Privacy Policy

1. Scope

This policy applies to the JuBeauty Platform, an internal commerce and social-operations service used by authorized JuBeauty operators. It covers the platform website, its provider connections, and the related authorization, review, approval, and audit functions.

Purchases and customer activity on the JuBeauty storefront are covered separately by the storefront's customer Privacy Policy.

2. Information we handle

Depending on the feature used, the platform may handle:

• operator identity, Shopify session, authorization status, and security or audit records;
• connected provider account identifiers, display names, usernames, granted permissions, and connection status;
• approved media source URLs, media fingerprints, captions, destinations, scheduling instructions, and provider receipts;
• technical information needed to secure and operate the service, such as timestamps, request outcomes, and error diagnostics.

3. TikTok integration data

When an authorized JuBeauty operator connects the store-owned TikTok account, TikTok may provide the data allowed by the permissions the operator grants. The production integration requests:

This can include:

• Open ID, display name, username, avatar, profile links, biography, and verification status;
• follower, following, total-like, and public-video counts;
• recent public-video metadata and available public performance statistics;
• authorization tokens and status needed to perform the approved functions.

JuBeauty does not receive the operator's TikTok password. The platform uses video.upload only to transfer an explicitly approved MP4 to TikTok as an editable inbox draft. The operator must finish and publish the video inside TikTok. The current review flow does not request video.publish and does not use Direct Post.

4. How we use information

JuBeauty uses platform information to:

• verify and display the connected account identity;
• display available account statistics and recent public videos for performance review;
• create, validate, and record explicit operator approval for an exact content-transfer contract;
• upload approved video bytes to TikTok as an editable draft and reconcile the resulting delivery status;
• process signed provider webhooks, including authorization removal and publishing-status events;
• secure, maintain, troubleshoot, and improve the platform.

TikTok data is not sold and is not used for unrelated advertising or profiling of JuBeauty storefront customers.

5. When information is shared

JuBeauty shares information only as needed to operate the platform, comply with law, protect the service, or follow an authorized operator instruction. Recipients may include:

• TikTok and other connected providers when the operator authorizes a request;
• hosting, database, security, and infrastructure providers that process information on JuBeauty's behalf;
• legal or regulatory authorities when disclosure is required by applicable law.

Connected providers process information under their own privacy policies as independent services.

6. Security and retention

JuBeauty applies technical and organizational safeguards appropriate to the platform. TikTok access and refresh tokens are encrypted server-side. OAuth state is short-lived and single-use. Secrets are not exposed through the public website or ordinary operator logs.

Recent TikTok public-video data is requested for the connected dashboard rather than kept as a separate permanent video library. The platform retains connection records, approval contracts, provider receipts, and minimal security or audit information for as long as reasonably needed to operate, protect, and document the service, satisfy legal obligations, and resolve disputes.

No online service is completely secure. JuBeauty reviews its controls and limits access to people and systems that need the information for the purposes described here.

7. Connection choices and deletion

The operator chooses which permissions to grant on TikTok's authorization screen. Access can be revoked through TikTok or by disconnecting the integration in the JuBeauty console. On disconnect, JuBeauty attempts provider revocation and removes usable stored access and refresh tokens. A valid TikTok authorization-removal webhook also disconnects the integration and clears those tokens.

To request access to or deletion of platform information that remains under JuBeauty's control, email support@jubeauty.store. JuBeauty may retain limited records where required for security, legal compliance, fraud prevention, or the establishment and defense of legal claims.

8. Rights, changes, and contact

Depending on location, applicable law may provide rights to access, correct, delete, restrict, or object to certain processing, and to receive a portable copy of certain information. JuBeauty will verify requests before acting on them.

The platform is intended for authorized business operators and is not directed to children. We may update this policy when the platform or legal requirements change. The date at the top identifies the current version.