Updated October 30, 2026

Privacy Policy

This policy explains how Zanshin handles information on our website and in Momentum Copilot. Creator workspaces and separate TikTok Shop or advertising connections have different data requirements.

Creator accounts and workspaces

TikTok creator sign-in requests basic identity and uses an app-specific account identifier to associate you with a private workspace. The current implementation verifies identity and discards TikTok Login Kit access and refresh tokens rather than storing them for ongoing access. Sign-in does not grant posting permissions, seller reporting, or automatic commission access.

You may choose to save product and content test plans, affiliate links, costs, preferences, and imported commission records. Supported CSV imports include identifiers needed to match creator, order, product, SKU, and content records, commission amounts and statuses, and import history. Browser-only work stays in local browser storage; signed-in work is stored in your account workspace. Workspaces are not automatically merged.

We use creator information to authenticate you, save your work, match imported records, and provide decision support. We do not sell it. See the affiliate privacy policy for session, storage, import, and retention details. Signing out does not delete your workspace. Follow our deletion instructions to clear active records or request broader deletion.

Information we may collect

Website visitors may contact us by email or submit an early-access application. Applications include your name, email, shop or business URL, whether you run TikTok ads, your reporting needs, contact consent, and the website entry point. We use this information to evaluate beta fit and contact you about your application, timing, and pricing. We also count landing-page views by day and entry point without analytics cookies or storing visitor IP addresses in these counts. Counts are approximate page views, not unique people. Application details are not publicly accessible. If Momentum Copilot is authorized, we may receive advertiser and account identifiers, campaign and creative metadata, advertising performance and reporting metrics, authorization scopes, and access credentials required to maintain the connection.

For a TikTok Shop connection, the implemented connection workflow stores the signed-in user identifier, seller and Shop identifiers, Shop name and region, authorization scopes, encrypted access and refresh tokens, token expiry times, and connection or sync status. Short-lived authorization state is used to complete the connection securely.

Seller integrations are a separate invitation-only pilot, not a benefit of creator sign-in. Available seller features depend on authorization, approved permissions, and enabled integrations. We will review the data scope and update this notice before introducing additional collection.

How we use information

We use authorized data to provide reporting, measurement, connection health, and decision-support features; secure and improve the product; respond to support requests; and comply with legal obligations. We do not use authorized advertiser data to make autonomous campaign changes in the initial product.

Sharing and sale

Zanshin does not sell advertiser data or TikTok Shop connection data. We may use service providers that help us operate and secure the product, subject to appropriate confidentiality and data-protection obligations. We may disclose information when legally required or to protect users, Zanshin, or others.

Security and retention

We use reasonable technical and organizational safeguards designed to protect information, including restricted access and protection of authorization credentials. We retain information only for as long as reasonably needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

Shop connection management requires sign-in and is restricted to the user who authorized the connection. OAuth tokens are encrypted before database storage. These safeguards do not mean that any system is completely secure.

Deleting active records does not immediately erase provider recovery copies. Backup expiry and any permitted retention are handled separately. Our recovery procedure requires us to reapply recorded deletions and invalidate restored credentials before resuming collection. We do not promise a fixed backup-erasure period until the relevant provider retention is confirmed.

Processing locations

Zanshin is based in the United States. That does not mean all hosting, logging or backup processing takes place only in the United States. We do not represent the US TikTok API setting as a US-only data-storage guarantee.

Your choices

You may revoke an integration through the relevant TikTok account controls. You may also request access, correction, or deletion by following our data deletion instructions.

Contact

Zanshin operates in the United States. Questions about this policy can be sent to connect@go-zanshin.com.