Privacy Policy

Overview

AffiliIQ ("the App", "we", "us", "our") is a mobile analytics and productivity tool for TikTok Shop affiliates, operated by The Peña Home LLC, a limited liability company registered in California, United States.

This Privacy Policy explains what data we collect when you use the App, why we collect it, how it is stored and protected, and what rights you have over it. By using the App you agree to the practices described in this policy.

Data We Collect

We collect two categories of data: data you provide directly, and data retrieved from TikTok's API on your behalf after you grant permission via TikTok's OAuth login.

We do not collect your TikTok password. Authentication is handled entirely by TikTok via OAuth 2.0 — we receive an access token only, which we store encrypted on our servers.

How We Use Your Data

We use the data we collect solely to operate and improve the App for you. Specifically:

To power App features — All TikTok data retrieved via the API is used exclusively to display analytics, calculate commission projections, surface dead links, and generate ad code exports within your personal App account.

To sync your data — We run a daily background sync to keep your performance data up to date, and a monthly sync on the 3rd business day of each month to finalise the previous month's figures.

To send notifications — If you enable notifications, we use your data to generate alerts such as expiring ad codes, commission milestones, and data sync confirmations.

To improve the App — We may use anonymised, aggregated usage data (not your TikTok performance data) to understand how features are used and to fix bugs. This data cannot be traced back to you.

We do not use your data for advertising, profiling, or any purpose beyond operating the App on your behalf.

Data Storage & Security

Your data is stored on secure servers hosted by reputable cloud infrastructure providers. All data is encrypted at rest and in transit using industry-standard TLS/SSL encryption.

Your TikTok OAuth access token is stored encrypted server-side and is never exposed to the client application or any third party. All API calls to TikTok are proxied through our backend — the App itself never communicates directly with TikTok's API.

We implement access controls, regular security reviews, and industry-standard practices to protect your data. In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of it.

Data Sharing

We do not sell your data. We do not share your personal data or your TikTok performance data with advertisers, data brokers, or any third party for commercial purposes.

Service providers — We use third-party services to operate the App, including cloud hosting and payment processing (Stripe). These providers access only the data necessary to perform their specific service and are contractually prohibited from using it for any other purpose.

Legal requirements — We may disclose data if required to do so by law, regulation, or valid legal process such as a court order or subpoena.

Business transfer — In the event of a merger, acquisition, or sale of The Peña Home LLC, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

Data Retention

We retain your data for as long as your account is active. Historical performance data (GMV, commission, video metrics) is retained indefinitely to power the Commission Calculator's historical archive feature — this is core to the App's functionality.

If you delete your account, we will delete all personal data and TikTok performance data associated with your account within 30 days, except where we are required to retain it for legal or regulatory reasons.

You can request deletion of your data at any time without deleting your account by contacting us at the email address below.

Your Rights

Depending on where you are located, you may have the following rights:

Access — You have the right to request a copy of the personal data we hold about you.

Correction — You have the right to request correction of inaccurate data. Note that TikTok-synced data reflects what TikTok provides — to correct it at source you would need to contact TikTok directly.

Deletion — You have the right to request deletion of your personal data. See Data Retention above.

Portability — You have the right to request your data in a structured, machine-readable format. The App's CSV export features provide this for your performance data directly.

Withdraw consent — You can revoke AffiliIQ's access to your TikTok data at any time through TikTok's connected apps settings. This will prevent further data syncing but will not delete data already stored.

To exercise any of these rights, contact us at the address in the Contact section below. We will respond within 30 days.

Children's Privacy

AffiliIQ is intended for use by TikTok Shop affiliates and is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will delete it immediately. If you believe we may have collected such data, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time as the App evolves. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you via the App or by email.

Your continued use of the App after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please contact us: