1. Who controls the data
AC2 FORMATION, SIREN 921 271 441 and SIRET 921 271 441 00013, operates AC2 Business Data Hub and is the controller of personal data described in this policy. Privacy enquiries may be sent to [email protected].
2. Scope
This policy covers this public application website, the private advertising operations application and advertising platform connections explicitly authorized through that application.
3. Information we process
Business account information
After an authorized TikTok Ads connection, we may process Business Center and advertiser identifiers, account name, currency, timezone, status and configuration. We store the authorization token required to maintain the connection.
Advertising operations information
When an operator uses the corresponding feature, we may process campaign, ad group, ad, creative asset and performance reporting data belonging to the authorized advertiser. We process only fields needed to perform the requested action and display its result.
Operator and security information
We process the operator account used to access our private panel and limited technical records needed to secure the service, investigate errors and document authorization activity.
Information we do not request
We do not ask users to enter their TikTok password in AC2 Business Hub. Authentication and approval occur on TikTok's authorization service. The submitted release does not request consumer TikTok profiles, private messages, lead data, contact lists or unrelated personal content.
4. Why we use the information
- To connect and configure an advertiser account after explicit authorization.
- To carry out account, campaign and creative actions initiated by an authorized operator.
- To display delivery and performance reporting for the authorized advertiser.
- To secure the service, prevent unauthorized access and investigate failures.
- To comply with applicable legal and platform obligations.
5. Legal bases
We process integration data to provide the requested service, for our legitimate interests in operating and securing the application, and where necessary to comply with law. Where consent is the appropriate basis, it can be withdrawn without affecting processing already performed lawfully.
6. Sharing and international transfers
Information is shared only with service providers needed to host, secure and operate the application, and with advertising platforms when the authorized operator initiates an integration action. Providers are required to protect the data and use it only for the contracted service. Cross-border transfers use safeguards required by applicable law.
7. Retention and security
Authorization credentials are retained while the integration remains connected. Cached advertiser information is kept only as long as needed for the operational purpose, security investigation or a legal obligation. We use access controls, encryption for stored secrets, transport encryption and audit records appropriate to the risk.
8. Your choices and rights
You may request access, correction, deletion, restriction or a portable copy where applicable, and may object to certain processing. You may revoke the platform connection directly in the relevant advertising account. See our data deletion instructions or contact us.
9. Changes
We update this notice when the product, requested permissions or legal requirements change. The date above identifies the current version.