversion events via the Events API to improve attribution. Access is limited to the ad accounts you authorize. For conversion matching we transmit hashed identifiers (for example, a SHA-256 hash of a customer email) rather than raw values. We do not sell this data or use it to advertise to you, and our use of it adheres to TikTok’s Developer Terms and policies.

We store the access tokens issued by these platforms in encrypted form solely to maintain your connection. You can disconnect any account at any time from your Stovima dashboard, or revoke access directly in the platform’s own settings; doing so stops further access and deletes the stored tokens.

We use the information we collect to:

• Provide, operate, and maintain the Service and its features.
• Publish content to the platforms you connect, at your direction.
• Generate analytics and insights about your content and store performance.
• Authenticate you, secure your account, and prevent fraud or abuse.
• Communicate with you about the Service, including important notices.
• Comply with legal obligations.

We do not sell your personal information. We share information only in the following circumstances:

• Connected platforms — when you direct us to publish content, we send that content to the platform you selected.
• Service providers — trusted vendors that help us operate the Service (such as hosting, database, payment, and AI providers), bound by confidentiality and data-protection obligations.
• Legal and safety — when required by law, or to protect the rights, safety, and security of Stovima, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain your information for as long as your account is active or as needed to provide the Service. When you disconnect a platform, the associated access tokens are deleted. When you delete your account, we delete or anonymize your personal information, except where we are required to retain it for legal, accounting, or security purposes.

We use technical and organizational measures designed to protect your information, including encryption of stored access tokens and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage connected accounts and disconnect them at any time from your dashboard. To exercise other rights, contact us using the details below.

The Service integrates with third parties — including social platforms (TikTok, Meta, YouTube, Pinterest), payment processors, hosting providers, and AI providers. Their handling of your information is governed by their own privacy policies, and we encourage you to review them.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

If you have questions about this Privacy Policy or your data, contact us at contact@stovima.com.