Privacy Policy - NaviKit for TikTok Shop

Last updated: June 4, 2026

1. Overview

NaviKit for TikTok Shop is a Chrome extension that helps TikTok Shop sellers analyze product profitability, research competitors, evaluate creators, and track product prices. This policy describes what data we collect, how we use it, and your rights.

2. Data We Collect

2.1 Personal Information

We collect your email address when you create an account. You may optionally provide your name.

2.2 Authentication Data

We store your password in bcrypt-hashed form. We issue JWT tokens and refresh tokens (SHA-256 hashed) for session management. No authentication data is stored in plaintext.

2.3 Website Content (TikTok Shop Pages)

When you visit TikTok Shop product pages, search results, or creator profiles, our content script reads the following publicly visible data from the page:

Product ID, title, price, and shipping info (for profit calculation)
Product ratings and review text (for AI analysis)
Sales estimates and seller information (for competitor analysis)
Creator follower counts, engagement metrics, and content data (for creator evaluation)

This data is sent to our server only when you actively use a feature (e.g., clicking "Calculate Profit" or "Analyze Reviews"). We do not collect data from any websites other than TikTok Shop.

2.4 Usage Data

We track daily API request counts (profit calculations, competitor analyses, creator evaluations) to enforce subscription plan limits.

2.5 Payment Data

We use Creem as our payment processor. We do not collect, store, or access your credit card or payment method details. Creem handles all payment data in compliance with PCI-DSS standards.

3. Browser Permissions

The extension requests the following permissions:

Permission	Purpose
storage	Store your login credentials and preferences locally in your browser
sidePanel	Display the dashboard sidebar for account management and watchlist
Host permission (tiktok.com, shop.tiktok.com)	Read product and creator data from TikTok Shop pages to provide analysis features
Host permission (ttapi.navikit.cc)	Communicate with our backend API for account management and AI features

4. How We Use Your Information

To provide profit calculation, competitor analysis, and creator evaluation features
To process and manage subscription payments
To enforce usage limits per subscription plan
To track watched product prices for Watchlist users
To deliver AI-powered insights (review analysis, title optimization, creator matching)

5. Data Storage and Security

All data is stored on secure servers with HTTPS/TLS encryption in transit
Passwords are hashed using bcrypt
Authentication tokens are hashed using SHA-256
Database access is restricted and authenticated
Product snapshot data is retained for trend analysis and automatically cleaned up

6. Third-Party Services

Service	Purpose	Data Shared
Creem	Payment processing	Email, subscription plan
GLM AI (Zhipu)	AI-powered insights (review analysis, creator matching)	Product titles, review text, creator profile data (all publicly available)

We do not sell, trade, or share your personal information with any other third parties.

7. Data Retention

Account data: Retained until you request deletion
Product snapshots: Retained for trend analysis and price history features
Watchlist data: Retained until you remove the product or delete your account
Usage tracking: Retained for billing and limit enforcement

8. Your Rights

You may request:

Access to your personal data
Correction of inaccurate data
Deletion of your account and all associated data

To exercise these rights, contact us at krebs.chen@163.com.

9. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, and other regions with data protection laws:

Legal Basis: We process your data under legitimate interest (providing the service you signed up for) and contract performance (delivering your subscription features).
Right to Withdraw Consent: You may withdraw consent for optional data processing at any time by contacting us.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

10. Children's Privacy

Our service is intended for adults (18+) who are TikTok Shop sellers. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes via email or in-app notification.

12. Contact

If you have questions about this privacy policy, please contact us at:

Email: krebs.chen@163.com