Privacy Policy

Market4U (“we”, “our”, “the Service”) is operated by Ecremmoce. This Privacy Policy explains what information we collect when you use Market4U to generate and publish marketing content, how we use it, and your rights regarding that information.

1. Information We Collect

• Account information: name, email address, organization, and authentication identifiers issued by our identity provider.
• Connected channel credentials: OAuth access tokens and refresh tokens for third-party platforms (Shopee, Facebook, Instagram, TikTok, YouTube, and similar) that you explicitly connect. Tokens are encrypted at rest using PostgreSQL pgcrypto and are accessible only to the service-role process performing your authorized publish actions.
• Product data: product names, descriptions, images, prices, and metadata you import from connected seller accounts (e.g., Shopee).
• Generated content: text copies, images, and videos produced on your behalf by AI providers.
• Operational logs: API call timestamps, error messages, and asset references needed to operate queues, retries, and billing.

2. How We Use Information

• To generate marketing content (copy, images, videos) using AI providers under your direction.
• To publish content to the third-party channels you have connected, on the schedule you configure.
• To improve the reliability of the Service (error analysis, capacity planning, fraud prevention).
• To communicate operational notices such as failed publish attempts or token expirations.

3. Third-Party Processors

We rely on the following processors to operate the Service:

• Supabase (database, storage, authentication)
• Vercel (application hosting, cron jobs)
• Google Gemini and Higgsfield (AI text/image/video generation)
• fal.ai (alternative AI video generation)
• Shopee Open Platform, Meta Graph API, TikTok Content Posting API, YouTube Data API (publishing endpoints)

Data is shared with these processors only to the extent required to perform the action you initiated. We do not sell your data, and we do not use connected channel data to train AI models.

4. Data Retention

We retain account, product, and generated content data for the duration of your subscription and for a reasonable period afterward to support audit and dispute resolution. You may request deletion of your data at any time by contacting james@ecremmoce.io. Connected channel tokens are deleted immediately when you disconnect a channel.

5. Security

All traffic is served over TLS. Channel access tokens are encrypted at rest. Access to production data is restricted to authorized engineers and audit-logged. We will notify affected users without undue delay in the event of a confirmed data breach.

6. Your Rights

Depending on your jurisdiction (GDPR, CCPA, PIPA in Korea), you may have the right to access, correct, export, or delete your personal information, and to object to processing. To exercise these rights, contact james@ecremmoce.io.

7. Children

The Service is not directed to children under 14 and we do not knowingly collect their data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and reflected on this page with a new “Last updated” date.

9. TikTok Integration (Content Posting API)

When you connect a TikTok account, we request the following OAuth scopes and process the corresponding data strictly to deliver the publishing features you initiate.

• user.info.basic — to display your connected TikTok username and avatar in the dashboard so you can confirm which account you are publishing to.
• video.upload — to upload AI-generated short product videos to your TikTok inbox (drafts) for review and final publishing inside the TikTok app.
• video.publish — to publish AI-generated short product videos with operator-approved captions (including legally required advertisement disclosure) directly to your TikTok account.

We do not store TikTok video content on our servers after upload completes; we retain only post metadata (publish_id, permalink, publish timestamp) for tracking and for your dashboard view. We do not share TikTok user data with third parties, do not use it for advertising profiling, and do not use it to train AI models. You can revoke our access at any time by disconnecting the TikTok channel in your dashboard or by removing the authorization at TikTok > Settings > Manage Apps. Upon disconnection, all stored TikTok access tokens are deleted immediately.

10. Contact

Ecremmoce — james@ecremmoce.io