Fuzhou Chuanglianzhike Technology Co., Ltd. ("we", "us") operates CLERP. This Policy explains how we handle personal information when you visit clerp.cn or use CLERP accounts, shop management, creative assets and order collaboration services, and how you can contact us to exercise your rights.
We handle information needed for the services you enable, subject to the official authorization screen.
Shop, order and delivery information is used for authorized business and fulfillment services.
Disconnect locally, revoke platform authorization, and request deletion by email.
1. Scope and our role
This Policy applies to CLERP websites and services that link to it. TikTok Shop, marketplaces, factories and logistics providers have their own rules; this Policy does not replace their policies.
We determine the necessary purposes and means of processing for account administration, website security and service communications. For shop, order and buyer information supplied by merchants, we generally act on the merchant’s lawful instructions. Merchants must provide appropriate notices and have a lawful basis for supplying such data. This does not remove our own data protection responsibilities.
CLERP serves merchants and their authorized personnel. Buyers without a CLERP account may also contact us about their personal information.
2. Information we handle and why
| Context | Information | Purpose |
|---|---|---|
| Accounts and teams | Name or display name, email, phone number where used, authentication information, company, role and shop permissions | Authentication, collaboration, access control and service communications |
| Shop connections | Seller and shop identifiers, names, market or region, authorization scope, expiry, access and refresh tokens | Establish and maintain authorized connections and identify accessible shops |
| Orders and after-sales | Order identifiers, status, dates, products, SKUs, quantities, amounts and fulfillment status; recipient, delivery contact, address or shipping label where needed for an enabled fulfillment service | Order lookup, reconciliation, production and delivery coordination, and after-sales handling, limited to enabled functions |
| Assets and design | Uploaded images, artwork, files, generation instructions, designs and approval records | Store assets, process images, generate or prepare requested designs and deliver production files to designated factories |
| Transactions and support | Quotes, approvals, billing and payment receipts, refund and after-sales records, support communications | Perform transactions, reconcile charges, prevent duplicate charging and address disputes and inquiries |
| Website operation | IP address, basic browser and device information, access times, session identifiers, errors and necessary activity logs | Maintain sessions, operate the service, troubleshoot and prevent unauthorized access |
Information comes from you or your merchant, authorized platforms or providers, and necessary technical records generated through use. Not every function collects every category. A function may be unavailable if required information is not provided; unrelated information is not required for that reason.
Depending on the circumstances and applicable law, we rely on contract necessity, legal obligations, valid consent or another permitted basis. Where consent, separate consent or additional notice is required, we obtain or provide it before the relevant processing. Do not include unrelated identity documents, banking passwords, health details or other sensitive information in ordinary uploads or support messages.
3. TikTok Shop authorization and use limits
Confirm the connection and permissions on TikTok Shop’s official authorization page. CLERP does not ask you to give us your TikTok password. Availability depends on approved app permissions, seller authorization, market rules and enabled functionality. This Policy alone does not mean that any API has been approved or enabled.
The current official API application covers read-only access to authorized shop information and order information. This read-only function concerns shop identity and fields such as order identifiers, status, dates, products, SKUs, quantities and amounts. Buyer names, phone numbers and full addresses are not display fields of that read-only page. If an API response contains additional personal information, we handle it only as necessary to process the response, without using it for unrelated purposes.
Product publishing, shipping, refunds and order modifications are outside that read-only application. Production and fulfillment services using other lawful sources are handled according to their actual source, authorization and order instructions; they are not represented as approved TikTok write-API capabilities.
We process TikTok Shop data only to provide agreed services to authorized merchants. We do not sell or rent it, or use buyer information for independent marketing, profiles across merchants, advertising targeting or general-purpose AI model training. Enabling AI image processing does not authorize disclosure of shop tokens, buyer information or complete orders to an AI provider.
You can remove the local connection in CLERP’s TikTok Shop connection page. This deletes that connection’s authorization record, encrypted tokens and shop index. You can also revoke platform authorization in the relevant authorization management area of TikTok Shop Seller Center. Local disconnection and platform revocation are separate operations. Previously imported business records are not all automatically deleted by disconnecting; see Section 8 to request deletion.
6. Storage location, retention and deletion
CLERP is operated by a company in China, and its current primary website and image storage use infrastructure in mainland China. Cross-border platforms or overseas providers may involve international access or transfers. We first make the arrangements required by applicable law and platform rules for the relevant market and data type. Offering services for the US market does not mean that all data is stored in the United States.
Retention depends on data type and necessity: account information is kept as needed for account services; shop tokens and connection records maintain an active connection and can be deleted by removing the local connection; assets and order records are retained for requested storage, fulfillment or after-sales work; financial, transaction, security and dispute records are retained for applicable legal or necessary evidentiary periods. Data handled temporarily for a read-only query does not automatically become a permanent order archive.
When services end, authorization is withdrawn, a valid deletion request is received or information is no longer needed, we stop the relevant use and delete or anonymize it, subject to applicable law, platform requirements and necessary fulfillment obligations. Where limited records must legally be retained, we explain the scope and reason and restrict their use. Possible future usefulness is not a basis for indefinite retention.
Disaster-recovery backups rotate across the latest 7 daily, 4 weekly and 3 monthly recovery points and are not used for ordinary business queries. Deletion from primary systems and backup rotation are handled separately. Use of affected backup information is restricted pending rotation, and effective deletion requests are reapplied after restoration. We explain the scope, expected timing and outcome for primary systems, backups and recipients when handling a request.
7. Security
We use measures appropriate to the processing risk, including HTTPS, authentication, company- and shop-scoped permissions, server-side token encryption, access restrictions and necessary logs. Shop access tokens, refresh tokens and application secrets are not exposed as ordinary browser page content. You should manage personnel permissions, devices and login credentials carefully.
If a security incident occurs, we take containment, investigation and remediation steps and make reports or notifications required by applicable law and platform rules. No system can be guaranteed absolutely secure.
8. Your rights and requests
Subject to applicable law, you may request information about processing, access, copies, corrections, completion, deletion, withdrawal of consent, restriction or objection, account closure or legally available portability, and may ask questions or complain. Other rights under applicable law are not limited by this Policy.
Email zfy@clerp.us with the subject “Privacy Request” or “Data Deletion Request”, explain your relationship to the account, shop or order and specify the request. Do not include passwords, tokens, full identity documents or full buyer addresses in the initial email. We may seek proportionate identity or authorization verification and may coordinate buyer requests with the merchant where needed.
We normally respond with progress or an outcome within 15 working days of receiving a request, subject to any shorter applicable legal or platform deadline. If more information is needed, or a request is lawfully refused or extended, we explain the reason and available next steps. Disconnecting a shop, closing a CLERP account, revoking platform authorization and deleting historical business records are separate actions and may be requested separately.
Where a merchant determines how order information is processed, we assist the merchant as required. You may also complain to a competent authority or seek other remedies under applicable law.
9. Children
CLERP is intended for adult merchants and authorized personnel with the necessary legal capacity, not children. We do not actively collect children’s information for account registration or marketing. Merchants must have a lawful basis and appropriate safeguards if order artwork or delivery information concerns a minor. Contact us if you believe information has been processed without authorization.
10. Updates and contact
The effective version and update date will be shown on this page. We provide appropriate notice of material changes to purposes, methods, data categories or recipients. Where renewed consent is required, continued website use does not substitute for that consent.
Operator: Fuzhou Chuanglianzhike Technology Co., Ltd. Product: CLERP. Website: https://clerp.cn. Privacy, deletion and service contact: zfy@clerp.us. Chinese and English versions are provided for convenience; interpretation differences do not limit mandatory rights under applicable law.