Effective August 17, 2026. This policy explains what information Salty Ecom collects, why we collect it, how we use and share it, and the choices you have. It applies to saltyecom.com and to the ecommerce operations services we provide, including work performed through advertising and commerce platform APIs.
01 / Who we are →02 / What we collect →03 / Platform data →04 / Creator Network →05 / How we use data →06 / Sharing →07 / Cookies →08 / Retention & deletion →09 / Your rights →10 / Security & children →11 / Changes & contact →01 / Who we are →02 / What we collect →03 / Platform data →04 / Creator Network →05 / How we use data →06 / Sharing →07 / Cookies →08 / Retention & deletion →09 / Your rights →10 / Security & children →11 / Changes & contact →
OPERATING BRIEF / 11 CHAPTERS
Scroll to process the system
01Who we are
INPUT / SIGNAL
The business behind this policy.
Salty Ecom provides ecommerce operations services — TikTok Shop management, paid media, creator management, and connected analytics — for its own brands and for clients. Salty Ecom is the data controller for information collected through this website, and acts as a service provider or processor when handling data on behalf of client businesses. For any privacy question or request, contact brendan@saltyecom.com.
02What we collect
INPUT / SIGNAL
Information you provide and information collected automatically.
We keep collection intentionally limited.
↳Contact and business information you choose to send us — name, email address, company, and the details you include when applying to work together or emailing us.
↳Technical data collected automatically when you visit the site — IP address, browser and device type, pages viewed, and referring URLs — via our hosting provider and privacy-respecting analytics.
↳Business and advertising data connected to the services we operate, described in the platform data section below.
03Platform data
INPUT / SIGNAL
Data received through Meta, TikTok, and other platform APIs.
To operate advertising and commerce programs, we integrate with third-party platform APIs, including Meta (Facebook and Instagram) Marketing APIs, TikTok Business and TikTok Shop APIs, Shopify, Amazon, and Google. Through these integrations we may access campaign and ad performance data, audience and engagement metrics, order and fulfillment data, product catalog data, and creator collaboration data.
↳We use platform data only to provide and improve the services for the account that authorized access — reporting, campaign management, creative optimization, order operations, and analytics.
↳We do not sell platform data, use it to build advertising profiles for unrelated third parties, or transfer it except as needed to provide the services or as required by law.
↳Our use of data received from each platform complies with that platform's terms, including Meta's Platform Terms and Developer Policies and TikTok's Business API and TikTok Shop terms.
↳Access tokens and credentials are stored securely, scoped to the minimum permissions required, and revoked when an engagement ends.
04Creator Network
INPUT / SIGNAL
Data from creators who sign in with TikTok.
Creator Network is our invitation-only app for TikTok creators who partner with brands we manage. Creators sign in with TikTok Login Kit. With their permission we receive their TikTok open ID, display name, avatar, username and profile link, and the list of their own videos with view, like, comment and share counts.
↳We use this data to create the creator's account, match them to the brand workspace that invited them, show them how their own videos perform, and attach results from paid promotion the brand runs on their content.
↳Access is read-only. The app never posts, comments, messages, or changes anything on a creator's TikTok account.
↳Access and refresh tokens are stored encrypted, scoped to those permissions only, and deleted when the creator leaves a workspace, disconnects TikTok, or revokes access in their TikTok settings.
↳Creators can ask for a copy or deletion of their Creator Network data at any time by emailing brendan@saltyecom.com.
05How we use data
INPUT / SIGNAL
Purposes for processing.
We use the information described above to respond to inquiries and applications, provide and administer our services, measure and improve campaign and site performance, maintain security and prevent abuse, and comply with legal obligations. We do not sell personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.
06Sharing
INPUT / SIGNAL
When information is disclosed.
We share information only with service providers who process it on our behalf (hosting, analytics, email, and the advertising and commerce platforms named above), with a client when the data belongs to that client's business accounts, when required by law or legal process, or in connection with a business transfer. Service providers are bound to use the data only to provide their services to us.
07Cookies
INPUT / SIGNAL
Cookies and similar technologies.
This website uses only the cookies and similar technologies needed for the site to function and for aggregate analytics. Advertising campaigns we run on platforms like Meta and TikTok may use those platforms' pixels and cookies on client sites under the platforms' own policies; consult the relevant platform's privacy policy for details and opt-out tools.
08Retention & deletion
INPUT / SIGNAL
How long we keep data, and how to have it deleted.
We retain personal information only as long as needed for the purposes above or as required by law, then delete or de-identify it. Platform data is retained only for the duration of the authorization that granted access.
↳To request deletion of your data, email brendan@saltyecom.com with the subject 'Data deletion request'. We will confirm and complete verified requests within 30 days.
↳If you disconnect or revoke a platform authorization (for example in Meta or TikTok account settings), we delete associated platform data from our systems within 30 days of the revocation.
09Your rights
INPUT / SIGNAL
Access, correction, and choice.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, email brendan@saltyecom.com; we will respond within the timeframe required by applicable law and will not discriminate against you for exercising them.
10Security & children
INPUT / SIGNAL
Safeguards and age limits.
We use reasonable administrative and technical safeguards — encryption in transit, access controls, and least-privilege credentials — to protect the information we hold. No method of transmission or storage is completely secure. Our website and services are directed at businesses and are not intended for children under 13; we do not knowingly collect information from children.
11Changes & contact
OUTPUT / DECISION
Updates to this policy.
We may update this policy as our services or legal requirements change, and will post the revised version here with a new effective date. Material changes to how we handle platform data will be reflected before they take effect. Questions, requests, or complaints: brendan@saltyecom.com.