Updated September 8, 2026

Privacy Policy

This policy explains how Zanshin handles information when people visit our website or authorize Momentum Copilot to connect to TikTok advertising or TikTok Shop accounts.

Information we may collect

Website visitors may choose to contact us by email. If Momentum Copilot is authorized, we may receive advertiser and account identifiers, campaign and creative metadata, advertising performance and reporting metrics, authorization scopes, and access credentials required to maintain the connection.

For a TikTok Shop connection, the implemented connection workflow stores the signed-in user identifier, seller and Shop identifiers, Shop name and region, authorization scopes, encrypted access and refresh tokens, token expiry times, and connection or sync status. Short-lived authorization state is used to complete the connection securely.

TikTok Shop connections are currently paused. Live product, inventory, order and buyer-data ingestion is not enabled. We will review the data scope and update this notice before introducing additional collection.

How we use information

We use authorized data to provide reporting, measurement, connection health, and decision-support features; secure and improve the product; respond to support requests; and comply with legal obligations. We do not use authorized advertiser data to make autonomous campaign changes in the initial product.

Sharing and sale

Zanshin does not sell advertiser data or TikTok Shop connection data. We may use service providers that help us operate and secure the product, subject to appropriate confidentiality and data-protection obligations. We may disclose information when legally required or to protect users, Zanshin, or others.

Security and retention

We use reasonable technical and organizational safeguards designed to protect information, including restricted access and protection of authorization credentials. We retain information only for as long as reasonably needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

Shop connection management requires sign-in and is restricted to the user who authorized the connection. OAuth tokens are encrypted before database storage. These safeguards do not mean that any system is completely secure.

Deleting active records does not immediately erase provider recovery copies. Backup expiry and any permitted retention are handled separately. Our recovery procedure requires us to reapply recorded deletions and invalidate restored credentials before resuming collection. We do not promise a fixed backup-erasure period until the relevant provider retention is confirmed.

Processing locations

Zanshin is based in the United States. That does not mean all hosting, logging or backup processing takes place only in the United States. We do not represent the US TikTok API setting as a US-only data-storage guarantee.

Your choices

You may revoke an integration through the relevant TikTok account controls. You may also request access, correction, or deletion by following our data deletion instructions.

Contact

Zanshin operates in the United States. Questions about this policy can be sent to connect@go-zanshin.com.