Privacy policy
This English translation is provided for convenience; in case of any discrepancy, the Portuguese version prevails.
Version 1.9 · effective from 12/11/2026
- We collect the minimum: your email, your in-app preferences and technical security data.
- We do not sell your data and do not use advertising cookies.
- Payments are processed by Stripe: we never see or store your card number.
- Our servers are in Switzerland. You can request access, correction or deletion at any time.
The summary helps, but the full text below is what applies.
1. Controller and contact
The data controller is Plancherel Solutions, a sole proprietorship based in Savigny (Vaud), Switzerland, registered under UID CHE-379.895.072 ("SoldTrack", "we"). For any privacy question, including to reach the data protection officer (DPO), write to contato@soldtrack.io.
2. What data we process
| Data | Purpose | Legal basis (LGPD) |
|---|---|---|
| Create the account, send the sign-in link, communicate about the subscription | Performance of a contract (art. 7, V) | |
| Sign in with Google (if you choose it): email, name and Google account identifier | Entrar na conta sem link por e-mail | Performance of a contract |
| Password (optional), stored only in hashed form | Entrar na conta sem link por e-mail | Performance of a contract |
| Site visit statistics: page viewed, referring site, campaign, device type and a non-reversible daily code (no cookie, the IP address is not stored) | Understand which pages and channels work | Legitimate interest (art. 7, IX); data kept for up to 400 days |
| Signup source (the site, social network or campaign you came from) and the creator or invitation code used | Measure channels, pay commissions and give the invitation or code benefits | Contract performance and legitimate interest |
| Name, profile (affiliate, seller, agency), goals, declared revenue range and categories of interest | Personalize the dashboard and emails | Performance of a contract |
| News and offers by email (optional) | Sending new features, guides and promotions, if you tick that option | Consent (art. 7, I), which you can withdraw at any time in My account or in the email itself |
| Favorites and app usage (pages and products viewed) | Running the service, improvements, abuse prevention | Performance of a contract and legitimate interest (art. 7, IX) |
| IP address, browser, access dates | Security, prevention of fraud and data extraction | Legitimate interest |
| Payment data (name, country, last card digits, payment status) | Billing, receipts and accounting obligations | Performance of a contract and legal obligation (art. 7, II) |
| Messages sent to support ("Help" button in the app or email) | Answer your questions and requests, and improve the service | Contract performance and legitimate interest |
| Daily email summary (trending products in your categories) | Part of the service: tell you what changed in the data since yesterday. Can be turned off in 1 click in the email itself or in My account | Performance of a contract and legitimate interest (art. 7, V and IX) |
| News and content emails | Marketing communication | Consent (art. 7, I), which can be withdrawn at any time |
| Free report and “Joias da semana” without an account: email, chosen niche, visit source and confirmation and sending dates | Send the report link and, if you ask for it, the new hidden gems of your niche once a week. Unconfirmed requests are deleted after 7 days | Consent (art. 7, I), which can be withdrawn in 1 click in the email itself |
| Favorites alerts (Pro and Agency plans) | Email you when a product you follow takes off or drops in price. Can be turned off in 1 click in the email or in My account | Performance of a contract |
| Agency plan team: email of the people invited by the account owner | Send the invitation and give access to the team plan. The invitation expires in 7 days | Contract performance and legitimate interest |
We do not process sensitive data and the service is not intended for people under 18.
3. Public data about shops, creators and buyers
SoldTrack also organizes information that the data subjects themselves made public on TikTok, for market analysis purposes (legitimate interest, art. 7, IX and § 4 of the LGPD):
- Shops and products: shop name, titles, prices and publicly displayed sales.
- Content creators: public username, display name, profile photo, follower count and the public figures of videos promoting products (views, likes, comments, shares, date), with a link to the original video. We do not collect private messages, contacts or data from private accounts.
- Buyer reviews: we only keep the rating, the text, the variant bought, the date, the number of photos and whether the purchase was verified. We do not keep buyers' names, profile photos or photos.
Removal on request. If you are a creator, shop owner or review author and do not want to appear on SoldTrack, write to contato@soldtrack.io with your username. We remove your data within 5 business days and block future collection.
4. Who we share data with
We do not sell or rent personal data. We only share what is necessary with providers acting on our behalf:
- Infomaniak (Switzerland): hosting of the servers and database;
- Stripe (Ireland/USA): payment processing, as the official reseller (merchant of record), including tax collection and receipts;
- Brevo (France, European Union): sending transactional emails (sign-in links, account notices and support replies) and the free report emails;
- Google (Ireland/USA): authentication, only if you choose to sign in with your Google account;
- authorities, when required by law or court order.
5. International transfer
Your data is stored in Switzerland. Transfers from Brazil are based on art. 33 of the LGPD, with contractual clauses and appropriate security measures with our providers. Switzerland has its own data protection law (nFADP) with a high level of protection.
6. How long we keep data
- Account data: while the account exists and up to 12 months after it is closed (for support and abuse prevention), then deleted or anonymized.
- Payment records: for the period required by accounting and tax law (up to 10 years in Switzerland).
- Sign-in links: expire after 15 minutes and are deleted within 24 hours. Sessions: up to 30 days.
- Technical security logs: up to 90 days.
7. Security
We use encrypted connections (HTTPS), passwordless access with single-use links, sessions stored only as hashes, a database not exposed to the internet, least-privilege access and backups. No system is 100% secure; in case of a significant incident, we will notify the affected people and the competent authorities, as required by law.
8. Your rights
Under art. 18 of the LGPD (and the Swiss nFADP), you may at any time: confirm whether we process your data; access it; correct it; request anonymization, blocking or deletion; request portability; know who it was shared with; and withdraw consent. Just write to contato@soldtrack.io from your account email. We reply within 15 days.
You may also lodge a complaint with the National Data Protection Authority (ANPD) in Brazil or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.
9. Cookies
We only use cookies strictly necessary to run the service. Details in the Cookie policy.
10. Browser extension
The free SoldTrack for Chrome extension works only on TikTok Shop product pages. It reads only the product number in the page address and sends it to the SoldTrack server to fetch that product's figures (sales, category rank, price comparison). If you are signed in to SoldTrack, the browser also sends your session cookie, to show your plan's data.
The extension does not read page content, does not access your history, does not collect personal data, shows no ads, and does not sell or share data. Requests are logged like other access to the service (section 2) and protected against abuse.
11. Changes
This policy may be updated. Significant changes will be communicated by email or in the app.