1Our role

• The two companies. Evening Coffee LLC is the TikTok Shop partner, the party that contracts with sellers, and the entity legally responsible for personal information handled through the Services (the data controller). Hangzhou YuMi Information Technology Co., Ltd. is an affiliated company under common ownership that develops and operates the Services and processes personal information only on Evening Coffee's documented instructions, as its data processor. Both companies follow one information security and privacy program.
• Seller and business contact information. When you sign up for, buy or ask about the Services, Evening Coffee decides how your information is used and is responsible for it.
• TikTok Shop data. When a seller authorizes us through TikTok Shop, for example in TikTok Shop Partner Center or by connecting our application to its shop, we process the seller's TikTok Shop data, including any buyer information it contains, on behalf of and under the instructions of that seller, as a service provider (also called a processor). The seller is responsible for its own privacy practices toward its customers.

2Information we collect

Information you provide

Your name, business email address, phone number, company and shop name, contract and billing details, and the messages you send us.

TikTok Shop data, with the seller's authorization

Through TikTok Shop's official channels, including the TikTok Shop API, within the scope the seller authorizes and only as needed for the Services, we access and process:

• Shop profile information
• Product, listing and inventory information
• Order and transaction information, such as order IDs, items, prices, order status, timestamps and delivery region
• Sales, traffic, advertising and performance data
• Authorization tokens that let our systems access the shop through the TikTok Shop API

Buyer information

Order data from TikTok Shop may include buyer details such as names and delivery addresses. We use only the order fields the Services need, and we do not store buyer names, phone numbers or full delivery addresses in our own systems. If a seller asks us to handle orders or customer service, our authorized staff may view buyer information within TikTok Shop's own seller tools, only as needed for that task.

Technical information

When you visit our website or use our online tools, we collect IP addresses, browser and device information, pages visited and log data. We may use cookies and similar technologies for basic site functions and security. You can control cookies in your browser settings.

3How we use information

• To provide the Services the seller has engaged us for, including store operations, data analysis and reports
• To communicate with you about the Services, including service and security notices
• To secure our systems, prevent fraud and fix problems
• To meet legal, tax and accounting obligations and enforce our agreements

We use TikTok Shop data only to provide the Services to the seller who authorized us. We do not use it for our own purposes, combine data across sellers for our own use, or use it for advertising or profiling. We do not sell personal information or share it for cross-context behavioral advertising.

4How we disclose information

We disclose personal information only:

• Between Evening Coffee LLC and Hangzhou YuMi Information Technology Co., Ltd., the affiliated companies named in Section 1, under an inter-company services agreement that binds YuMi to process personal information only on Evening Coffee's instructions
• To service providers that host or support our systems, such as our cloud provider Alibaba Cloud, under contracts that require them to protect it and use it only to provide services to us
• To TikTok Shop, as needed to provide the Services and meet TikTok Shop requirements
• At the seller's instruction or with the seller's consent
• When required by law, or to protect the rights, property or safety of our customers, the public or us
• In connection with a merger, acquisition or sale of assets, in which case the information remains subject to this Privacy Policy

5Where data is stored and accessed

The systems and databases that run the Services, including all TikTok Shop data and backups, are hosted by Alibaba Cloud in the United States. We do not store TikTok Shop data for the US market in China. YuMi's authorized staff in Hangzhou, China access these systems remotely to provide the Services on Evening Coffee's behalf, under the access controls described in Section 6, so your information may be viewed from China. If these locations change, we will update this Privacy Policy before the change takes effect.

6How we protect information

• Encryption in transit using TLS 1.2 or higher, and encryption at rest for stored seller data
• Individual accounts, least-privilege access, and multi-factor authentication for administrative accounts
• Network segregation, firewall rules and continuous security monitoring
• Regular vulnerability scanning and patching
• A documented incident response process, staff confidentiality undertakings and regular training

No method of transmission or storage is completely secure, but we work to protect personal information against unauthorized access, use, alteration and loss.

7How long we keep information

Sellers may ask us to confirm in writing that their data has been deleted.

8Your rights and choices

Sellers can ask to access, receive a copy of, correct or delete their data by emailing privacy@yumi.land. We will verify the request and complete it within 10 business days, or sooner where TikTok Shop or the law requires.

Buyers should contact the seller they purchased from. Because we process buyer information on the seller's behalf, we will help the seller respond. If you contact us directly, we will pass your request to the seller.

U.S. state privacy rights. Depending on where you live (for example, California, Colorado, Connecticut, Oregon, Texas or Virginia), you may have the right to:

• Know what personal information we collect and how we use and disclose it
• Access and obtain a copy of your personal information
• Correct inaccurate personal information
• Delete your personal information
• Opt out of the sale of personal information, sharing for cross-context behavioral advertising, and targeted advertising. We do none of these.

You may make a request yourself or through an authorized agent. We verify requests before acting on them, respond within 45 days as permitted by law, and will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our response.

9Security incidents

If a security incident affects personal information, we will promptly notify TikTok Shop and affected sellers, and notify individuals and authorities as required by applicable law.

10Children

The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children.

11Changes to this policy

We review this Privacy Policy at least once a year and update it when our practices change. We will post the updated policy on this page with a new date and notify sellers of material changes by email.

1我们的角色

• 两家公司：Evening Coffee LLC 是 TikTok Shop 合作伙伴和与商家签约的主体，是通过服务处理的个人信息的法律责任主体（数据控制者）。杭州余米信息技术有限公司是同一实际控制人下的关联企业，负责开发和运营服务，仅按 Evening Coffee 的书面指示处理个人信息，为其受托处理方。两家公司执行同一套信息安全与隐私制度。
• 商家及业务联系人信息：您注册、购买或咨询服务时提供的信息，由 Evening Coffee 决定如何使用并承担责任。
• TikTok Shop 数据：商家通过 TikTok Shop 授权我们后（例如在 TikTok Shop Partner Center 中授权，或将我们的应用连接到其店铺），我们代表该商家、按其指示处理其 TikTok Shop 数据（包括其中的买家信息），身份为服务提供方（受托处理方）。商家对其顾客的隐私保护承担责任。

2我们收集的信息

您提供的信息

姓名、工作邮箱、电话、公司和店铺名称、合同和账单信息，以及您发给我们的消息。

经商家授权的 TikTok Shop 数据

我们通过 TikTok Shop 官方渠道（包括 TikTok Shop API），在商家授权范围内、仅限服务所需，访问和处理：

• 店铺资料
• 商品、刊登和库存信息
• 订单和交易信息，如订单号、商品、价格、订单状态、时间和收货地区
• 销售、流量、广告和经营数据
• 授权令牌，用于我们的系统通过 TikTok Shop API 访问店铺

买家信息

来自 TikTok Shop 的订单数据可能包含买家姓名、收货地址等信息。我们只使用服务所需的订单字段，不会在自己的系统中保存买家姓名、电话或详细地址。如商家委托我们处理订单或客服，我们的授权员工可能在 TikTok Shop 的商家工具内查看买家信息，且仅限完成该项工作所需。

技术信息

您访问官网或使用我们的在线工具时，我们会收集 IP 地址、浏览器和设备信息、访问页面和日志数据。我们可能使用 Cookie 等技术实现网站基本功能和安全保护，您可以在浏览器设置中管理 Cookie。

3我们如何使用信息

• 提供商家委托的服务，包括店铺运营、数据分析和报表
• 就服务与您沟通，包括服务和安全通知
• 保障系统安全、防范欺诈、排查问题
• 履行法律、税务和会计义务，执行我们的协议

TikTok Shop 数据仅用于为授权我们的商家提供服务。我们不将其用于自身目的，不为自身用途跨商家汇聚数据，也不用于广告或用户画像。我们不出售个人信息，也不为跨情境行为广告共享个人信息。

4我们如何披露信息

我们仅在以下情况披露个人信息：

• 在第 1 节所述的 Evening Coffee LLC 与杭州余米信息技术有限公司两家关联公司之间共享，双方签有集团内服务协议，约定余米仅按 Evening Coffee 的指示处理个人信息
• 提供给为我们托管或支持系统的服务商，如云服务商阿里云，并通过合同要求其保护信息、仅为向我们提供服务而使用
• 提供给 TikTok Shop，以提供服务和满足 TikTok Shop 的要求
• 按商家的指示或经商家同意
• 法律要求时，或为保护我们的客户、公众或我们的权利、财产或安全
• 发生合并、收购或资产出售时，相关信息仍受本隐私政策约束

5数据的存储和访问地点

运行服务的系统和数据库（包括全部 TikTok Shop 数据及备份）托管在阿里云美国地域。我们不会把美国市场的 TikTok Shop 数据存储在中国。余米位于中国杭州的授权员工会代表 Evening Coffee 远程访问这些系统以提供服务，并受第 6 节所述的访问控制约束，因此您的信息可能会在中国被查看。如存储或访问地点发生变化，我们将在变更生效前更新本隐私政策。

6我们如何保护信息

• 传输加密（TLS 1.2 及以上），存储的商家数据加密
• 每人使用独立账号、最小权限访问，管理员账号启用多因素认证
• 网络隔离、防火墙规则和持续安全监控
• 定期漏洞扫描和补丁更新
• 成文的事件响应流程，员工签署保密承诺并定期培训

任何传输或存储方式都无法做到绝对安全，但我们会尽力保护个人信息，防止未经授权的访问、使用、篡改和丢失。

7保存期限

商家可要求我们书面确认数据已删除。

8您的权利和选择

商家可发送邮件至 privacy@yumi.land，要求访问、获取副本、更正或删除其数据。我们核验后将在 10 个工作日内完成；TikTok Shop 或法律要求更短时限的，从其规定。

买家请联系您购买商品的商家。由于我们代表商家处理买家信息，我们会协助商家答复。如您直接联系我们，我们会将请求转交给商家。

美国各州隐私权利：根据您所在的州（如加利福尼亚、科罗拉多、康涅狄格、俄勒冈、得克萨斯或弗吉尼亚），您可能有权：

• 了解我们收集哪些个人信息，以及如何使用和披露
• 访问并获取您的个人信息副本
• 更正不准确的个人信息
• 删除您的个人信息
• 拒绝个人信息的出售、为跨情境行为广告的共享以及定向广告。我们不从事上述任何活动。

您可以本人或委托授权代理人提出请求。我们会在处理前核验请求，在法律允许的 45 天内答复，且不会因您行使权利而区别对待您。如我们拒绝您的请求，您可以回复我们的答复提出申诉。

9安全事件

如发生影响个人信息的安全事件，我们将及时通知 TikTok Shop 和受影响的商家，并按适用法律通知个人和监管机构。

10儿童

本服务面向企业，不面向 13 岁以下儿童。我们不会故意收集儿童的个人信息。

11本政策的更新

我们每年至少复核一次本隐私政策，并在处理方式变化时更新。更新后的政策将发布在本页面并注明新日期；如有重大变更，我们将通过邮件通知商家。