Security and data handling

Last updated: November 9, 2026

Access and authorization

• Access to TikTok data only happens through the official TikTok API for Business, after an account owner signs in with TikTok and approves the requested permissions.
• We request the minimum set of permissions needed for campaign management, catalog management, reporting and measurement.
• Only authorized members of our internal team can use the tool.

Protection of tokens and data

• All communication with TikTok and with our systems uses encrypted connections (HTTPS/TLS).
• Access tokens are stored on systems controlled by our company, are never shown in the interface and are never shared.
• Administrative access to the tool is protected by a password and limited to the company's devices.
• Automatic backups protect configuration data against loss.

What we do not do

• We do not sell, rent or share TikTok data or advertising data with third parties.
• We do not build profiles of individual TikTok users or combine TikTok data with other sources to identify people.
• We do not access advertiser accounts that are not owned or managed by our company.

Revocation and deletion

Access can be revoked at any time in TikTok for Business. Stored data can be deleted on request — see Data Deletion.

Reporting a security issue

Please write to contato@vectorcommand.app with the subject "Security". We acknowledge reports within two business days.