Privacy Policy

FinalSale is a software service made by Ballin Brothers LLC ("we", "us"), a Wisconsin limited liability company, for sellers who run live auctions on TikTok Shop. It automates customer-service replies and return-request handling on a seller's behalf. This policy explains what information we collect, how we use it, and the choices you have.

1. Who this policy covers

• Sellers who create a FinalSale account and connect their TikTok Shop.
• Buyers whose orders, messages, or return requests are processed through a seller's connected shop. We process buyer data only on the seller's instructions, as the seller's service provider.

2. Information we collect

From sellers: email address (used to send you a one-time sign-in link and code; we do not store passwords), name (optional), shop name, the settings you choose in the app, the browser or device push-notification subscription you create when you turn on notifications, and a session token kept on your device so you stay signed in.

From TikTok Shop, with the seller's authorization: order details (order ID, items, amounts, status, shipping and tracking information), buyer messages sent to the seller's shop, return and refund requests including the buyer's stated reason and any photos, and the buyer's name and shipping address as provided on the order. We receive this through TikTok Shop's APIs under the permissions the seller grants.

Automatically: standard technical logs (IP address, device type, app version, timestamps) and records of the actions FinalSale takes.

We do not collect payment card numbers from buyers. Seller subscription payments, if any, are processed by a third-party payment processor; we do not store card numbers.

3. How we use information

• To reply to buyer messages and act on return or cancellation requests according to the seller's rules and TikTok Shop policy.
• To notify the seller (push notification, email) when a request needs their decision.
• To keep an audit log of every automated action so the seller can review it.
• To operate, secure, and improve the service, and to provide support.
• To comply with law and enforce our terms.

Message text and return-request details may be processed by an AI language model to classify the request and draft a reply. We use providers that do not train on our data and that process it under written data-protection terms.

4. How we share information

We do not sell personal information and do not share it for advertising. We share information only with:

• TikTok Shop, to send replies and return decisions back to the platform.
• Service providers that help us run FinalSale: cloud hosting and database (Railway, United States), transactional email for sign-in links and codes (Resend), push-notification delivery through your browser or device vendor's push service (Apple, Google, Mozilla), and AI text processing (Anthropic) for classifying messages and drafting replies. Each is bound by contract to use data only to provide services to us.
• Legal and safety recipients when required by law or to protect rights, safety, or the integrity of the service.
• A successor in a merger, acquisition, or sale of assets, with notice to sellers.

5. Data retention

• Buyer messages, order data, and return-request details are kept only as long as needed to act on them and for the seller's audit log, and are deleted no later than 180 days after the related order is closed.
• Seller account data is kept while the account is active. Sign-in links expire after 15 minutes and sessions after 30 days; push-notification subscriptions are deleted when you turn notifications off or when the push service reports them as expired.
• When a seller disconnects their TikTok Shop or deletes their FinalSale account, we revoke our access tokens and delete that shop's data within 30 days, except where we must retain records by law.

6. Security

Data is encrypted in transit (TLS) and at rest. TikTok access tokens are encrypted with a key held outside the database, sign-in and session tokens are stored only as one-way hashes, push notifications are end-to-end encrypted to your device as required by the Web Push standard, buyer personal data is stored encrypted, access is limited to personnel who need it, and administrative access requires multi-factor authentication. We maintain a written information security program and an incident-response process; if a security incident affects your data, we will notify affected sellers and TikTok Shop without undue delay.

7. Your choices and rights

• Sellers can view and edit account information in the app, pause automation at any time, and disconnect their shop or delete their account from Settings.
• Buyers should direct requests about their data to the seller they purchased from, or to TikTok Shop. If a request reaches us, we will help the seller fulfill it.
• Depending on where you live (for example, California or the EU/UK), you may have rights to access, correct, delete, or port your personal information, or to object to certain processing. You can exercise these rights by emailing privacy@finalsale.app. We respond within 30 days and will not discriminate against you for exercising your rights.

8. Data location

We store and process data in the United States. If you use FinalSale from outside the United States, you understand your information will be transferred to and processed in the United States.

9. Children

FinalSale is for business use by adults. We do not knowingly collect personal information from anyone under 18.

10. Changes

We may update this policy as the service evolves. We will post the new version here with a new effective date and, for material changes, notify sellers by email or in the app.

11. Contact