Privacy Policy

1. Controller and contact

ANKH DOMINION CORPORATION LTDA, CNPJ 61.287.974/0001-92, is responsible for the processing described in this policy unless another arrangement is expressly stated.

Registered office: Rua Mistral, 332, Edifício The Point, Sala 209A EMX, Jardim Bom Clima — Despraiado, Cuiabá — MT, 78048-222, Brazil. Privacy and support contact: [email protected].

2. Scope

This policy covers visitors to the public website, users of the application, authorized advertiser representatives, TikTok account holders who authorize supported functionality, support contacts, and individuals whose information appears in legitimate advertising-business records.

3. Information we process

Account and contact information: name, work email, company, role, account preferences, support messages, and related identifiers.

Authorization and integration information: application-specific user identifiers, advertiser IDs, Business Center IDs, TikTok account identifiers, granted permission scopes, access and refresh tokens, token expiry, authorization status, and revocation status.

Advertising operations data: campaigns, ad groups, ads, budgets, statuses, campaign settings, creative metadata, catalogs, products, product sets, pixels, events, custom conversions, diagnostics, and supported reporting metrics.

Technical and security information: IP address, device and browser information, timestamps, request identifiers, error logs, security events, session information, and records needed to prevent abuse and troubleshoot the service.

4. Sources of information

• Information provided directly by users.
• Information returned by TikTok after authorization.
• Information generated through the user's use of the service.
• Security and technical information generated by servers, browsers, and infrastructure providers.
• Public or business records, where permitted by law.

5. Purposes and legal bases

We process information to provide the services requested, authenticate users, connect authorized accounts, execute user-initiated actions, produce reports, maintain security, troubleshoot errors, provide support, improve reliability, protect legal rights, and comply with law.

Depending on the context and the applicable law, processing may rely on performance of a contract or pre-contractual steps, compliance with a legal obligation, legitimate interests, consent, or another lawful basis.

6. TikTok data and API-specific handling

TikTok data is accessed only after authorization through the official process, and only within the scopes approved for the application and granted by the user. We use that data to deliver the advertising-management functionality the user requested.

Specifically:

• We do not sell TikTok data.
• We do not use TikTok data for unrelated consumer profiling.
• We do not ask users to provide TikTok passwords to us.
• We do not access unauthorized accounts or assets.
• We do not use the API to bypass platform review, enforcement, verification, or payment controls.

7. Service providers and disclosures

We may disclose information to hosting, database, security, email, logging, support, professional-advisor, and infrastructure providers necessary to operate the service. We may also disclose information when required by law, to protect rights or safety, during a legitimate corporate transaction, or on the user's instructions or with their consent.

Service providers are expected to process information only for the contracted purpose and to apply appropriate safeguards.

8. International processing

The service may be used globally and may rely on providers located outside the user's country. Where required, we apply appropriate contractual, organizational, or legal safeguards to international transfers.

9. Retention

Retention depends on the type of information, the connected service, operational necessity, security requirements, disputes, and legal obligations. OAuth credentials are retained only while needed to maintain an authorized connection, and are removed, revoked, or made unusable after disconnection wherever technically possible.

Security, accounting, audit, and dispute records may be kept for longer where reasonably necessary or legally required.

10. Security

We use technical and organizational measures including encrypted transport, server-side secret storage, restricted administrative access, rate limiting, security headers, monitoring, dependency review, and encrypted storage for retained authorization credentials. No method of storage or transmission is completely secure.

11. Privacy rights

Subject to applicable law, individuals may request confirmation of processing, access, correction, deletion, portability, information about sharing, restriction, objection, revocation of consent, or review of certain automated decisions. We may need to verify identity and authority before fulfilling a request.

Data subjects in Brazil may exercise the rights provided by the Lei Geral de Proteção de Dados Pessoais (LGPD), subject to its conditions and exceptions.

12. Disconnection and deletion

Users may revoke TikTok authorization through the relevant TikTok settings, and may request deletion from Ankh Corp Ads Manager by following the instructions on the Data Deletion page.

13. Cookies

The public website does not use advertising cookies or third-party analytics. The application may use strictly necessary cookies or similar technologies for authentication, security, session continuity, and preferences. See the Cookie Policy for detail.

14. Children

The service is intended for business users and is not directed to children. We do not knowingly offer advertiser-management accounts to children.

15. Automated decisions

The public website does not make decisions producing legal or similarly significant effects. Advertising delivery and ad review decisions are made by TikTok under its own systems and policies, not by ANKH DOMINION CORPORATION LTDA.

16. Changes

We may update this policy to reflect product, legal, security, or platform changes. The effective date above is revised whenever a material update is published.