Privacy Policy

Adnova (“we”, “us”, “our”) operates the TikTok Shop and TikTok Ads analytics platform available at adnova.vsolu.dev. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the Adnova service.

By registering or using the service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the service.

We collect the following categories of information:

• Account information (user-provided): Email address, display name, and password (stored as a salted hash) when you register an Adnova account.
• TikTok Shop OAuth data: After you authorise Adnova to connect your TikTok Shop, we store the shop ID, shop name, region, and the OAuth access token and refresh token required to retrieve shop data on your behalf.
• TikTok Ads OAuth data: After you authorise Adnova to connect your TikTok Ads account, we store the advertiser ID, advertiser name, currency, region, OAuth access token, and the list of granted permission scopes.
• Daily performance metrics: We sync the following metrics from TikTok APIs each day on your behalf: ad cost (USD and VND), gross revenue, net revenue, number of orders, Return on Investment (ROI), impressions, Cost Per Mille (CPM), Click-Through Rate (CTR), and add-to-cart rate.
• Lark Base integration data: If you choose to connect Lark Base, we store the Lark App ID, Lark App Secret, and the table IDs you designate for report export. This connection is established at your explicit request.

We use the data we collect exclusively to:

• Provide, operate, and maintain the Adnova dashboard and reporting features
• Retrieve TikTok Shop and TikTok Ads metrics on your behalf via the respective APIs
• Display your aggregated cost, revenue, and ROI data in your dashboard
• Push daily and monthly report summaries to your Lark Base spreadsheet (when you request it)
• Authenticate your identity and secure your account
• Send transactional notifications related to the service (not marketing)
• Detect and prevent fraud or Terms of Service violations
• Comply with applicable legal obligations

Adnova is committed to responsible and compliant use of data obtained through TikTok APIs. Specifically:

• Read-only metrics only: We request only read-only API scopes. We retrieve performance metrics (cost, revenue, orders, impressions, etc.) and never write to, modify, or post content on your TikTok accounts.
• No access to user content: We do not access your TikTok videos, follower lists, direct messages, user profiles, or any content beyond the advertising and shop performance metrics explicitly listed in Section 2.
• No behavioral advertising: We do not use any data received from TikTok APIs to build behavioral profiles, retarget users, or serve third-party advertising of any kind.
• No selling or licensing of TikTok data: We do not sell, rent, license, or otherwise transfer TikTok-sourced data to any third party for commercial purposes.
• Purpose limitation: TikTok data is used solely to display reports and analytics to the account holder who authorised the connection.

We do not sell your personal information. We share data only in the following limited circumstances:

• TikTok APIs: We make API calls to TikTok (Shop API and Marketing API) solely to retrieve data you have authorised us to access. No additional data is transmitted to TikTok beyond what is required for authentication and data retrieval.
• Lark Base: If you have enabled the Lark Base integration, we send your aggregated metrics to your designated Lark spreadsheet. This transfer occurs only at your explicit request.
• Legal requirements: We may disclose data if required by a valid legal order, court subpoena, or applicable law.
• Safety and fraud prevention: We may share data to protect against fraud, abuse, or threats to the safety of our users or systems.

We do not integrate analytics platforms, advertising networks, tracking pixels, or data broker services.

Adnova uses exactly two (2) strictly necessary cookies. We do not use analytics cookies, advertising cookies, or any third-party tracking technology.

For full details see our Cookie Policy.

Your data is stored on a Virtual Private Server (VPS) located in Ho Chi Minh City, Vietnam. We apply the following security measures:

• Encryption at rest: OAuth tokens, API secrets, and other sensitive credentials are encrypted using AES-256-CBC before being written to the database.
• Encryption in transit: All communication between your browser and Adnova is protected by HTTPS/TLS.
• Cloudflare CDN: We use Cloudflare as a CDN and DDoS protection layer for traffic routing only. Cloudflare does not store or process your personal data beyond standard proxy operations.
• Access controls: Internal access to production data follows the principle of least privilege.

No system is completely secure. In the event of a security incident affecting your data, we will notify you as required by applicable law.

We retain your data for as long as your account is active and as required by law. When you request deletion, we will complete the process within one calendar month in accordance with GDPR Article 12(3).

For full details on what is deleted and how to request it, see our Data Deletion page.

You have the following rights regarding your personal data:

• Right of access: Request a copy of the data we hold about you.
• Right to rectification: Request correction of inaccurate information.
• Right to erasure:Request deletion of your personal data (“right to be forgotten”).
• Right to restriction: Request that we pause processing of your data.
• Right to data portability: Receive your data in a machine-readable format.
• Right to object: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month as required by GDPR Article 12(3).

Your data is stored on servers located in Vietnam. When we make API calls to TikTok's servers to retrieve your data, that request-response traffic may cross international borders. We do not transfer or replicate your data to any other jurisdiction beyond what is inherent to TikTok API communication and Cloudflare CDN routing.

Adnova is a business analytics tool intended for adults operating TikTok Shop or TikTok Ads accounts. The service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by a prominent notice in the application at least 14 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or the way we handle your data, please contact: