TokPros Personal Data Protection Policy
1. Purpose
At TokPros LLC, we are committed to protecting the privacy and security of all personal data we handle. This policy outlines our principles and procedures for collecting, processing, storing, sharing, and deleting personal information in compliance with global privacy standards and TikTok’s USDS data requirements.
2. Scope
This policy applies to all employees, contractors, and third-party service providers who have access to personal data collected or processed through TokPros systems, applications, and integrations. It covers all data originating from clients, users, TikTok partners, and affiliated services.
3. Data Collection
TokPros collects only the minimum personal data necessary to deliver our services. This may include user account details, business contact information, and technical data related to system operations. We do not collect sensitive personal information unless explicitly required and authorized.
4. Data Processing
All personal data is processed lawfully, fairly, and transparently. Processing activities are limited to specific purposes such as account setup, platform management, performance analytics, and technical support. Data is not repurposed or shared beyond its original intent.
5. Data Storage & Security
Personal data is stored securely on AWS (Amazon Web Services) servers located in the United States (Northern Virginia, us-east-1). All data is encrypted at rest using AES-256 and in transit via TLS 1.2+. Access is role-based, logged, and restricted to authorized personnel only.
6. Data Retention & Deletion
Personal data is retained only as long as necessary for operational or legal purposes. When data is no longer required, it is permanently deleted or anonymized in accordance with our data retention schedule and applicable legal requirements.
7. Third-Party & Subprocessor Management
All third-party vendors or subprocessors engaged by TokPros are vetted for compliance with SOC 2, ISO 27001, or GDPR-equivalent standards. Data sharing with vendors is minimal, encrypted during transfer, and governed by formal Data Processing Agreements (DPAs).
8. Employee Training & Awareness
All TokPros employees and contractors receive mandatory data protection and privacy training upon onboarding and annually thereafter. Training covers secure data handling, privacy best practices, and incident response protocols.
9. Data Subject Rights
TokPros respects all data subject rights, including the right to access, correct, delete, or restrict personal data. Users may contact us at [email protected] to exercise their rights or request data removal in accordance with applicable laws.
10. Policy Review & Updates
This policy is reviewed and updated at least six times per year, or sooner if there are regulatory, operational, or technological changes that impact data protection practices.
11. Contact
For questions or concerns related to this policy or TokPros’s data protection practices, please contact: [email protected]