Privacy notice

Effective September 12, 2026. BATONNEWS LLC operates RealBilShop Analytics. This notice covers our public website and waitlist, and our private analytics pilot for the owner's @realbilshop account. The pilot currently has one internal user; joining the waitlist does not connect a TikTok account or provide app access.

Information we use

For the waitlist, we store your email, signup time, consent record and notice version to manage requests for future access and communicate about availability. The form is not a place to send passwords, identity documents or account tokens.

The private app stores post and account identifiers, URLs, captions, media, music credits, creative annotations, observed engagement, source evidence and reporting dates. Owner-authorized exports and previously captured account reports can include account-level analytics and available product, sales or commission figures. A historical archive includes non-public post records. Those records stay separate from public comparisons, and the app does not change post visibility. Product and competitor research uses selected public sources and attributed vendor observations; estimated values remain estimates.

We also use limited operational records, such as collection outcomes, access/security events, configuration history and support correspondence, to maintain the service and investigate problems. Identity documents submitted for business verification are handled separately from analytics and are never collected through the public waitlist.

TikTok connection and purpose

TikTok Shop Creator API authorization is pending. We do not currently have a live Creator API data feed. A future connection requires an approved app, separate creator authorization and verified account identity. We will request only the approved read-only creator permissions needed for the disclosed function and explain any materially different data use before it starts. Connecting an account would not authorize publishing, changing privacy settings or placing orders.

We use the private data to organize the owner's posts, compare creative choices and reported performance, research products, and operate and secure the service. We do not sell the waitlist or owner data or use it to build advertising audiences. We do not install advertising pixels or analytics cookies on this public website.

Providers, access and location

The owner and authorized operator tools can access information needed for their tasks. Selected information may be processed through OpenAI Codex and other specifically authorized AI-assisted operator tools; we do not claim that all processing stays on local devices. The main private application runs on owner-controlled Windows and Mac systems located in the United States. Its current primary storage and transferred backups are encrypted. Legacy working and rollback copies remain subject to a separate cleanup process, so these measures do not mean every historical copy is encrypted.

Cloudflare Workers and Workers KV host this separate public website and waitlist. Cloudflare processes network/request information to deliver and protect the site. Our form stores a hashed network identifier for short-lived abuse controls, rather than a raw IP address in the waitlist record. Cloudflare may process information internationally; see its privacy policy. Tailscale provides private network access, TikTok provides source and account services, and email and selected AI/tool providers process the information needed for their respective functions under their applicable terms. Provider processing is not represented as exclusively US-based.

We limit access and disclosure to the stated purposes, necessary service providers, your authorized instructions, or a valid legal requirement. We take reasonable precautions, but cannot guarantee that any system is completely secure.

How long we keep information

Waitlist records expire 180 days after the first signup, unless removed earlier following a verified request. The form's abuse counters expire after one hour. Provider operational logs have separate retention governed by the provider's terms and settings.

Current private analytics, source evidence, media and historical archives remain until manually removed; an automatic age-based purge is not currently in place. We review their ongoing need monthly and remove data no longer needed for the authorized purpose. Our new operating procedure calls for reviewing operational logs after 90 days and incident/request records 12 months after closure, subject to an actual legal or contractual retention requirement. Backup pruning and automated enforcement of these limits are not yet implemented. We will establish and test the applicable retention, revocation and backup-deletion process before admitting external users or collecting newly authorized API data.

On a verified deletion or relationship-end request, we stop the affected collection, remove data from active stores and account for derived records, working copies and backups. If immediate selective backup deletion is not feasible, we restrict the affected backup from ordinary use and explain its remaining retention and deletion status. We do not describe such restriction as completed erasure. We retain information for a legal hold only where an actual requirement applies.

Your choices and requests

Contact quickshipquirks@yahoo.com to request access, correction or deletion, withdraw waitlist consent, object to a use, or ask a privacy/security question. Use the signup email or account context so we can verify the request proportionately. Our operating target is acknowledgment within seven days and a substantive response within thirty days, subject to any shorter applicable requirement. We will explain any additional verification, permitted limitation or remaining backup copy. We assist with verified TikTok Shop or affected counterparty requests concerning data we hold.

Our owner handles privacy requests; we have not appointed a statutory Data Protection Officer. The pilot and waitlist are not intended for children. If you believe a child's information was submitted, contact us for review and removal. We will update this notice when our processing changes and obtain any required authorization before materially expanding it. Our security policy overview describes our operating procedures and current controls.