Privacy Policy

This Privacy Policy describes how RE:BORN ("we", "us", or "our") collects, uses, and protects your personal information when you use the RE:BORN Commerce platform ("Service").

2.1 Information You Provide

• Account information: Email address, name, password (hashed)
• Business information: Organization name, store name, contact details
• Integration data: TikTok user ID, username, and shop data (when you connect your TikTok account)
• Google integration data: Google email, Drive files, and Sheets data (when you connect your Google account)

2.2 Information Collected Automatically

• Usage data: Features used, actions taken, timestamps
• Device information: IP address, browser type, operating system
• Cookies and similar technologies: For authentication and session management

2.3 AI Processing

• Product information you submit for AI content generation
• Generated marketing content (captions, hashtags, descriptions)
• We use OpenRouter (a third-party AI provider) to process content generation requests

• To provide and maintain the Service
• To authenticate your identity and secure your account
• To process orders and manage inventory
• To generate AI-powered marketing content
• To integrate with TikTok Shop and Google Workspace
• To send service notifications and updates
• To analyze and improve the Service
• To comply with legal obligations

4.1 Third-Party Services

We share data with the following third-party services:

• OpenRouter: For AI content generation (product names, descriptions)
• TikTok API: To read your TikTok Shop orders and products
• Google APIs: To access Drive and Sheets (only when you connect)
• PostgreSQL (hosted): For data storage
• Redis: For caching and session management

4.2 Legal Compliance

We may disclose your information if required by law or in response to valid legal requests.

4.3 No Sale of Data

We do not sell your personal information to third parties.

• Passwords are hashed using Argon2id
• JWT tokens for authentication (15-minute expiry for access tokens)
• All API communications use HTTPS in production
• Database queries use parameterized statements (no SQL injection)
• OAuth tokens are encrypted at rest
• Regular security audits and updates

• Active account data: Retained while your account is active
• Deleted account data: Permanently deleted within 30 days of account termination
• AI-generated content: Retained for 90 days, then automatically deleted
• Logs: Retained for 30 days for debugging and security

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Request your data in a machine-readable format
• Withdraw consent: Disconnect TikTok or Google at any time
• Object: Object to certain processing of your data

To exercise these rights, contact us at: support@reborncommerce.com

When you connect your TikTok account:

• We request access to your basic profile information (username, user ID)
• We request access to your TikTok Shop orders and products
• We do NOT post content to TikTok without your explicit permission
• We do NOT share your TikTok data with other users
• You can disconnect your TikTok account at any time from the dashboard
• Upon disconnection, we stop accessing your TikTok data

When you connect your Google account:

• We request access to Google Drive and Google Sheets
• We only access files you explicitly request through the Service
• We do NOT share your Google data with other users
• You can disconnect your Google account at any time
• Upon disconnection, we revoke OAuth tokens and stop accessing your data

• Product information you submit is sent to OpenRouter for content generation
• OpenRouter may process this data according to their privacy policy
• We do not store AI-generated content permanently
• You should not submit sensitive or confidential information for AI processing

We use essential cookies for:

• Authentication (JWT tokens)
• Session management
• Security (CSRF protection)

We do not use advertising or tracking cookies.

The Service is not intended for children under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us.

The Service is hosted in Myanmar. If you access the Service from outside Myanmar, your data may be transferred to and processed in Myanmar. By using the Service, you consent to this transfer.

We may update this Privacy Policy at any time. We will notify you of significant changes. Continued use of the Service constitutes acceptance of the updated policy.

For questions about this Privacy Policy, contact us at:

• Email: support@reborncommerce.com
• Website: https://reborncommerce.com