Privacy Policy

1. Information we collect

Information you provide. When you create an account, subscribe to a paid plan, purchase a product, submit a contact form, request API access, or authorize an integration, we collect the information you give us directly. That may include your name, email address, billing address, company name, phone number, profile information from your social accounts you connect, content you upload or generate through our services, and any other information you choose to send us.

Information collected automatically. When you visit our websites or use our apps we automatically collect technical data such as IP address, browser type and version, operating system, device identifiers, pages viewed, referral source, and timestamps. We use this data for security, fraud prevention, and service improvement.

Information from integrations you authorize. If you connect a third-party account (for example TikTok, YouTube, LinkedIn, X, Pinterest, Instagram, Stripe, Gumroad, or Cryptohopper) we receive the scopes you explicitly grant during the OAuth or API-key authorization. For TikTok Content Posting API the scopes we request are limited to video.upload and video.publish on your own account. We do not read your TikTok inbox, messages, followers, or unrelated account data.

Information from payment processors. When you pay for a subscription or product we use Stripe and PayPal as payment processors. Your card number, bank information, and full payment details are collected and stored by Stripe or PayPal under their own privacy policies and PCI-DSS compliance. A3E receives only the metadata needed to reconcile your order (transaction ID, amount, currency, last four digits of card, billing country).

2. How we use your information

• To create and operate your account, deliver the services you purchase, and provide customer support.
• To publish content to third-party platforms you have connected, only when and as you instruct, and only to your own account on that platform.
• To process payments, issue receipts, and handle refunds and chargebacks.
• To send transactional email (receipts, password resets, integration expiry notices, and service announcements you are entitled to as a customer).
• To improve our products and train the internal reasoning of our proprietary AI engines on aggregated, de-identified usage patterns. We do not train foundation models on your raw content without explicit written consent.
• To comply with legal obligations, enforce our Terms of Service, and protect the rights, property, and safety of A3E, our customers, and the public.

3. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data under one or more of the following legal bases: performance of a contract with you, your consent (which you may withdraw at any time), our legitimate interests in operating and securing our services, and compliance with legal obligations.

4. Sharing and disclosure

We do not sell personal information. We share personal information only with:

• Service providers and subprocessors that host our infrastructure, process payments, deliver email, analyze aggregated traffic, and provide similar operational functions, all under written data-processing agreements that restrict their use of your data to providing the service to us.
• Platforms you connect (TikTok, YouTube, LinkedIn, X, Pinterest, Instagram, Gumroad, Stripe, PayPal, Cryptohopper, and others you authorize), only to the extent needed to carry out the action you requested on your own account there.
• Authorities and other parties when required by subpoena, court order, or applicable law, or when necessary to protect the safety, rights, or property of A3E, our customers, or the public.
• Successors in connection with a merger, acquisition, reorganization, or sale of assets, subject to equivalent privacy protections.

5. TikTok integration specifics

When you connect a TikTok account to our A3E Content Publisher app, we receive an OAuth access token scoped to the permissions you granted (at minimum, permission to upload and publish videos to your own account). We use this token only to:

• Upload video files you have explicitly queued for publication to your own TikTok account.
• Read the public metadata TikTok returns about the uploads we initiate (upload status, video ID, and any error codes) so we can display delivery confirmations in your dashboard.

We do not read your private messages, your followers list, or content we did not upload. We do not post to your account without your instruction. You may revoke access at any time from your TikTok account settings at tiktok.com/setting/connected-apps, or by disconnecting the integration inside your A3E dashboard. On revocation we delete the stored access token within 30 days.

6. Data retention

We keep personal information only as long as needed to provide the service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Access tokens for connected platforms are deleted within 30 days of revocation or account deletion. Billing records are retained for up to 7 years to meet Canadian tax and accounting requirements.

7. Security

We protect personal information with industry-standard safeguards including TLS encryption in transit, encryption at rest for sensitive fields such as access tokens, strict access controls, network segmentation, and routine security reviews. No system is perfectly secure, and we cannot guarantee absolute security, but we act promptly to investigate and contain any suspected incident and will notify affected users and regulators as required by law.

8. International transfers

A3E is headquartered in Canada. If you access our services from outside Canada, your information will be transferred to, stored in, and processed in Canada and in any country where our subprocessors operate. By using our services you consent to this transfer. Where required, we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards for transfers of personal data from the EEA, the UK, or Switzerland.

9. Your rights

Subject to your jurisdiction, you have the right to access your personal information, correct inaccuracies, request deletion, restrict or object to processing, request a portable copy, and withdraw consent you previously gave. Residents of California have rights under CCPA including the right to know, delete, and opt out of any sale of personal information (we do not sell personal information). Residents of Canada have rights under PIPEDA. Residents of the EEA and the UK have rights under the GDPR and UK GDPR.

To exercise any of these rights, email us at [email protected]. We respond within 30 days. We may ask you to verify your identity before we act on a request.

10. Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Cookies and similar technologies

We use first-party cookies for session authentication and basic analytics. We do not operate third-party advertising cookies. You can disable cookies in your browser; some features of the site will not work without them.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version with a new Last-updated date and, for material changes, provide reasonable advance notice by email or in-product notice. Continued use of our services after an update constitutes acceptance of the updated policy.

13. Contact us

A3E Ecosystem Inc.
28 Frontenac Crescent, Brampton, Ontario L7A 3M7, Canada
Email for privacy matters: [email protected]
General contact: [email protected]