Privacy policy

Last updated 9 August 2026

Sampulls is a tool that helps TikTok Shop creator affiliates track product samples and content deadlines. This policy explains what personal data we collect, why we collect it, and what control you have over it.

Sampulls is operated by Novare Creative, [registered address], United Kingdom. For anything in this policy, contact privacy@sampulls.co.uk. We are the data controller for the data described below.

What we collect

Account details: Your email address and a securely hashed password. We never store your password in a readable form.
TikTok connection: If you choose to connect your TikTok Shop creator account, we store your creator open ID and your access and refresh tokens. Tokens are encrypted at rest and are used only to make requests on your behalf.
Sample and showcase data from TikTok: Your own sample applications and their status, the products and brands they relate to, delivery and fulfilment status, the products on your showcase, and your creator display name and handle.
Data you create in the app: Samples you add manually, the pipeline stage of each sample, any notes you write, content ideas generated for you, and your notification preferences.
Technical data: A session cookie to keep you signed in, and server error logs which may include your IP address. If you turn on push notifications we also store the subscription token your browser issues.

We do not collect your follower counts, video performance analytics, commission or earnings data, phone number, date of birth, or location.

Why we use it, and our legal basis

To provide the service — showing your pipeline, calculating deadlines and sending reminders. Legal basis: performance of our contract with you.
To keep the service working and secure — error logs, abuse prevention and diagnostics. Legal basis: our legitimate interests in running a reliable service.
To take payment, if you subscribe to a paid plan. Legal basis: performance of our contract with you.
To send you occasional product emails, only if you have asked us to. Legal basis: your consent, which you can withdraw at any time.

Your TikTok data

We access TikTok data only after you have authorised it, and only for your own account. Access is read-only. We request the minimum permissions needed for the features described above, specifically your creator profile, your sample applications and their detail, your sample fulfilments, and your showcase products.

You can disconnect your TikTok account at any time from your account settings, or by revoking access in your TikTok settings. When you disconnect, we delete the stored tokens and the sample data imported from TikTok. Samples you added manually are yours and remain until you delete them.

Content ideas and AI

When you ask Sampulls for content ideas, we send details about the product only, being its name, brand, category and description, to Anthropic, which provides the AI model that generates the suggestions.

No personal data is sent to our AI provider. Your name, handle, email, notes and account details are never included in these requests.

Who else processes your data

We use a small number of service providers who process data on our behalf under contract:

Our hosting provider, for servers and databases located in the EU.
Mailgun, for sending transactional email, using its EU region.
Anthropic, for generating content ideas, as described above.
Stripe, if and when you subscribe to a paid plan. Stripe handles your card details directly. We only store a customer reference and never see or store your card number.

We do not sell your data, and we do not share it with advertisers.

Where your data is stored

Your account and sample data is stored on servers in the European Union. Some of our providers process limited data outside the UK and EU. Where that happens, transfers are covered by appropriate safeguards such as standard contractual clauses.

How long we keep it

Account data: for as long as your account is open.
TikTok tokens and imported sample data: until you disconnect TikTok or close your account.
Error logs: up to 30 days.
Records needed for tax and accounting, if you have paid us: six years, as UK law requires.

If you delete your account, we remove your personal data within 30 days, apart from anything we are legally required to keep.

Your rights

Under UK data protection law you have the right to:

Ask for a copy of the personal data we hold about you.
Have inaccurate data corrected.
Have your data deleted.
Object to or restrict how we use it.
Receive your data in a portable format.
Withdraw consent for marketing emails at any time.

Email privacy@sampulls.co.uk and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use a single essential cookie to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or analytics cookies, so there is no cookie banner to dismiss.

Children

Sampulls is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

If we change how we use your data we will update this page and, for anything significant, email you before the change takes effect.