Privacy Policy

1. Who we are

This policy explains how BAILYHANGA CO., LIMITED (百利恒佳有限公司), operating the DORIS Commerce Technology platform (“DORIS”, “we”, “us”), handles information in connection with our website, commerce operations and authorized marketing technology integrations.

2. Information we collect

We may collect information you provide directly, including your name, business contact details, company, enquiry content and support communications. When an authorized business administrator connects an advertising account, our platform may process business account identifiers, advertiser account metadata, campaign and ad-group configurations, creative or catalog information, aggregated performance reports, authorization status and operational audit records made available under approved API scopes.

We do not request your TikTok password. We do not use the Marketing API to access private consumer TikTok accounts.

3. How we use information

• to authenticate and maintain authorized business integrations;
• to operate campaign, reporting, creative, catalog and measurement workflows requested by authorized users;
• to secure the platform, diagnose errors and maintain audit records;
• to provide support and respond to enquiries;
• to conduct e-commerce, order and international trade operations; and
• to comply with applicable law and platform policies.

4. Authorization and access control

Advertising data is processed only after an authorized account administrator approves access through the relevant platform authorization flow. We limit internal access according to job responsibility, use minimum necessary permissions and support connection revocation.

5. Sharing

We do not sell personal information. We may share limited information with infrastructure, communications, payment, analytics, professional-advisory or fulfillment providers where necessary to operate the service or our commerce business. We may also disclose information where required by law, to protect rights and security, or in a legitimate corporate transaction subject to appropriate safeguards.

6. Security and retention

We use administrative, technical and organizational controls designed to protect information, including server-side credential handling, encrypted transport, access controls and operational logging. No method is completely secure. We retain information only for as long as needed for the stated purpose, an active authorization, dispute resolution, security or a legal obligation. Revoked integration data is deleted or de-identified within a reasonable period unless retention is legally required.

7. International processing

Our company is based in Hong Kong and service providers may process information in other locations. Where applicable, we use reasonable safeguards for international transfers.

8. Your choices and rights

You may request access, correction, deletion or restriction of information, withdraw an integration authorization, or object to certain processing where applicable. See our Data Deletion Instructions. We may verify the requester’s authority before acting.

9. Third-party platforms

TikTok and other linked services operate under their own terms and privacy policies. DORIS is not affiliated with or endorsed by TikTok. Platform names and trademarks belong to their respective owners.

10. Contact

Privacy requests may be sent to [email protected] or by phone at +852 9420 1975. Registered address: Flat/Rm 2304, 23/F, Ho King Commercial Centre, 2–16 Fa Yuen Street, Mong Kok, Kowloon, Hong Kong.