Privacy Policy

Comercii (https://comercii.com) operates the creator CRM platform powering Nhu Le's digital presence. The Platform enables Nhu Le to manage social media analytics, schedule content, track brand deal opportunities, and generate AI-assisted content across TikTok, YouTube, Instagram, and Facebook.

By using this Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Platform.

For questions about this policy, contact us at ngocnhule96@gmail.com.

We use the information we collect to:

• Provide and operate the creator CRM services
• Aggregate and display social media analytics across connected platforms
• Generate AI-powered content suggestions tailored to your audience and niche
• Send scheduled post notifications and transactional emails
• Track brand deal pipeline and collaboration history
• Maintain your content calendar and scheduling queue
• Improve the Platform's features and fix technical issues
• Comply with legal obligations

We do not sell, rent, or lease your personal information to third parties. We do not use your data for advertising purposes.

Your data is stored in a PostgreSQL database hosted on Railway, a cloud infrastructure provider. All database connections use TLS/SSL encryption in transit.

OAuth access tokens and refresh tokens are encrypted at rest using industry-standard encryption before being stored in our database.

All communication between your browser and the Platform is protected via HTTPS (TLS). We use Vercel for hosting, which enforces HTTPS on all routes.

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We integrate with the following third-party services to operate the Platform. Each service has its own privacy policy.

This section provides additional detail on TikTok data practices as required by the TikTok Developer Terms of Service.

• Data accessed: We access only data permitted by the user.info.basic and video.list scopes.
• Purpose limitation: TikTok data is used solely to display analytics and support content management features within this Platform. It is not used for any other purpose.
• No resale or sharing: TikTok data accessed through the API is never sold, licensed, shared, or otherwise transferred to any third party.
• Data minimization: We request only the minimum scopes required to deliver the Platform's features.
• Token storage: TikTok OAuth access tokens are encrypted at rest and never exposed client-side.
• Revocation: Users may revoke TikTok access at any time via account settings in this Platform or through TikTok's Authorized Apps settings. Upon revocation, tokens are immediately invalidated and deleted from our database.
• Deletion on request: Upon account deletion or explicit request, all TikTok data associated with your account will be permanently deleted within 30 days.

We retain your data for as long as your account remains active and for a reasonable period afterward to comply with legal obligations. Specifically:

• Account data is retained while your account is active and for up to 90 days after account closure.
• Social media analytics data (synced from connected platforms) is retained while your account is active.
• Content drafts and calendar entries are retained until you delete them or close your account.
• Payment records are retained for a minimum of 7 years as required by applicable tax law.

You may request deletion of your data at any time by contacting us at ngocnhule96@gmail.com.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Deletion: Request that we delete your personal data (“right to be forgotten”).
• Data Portability: Request a machine-readable export of your data.
• Withdraw Consent: Withdraw consent for data processing at any time, including revoking OAuth access to connected social media accounts.
• Objection: Object to certain types of data processing.

To exercise any of these rights, contact us at ngocnhule96@gmail.com. We will respond within 30 days.

We use a minimal number of cookies required for the Platform to function:

• Session cookie: A secure, HTTP-only session cookie managed by NextAuth is used to maintain your authenticated session. This cookie is essential for the Platform to function and does not track your activity across other websites.

We do not use third-party tracking cookies, advertising pixels, or behavioral analytics SDKs. We do not participate in cross-site tracking.

This Platform is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at ngocnhule96@gmail.com.

Comercii is operated from Canada. Your information may be processed and stored in Canada and the United States, where our infrastructure providers (Railway, Vercel) operate their data centers.

By using the Platform, you consent to the transfer of your information to Canada and the United States. We take appropriate steps to ensure that your data is treated securely in accordance with this Privacy Policy regardless of where it is processed.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email.

Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all inquiries within 30 days.