Privacy Policy
This is an English translation provided for convenience. The French version is the authoritative text.
Data controller: Novoca — Hugo Cossa, sole proprietor (EI), 22 rue de la Gare, 57300 Hagondange, France — hello@novoca.io. Last updated: August 11, 2026.
Data we collect
- Creators: TikTok username, content description, product file, Stripe Connect account (managed by Stripe).
- Buyers: email address (product delivery) and purchase amount. Payment data (card details) is processed exclusively by Stripe and never passes through our servers.
Purposes
This data is used solely to operate the service: generating and hosting shops, processing payments, delivering products, and sales statistics for the creator. No data is sold or used for advertising purposes.
TikTok connection (optional)
If you connect your TikTok account (“Connect my TikTok” button), Novoca reads — with your explicit consent, through the official TikTok API — your public profile (display name, avatar, bio, follower and like counts) and the list of your public videos with their public counters (views, likes, comments, shares). Novoca never reads your messages, drafts, comment contents, or any other user’s data, and never posts on your behalf. This data is used solely to produce your analysis and recommendations. Access tokens are encrypted. Disconnecting (from the Studio or your creator dashboard, or by revoking access in TikTok’s settings) deletes the synced TikTok data; only already-produced analyses, which are aggregates, are retained.
Processors
Stripe (payments), Supabase (database and files), Vercel (hosting), Anthropic (generation of shop content — only the creator’s username and public description are transmitted), Resend (delivery emails).
Retention
A shop’s data is retained for as long as the shop is online. Sales records are retained for the legally required accounting period.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase and port your data. Write to hello@novoca.io. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).