Privacy Policy for EXLEAD Order Flow

Effective Date: 2026-05-19Overview

This Privacy Policy explains how EXLEAD JAPAN Co., Ltd. collects, uses, stores, and protects information processed through EXLEAD Order Flow, an internal TikTok Shop operations tool.

EXLEAD Order Flow is used only by authorized internal staff to manage EXLEAD JAPAN’s own TikTok Shop operations, including order processing, fulfillment, shipping updates, and order-related customer support.

  1. Information We Process

Through authorized TikTok Shop API access, the app may process:

  • Order IDs, order status, package status, and order timestamps
  • Product, SKU, and quantity information related to orders
  • Buyer-provided order notes or order-related customization information
  • Shipping provider, tracking number, and fulfillment information
  • Order-related buyer messages and customer service conversation data, if approved by TikTok Shop
  • Shop authorization and webhook event records
  1. How We Use Information

We use this information only to:

  • Process and manage TikTok Shop orders
  • Confirm required order or customization information
  • Send predefined order-related support messages
  • Update shipping, package, and tracking information
  • Respond to order-related buyer inquiries
  • Notify internal staff when manual review is required
  • Maintain operational logs and prevent duplicate automated actions

We do not use buyer data for unrelated advertising, profiling, resale, or third-party marketing.

  1. Data Sharing

We do not sell, rent, or share buyer personal information with third parties.

Access to buyer, order, message, and fulfillment data is limited to authorized internal staff and internal systems necessary to operate the tool.

  1. Data Retention

We retain order, fulfillment, support, and automation records only for as long as necessary for order processing, customer support, legal compliance, dispute handling, and internal operational purposes.

When data is no longer required, it will be deleted or anonymized where reasonably possible.

  1. Security

We use reasonable technical and organizational measures to protect data, including:

  • HTTPS communication
  • Restricted internal access
  • Secure credential and token storage
  • API action logging
  • Duplicate-send prevention for automated messages
  • Manual review for sensitive or unclear customer service cases

API credentials, app secrets, access tokens, and refresh tokens are stored outside source code and are not included in public documents, screenshots, or logs.

  1. Buyer Requests

If a buyer has questions about order-related data or wants to request correction or deletion, they may contact us through TikTok Shop customer support.

  1. Contact

Business Name: EXLEAD JAPAN Co., Ltd.

Representative: Takeshi Nakao

Country/Region: Japan

Contact Method: TikTok Shop customer support

  1. Updates To This Policy

This Privacy Policy is reviewed and updated when app functionality, data processing, hosting, or applicable platform requirements change.