Privacy Policy

Commish Coach ("Commish Coach," "we," "us") is a software service that helps TikTok Shop affiliate creators understand and improve their own performance. This policy explains what data we collect, why, how we store and protect it, who we share it with, and how you can control or delete it.

If you have questions or want to exercise any right described here, email support@affiliateformula.co.

1. Who this policy covers

This policy applies to anyone who creates a Commish Coach account or connects a TikTok account to it ("you"). Commish Coach is intended for adults participating in TikTok Shop affiliate programs. You must be at least 18 to use it.

2. What we collect

Information you give us

• Account details: your email address, used to sign you in and contact you about your account.
• Settings and inputs: your posting goals, how you tag your own videos (for example hook type or format), actions you mark as done or skipped, and support requests you send us.

Information from TikTok, only with your authorization

When you choose to connect a TikTok integration, you authorize us through TikTok's own consent screens. We never ask for your TikTok password and never simulate a connection. Depending on which integrations you connect, TikTok provides us:

• TikTok Shop (affiliate creator) data: your creator profile, affiliate orders and commissions, the products you promote or are eligible to promote, sample requests, and order-to-content attribution data. Order records may include an order identifier, product, amount and timing. They are used only to calculate your own performance.
• TikTok content data: your public profile (display name, avatar, follower, like and video counts) and the public statistics of your own videos (views, likes, comments, shares, posting date, description, duration).

We request only the permissions ("scopes") needed for the features we provide, and we document the purpose of each one.

Information we create

From the data above we compute analytics for you: scores, trends, recommendations, content health checks, product fit rankings and daily action plans. These are derived from your own data and are labeled as estimates in the product.

Information collected automatically

Standard technical data when you use the service: IP address, browser type, device type, pages viewed and timestamps, held in server logs for security and troubleshooting. We do not use advertising trackers.

3. How we use your data

We use your data only to:

• provide the service to you: sync your accounts, show your analytics and generate recommendations;
• keep your account secure and prevent abuse;
• respond to your support requests;
• send you service messages about your account (not marketing, unless you opt in);
• improve the product using aggregated, non-identifying usage statistics.

We do not sell, rent or trade your data. We do not use your data to build marketing lists, to benchmark you against other creators without your consent, or to train models for other customers. TikTok data is used solely to provide the service to the account it belongs to, and in compliance with TikTok's developer and partner terms.

4. Where and how your data is stored

• Location: your data is stored and processed in United States regions of our infrastructure providers.
• Encryption: data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 at our database provider). TikTok access tokens are stored server-side only, encrypted, and never sent to your browser.
• Isolation: every record is tagged to your account and protected by database row-level security, so no other user can access it.
• Access: our team can access your data only to provide support, fix a problem you reported, or respond to a security incident, and the reason is recorded.

Full details are in our Information Security Policy, available on request.

5. Who we share data with

We share data only with service providers who process it on our behalf to run Commish Coach, under contracts that restrict them to that purpose:

All three are established providers with independent security certifications (SOC 2 and/or ISO 27001). We will update this list before adding a provider that handles your data.

We may also disclose data if required by law, to protect the rights or safety of users or the public, or as part of a merger or acquisition (in which case this policy continues to apply and you will be notified). Beyond this, we do not share your data with anyone.

6. How long we keep data and how to delete it

• While connected: we keep your TikTok data for as long as the integration is connected and your account is active, subject to any shorter retention period required by TikTok's API terms.
• Disconnect an integration: from Settings at any time. We revoke our access token, stop syncing, and delete that integration's data within 30 days.
• Delete your account: from Settings or by emailing us. All your data is deleted from live systems within 30 days and from backups within 90 days.
• Logs: technical logs are kept for up to 30 days.

You can also revoke our access from within TikTok's own settings at any time; we treat that the same as a disconnection.

7. Your rights and choices

Wherever you live, you can ask us to:

• tell you what data we hold about you;
• give you a copy of it in a portable format;
• correct it;
• delete it;
• stop processing it for a particular purpose.

Email support@affiliateformula.co. We will verify the request and respond within 30 days. We will not treat you differently for exercising these rights.

California residents: you have the rights above under the California Consumer Privacy Act. We do not sell or share personal information as defined by that law, and we have not done so in the past 12 months.

Residents of the EU, UK or other regions with data-protection laws: the service is currently directed to the United States. If we offer it in your region we will update this policy with the legal basis for processing and any additional rights.

8. Children

The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us and we will delete it.

9. Security

We maintain an information security program covering access control, encryption, secure development, monitoring, incident response and regular review. If a security incident affects your data, we will notify you within 72 hours of confirming it, along with the steps we are taking.

10. Changes to this policy

We may update this policy as the service changes. We will post the new version here with a new "last updated" date, and for material changes we will email you or show a notice in the app before the changes take effect.

11. Contact

Commish Coach
support@affiliateformula.co