Creative Fun

CREATE FUN INC

Privacy Policy

Effective date: May 7, 2025. Last updated: September 12, 2026. This Privacy Policy explains how CREATE FUN INC collects, uses, shares, stores, and protects personal information when creators use the Creative Fun web application.

Our Data Protection Commitments

Scope

Creative Fun is a free web tool for TikTok Shop creators in the United States. The service helps creators connect their TikTok Shop account, review showcase products, compare commission opportunities, and add eligible products only after creator approval.

Signing Out

Signing out invalidates the current website session without removing TikTok Shop authorization or granting new permissions. Deleting your Creative Fun data also removes any records of previously registered device sign-in credentials. Those credentials can no longer be used to sign in.

Information We Collect

We collect information only when a creator uses the service or authorizes access through TikTok Shop.

We do not intentionally collect Social Security numbers, payment card numbers, health information, or government identification numbers through Creative Fun.

How We Use Information

TikTok Sign-In and Account Association

TikTok Login Kit requests only basic profile access. We process the application-specific account ID and display name returned by TikTok. Login Kit tokens are used only during verification and are not stored. A signed, HttpOnly browser cookie containing the display name, result and verification expiry lasts up to 10 minutes. Hashed one-time request state is retained for up to 10 minutes to prevent replay.

When you connect your verified TikTok sign-in to a separately verified Shop account, we save a keyed hash of the Login Kit identity and an encrypted association with that Shop authorization. You may complete this while signed into an existing showcase session, or after a new Shop authorization. During first-time connection, an encrypted, HttpOnly browser cookie holds the verified login identity for up to 10 minutes and binds it to that Shop authorization request. Later TikTok sign-ins may use the saved association to create a new website session while the same Shop authorization remains valid. We do not match accounts using names or assume that identifiers from different TikTok apps are equal. Association records expire within the existing authorization period, up to 30 days, and are removed when you delete your saved Creative Fun authorization data. Signing out clears pending login requests without deleting the association or revoking Shop access.

Sandbox association testing is limited to registered TikTok test accounts. It is separate from public production login. Signing in or linking accounts does not grant optional agency management or change showcase products.

TikTok Shop Authorization

Creative Fun uses TikTok Shop APIs only within the scopes authorized by the creator and approved for the Creative Fun application. Creators can revoke authorization through TikTok Shop where supported by TikTok Shop.

One-Click Link Updates

Clicking Find & update links is your approval for that run to scan your showcase, compare active offers, and automatically replace existing product links with Creative Fun promotion links where the verified commission is higher or equal. There is no second confirmation screen for this action. Same-rate switches change agency attribution without increasing commission; no products are added or removed.

Preview only does not submit changes. Selected manual updates, including same-rate switches, require a separate confirmation. Signing in, reloading the page or enabling agency management does not automatically start a boost. Stop prevents further groups from starting; a submitted group may still finish. Unconfirmed outcomes are not reported as successful.

Optional Agency Management

Before connecting TikTok, you may opt in to agency management on our connection page, or enable it later in Account settings. This allows authorized Creative Fun staff to view your showcase, add eligible agency products, and switch existing products to agency promotion links while you are offline. Existing products are not removed and commission rates are not lowered. Same-rate switches change the link without increasing your commission. This permission is off by default and is recorded with its consent version and expiry.

Permission lasts up to 30 days within your current TikTok authorization. Stop agency management in Account settings at any time to prevent future staff changes. This does not undo completed changes. A new TikTok authorization requires a new management choice. Staff actions are recorded in the restricted operation history. This optional staff permission is separate from a commission boost or manual update that you initiate yourself.

Sharing Information

We may share information with TikTok Shop as needed to provide authorized API functionality, service providers that host or operate Creative Fun, professional advisors when reasonably necessary, and authorities or other parties when required by law or to protect rights, safety, or security.

Service providers are expected to use information only to provide services to CREATE FUN INC and to apply appropriate security safeguards.

Data Storage and Processing Locations

Creative Fun is hosted at https://app.createfunmcn.com. The application is configured to use Vercel's United States region for application functions. DNS for createfunmcn.com is managed through Alibaba Cloud.

Our primary database is hosted by Supabase in a United States region. Internal creator service records are protected by restricted database roles and a separate administrative login. Hosting network delivery, your browser, TikTok and other independent providers may process data outside this region; a US database does not mean every internet request remains in the US. Encrypted authorization cookies are stored on your browser to maintain your connection. Access and refresh credentials are also stored encrypted in our restricted cloud database so an existing signed-in session can renew its connection. They are not exposed in internal reports.

Data Retention

Showcase observations and link-update records are retained for up to 180 days. Profiles are removed after 180 days without service activity. A scheduled daily cleanup enforces these limits. Encrypted session-renewal state expires within 30 days. Saved authorization credentials expire within 30 days of authorization, or earlier if the underlying token lifetime ends, and are removed by daily cleanup. Deleting your Creative Fun data removes these saved credentials from the active database. Minimal hashed deletion markers are retained for up to 31 days to prevent old sessions from re-creating deleted records. Deleted data may remain in restricted backups until those backups expire under the hosting provider's retention schedule; backups are not used for normal reporting.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information. Safeguards include HTTPS, restricted access to production credentials, environment variable storage for application secrets, multi-factor authentication where available, least-privilege access, incident response procedures, and data deletion procedures.

Creator Choices and Requests

While signed in, open My data in the workspace to delete your active Creative Fun profile, showcase observations and link-update records and sign out. This does not delete your TikTok account, undo showcase links, or revoke platform authorization. You can separately revoke Creative Fun access through TikTok Shop. Creators may also contact us to request access, correction, deletion, or assistance with account-related data. We review and respond to requests consistent with applicable law, TikTok Shop requirements, and our technical ability.

Contact

CREATE FUN INC
350 Northern BLVD STE 324-1331
Albany, NY 12204, USA
Privacy contact: createfun_us@createfunmcn.com