TRUST & TRANSPARENCY
Privacy policy
How information is handled on this website and in the wantime desktop software and related services. Website visits and software features involve different information; read the sections relevant to your use.
Effective and updated: November 2, 2026
01Operator and scope
This website and wantime services are provided by 厦门咔哇叽网络科技有限公司, presented on this website as Kawaji Network Technology. Contact service@xmiyao.com for privacy enquiries. This policy distinguishes public website visits, software accounts, content processing initiated by users and third-party platform authorization.
02Visiting this website
This public information website has no account registration, online payment or document upload form. It does not embed advertising, third-party analytics or tracking cookies. Servers may record IP addresses, request paths, access times, browser information and errors to deliver the website and investigate security or technical issues. If you contact us by email, mail services process the contact details and content you send. Do not include platform passwords, access tokens or identity documents in general enquiries.
03Software and account services
Account services may process email addresses, names, password hashes, installation identifiers, operating systems, client versions, entitlements and necessary security records. When you choose product editing, task processing or AI features, relevant product information, images, prompts, task states and generated results may be processed locally or on our servers. Some materials are stored on your computer; accounts, entitlements and business tasks also require server processing. Data is not exclusively stored locally.
04TikTok Shop authorization and use
This integration is in development and validation. When enabled, it processes shop identifiers, names and regions, and product, SKU, category attribute and warehouse information within the scope authorized through TikTok and the shops you select, for shop binding and data reading. Access tokens, refresh tokens and necessary internal shop credentials are stored encrypted on the server. The integration does not ask you to enter your TikTok password in our software. It does not currently provide order buyer personal data, payments or product write operations.
05Third-party services and transfers
Platform integrations exchange authorization and API data with the relevant platform. AI features send relevant product information, prompts and selected images through the server to the configured third-party model provider. Providers, processing locations and applicable policies depend on the service configuration; contact our privacy email before use if you need these details. Do not submit personal information or confidential material you are not authorized to process. Hosting, email and necessary technology providers may process data to deliver their services. Data may be processed abroad when overseas services are involved; the applicable processing arrangements and authorization should be confirmed beforehand.
06Storage, security and retention
Information is retained as needed to provide services, protect security, resolve disputes and meet applicable obligations. When a purpose ends, deletion, de-identification or restricted processing is applied as appropriate to the data. Account and task history, necessary audit records and backups may have different retention arrangements; deletion or unbinding does not immediately erase all copies. Account passwords are hashed, platform credentials are encrypted at rest, and identity and access controls restrict processing. No technical measure guarantees absolute security.
07Unbinding, revocation and deletion
You can unbind a shop through supported software controls; it will no longer be used as an active connection. When the final shop binding under a TikTok authorization is removed, the server clears the tokens and shop credentials held in that authorization record. Unbinding is not the same as revoking access on TikTok; use TikTok’s app management controls for platform-side revocation. Connection history, tasks and necessary audit records may remain. There is no complete one-click account closure feature; contact us for account closure or further deletion requests.
08Your choices and requests
Contact service@xmiyao.com to request access, correction, deletion, account closure, withdrawal of authorization or information about processing arrangements. We will perform proportionate identity and authority checks and handle requests according to applicable requirements. If information must be retained, we will explain the relevant reason. Withdrawal does not affect processing carried out under valid authorization before withdrawal.
09Children and policy updates
The software services are intended for authorized business users and adults, and do not actively seek information from children. Contact us if you believe information was collected inappropriately. We will update this policy when services or processing practices change, and provide additional notice or obtain authorization where required.