Privacy Policy

Last updated: May 11, 2026

TT Outreach ("we", "us") is a Chrome extension and supporting web service that helps TikTok Shop sellers automate creator invitations on the TikTok Affiliate Marketplace. This page describes exactly what data we collect, why, where it's stored, and what your rights are.

1. What we collect

From the extension (your browser, locally)

• License key — paste-entered by you in the options page after purchase
• Device ID — a random UUID generated once per Chrome profile, used to identify your install for license heartbeats
• Your shop list — TikTok shop names, regions, and shop IDs you add via the options page
• Daily counter + sent log — a running tally of invitations sent today so the extension can respect the daily cap
• Invitation defaults — commission percentages, template name pattern, and invitation text you configure

All of the above lives in your browser's chrome.storage.local. It is NEVER read or transmitted by us, with one exception: the license key + device ID get sent to our license server for verification (see below).

On our license server (Fly.io, US region)

• Email address — provided when you check out via Stripe, used to send your license key and renewal receipts
• License key, tier, status, billing period end — sent to us by Stripe via webhook when you subscribe
• Device IDs that have activated your license — random UUIDs, no machine fingerprints; used solely to enforce the per-tier device cap
• Bound TikTok shop IDs — the shop_ids your extension has sent invitations from; used solely to enforce the per-tier shop cap
• Standard server logs — request IDs, IP address, response status, response time. Logs are retained 30 days.

2. What we explicitly do NOT collect

• Your TikTok username or password (you log in directly to TikTok in your own browser)
• TikTok session cookies or tokens
• The contents of invitations sent
• The creators you invited (just the count of invitations per day)
• Product, GMV, or any TikTok Shop business data
• Your Chrome history, bookmarks, or activity on non-TikTok pages

3. Where it lives

Our backend runs on Fly.io in the iad region (Ashburn, Virginia, USA). The database is a single SQLite file on an encrypted Fly volume. We do not share data with third parties. The only outbound data path is the Stripe webhook receiver and the Resend email API for license delivery.

4. Third-party services we use

• Stripe — payments. Stripe holds your card details; we never see them. Stripe privacy policy
• Resend — sends your license key email. Stores your email + email content for 7 days for delivery troubleshooting. Resend privacy policy
• Fly.io — hosts the license server and the marketing site you're reading. Fly.io privacy policy

5. Permissions the extension requests

The Chrome extension requests these permissions for the following reasons:

• tabs, activeTab — locate and interact with your TikTok Affiliate Marketplace tab
• scripting — inject the automation script into affiliate.tiktok.com only
• storage — save your license, shops, and preferences locally
• alarms — schedule batched invitations with human-like 15–45 second gaps
• notifications — alert you on captcha or license issues
• Host permissions for affiliate.tiktok.com and regional TikTok Seller domains — the bot operates only on these

6. Your rights

You can request export or deletion of your data at any time by emailing rongweiliang1987@gmail.com. We will respond within 5 business days. Deleting your data automatically cancels any active subscription.

Cancelling your Stripe subscription does not auto-delete your data (we keep the row to honour the unused portion of the billing period). If you want full deletion, email us.

7. Changes to this policy

We'll post material changes here and bump the "Last updated" date at the top. We won't surprise you — if a change expands the data we collect, we'll email you first.

8. Contact

Questions? rongweiliang1987@gmail.com.

← Back to home