Privacy Policy

1. Single Purpose of the Extension

Supover Seller Hub is a management and automation tool for e-commerce sellers. Its single purpose is to help sellers operate their own online stores on TikTok Shop — including store synchronization, order synchronization and lookup, Flash Sale management, Request Review (asking your own buyers for a product review), product/variant listing creation, synchronization of the product reviews your own shop has received, and payout/settlement synchronization with the payment and fulfillment providers you use (PingPong, LianLian, WorldFirst, FlashShip, Gearment, SimplePrint, Printify). The Extension only collects and processes data in direct support of these features. Support for Etsy and Shopify was offered in earlier versions and has been removed entirely.

2. Data We Collect

The table below lists every category of user data defined by the Chrome Web Store, and states clearly whether the Extension handles it. Data is accessed only when you use the related feature.

3. How and Where We Collect Data

Data is collected only while you are signed in and actively using the Extension, and only on these domains: tiktok.com, pingpongx.com, lianlianglobal.com, worldfirst.com, simpleprint.io, seller.flashship.net, gearment.com, printify.com and supover.com. The Extension reads the information listed in Section 2 directly from the pages and APIs of those services, using your own authenticated session. Apart from the local connection described in the next paragraph, the Extension does not run on, read from, or collect anything from any other website. Earlier versions also ran on etsy.com, admin.shopify.com and the marketplace domains amazon.com, ebay.com, walmart.com and pinterest.com; all six have been removed from the Extension.

Timezone. To schedule Flash Sales in your own timezone, the Extension reads the timezone your browser already reports through the standard Intl.DateTimeFormat API (Section 2, “Location”). This involves no network request: the value is used on your own device and is not sent to Supover or to anyone else. The IP-based region lookup used in earlier versions (api.ipify.org and ipapi.co) has been removed.

Local anti-detect browser integration. If you use the Hidemyacc anti-detect browser, the Extension additionally queries that application’s local API on your own computer (http://127.0.0.1:2268) to read the browser profile and proxy configuration you have already set up there, and to start the matching profile, so that requests to your seller platforms go out through the proxy you intended. This is a connection to software running on your own device; the Extension sends nothing to Hidemyacc’s own servers. It reads the profile name and ID, the browser user-agent of that profile, and the proxy settings (host, port and, where you configured one, the proxy username and password). When you run a store synchronization, the proxy address and credentials, the profile ID and the user-agent are stored against your store record on the Supover backend (ai.supover.com), so that later synchronizations for that store are performed through the same proxy and browser identity. They are used for no other purpose and are not shared with anyone else. If Hidemyacc is not installed or not running, the check simply fails silently and the Extension continues without a proxy.

The Extension requests only the browser permissions it needs for the features above:

4. How We Use Data

• To provide the Extension’s core features: store sync, order sync and lookup, Flash Sale, Request Review, listing/variant creation, product-review sync, payout & settlement sync, and bulk updates.
• To power the optional AI-assisted features you explicitly trigger — AI product-image mockup/redesign, and store recommendations. When you use one of these, the relevant data (the image URL you selected; or your store’s payout/health summary) is sent to Supover’s AI service at n8n.supover.com, which may in turn pass it to a third-party AI model provider such as Google Gemini or OpenAI in order to generate the result that is returned to you. The AI image-generation request carries an AI-provider API key field; the Extension no longer offers a settings panel for entering one, so this field is sent empty unless a key was saved on your device by an earlier version. Any such key is kept only on your own device via Chrome’s storage.local (see Section 6), is never stored on Supover’s servers, and is erased when you uninstall the Extension. These features run only when you activate them.
• To authenticate requests to your connected store, payment and fulfillment accounts on your behalf.
• To keep your store sessions synchronized and maintain service reliability and security.

We do not sell or rent your data. We do not use or transfer it for advertising, ad targeting, profiling, credit assessment, lending, or any purpose unrelated to the Extension’s single purpose. We do not use it to train generalized machine-learning or AI models: data sent to the AI features described above is used only to generate the result you asked for and return it to you. Human beings do not read your data except where strictly necessary to provide support you requested, to comply with the law, or to investigate abuse or a security incident.

5. Compliance with the Chrome Web Store Limited Use Policy

Supover Seller Hub’s use of information received from the Extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. All user data collected by the Extension is used solely to provide and improve the user-facing features described in this policy, and is never sold, never used for advertising, and never transferred except as required to provide those features, to comply with applicable law, or as part of a merger or acquisition in which case we will give affected users notice.

6. How We Store, Protect and Retain Data

• Where: operational data (store, order, payout and account data) is processed and stored on Supover’s servers at ai.supover.com. Account avatar images are stored on Backblaze B2 cloud storage. The product images you download with “Get Image” are saved directly to your own device and are not uploaded anywhere.
• Locally: your auth token, user/shop info and per-feature settings — including any AI provider API key you choose to save — are stored on your own device via Chrome’s storage.local API. Nothing is stored in chrome.storage.sync, so this data is not synchronized to other devices, and none of it leaves your device except as described in Section 8.
• In transit: all traffic between the Extension, Supover’s servers and the third-party platforms is sent over HTTPS (TLS, encrypted in transit).
• At rest: server-side databases, backups and cloud object storage used by Supover are protected using access controls and encryption at rest provided by the hosting, database and storage providers. Locally stored Extension data is protected by Chrome and the operating system profile on your device.
• Access control: server-side data is accessible only to your own Supover account and to authorized Supover personnel bound by confidentiality obligations, on a need-to-know basis.
• Retention: store, order, payout and listing data is retained for as long as your Supover account remains active, because it is your operating record as a seller. On account closure or on a verified deletion request it is deleted within 30 days, except where a longer period is required by law (for example tax or accounting records). Locally stored data is removed from your device as soon as you uninstall the Extension.

7. Your Customers’ Data — Roles and Responsibilities

Some of the data the Extension processes is personal data belonging to your customers (buyer names, addresses, phone numbers and email addresses inside your own orders). For that data you are the data controller and Supover acts as a data processor on your instructions: we process it only to deliver the order-sync, fulfillment and review-request features you activate, and never for our own purposes. You are responsible for having a lawful basis to process your customers’ data and for honoring their rights under applicable law. If one of your customers asks us directly to access or delete their data, we will refer them to you and assist you in responding.

8. How We Share Data

We share data only as needed to operate the Extension:

We do not sell, rent, or share your personal or sensitive data with third parties for their own marketing or any unrelated purpose. There are no advertising networks, analytics trackers or data brokers involved. We may disclose data only where required by law or valid legal process.

9. User Consent and Control

• Data collection begins only after you install the Extension and sign in. While you are signed out, no data is read or sent.
• Most actions — Flash Sale, Request Review, listing creation, Get Image, AI image mockup/redesign, and the manual Check Order / Sync Order / Extract Transactions buttons — run only when you start them.
• Some synchronization runs automatically while you are signed in, so that your Supover dashboard stays up to date without you having to press a button each time. Specifically: (a) when you open your own TikTok Shop seller pages, the Extension synchronizes your store profile, sales-channel list, pending order statuses and the product reviews your shop has received; and (b) when you open one of the payment or fulfillment portals listed in Section 3 (PingPong, LianLian, WorldFirst, FlashShip, Gearment, SimplePrint, Printify), it extracts your own transaction records from that portal and uploads them to Supover, at most once every two hours per provider, showing a progress panel that you can cancel. These automatic syncs read only your own store, order and transaction data on those specific domains.
• The Extension does not collect anything from pages you are merely browsing outside the domains listed in Section 3, and does not read third-party product pages or record your browsing.
• You can stop all data collection at any time by signing out of, disabling, or uninstalling the Extension.
• You remain in control of your connected store accounts and may disconnect them at any time.

10. Data Deletion & Your Rights

You may request access to, a copy of, correction of, or deletion of your personal data held by Supover by emailing us at the address in Section 13. We will verify your identity and respond within 30 days. Depending on where you live you may also have the right to object to or restrict processing, to data portability, and to lodge a complaint with your local data protection authority. Uninstalling the Extension immediately removes all locally stored data from your browser.

11. Children’s Privacy

The Extension is intended for business sellers and is not directed to children under 13. We do not knowingly collect data from children. If we learn that we have collected data from a child under 13, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page and reflected by updating the “Last updated” date at the top.