Creatorabc uses this policy to guide the protection of the confidentiality, integrity, and availability of information handled by the Creatorabc CRM platform, including information received through authorized TikTok Shop integrations.
1. Scope
This policy applies to Creatorabc personnel and systems involved in developing, operating, or supporting the CRM platform. It covers personal information, account credentials, seller and creator records, and other service information.
2. Governance and risk
Security responsibilities must be assigned to people who operate the service. Changes that affect data access, integrations, or infrastructure should be reviewed for security and privacy impact before release. Identified risks should be recorded and addressed according to their severity.
3. Data protection
Data should be collected and used only for authorized service purposes. The CRM uses HTTPS for connections to its website and applies role-based and organization-scoped access controls in the application. TikTok integration credentials are encrypted by the application before storage. Other stored records and backups require appropriate access restrictions and retention controls.
4. Access control
Access to systems and information should be limited to what each person needs for their role. Administrative privileges should be restricted, reviewed, and removed when no longer needed. Accounts and credentials should not be shared. Where a service supports multi-factor authentication, privileged users should enable it.
5. Personnel and third parties
People with access to Creatorabc systems are expected to protect credentials and confidential information and promptly report suspected security issues. Service providers should receive only the access needed to provide their services, subject to applicable agreements and platform requirements.
6. Incident and vulnerability handling
Suspected incidents and vulnerabilities should be reported promptly, investigated, prioritized, and documented. Where required, Creatorabc will notify TikTok Shop, affected sellers, or relevant authorities in accordance with applicable requirements. Security updates and remediation should be tracked through completion.
7. Review
This policy should be reviewed at least annually and when material changes to the service, technology, or applicable requirements occur. It describes security requirements; specific control implementation and evidence are reviewed separately.
8. Contact
For questions about this policy or to report a security concern, contact leonma@memo.live.