Privacy Policy

DUHAI Technology Co., Ltd. (“DUHAI,” “we,” “us,” or “our”) takes the privacy of your personal information and advertising data seriously. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit duhaitec.com, use our website, products, or services, or authorize a connection through TikTok or another platform.

This policy applies to the website operated by DUHAI, the DUHAI Ads product, related advertising services, and our first-party email services. If a specific service has its own privacy notice, that notice applies together with this policy; if there is a conflict, the service-specific notice controls for that service.

1. Who controls your information

The controller of personal information processed through this website and our services is DUHAI Technology Co., Ltd. You can contact us at:

• Privacy and compliance: [email protected]
• Customer support: [email protected]
• Postal address: available on request through the email addresses above.

2. Information we collect

2.1 Information you provide

• Contact details: name, company, work email, area of interest, budget range, and any information you choose to include in a message.
• Business records: contracts, billing details, service configuration, communication history, and support tickets.
• Account details: login identifiers, roles and permissions, and security verification information. We do not ask for your TikTok password.

2.2 Information obtained through TikTok authorization

When you choose to connect a TikTok ads account, we receive information through TikTok's official OAuth consent flow, limited to what you approve. Depending on the scopes granted, this may include:

• Ad account identifiers, names, status, and Business Center relationships;
• Basic information about campaigns, ad groups, ads, product catalogs, and creative assets;
• Advertising performance and reporting metrics such as spend, impressions, clicks, conversions, and ROAS;
• Access tokens and technical information related to authorization status.

We do not obtain your TikTok password, private messages, personal browsing history, or personal data unrelated to advertising through this authorization. The exact permissions are determined by the scopes you confirm and the API access TikTok approves.

2.3 Information collected automatically

When you visit the website, our servers and necessary security components may log IP address, browser type, device information, pages visited, referring URL, timestamps, and error logs. We use this information to secure the site, diagnose problems, and understand aggregate site usage.

2.4 Cookies and local storage

The website currently uses only cookies or local storage necessary for operation, such as language preference, form state, and security protection. We do not use third-party advertising cookies for cross-site behavioral targeting. If we introduce additional analytics or marketing cookies in the future, we will update this policy and provide appropriate choices.

3. How we use information

• Provide, configure, maintain, and improve the website, ad management tools, and first-party email services;
• Complete TikTok ad account authorization, data sync, reporting, and advertiser-requested actions;
• Respond to inquiries, arrange demos, and provide customer and technical support;
• Conduct security audits, anomaly detection, troubleshooting, and abuse prevention;
• Comply with legal, tax, and accounting obligations and respond to disputes;
• Send service-related updates or content you have agreed to receive.

We do not sell your advertising data to third parties or use it for advertising targeting unrelated to the service.

4. TikTok data: specific commitments

• Purpose limitation: TikTok data is used only to deliver the authorized ad management, analytics, creative, and automation services.
• Least privilege: We request only the permissions needed for the service and do not read data unrelated to advertising.
• No password access: Authorization uses OAuth. We cannot access your TikTok login credentials.
• Revocable: You can revoke our access at any time in TikTok's authorization settings. Sync stops after revocation.
• Deletable: You can submit a deletion request through our data deletion page.
• No resale: We do not sell, rent, or use TikTok data to train models unrelated to the service.

If you revoke authorization, we may no longer be able to provide features that depend on it, but public website content remains available.

5. How we share information

• Platforms and authorization: We interact with TikTok according to your authorization to execute requested ad management and data sync operations.
• Service providers: Cloud hosting, email delivery, payment, support, and security providers. They may process information only as needed to provide services to us and are subject to confidentiality obligations.
• Legal requirements: We may disclose information to comply with law, regulation, judicial or regulatory process, or to protect the rights, property, and safety of us, our users, or the public.
• Business transactions: Information may be transferred as part of a merger, acquisition, reorganization, or sale of assets. We will require the recipient to continue to honor this policy.

We do not sell personal information or provide your ad account data to unrelated third parties for their independent marketing.

6. International transfers

Our services may use servers and providers located outside your country or region. We use contractual commitments, access controls, and other appropriate safeguards for cross-border transfers and require recipients to provide protection consistent with this policy.

7. Retention

We retain information only as long as necessary for the purposes for which it was collected, unless law requires a longer period. Typical retention periods are:

Information	Typical retention
Inquiry and contact records	24 months after the last communication
TikTok access tokens	While authorization is valid; deleted promptly after revocation or expiry
Ad account and reporting copies	During the service; deleted or anonymized within 90 days after termination
Operational and security logs	Generally 12 months, longer if required for legal or dispute purposes
Financial and contract records	As required by applicable law

See the data deletion page for the scope and timing of deletion requests.

8. Security

We use access controls, encryption in transit, encrypted token storage, least privilege, audit logging, and confidentiality commitments. No system can be guaranteed completely secure. If a security incident is likely to affect your rights, we will notify you as required by applicable law.

9. Your rights

Depending on applicable law, you may have the right to:

• Access, correct, or update your personal information;
• Delete personal information or request restriction of processing;
• Withdraw consent or revoke TikTok authorization;
• Object to processing for certain purposes;
• Receive a copy of your data or request portability;
• Lodge a complaint with a competent supervisory authority.

Send requests to [email protected]. We may verify your identity and account authority to protect your information. We generally respond within 30 days; complex requests may take longer, and we will explain why.

10. Children

The website and services are intended for businesses and adult professionals, not children under 18. We do not knowingly collect personal information from children. If you believe we have done so, please contact us so we can delete it.

11. Changes to this policy

We may update this policy to reflect changes in our services or legal requirements. The updated version will be posted on this page with a new effective date. For material changes, we will provide notice through the website or another appropriate method. Continued use of the services means you accept the updated policy; if you do not agree, you should stop using the affected services.

12. Contact us

For questions, requests, or complaints about this policy, contact:

• DUHAI Technology Co., Ltd. — Privacy and Compliance
• Email: [email protected]
• Website: https://duhaitec.com

We will handle your request within a reasonable period and explain the outcome where appropriate.