Privacy Policy

Last updated: 2026-05-15

This Privacy Policy explains how the TikTok Pixel Auto-Activate app (operated by 25Tools, the trade name of Shenzhen Banana International Trade Co., Limited) collects, uses, and shares information.

What we collect

• Shop information: shop domain, install timestamp, plan tier.
• Pixel configuration: TikTok Pixel IDs and Access Tokens you provide. Stored encrypted at rest on our servers, transmitted over TLS in transit.
• Customer events metadata: event name, timestamp, product/cart/order details that Shopify's Web Pixels API exposes.
• Hashed customer identifiers (email, phone, external order ID): collected only at the checkout_completed event. Each value is SHA-256 hashed inside the browser sandbox, before any network call, and only the hash is forwarded to TikTok. The raw email, phone, and order ID are never stored, logged, or transmitted by this app. Hashed email and phone are the industry-standard inputs for TikTok's Events Match Quality (EMQ) score, which materially improves ad attribution accuracy and reduces your cost-per-conversion.

How we use it

The app forwards customer events from your store's browser sandbox to TikTok's Events API in real time, so your TikTok ad campaigns receive conversion signals. Hashed email, phone, and external order ID at checkout are used solely as TikTok EMQ inputs for ad attribution — never for marketing outreach, profiling, sale, sharing with any other party, or any secondary purpose. This is the sole purpose of the data we touch.

Who we share with

Customer event data is transmitted to TikTok (business-api.tiktok.com) using the Access Token you provide. We do not share data with any other third party.

Data retention

• Event logs (for the in-app diagnostic panel) are kept for 30 days, then deleted.
• Pixel configurations persist for as long as the app is installed.
• Upon app uninstall, Shopify triggers the shop/redact webhook 48 hours later; we delete all of your shop's data at that point.
• You can request earlier deletion by submitting a ticket at support.launchngrow.com.

Your rights (GDPR)

We implement Shopify's three mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact). Requests from merchants on behalf of their customers are honored automatically.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of any "sale" of personal information. We do not sell personal information — customer event data is forwarded only to the TikTok Pixel(s) you have explicitly configured. To exercise these rights, email support@launchngrow.com and we will respond within 30 days.

Cookies

We do not set tracking cookies on your storefront. The events we forward use Shopify's sandboxed event IDs only.

Contact

Questions: support.launchngrow.com or support@launchngrow.com.