Privacy Policy & Terms of Service
Effective Date: 26 September 2026
Last Updated: 26 September 2026
Welcome to Kitsuly.
Kitsuly provides ecommerce software, website-building functionality, store-management tools, marketing features, social-media integrations, payment integrations, shipping functionality, customer-management tools, artificial-intelligence integrations and related services for WordPress-based businesses.
This document contains both:
Part A — Privacy Policy
Part B — Terms of Service
It applies to the Kitsuly website, Kitsuly Commerce software, Kitsuly accounts, APIs, integrations, applications and related services operated under the Kitsuly name.
For privacy, account or data-deletion enquiries:
Email: support@kitsuly.com
Website: https://kitsuly.com
For the purposes of this document, “Kitsuly”, “we”, “our” and “us” refer to the operator of the Kitsuly platform and associated services.
“User”, “you” and “your” include merchants, store administrators, website users and other persons using Kitsuly.
PART A — PRIVACY POLICY
1. Our Commitment to Privacy
Kitsuly respects the privacy of its users and is committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains:
- what information Kitsuly may collect;
- why information is collected;
- how information is used;
- how information may be shared;
- how long information may be retained;
- how third-party integrations are handled;
- how TikTok information is handled;
- how you can disconnect third-party services;
- and how you can request access, correction or deletion of your information.
The information processed by Kitsuly depends on the functionality that you choose to use.
2. Information We May Collect
Kitsuly may process information that you provide directly, information generated through your use of the platform and information provided by third-party services that you expressly connect.
This may include:
Account Information
We may process:
- name;
- email address;
- business name;
- telephone number;
- account username;
- website address;
- store domain;
- user role;
- account preferences;
- licence information;
- subscription information;
- and account identifiers.
Technical Information
Kitsuly may process:
- IP address;
- browser type;
- operating system;
- device information;
- server information;
- approximate geographic location derived from IP address;
- timestamps;
- authentication activity;
- application logs;
- error information;
- security events;
- integration status;
- and diagnostic information.
Ecommerce Information
Where Kitsuly is used to operate a store, the merchant’s Kitsuly installation may process:
- customer details;
- orders;
- products;
- inventory;
- shipping information;
- bookings;
- subscriptions;
- transaction references;
- invoices;
- refunds;
- returns;
- customer communications;
- and other information necessary to operate the store.
Independent merchants using Kitsuly are responsible for complying with applicable privacy legislation concerning information they collect from their own customers.
3. Information Received Through TikTok
Kitsuly allows authorised users to connect their own TikTok account to Kitsuly.
Kitsuly uses TikTok’s official authentication and developer systems.
Kitsuly does not request or store your TikTok password.
When you choose Connect TikTok, TikTok handles the authentication process and asks you to approve the permissions requested by Kitsuly.
Depending on the permissions you approve and the TikTok functionality you use, Kitsuly may receive or process information including:
- TikTok user identifiers;
- TikTok Open ID or equivalent account identifier;
- TikTok display name;
- profile information made available under the authorised scope;
- profile image where supplied by TikTok;
- connection status;
- permissions you have granted;
- access tokens;
- refresh tokens where provided;
- token expiration information;
- content selected for publication;
- captions;
- hashtags;
- media information;
- privacy selections;
- interaction selections;
- TikTok publishing identifiers;
- publishing status;
- API responses;
- errors generated during publishing;
- and technical information reasonably required to operate the integration.
Kitsuly only requests TikTok permissions that are reasonably necessary for the functionality being provided.
TikTok requires applications to request only the products and scopes they genuinely need. TikTok for Developers
4. How Kitsuly Uses TikTok Information
Information received through TikTok may be used to:
- connect your TikTok account to Kitsuly;
- identify which authorised TikTok account is connected;
- display the connected account within your Kitsuly dashboard;
- maintain the authorised connection;
- obtain available TikTok publishing options;
- allow you to prepare TikTok content;
- allow you to upload or select media;
- allow you to create captions and hashtags;
- show TikTok-specific publishing controls;
- display available privacy options;
- display available interaction options;
- submit content to TikTok when you expressly request publication;
- determine whether publication succeeded or failed;
- display publishing status;
- troubleshoot integration problems;
- maintain account security;
- and comply with TikTok’s API requirements.
Kitsuly does not use TikTok data to publish content without the user’s instruction.
5. TikTok Publishing and User Control
Kitsuly is designed so that the merchant remains in control of what is submitted to TikTok.
Connecting TikTok does not itself authorise Kitsuly to independently create and publish arbitrary content.
Before a TikTok Direct Post is submitted, Kitsuly is intended to provide the relevant publishing controls made available by TikTok.
Depending on TikTok’s response for the authorised account, these may include:
- caption or title;
- privacy status;
- comments;
- Duet;
- Stitch;
- and other publishing settings supported by TikTok.
Where TikTok requires a privacy option to be selected, Kitsuly will not intentionally pre-select a privacy level on behalf of the user.
Where TikTok reports that a feature is unavailable for the connected account or content type, Kitsuly may disable that option.
The user must expressly initiate or confirm publication before Kitsuly sends the content to TikTok.
These controls reflect TikTok’s current Direct Post requirements, which require manual privacy selection and explicit consent before the publication action. TikTok for Developers
6. Content You Send to TikTok
When you elect to publish content, Kitsuly may transmit information to TikTok including:
- videos;
- photographs;
- captions;
- hashtags;
- mentions;
- privacy selections;
- interaction settings;
- and related publishing metadata.
Content is only submitted to the TikTok account that has been authenticated and authorised for the Kitsuly integration.
Once information or content has been transmitted to TikTok, TikTok’s own terms, privacy policies and platform rules also apply.
7. Media Transfer
Depending on the content type and TikTok API functionality, media may be:
- uploaded directly to TikTok;
- transferred through an authorised Kitsuly service;
- temporarily staged on infrastructure controlled by Kitsuly;
- or made available to TikTok through an authorised and verified media URL.
Where Kitsuly temporarily stages media for the purpose of publication, that media will be used for the publication process and associated technical operations.
Kitsuly does not intend temporary social-media staging infrastructure to operate as permanent public media storage.
TikTok currently requires media supplied using certain URL-based Content Posting methods, including photographs, to originate from a verified domain or URL prefix. TikTok for Developers
8. Access Tokens and Authentication Credentials
Third-party integrations may require access tokens, refresh tokens or similar authentication credentials.
Kitsuly treats these credentials as sensitive information.
They may be stored or processed on secure server-side systems where required to operate the integration.
Kitsuly does not intentionally expose private application secrets or user access tokens in publicly accessible frontend code.
Tokens may be:
- encrypted or otherwise appropriately protected;
- restricted to authorised processes;
- refreshed when permitted;
- invalidated upon disconnection where supported;
- deleted when no longer required;
- or permitted to expire according to the provider’s rules.
9. Disconnecting TikTok
A user may disconnect TikTok from Kitsuly.
Disconnecting the integration prevents Kitsuly from intentionally using that connection for future TikTok publishing.
Where technically supported, associated credentials may be revoked, invalidated or deleted.
Disconnecting Kitsuly does not automatically remove content that the user has already published to TikTok.
Published TikTok content should be managed through the user’s TikTok account or appropriate TikTok functionality.
10. Other Third-Party Integrations
Kitsuly may integrate with other services including:
- Meta;
- Facebook;
- Instagram;
- Stripe;
- Google;
- artificial-intelligence providers;
- shipping carriers;
- email providers;
- analytics services;
- and other business systems.
A user must generally choose to connect these services.
Information exchanged with an external provider may also be governed by that provider’s privacy policy and terms.
11. Payments
Kitsuly may integrate with third-party payment providers.
Kitsuly does not intend to directly store raw payment-card numbers or card security codes within ordinary WordPress installations.
Payment providers may process payment information directly under their own privacy policies and security requirements.
Kitsuly may retain information such as:
- payment references;
- transaction identifiers;
- order totals;
- payment status;
- refund information;
- subscription status;
- and reconciliation information.
12. Artificial Intelligence Services
Where a merchant chooses to use AI functionality within Kitsuly, information supplied to an AI feature may be transmitted to the AI provider selected or configured for that service.
Users should avoid intentionally supplying highly sensitive personal information to AI tools unless appropriate and necessary.
Third-party AI services have their own privacy and data-processing terms.
13. Marketing and Mailing Lists
Kitsuly may provide mailing-list and marketing functionality.
Information processed may include:
- email address;
- name;
- list membership;
- consent or signup information;
- signup source;
- subscription status;
- unsubscribe status;
- campaign delivery information;
- and related marketing preferences.
Where recipients unsubscribe, a suppression record may be retained to ensure that the unsubscribe request continues to be honoured.
14. Cookies
Kitsuly websites and services may use cookies and similar technologies for:
- authentication;
- account sessions;
- security;
- preferences;
- functionality;
- analytics;
- fraud detection;
- and performance.
Where legally required, users may be provided with choices concerning non-essential cookies.
15. Why We Process Personal Information
Kitsuly may process personal information to:
- provide requested services;
- operate accounts;
- authenticate users;
- provide ecommerce functionality;
- operate integrations;
- process payments;
- provide customer support;
- publish user-authorised content;
- provide marketing functionality;
- maintain security;
- prevent fraud or abuse;
- troubleshoot problems;
- fulfil contractual obligations;
- comply with law;
- and improve the platform.
Depending on the circumstances and applicable law, processing may be based upon:
- consent;
- performance of a contract;
- legitimate interests;
- compliance with legal obligations;
- or another recognised lawful basis.
16. Information Sharing
Kitsuly does not sell personal information obtained through TikTok.
Information may be shared with service providers where reasonably necessary to operate Kitsuly.
This may include providers of:
- infrastructure;
- hosting;
- email;
- payment processing;
- security;
- analytics;
- communications;
- API services;
- and technical support.
Information may also be disclosed where required by law or reasonably necessary to:
- respond to valid legal process;
- prevent fraud;
- investigate security incidents;
- protect legal rights;
- or protect users.
17. Data Retention
Kitsuly retains information only for as long as reasonably necessary for the purpose for which it is processed, subject to applicable legal obligations.
Different information may have different retention periods.
Information may be retained where reasonably required for:
- active accounts;
- service provision;
- transaction records;
- taxation;
- accounting;
- security;
- fraud prevention;
- disputes;
- legal compliance;
- and enforcing agreements.
TikTok integration information that is no longer required may be deleted, anonymised or invalidated as appropriate.
18. Data Security
Kitsuly uses reasonable technical, organisational and administrative safeguards intended to protect information.
Measures may include:
- HTTPS communications;
- authentication;
- access controls;
- restricted server credentials;
- token protection;
- logging;
- software updates;
- input validation;
- monitoring;
- and other security measures appropriate to the service.
However, no internet-connected service can guarantee absolute security.
Users remain responsible for securing their own WordPress installations, passwords, accounts and devices.
19. International Data Processing
Kitsuly, its infrastructure providers and connected third-party services may process information in different countries.
Where applicable privacy law imposes requirements concerning international transfers, Kitsuly will take reasonable steps to comply with those requirements.
20. Your Privacy Rights
Depending on your jurisdiction, you may have rights to:
- access personal information;
- correct inaccurate information;
- request deletion;
- withdraw consent;
- object to certain processing;
- restrict certain processing;
- request portability;
- and lodge a complaint with a relevant regulator.
These rights may be subject to lawful exceptions.
21. User Data Deletion
You may request deletion of eligible personal information held by Kitsuly.
To request deletion, contact:
Use the subject:
USER DATA DELETION REQUEST
Please provide enough information for Kitsuly to identify the relevant account, which may include:
- your name;
- Kitsuly account email address;
- store domain;
- and the connected service concerned.
Do not send passwords, access tokens or application secrets.
Kitsuly may take reasonable steps to verify that the person requesting deletion is authorised to make the request.
22. TikTok Data Deletion
A user may specifically request deletion of information associated with their TikTok connection.
Subject to applicable law and legitimate retention requirements, this may include:
- TikTok account identifiers;
- connection metadata;
- TikTok access credentials;
- token information;
- stored TikTok account information;
- unpublished temporary media;
- publishing metadata;
- and other TikTok information no longer required by Kitsuly.
Where applicable, credentials will also be invalidated, revoked or allowed to expire.
Information may be retained where reasonably required for:
- law;
- accounting;
- security;
- fraud prevention;
- dispute resolution;
- or other legitimate legal obligations.
Such retained information will not intentionally be reused for unrelated TikTok publishing.
23. Data Stored by Independent Merchants
Kitsuly is WordPress-based software that may be installed and operated by independent merchants.
Some information therefore exists solely within the merchant’s own WordPress website or infrastructure and is not directly controlled by Kitsuly.
If you are a customer of a store using Kitsuly, requests concerning information held by that store should generally be directed to the store operator.
24. Children’s Privacy
Kitsuly is primarily designed for businesses and persons capable of entering commercial agreements.
Kitsuly does not knowingly seek to collect personal information from children where such collection would require parental consent and that consent has not been obtained.
25. Changes to This Privacy Policy
Kitsuly may update this Privacy Policy as the platform, integrations and legal requirements change.
The latest version will be published on the Kitsuly website with an updated effective date.
PART B — TERMS OF SERVICE
26. Acceptance of These Terms
By accessing, installing or using Kitsuly, you agree to these Terms of Service.
If you do not agree with these Terms, you should not use Kitsuly services.
If you use Kitsuly on behalf of a company, organisation or other entity, you represent that you have authority to accept these Terms on its behalf.
27. Description of Kitsuly
Kitsuly provides software and services that may include:
- ecommerce functionality;
- visual website design;
- product management;
- inventory;
- customer management;
- payments;
- shipping;
- bookings;
- subscriptions;
- marketing;
- social-media integrations;
- analytics;
- artificial-intelligence functionality;
- reporting;
- website tools;
- and third-party integrations.
Available features may vary according to:
- product version;
- plan;
- configuration;
- geographic availability;
- third-party availability;
- and technical requirements.
28. Third-Party Platforms
Some Kitsuly functionality depends on external services.
These may include TikTok and other third-party platforms.
Kitsuly does not control those platforms and cannot guarantee that an external provider will continuously make its services, APIs or particular functionality available.
Third-party providers may:
- modify their APIs;
- change permissions;
- modify publishing requirements;
- restrict accounts;
- change rate limits;
- alter features;
- experience outages;
- or discontinue services.
Kitsuly may modify an integration where necessary to respond to these changes.
29. TikTok Integration
The Kitsuly TikTok integration allows authorised users to connect an eligible TikTok account and use supported Kitsuly functionality to prepare and send content to TikTok.
Use of TikTok through Kitsuly is also subject to applicable TikTok terms, policies and Community Guidelines.
Kitsuly is not TikTok and is not owned or operated by TikTok.
Unless expressly stated otherwise by the relevant parties, use of the TikTok integration does not imply sponsorship, partnership or endorsement by TikTok.
30. Connecting Your TikTok Account
You may only connect:
- your own TikTok account; or
- an account that you are legally authorised to manage.
You must not:
- connect another person’s account without authority;
- obtain or use another person’s access credentials improperly;
- circumvent TikTok authentication;
- impersonate another person;
- or misrepresent your authority to publish content.
You are responsible for maintaining the security of your own accounts.
31. Permission to Act on Your Instructions
When you connect TikTok and authorise applicable permissions, you authorise Kitsuly to communicate with TikTok to perform functions that you subsequently request.
This authorisation does not give Kitsuly ownership of your TikTok account.
Kitsuly will only use the integration within the permissions granted and the functionality supported by the service.
32. Publishing Content
You remain responsible for content you create, select, upload or publish.
Kitsuly will only initiate direct TikTok publication following a publishing instruction or confirmation from the user.
Before submitting a Direct Post, you may be required to:
- select the content;
- enter or approve the caption;
- select an available privacy level;
- select available interaction settings;
- review the content;
- and explicitly consent to publication.
TikTok currently requires explicit user consent before Direct Post submission and requires privacy status to be manually selected rather than preselected by the API client. TikTok for Developers
33. Your Content
You retain ownership of intellectual-property rights you hold in content submitted through Kitsuly.
You grant Kitsuly a limited, non-exclusive licence to process, copy, transmit, temporarily store and technically modify your content only to the extent reasonably necessary to:
- provide the service;
- generate previews;
- prepare media;
- transmit media;
- publish the content at your request;
- troubleshoot the service;
- and perform associated technical functions.
This licence does not transfer ownership of your content to Kitsuly.
34. Rights to Content
By uploading or publishing content through Kitsuly, you represent that:
- you own the content; or
- you have sufficient permission to use and publish it.
This includes rights relating to:
- photographs;
- videos;
- music;
- logos;
- trademarks;
- artwork;
- written material;
- likenesses;
- and other intellectual property.
You must not knowingly use Kitsuly to publish content that infringes another person’s rights.
35. TikTok Content Rules
Content published to TikTok through Kitsuly remains subject to TikTok’s rules.
You are responsible for ensuring that content complies with applicable:
- TikTok Terms;
- TikTok Community Guidelines;
- intellectual-property requirements;
- advertising rules;
- laws;
- and regulations.
Kitsuly does not guarantee that TikTok will accept, publish or continue displaying any particular content.
36. No Unauthorised Watermarking
Kitsuly will not intentionally add an unnecessary Kitsuly promotional watermark, logo, advertising message or promotional link to content being transmitted through TikTok’s Content Posting integration where doing so would conflict with TikTok’s Content Sharing Guidelines.
TikTok currently prohibits API clients from superimposing unwanted promotional branding, links or watermarks onto content being shared through the integration. TikTok for Developers
37. Prohibited Use
You must not use Kitsuly to:
- commit fraud;
- distribute malware;
- conduct phishing;
- distribute spam;
- harass or threaten others;
- impersonate another person;
- violate intellectual-property rights;
- circumvent security controls;
- gain unauthorised access;
- scrape data in violation of applicable rules;
- manipulate engagement dishonestly;
- mislead customers;
- publish unlawful material;
- violate a connected platform’s terms;
- interfere with Kitsuly infrastructure;
- reverse engineer protected functionality where prohibited by law;
- obtain API credentials belonging to another user;
- sell or expose private access tokens;
- or attempt to bypass platform rate limits or approval requirements.
38. Automation and User Control
Social integrations provided by Kitsuly are intended to assist users in managing their own authorised business content.
Users remain responsible for reviewing automated, scheduled or AI-assisted content before publication where appropriate.
Kitsuly must not be used to create deceptive mass-publishing, spam or other behaviour prohibited by connected platforms.
39. Scheduled Posts
Where Kitsuly offers scheduled publishing, the user is responsible for:
- choosing the publication time;
- maintaining the connected account;
- ensuring authorisation remains valid;
- ensuring the content remains appropriate at the scheduled time;
- and complying with the destination platform’s requirements.
A scheduled post may fail where:
- authorisation expires;
- the external service is unavailable;
- the user’s account becomes restricted;
- API requirements change;
- content is rejected;
- media cannot be accessed;
- or other technical problems occur.
Kitsuly cannot guarantee publication at an exact time where the process depends on third-party infrastructure.
40. Artificial Intelligence
AI-generated or AI-assisted output may be inaccurate, incomplete or unsuitable.
Users should review AI-generated material before relying upon or publishing it.
The user is responsible for determining whether AI-generated content is suitable and lawful for their intended purpose.
41. Ecommerce Responsibility
Merchants using Kitsuly remain responsible for their own business activities, including:
- products;
- pricing;
- advertising;
- fulfilment;
- taxation;
- refunds;
- consumer guarantees;
- customer support;
- legal disclosures;
- privacy obligations;
- product legality;
- and regulatory requirements.
Kitsuly provides software tools and does not become the merchant of record merely because its software is used.
42. Account Security
You are responsible for maintaining appropriate security over:
- passwords;
- WordPress administration;
- hosting;
- email accounts;
- third-party accounts;
- API credentials;
- and devices.
You must notify Kitsuly if you reasonably suspect that credentials under Kitsuly’s control have been compromised.
43. Availability
Kitsuly aims to provide reliable functionality but does not guarantee that every service will always be:
- uninterrupted;
- error-free;
- continuously available;
- compatible with every environment;
- or unaffected by third-party changes.
Maintenance, security updates, API changes, hosting incidents and external provider outages may affect availability.
44. Changes to the Service
Kitsuly may change, improve, replace or discontinue functionality where reasonably necessary.
This may occur due to:
- product development;
- security;
- legal requirements;
- changes in WordPress;
- changes in connected APIs;
- changes in provider requirements;
- or technical necessity.
45. Suspension
Kitsuly may restrict or suspend access to centrally operated functionality where reasonably necessary because of:
- security incidents;
- abuse;
- fraud;
- unlawful use;
- material violation of these Terms;
- misuse of third-party integrations;
- API-provider requirements;
- or risks to users or infrastructure.
Where reasonably possible, Kitsuly may provide notice or an opportunity to remedy the issue.
46. Fees and Paid Services
Certain Kitsuly features or plans may require payment.
Prices, transaction fees, renewal terms and other commercial conditions applicable to a particular product will be disclosed through the relevant purchase or subscription process.
Third-party providers may separately charge their own fees.
47. Refunds
Refunds for Kitsuly products or services are governed by the applicable Kitsuly refund policy and any rights that cannot legally be excluded.
Nothing in these Terms is intended to remove statutory consumer rights that apply to you.
48. Intellectual Property
Except for user content and third-party material, Kitsuly software, branding, design, documentation, logos and associated materials may be protected by copyright, trademark or other intellectual-property laws.
No ownership rights are transferred merely through use of the service.
49. Feedback
If you voluntarily provide feature suggestions or product feedback, Kitsuly may use that feedback to improve its services without an obligation to implement it or compensate you, subject to applicable law.
50. Disclaimer
To the maximum extent permitted by law, Kitsuly is provided on an “as available” basis.
Kitsuly does not warrant that:
- every integration will remain available;
- every external API will remain unchanged;
- every publication request will succeed;
- every external platform will accept submitted content;
- or third-party services will remain uninterrupted.
Nothing in this clause excludes guarantees, rights or remedies that cannot lawfully be excluded.
51. Limitation of Liability
To the maximum extent permitted by applicable law, Kitsuly will not be liable for indirect, incidental, special or consequential loss arising solely from:
- third-party service outages;
- external API changes;
- rejected social-media posts;
- account restrictions imposed by third parties;
- user-created content;
- unauthorised use caused by a user’s failure to secure their credentials;
- or actions of independent merchants.
Any limitation in these Terms applies only to the extent permitted by law.
Nothing in these Terms excludes liability that cannot legally be excluded.
52. Indemnification
To the extent permitted by law, a business user agrees to be responsible for claims arising from their unlawful use of Kitsuly, infringement caused by content they supplied, or material violation of these Terms.
This clause does not apply where responsibility legally rests with Kitsuly.
53. Consumer Rights
Nothing in these Terms excludes, restricts or modifies any consumer guarantee, statutory warranty or other right that cannot lawfully be excluded.
For Australian users, this includes rights that may arise under the Australian Consumer Law.
54. Privacy
Use of personal information in connection with Kitsuly is governed by Part A — Privacy Policy above.
By using a third-party integration, you acknowledge that information necessary to provide that integration may be transferred to the relevant third-party provider.
55. Termination by the User
You may stop using Kitsuly at any time.
You may also disconnect individual third-party integrations without necessarily terminating the entire Kitsuly service.
Termination does not automatically reverse completed transactions or remove information lawfully required to be retained.
56. Governing Law
Unless applicable consumer law requires otherwise, these Terms are governed by the laws applicable in Queensland, Australia.
Any mandatory rights available to users in other jurisdictions remain unaffected.
57. Changes to These Terms
Kitsuly may update these Terms from time to time.
Changes may be required because of:
- new functionality;
- new integrations;
- changes in law;
- security requirements;
- provider requirements;
- or changes to Kitsuly services.
The latest version will be published on the Kitsuly website with an updated date.
58. Third-Party Terms
Users connecting TikTok or another external provider are responsible for complying with the terms governing their account on that service.
Kitsuly’s Terms do not replace the terms between the user and TikTok.
59. Contact
Questions concerning these Terms, the Privacy Policy, integrations or data deletion may be directed to:
Kitsuly
Website: https://kitsuly.com
Email: support@kitsuly.com
For privacy or deletion requests, use:
USER DATA DELETION REQUEST
60. TikTok Integration Summary
For clarity:
Kitsuly does not require a merchant to give Kitsuly their TikTok password.
The merchant connects through TikTok’s authorised login process.
The merchant authorises the relevant permissions.
The merchant chooses the content.
The merchant selects the applicable publishing settings.
The merchant confirms publication.
Kitsuly then communicates with TikTok using the authorised integration to carry out the user’s instruction.
The merchant remains responsible for the content they choose to publish and remains in control of their own TikTok account.
https://www.youtube.com/watch?v=XHOmBV4js_E