Privacy rules for the internal Marketing API integration

Data controller

VIELUMI COMPANY LIMITED (CÔNG TY TNHH VIELUMI), business registration 0319013155, operates this website and the internal advertising integration described here.

Scope and separation

This notice covers the public ads.vielumi-global.com website and the restricted internal Marketing API workspace. It does not govern Vielumi's separate Content Posting product. Marketing API credentials and advertiser data are not made available to Content Posting users.

The public site does not offer account registration, accept payments, or place analytics cookies. Cloudflare may process ordinary network and security logs needed to deliver and protect the site.

Information processed

Subject to TikTok approval and account-holder authorization, the integration may process advertiser and Business Center identifiers, granted permissions, encrypted access credentials, campaign and ad group settings, ads, creative assets, delivery status, spend, performance metrics, and security audit records.

We do not request or store TikTok passwords. The current integration scope does not include customer-file audience uploads or the sale of personal data.

Purposes and access boundary

Information is used only to authenticate authorized API requests, administer Vielumi advertising, organize company-controlled creatives, measure performance, prepare internal reports, maintain security, and comply with applicable law and TikTok requirements.

Access is limited to designated Vielumi personnel with an operational need. Unrelated third-party advertisers cannot connect accounts through this site.

TikTok authorization and revocation

The account holder chooses whether to authorize access through TikTok. The integration acts only within the permissions and advertiser accounts returned by TikTok. Authorization may be revoked through TikTok or by contacting Vielumi. Revocation stops new API access and triggers removal of active credentials in accordance with the retention schedule.

Service providers and disclosure

Information may be processed by authorized Vielumi personnel, TikTok as the platform provider, and Cloudflare as hosting and security infrastructure. We disclose information when required by law or necessary to protect rights and security. TikTok data is not sold, licensed, or redistributed for unrelated purposes.

Security safeguards

Controls include HTTPS, secure OAuth state validation, server-side secret handling, encryption of stored tokens, role-restricted access, least-privilege review, audit records, security headers, dependency review, and procedures for authorization revocation and incident response.

Retention and deletion

Active credentials are kept only while the authorization and operational need remain valid. Detailed campaign and reporting information is retained only as needed for current advertising, security, accounting, or legal obligations. When authorization ends, eligible active data is deleted or irreversibly aggregated; protected backups expire under the backup schedule.

Requests and choices

Authorized account holders may request access, correction, deletion, restriction, or confirmation of revocation, subject to applicable legal obligations. Requests are verified to prevent unauthorized disclosure.

Privacy contact

Email info@vielumi-global.com with the subject “Marketing API Privacy”. Company details are available on the Company page.