Privacy Policy

1. Who We Are

ColorMercado operates e-commerce seller and advertising accounts serving customers in Mexico. This privacy policy explains how we handle data accessed through our internal applications, including TikTok Shop customer service tools and Amazon Ads reporting and diagnostic tools.

2. Data We Access

Through the TikTok Shop Customer Service and Order APIs, we may access:

• Buyer messages and conversation metadata from our own authorized shops
• Order information related to those conversations (order ID, status, shipping, items)
• Buyer nicknames and TikTok user IDs (used solely for replying to customer inquiries)

Through the Amazon Ads API, we may access data from advertising accounts that have explicitly authorized our application, including:

• Advertising account and profile identifiers
• Campaign, ad group, advertisement, keyword, targeting, budget, bid, and status information
• Aggregated advertising performance and reporting metrics, such as impressions, clicks, spend, attributed orders, attributed sales, and return on ad spend

We do not access or process data from any TikTok Shop or Amazon Ads account that has not explicitly authorized our application. Our Amazon Ads integration is not designed to collect individual Amazon customer names, addresses, payment information, or other direct customer identifiers.

3. Purpose

Data is used exclusively to:

• Respond to customer service inquiries in a timely manner
• Look up order context when handling complaints, returns, or shipping questions
• Improve internal customer service workflows
• Retrieve, organize, and analyze advertising performance for our authorized Amazon Ads accounts
• Diagnose campaign issues and support budget, bid, keyword, targeting, and creative optimization decisions
• Generate internal reports and automate advertising workflows requested by authorized account users

4. Authorization and Access Control

Access to Amazon Ads data is granted through Login with Amazon and Amazon's OAuth authorization process. We request only the permissions needed to operate our internal advertising tools. Authorized users may revoke the application's access through their Amazon account or Amazon Ads account settings.

5. Data Storage and Security

All API communication uses HTTPS (TLS 1.2 or higher). Access tokens, refresh tokens, and API credentials are stored encrypted on access-controlled internal systems. TikTok buyer-identifiable data is retained only for the duration necessary to handle customer service cases. Amazon Ads campaign and reporting data is retained only as long as reasonably necessary for reporting, diagnostics, operational continuity, and legal obligations.

6. Data Sharing

We do not sell or lease data obtained through TikTok Shop or Amazon Ads APIs. Data is used within ColorMercado's authorized internal workflows and may be processed by infrastructure or service providers only when necessary to operate and secure those workflows, subject to appropriate confidentiality and data-protection obligations. We may disclose information when required by law.

7. Data Retention and Deletion

When authorization is revoked or an integration is discontinued, we stop collecting new data and invalidate or delete the associated access credentials. Upon a verified deletion request, we delete applicable stored data within a reasonable period, except where retention is required for security, fraud prevention, dispute resolution, or legal compliance.

8. User Rights

Individuals and authorized account users may request access, correction, or deletion of data associated with our applications by contacting us using the information below. TikTok Shop buyers may also contact TikTok Shop, and Amazon Ads users may manage application authorization through Amazon's account and advertising settings.

9. Data Breach Notification

In the event of a data breach affecting information handled by our applications, we will investigate, contain, and provide notifications to affected parties and applicable platforms or authorities as required by law and relevant platform agreements.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date at the top.

11. Contact

For questions about this privacy policy or our data practices: