AutoSales Agent · Privacy

Privacy Policy

Effective date: 26 August 2026 · Last updated: 26 August 2026

1. Who this policy applies to

This policy covers the AutoSales Agent website, dashboard, support channels, and integrations that link to it. If your employer or another organization provides your workspace, that organization may control the business data it asks us to process. In that case, contact your workspace administrator for questions about its instructions and retention settings; you can still use the rights and deletion process below.

2. Information we collect

• Account and workspace information: name, email address, workspace or member identifier, role, preferences, and information you provide to request support.
• TikTok OAuth data: the TikTok user identifier (including an app-scoped identifier such as open_id where returned), display name, basic profile information, and account or profile metadata that TikTok makes available for the scopes you explicitly approve.
• Authorized content and analytics: post or video metadata, captions, publishing status, and performance or analytics data only when the enabled TikTok product and scopes make that information available and the workflow requests it. We do not need to collect an entire TikTok account to provide a limited workflow.
• Connection and security data: provider name, granted scopes, connection status, expiry or revocation state, request timestamps, audit events, and error information. OAuth tokens are handled as encrypted server-side secrets and are not displayed in the browser or support replies.
• Technical and support information: limited device, browser, IP, diagnostic, and message information needed to secure the service, troubleshoot a request, and respond to you.

3. How information reaches us

Information comes from you, from your workspace administrator, from TikTok after you authorize a scope, and from service providers that help us operate a connection. If Composio is used for the OAuth connection, Composio may return an opaque connection reference, status, and provider metadata needed to complete the requested workflow. We do not ask you to send a TikTok password, client secret, access token, or refresh token to us in a form or chat.

4. How we use information

• Provide the sales assistant, content workflow, publishing, inbox, and analytics features that you or your workspace enable.
• Maintain, refresh, revoke, and troubleshoot an authorized connection.
• Protect accounts and workspaces, prevent abuse, investigate security events, and keep an audit trail of sensitive connection actions.
• Answer support requests, communicate service changes, and comply with applicable legal obligations.

We do not use TikTok OAuth data to sell personal information, build unrelated advertising profiles, or share it with a third party for its own marketing. We do not make automated decisions with legal or similarly significant effects about you solely from the connected data.

5. When we share information

We share information only when needed for the requested service or a lawful obligation:

• Connected providers: TikTok and, when selected, Composio receive the requests or connection data needed to authenticate and operate the workflow you initiate.
• Service providers: vetted hosting, database, security, monitoring, email, and support providers may process data on our instructions under confidentiality and security commitments.
• Legal and safety requests: we may disclose the minimum information required by a valid legal process or to protect users, the service, or the public. We do not create a backdoor or provide unrestricted access.

We do not sell, rent, or trade personal information.

6. Storage and security

We use TLS for data in transit, access controls and workspace/member isolation, encrypted storage for OAuth secrets, and redaction of credentials from browser responses and routine logs. Access to sensitive data is limited to authorized personnel and service components that need it for the stated purpose. No online service can promise perfect security, so please protect your account and report suspected misuse promptly.

7. Retention

We retain account, connection, content, and analytics data for as long as your workspace needs the enabled service, subject to the workspace's configuration and our legal, security, and audit obligations. When you revoke a connection, we stop using the revoked authorization and remove the associated tokens and connection data according to the deletion process and applicable retention requirements. We may retain a minimal deletion record, such as a request ID and completion time, when necessary to prove that a request was completed and to prevent duplicate processing.

8. Your choices and rights

• Revoke TikTok access: open TikTok account settings and remove AutoSales Agent from the connected apps or authorized-apps area. The exact menu wording may change as TikTok updates its product.
• Disconnect in AutoSales Agent: use the Integrations screen when that control is available. If Composio is the connection layer, use the provider disconnect flow shown there.
• Request access, correction, or deletion: email supportvietnamtravelmap@gmail.com from the address associated with the workspace and describe the account, connection, and scope of the request.
• Withdraw consent: revoking the provider authorization stops future API access, but it does not by itself delete data already stored in the workspace. Send the deletion request as well if you want complete removal.

We may ask for reasonable information to verify the requester and protect a workspace from an unauthorized deletion. We aim to respond without undue delay and, where applicable, complete a verified deletion request within 30 days. We will explain if a lawful exception requires retaining a limited record.

9. International processing

AutoSales Agent and its service providers may process information in countries where we or they operate. When information crosses a border, we use contractual, technical, and organizational safeguards appropriate to the service and the applicable law.

10. Children

AutoSales Agent is a business service and is not directed to children. Do not create an account or connect a platform account on behalf of a child without the permissions required by applicable law.

11. Changes to this policy

We may update this policy when our service, providers, or legal obligations change. We will publish the revised version at this URL with a new effective date. Material changes will be highlighted in the service or communicated to the workspace where appropriate.

12. Contact

For privacy questions, data-rights requests, or a TikTok connection deletion, contact supportvietnamtravelmap@gmail.com. Never email a password, client secret, access token, or refresh token.