Privacy policy隐私政策

01. Who we are & scope负责主体与适用范围

AGILITHOR PILATES LLC, a Missouri, United States limited liability company, is responsible for the company-controlled processing described in this policy. “We”, “us” and “our” refer to that company.本政策所述由公司决定的信息处理活动，由在美国密苏里州设立的 AGILITHOR PILATES LLC 负责。文中的“我们”均指该公司。

This policy covers the AGILITHOR company information website, AGILITHOR Social Operations and related support correspondence. The workspace is for our own accounts and authorized internal team; it is not a public social network or a consumer subscription service.本政策适用于 AGILITHOR 公司介绍网站、AGILITHOR Social Operations 工作台及相关支持邮件。工作台供自有账号及获授权的内部团队使用，不是公众社交网络或面向消费者的订阅服务。

Our Shopify store, shopping transactions and any separate mobile app are outside this policy. Consult the notice provided by each service. A shared brand, domain or contact email does not combine their data or permissions with this workspace.Shopify 商店、购物交易和其他独立移动 App 不属于本政策的适用范围，请查看相应服务提供的隐私说明。使用相同品牌、域名或联系邮箱，不代表这些服务与本工作台的数据或权限自动互通。

Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net

02. Information & sources信息类型与来源

We receive information from you, authorized colleagues, files they upload or import, the sign-in service, and service operation. The current application handles these categories:信息来源包括你本人、获授权的同事、其上传或导入的文件、登录服务以及服务运行过程。当前应用处理以下类别：

• Identity and membership: display name, email address, sign-in user identifier, workspace role and membership creation time. These support sign-in, access management and collaboration.身份与成员信息：显示名称、邮箱、登录用户标识、工作台角色和成员创建时间，用于登录、访问管理及协作。
• Account directory: social account name, handle, platform, profile URL, market, time zone, brand group, assigned owner and notes, entered by the team.账号档案：团队录入的社媒账号名称、标识、平台、主页链接、市场、时区、品牌分组、负责人和备注。
• Content and media: captions, drafts, tags, review notes, assignments, publishing plans and links; uploaded images or videos and their filenames, type, size, category and rights/source notes. Media or free-text fields may contain people’s images or other personal information supplied by the uploader.内容与媒体：文案、草稿、标签、审核意见、负责人、发布计划及链接；上传的图片或视频及文件名、类型、大小、分类和授权来源说明。上传的媒体或自由文本可能包含人物影像或上传者提供的其他个人信息。
• Reporting: account and date, view, like, comment, share and click counts, follower snapshots, and source descriptions from manual entry or CSV imports. These are account-level figures; the application does not fetch individual viewers or comment text.报表：人工录入或 CSV 导入的账号、日期、播放、点赞、评论、分享和点击数量、粉丝快照及来源说明。这些是账号级统计；应用不会抓取具体观看者或评论正文。
• Authorized YouTube data: channel ID, title, description, handle, image URL, subscriber/video/view counts and upload playlist ID; recent video IDs, titles, publication times and cumulative view/like/comment counts; daily views, likes, comments, shares, estimated watch minutes and subscribers gained/lost for the authorized channel. Unavailable values remain unknown.获授权的 YouTube 数据：频道 ID、名称、描述、标识、图片链接、订阅者／视频／播放数量及上传列表 ID；近期视频 ID、标题、发布时间和累计播放／点赞／评论数量；该频道每日播放、点赞、评论、分享、估算观看分钟及新增／流失订阅者。不可获取的值保留为未知。
• YouTube connection information: the owner supplies an OAuth Client ID and Client Secret; Google supplies a refresh token and granted scopes after account consent. These are encrypted on the server. Short-lived access tokens are used to request data and are not exposed in reports or metadata exports.YouTube 连接资料：所有者提供 OAuth Client ID 和 Client Secret；账号同意后 Google 提供刷新令牌及已授权范围。这些资料在服务端加密保存。短期访问令牌用于请求数据，不会显示在报表或元数据导出中。
• Activity and support: the actor’s display name, action, record description and timestamp; email address, message content, attachments and replies when you contact us.操作与支持：操作者显示名称、操作、记录描述和时间；你联系我们时使用的邮箱、邮件正文、附件及往来回复。
• Service delivery: hosting and security providers may process IP addresses, browser/device information, request times, authentication information and diagnostic logs to deliver and protect the service. These are distinct from the workspace’s content-performance reports.服务运行：托管和安全服务商可能为提供及保护服务，处理 IP 地址、浏览器或设备信息、请求时间、身份验证信息和诊断日志。这与工作台中的内容表现报表不同。

The company website has no message form or payment checkout. The workspace does not ask for social-platform passwords, payment-card details, government IDs or sensitive health information. Do not put these in notes, media or support messages. Providing business data is voluntary, but the relevant workflow cannot run without the information it needs.公司网站不设留言表单或付款结账。工作台不要求提供社媒平台密码、银行卡资料、身份证件或敏感健康信息，请勿将其放入备注、媒体或支持邮件。业务资料由你主动提供，但缺少必要信息时，相应工作流程将无法完成。

03. Why we use information用途与处理依据

• Operate the website and workspace; identify authorized members and apply permissions.运行网站和工作台，识别获授权成员并执行权限管理。
• Organize company accounts, prepare and review content, manage authorized media and coordinate manual publishing.整理公司账号，准备和审核内容，管理获授权素材及协调人工发布。
• Summarize imported or entered performance figures and maintain traceable business records.汇总人工录入或导入的表现数据，保留可追溯的业务记录。
• After express account authorization, manually synchronize read-only YouTube channel and video statistics for internal performance review. Data is used for the authorizing account owner and internal agents expressly authorized by that owner, not for advertising, resale or unrelated profiling.取得账号明确授权后，手动同步 YouTube 频道与视频只读统计，用于内部表现复盘。数据供授权账号所有者及其明确授权的内部代理人员使用，不用于广告、转售或无关画像。
• Respond to support and privacy requests, investigate errors or misuse, and meet applicable legal obligations.回复支持及隐私请求，调查错误或滥用，并履行适用法律义务。

Where a law requires a legal basis, we rely, as appropriate, on legitimate interests in administering our internal operations and securing the service, performance of a contract with you where necessary, compliance with legal obligations, or consent where required. Our interests do not override rights that applicable law protects. You may object to processing based on legitimate interests, or withdraw consent for processing that depends on it.在法律要求明确处理依据的情况下，我们按实际用途适用以下依据：管理内部运营及维护服务安全的合法利益、为履行与你的合同所必需、履行法定义务，或在需要时取得同意。我们的利益不能凌驾于适用法律保护的权利之上。你可以反对基于合法利益的处理，或撤回作为相关处理依据的同意。

We do not sell workspace personal information or disclose it for cross-context behavioral advertising. The company has added no advertising pixels or third-party marketing analytics to this website. The current workspace does not run AI content processing, facial recognition or automated decisions producing legal or similarly significant effects.我们不出售工作台个人信息，也不为跨场景行为广告提供这些信息。公司未在本网站添加广告像素或第三方营销分析。当前工作台不运行 AI 内容处理、人脸识别，或对个人产生法律或类似重大影响的自动化决策。

04. Access & service providers访问范围与服务商

Authorized workspace members can view shared business records, media, member names and email addresses, and activity records. Roles restrict editing and administrative actions; they do not create a private folder for each member. Upload only information that may appropriately be shared with the authorized team.获授权的工作台成员可以查看共享业务记录、媒体、成员姓名和邮箱，以及操作记录。角色限制编辑和管理操作，并不为每位成员建立独立私密文件夹。请只上传适合向获授权团队共享的信息。

The service uses OpenAI Sites/ChatGPT for hosting-related access and sign-in, and Cloudflare infrastructure for application execution, database records and media storage. Email delivery providers process messages sent to the support address. Such providers process information needed to supply their services; their own account, security and diagnostic processing is also governed by their terms and privacy notices.服务使用 OpenAI Sites／ChatGPT 提供托管相关访问及登录，并使用 Cloudflare 基础设施运行应用、保存数据库记录与媒体。邮件服务商处理发往支持邮箱的邮件。这些服务商处理提供其服务所需的信息；其自身的账号、安全和诊断处理也受各自条款及隐私说明约束。

Google/YouTube processes authorization and API requests for an expressly connected channel. The public company website does not receive YouTube credentials or channel reports. The separate private workspace stores them. Its current hosting audience is the owner only; any future team access to YouTube data also requires the channel owner’s express authorization.Google／YouTube 为明确连接的频道处理授权和 API 请求。公开公司网站不接收 YouTube 凭证或频道报表，由独立的私有工作台保存。当前工作台托管访问范围仅限所有者；未来团队访问 YouTube 数据也须取得频道所有者的明确授权。

Provider information:服务商说明： OpenAI · Cloudflare

We may disclose the minimum information reasonably needed to comply with a valid legal requirement, obtain professional advice, or investigate security incidents and protect legal rights. A team member’s authorized export creates a separate copy that the company must also handle under this policy.为遵守有效法律要求、取得专业意见、调查安全事件或保护合法权利，我们可能披露合理所需的最少信息。成员在授权范围内导出会生成独立副本，公司也应按本政策处理这些副本。

The company is based in the United States. Our team and infrastructure providers may access or process data in other countries. This service does not offer a country-specific storage guarantee. Contact us for information about processing locations and applicable transfer arrangements; any legally required transfer safeguards must be in place for the relevant processing.公司设立于美国；团队与基础设施服务商可能在其他国家访问或处理数据。本服务不提供特定国家存储保证。你可联系我们了解处理地点及适用的数据传输安排；相关处理必须具备法律要求的跨境传输保障措施。

05. Retention & removal保存与清理

We retain information only while needed for its purpose, considering active work, reporting, security and legal duties. General business records have no scheduled purge. The YouTube module checks retention when accessed: it removes snapshots older than 30 days and stored connections whose authorization has not been verified for over 30 days. This is request-triggered cleanup, not a continuously running deletion service; periodic retention maintenance must be in place before sustained or expanded operation.我们仅在信息用途仍有需要时保存，并考虑当前工作、报表、安全和法定义务。一般业务记录没有定时清理。YouTube 模块在访问时核查保留期限，清理超过 30 天的快照及超过 30 天未核验授权的已存连接。这由请求触发，并非持续运行的删除服务；持续或扩大运营前须落实定期保留维护。

• Membership and identity: needed while access is authorized. When access ends, the owner or administrator should revoke access and assess which identifying details can be removed; historical business and activity records are reviewed separately.成员与身份：在访问获授权期间按需保存。访问结束后，所有者或管理员应撤销权限并评估可删除的身份资料；历史业务和操作记录另行核实。
• Drafts, assets, account records and metrics: retained while needed for active work, reporting or a documented business or legal purpose. When that need ends, remove unneeded records and media, or anonymize personal details where appropriate.草稿、素材、账号记录与指标：在用于当前工作、报表或有记录的业务及法律目的期间保存。用途结束后，清理不再需要的记录和媒体，或在适当情况下将个人信息匿名化。
• YouTube credentials and data: keep encrypted grants only while an active authorized connection is necessary. Removing a connection in the private workspace deletes its stored grant and cached report. Replacing the client configuration clears existing connections and cached reports. Requests to remove authorized YouTube data are handled as soon as possible and within seven days; general business/legal retention does not extend YouTube API data retention.YouTube 凭证与数据：仅在有效授权连接仍有必要时保存加密授权资料。在私有工作台移除连接会删除其保存的授权资料及缓存报表；替换客户端配置会清理现有连接及缓存。删除获授权 YouTube 数据的请求会尽快处理，并在七天内完成；一般业务／法律保留原则不延长 YouTube API 数据保留期限。
• Activity and support records: retained as needed to investigate issues, document request handling, establish accountability or meet legal duties. Showing only recent activity in the interface does not erase older stored logs.操作与支持记录：为调查问题、记录请求处理、明确责任或履行法定义务而按需保存。界面只显示近期操作，并不意味着较早日志已被删除。
• Exports and provider recovery copies: an in-app deletion does not automatically erase a downloaded file, email attachment or provider backup. Relevant copies must be included in a request review; provider-controlled copies follow the provider’s applicable retention arrangements.导出与服务商恢复副本：应用内删除不会自动擦除下载文件、邮件附件或服务商备份。处理请求时应核查相关副本；由服务商控制的副本适用其相应保留安排。

Some linked records and records of published content cannot be deleted in the normal interface. This technical restriction is not a rejection of a privacy request: an administrator must assess an appropriate correction, removal, anonymization or lawful retention response. We explain material exceptions and unresolved steps rather than representing a partial removal as complete.部分关联记录和已发布内容记录不能通过普通界面直接删除。这一技术限制不表示拒绝隐私请求；管理员需要评估适当的更正、删除、匿名化或有依据的保留处理。对于重要例外及未完成步骤，应说明情况，不将部分删除表述为全部完成。

06. Your choices & requests你的选择与请求

Depending on the law that applies to you and the processing, you may have rights to know about and access your personal information, correct it, request deletion, restrict or object to processing, receive a portable copy, withdraw consent, or appeal a decision. You may also complain to the relevant data-protection authority. These rights are subject to applicable conditions and exceptions; we do not require you to waive them to use this service.根据对你及相关处理适用的法律，你可能享有了解及访问个人信息、更正、请求删除、限制或反对处理、获取可携带副本、撤回同意或就处理决定申诉的权利。你也可以向有关数据保护监管机构投诉。这些权利适用相应条件和例外；使用本服务不要求你放弃这些权利。

Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net

Describe the request and the relevant workspace/account or record. We may verify the request using your known email or existing workspace relationship, and seek only information proportionate to the request. Do not send a password, government ID or access token. Where permitted, an authorized representative may act with suitable proof of authority.请说明请求内容及相关工作台、账号或记录。我们可能通过已知邮箱或现有工作台关系核实请求，仅索取与请求相称的必要信息。请勿发送密码、身份证件或访问令牌。在法律允许时，获授权代表可提供适当授权证明后代为申请。

We handle requests manually and respond within the time required by applicable law, including explaining any permitted extension, refusal or retention exception. You may reply to the same address to ask for a review. Withdrawing consent does not affect earlier lawful processing. A workspace export may include other people’s information, so a personal-data access request is reviewed before a copy is released.请求由人工处理，并按适用法律要求的期限回复，包括说明法律允许的延期、拒绝或保留例外。你可以回复同一邮箱要求复核。撤回同意不影响此前合法进行的处理。工作台导出可能包含他人信息，因此个人信息访问请求需经核实后再提供副本。

07. Cookies & browser storageCookie 与浏览器存储

The company website stores your selected language as “agilithor-language” in your browser’s local storage. It contains the English or Chinese preference, stays on that browser until changed or cleared, and is not transmitted by our language-switching code. You can remove it using your browser’s site-data settings; the page will return to the default language.公司网站将所选语言以“agilithor-language”保存在浏览器本地存储中。其内容为英文或中文偏好，会保留至你更改或清除；我们的语言切换代码不会将它发送出去。你可以在浏览器网站数据设置中清除它，页面会恢复默认语言。

Starting YouTube authorization sets an essential Secure, HttpOnly, SameSite=Lax cookie in the private workspace for up to ten minutes. It binds the authorization response to the requesting browser and is cleared when the callback is processed. It is not an advertising cookie.开始 YouTube 授权时，私有工作台设置最长十分钟的必要 Cookie，采用 Secure、HttpOnly 和 SameSite=Lax，用于将授权响应绑定到发起请求的浏览器，处理回调时清除。它不是广告 Cookie。

Our page code does not set advertising or analytics cookies. The hosting/sign-in service may use its own essential cookies or storage for authentication, delivery and security. Its controls and privacy notice apply to those functions. Blocking necessary storage may prevent sign-in. Email and external links open a separate service subject to its own practices.我们的页面代码不设置广告或分析 Cookie。托管及登录服务可能为身份验证、网页传输和安全使用必要的 Cookie 或存储，此类功能适用服务商的控制选项及隐私说明。阻止必要存储可能导致无法登录。邮件和外部链接会打开其他服务，其信息处理规则另行适用。

08. Security & minors安全与未成年人

The current workspace uses hosting access restrictions, authenticated membership, server-side role checks and restricted media access. These measures reduce unauthorized access but do not guarantee absolute security. Keep your sign-in account secure, share only authorized exports and report suspected exposure to the contact below.当前工作台使用托管访问限制、成员身份验证、服务端角色检查及受限媒体访问。这些措施用于减少未经授权的访问，但不保证绝对安全。请保护登录账号，仅共享获授权的导出资料，并通过下方联系方式报告疑似泄露。

The internal workspace is intended for authorized adults aged 18 or over, and is not directed to children. We do not knowingly seek children’s personal information for this service. If you believe such information has been provided, contact us so we can assess and remove it where appropriate. This statement does not describe any separate fitness or mobile application.内部工作台面向年满 18 岁的获授权成年人，不面向儿童。我们不会明知而为本服务主动收集儿童个人信息。如你认为有人提供了此类信息，请联系我们核实并在适当情况下清理。本说明不适用于其他独立健身或移动应用。

Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net

09. Social platform connections社媒平台连接

The private workspace offers a YouTube read-only connection using the official YouTube Data API v3 and YouTube Analytics API. Collection starts only after a channel owner expressly authorizes youtube.readonly and yt-analytics.readonly. Authorized channels can be synchronized by an authorized user or the owner-approved daily desktop task. Creating an OAuth client alone is not channel authorization or a completed synchronization.私有工作台提供通过官方 YouTube Data API v3 与 YouTube Analytics API 的只读连接。仅在频道所有者明确授权 youtube.readonly 和 yt-analytics.readonly 后开始收集。已授权频道可由获授权用户或所有者批准的每日桌面任务同步。仅创建 OAuth 客户端不等于频道授权或已完成同步。

Synchronization is initiated by an authorized user. The module reads the categories listed above, keeps daily channel analytics separate from cumulative video statistics, and currently reads at most 100 recent uploaded videos per synchronization. It does not upload, publish or delete videos, read private messages or individual viewers, collect comment text or monetary analytics, or scrape profiles. Client credentials and refresh tokens are encrypted in the private server configuration; public pages do not contain them.同步由获授权用户发起。模块读取上述数据类别，将每日频道分析与视频累计统计分别展示，目前每次最多读取近期上传的 100 条视频。不上传、发布或删除视频，不读取私信或具体观看者，不收集评论正文或收益分析，也不抓取主页。客户端凭证及刷新令牌在私有服务端配置中加密保存，不进入公开页面。

AGILITHOR Social Operations’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.AGILITHOR Social Operations 对从 Google API 获取的信息的使用与传输将遵守 Google API 服务用户数据政策，包括 Limited Use（有限使用）要求。

Google API Services User Data PolicyGoogle API 服务用户数据政策 · Google Privacy PolicyGoogle 隐私政策 · YouTube Terms of ServiceYouTube 服务条款

Use Remove connection in the workspace to delete the locally stored channel grant and cached report. This does not revoke the grant at Google or delete YouTube content. Revoke external access through your Google Account permissions page. To request removal of remaining company-controlled YouTube data, contact support@agilithor.net; do not send tokens.在工作台使用“移除连接”可删除本地保存的频道授权资料和缓存报表。这不会在 Google 撤销授权，也不会删除 YouTube 内容。请通过 Google 账号权限页面撤销外部访问。如需清理公司控制的其余 YouTube 数据，请联系 support@agilithor.net，不要发送令牌。

Revoke access in Google Account在 Google 账号撤销访问

TikTok Accounts API remains pending review and is separate from TikTok Shop. Facebook Page integration is being prepared under the separate notice below; a Meta developer application and explicit Page consent are required before collection. Instagram and Metricool integration remain deferred. Any additional integration requires completed implementation, appropriate approval and account consent, and an updated notice before collection begins.TikTok Accounts API 仍等待审核，与 TikTok Shop 接入分别管理。Facebook Page 接入按下方独立说明准备，开始收集前须完成 Meta 开发者应用及明确的 Page 授权。Instagram 和 Metricool 接入仍暂缓。其他平台须在实现功能、取得适当批准与账号同意，并更新说明后，才开始收集。

10. TikTok Shop read-only analyticsTikTok Shop 只读分析

Shop notice version: 2026-10-12-shop. AGILITHOR Shop Analytics supports an expressly selected company-operated local seller shop in a market covered by the app. No shop is connected merely because the developer app is published. Seller consent is required before receiving a seller token or reading shop data. UK and US access require their own supported app and authorization arrangements.Shop 说明版本：2026-10-12-shop。AGILITHOR Shop Analytics 支持应用已覆盖市场中明确选定的公司自营本土店。发布开发者应用本身不会连接店铺。接收卖家令牌或读取店铺数据前，须取得卖家同意。英国和美国接入须另行完成对应应用与授权配置。

The only requested scopes are data.shop_analytics.public.read (TikTok Shop Analytics) and seller.authorization.info (Shop Authorized Information). TikTok processes the authorization and API requests; the private workspace receives the authorized shop ID, name, market, local seller type and encrypted shop identifier, and the seller identifier and granted scope list. The seller checks the report time zone in Seller Center and supplies it to the workspace. Access and refresh tokens are encrypted on the server with a runtime-managed key; they are not exposed in reports, public pages or connection status.仅请求 data.shop_analytics.public.read（TikTok Shop Analytics）及 seller.authorization.info（Shop Authorized Information）两项权限。TikTok 处理授权与 API 请求；私有工作台接收获授权店铺的 ID、名称、市场、本土卖家类型和加密店铺标识，以及卖家标识和授权范围。授权人须在 Seller Center 核对报告时区并填写到工作台。访问令牌与刷新令牌通过运行环境管理的密钥在服务端加密保存，不显示在报表、公开页面或连接状态中。

After consent, the workspace reads selected-period video IDs, titles, account usernames, publication times, views, likes, comment/share counts, product impressions/clicks, click-through and click-to-order rates, paid SKU-order counts, units sold, and direct, total-attributed and indirect GMV. It also reads shop-product IDs and aggregate orders, SKU orders, units, GMV, refunds, refunded units and product impression/click/conversion figures. Only these documented aggregate fields are retained; individual buyers, contact information, order details, comment text and private messages are not collected.取得同意后，工作台读取所选期间的视频 ID、标题、账号用户名、发布时间、播放、点赞、评论／分享数量、商品曝光／点击、点击率与点击下单率、已付款 SKU 订单数、件数，以及直接、总归因和间接 GMV。同时读取商品 ID 及其汇总订单、SKU 订单、件数、GMV、退款、退款件数和商品曝光／点击／转化指标。仅保留这些已说明的汇总字段；不收集具体买家、联系方式、订单明细、评论正文或私信。

Reports support official, marketing and affiliate video account filters. Product totals cover the selected shop rather than that video filter. Keep original currencies, shop-local date ranges, available-data dates, attribution definitions and synchronization times. Missing fields remain unknown. These Shop figures do not identify organic versus paid conversions and must not be added to overlapping manual, advertising or GMV Max reports. Advertising spend, ROI and GMV Max synchronization remain outside this connection. No order, product or content is created, changed, published or deleted through it.报表支持官方、营销及达人视频账号筛选。商品总表现覆盖所选店铺，不受视频账号筛选影响。保留原币种、店铺当地日期范围、数据可用日期、归因定义和同步时间。缺失值保留为未知。这些 Shop 指标不单独识别自然与付费转化，不可与重叠的人工、广告或 GMV Max 报表相加。广告花费、ROI 和 GMV Max 同步不属于本连接。不会通过此连接创建、修改、发布或删除订单、商品或内容。

Collection and synchronization take place only in the owner-private workspace for internal review by expressly authorized people. Public company pages do not receive shop credentials or reports. Failed or incomplete pagination does not overwrite the last successful snapshot. The Shop module checks retention when accessed: snapshots older than 30 days and connections unverified for over 30 days are removed. This is request-triggered cleanup. Removing a connection deletes its stored tokens and official snapshot from the active workspace, while separately entered manual records and provider recovery copies require separate review.数据仅在所有者私有工作台收集和同步，供明确获授权人员内部复盘。公开公司页面不接收店铺凭证或报表。失败或不完整的分页不会覆盖上次成功快照。Shop 模块在访问时核查保留期限，清理超过 30 天的快照和超过 30 天未核验的连接，这是请求触发的清理。移除连接会从当前工作台删除该店已存令牌及官方快照；独立录入的人工记录和服务商恢复副本须另行核查。

To revoke platform access, use application authorization management in your TikTok Shop seller account. Removing a workspace connection does not itself revoke access at TikTok or delete platform content. Request removal of remaining company-controlled Shop data at support@agilithor.net, supplying the shop ID and relevant record description without tokens or buyer data. We verify your authority and handle the request as soon as possible; any exception or provider-controlled copy is explained separately.撤销平台访问请使用 TikTok Shop 卖家账号的应用授权管理。移除工作台连接本身不会在 TikTok 撤销授权或删除平台内容。如需清理公司控制的其余 Shop 数据，请通过 support@agilithor.net 提供店铺 ID 及相关记录说明，不要发送令牌或买家数据。我们核实请求权限后尽快处理，并另行说明例外或由服务商控制的副本。

Starting Shop authorization sets its own Secure, HttpOnly, SameSite=Lax cookie for up to ten minutes, binds a single-use authorization state to the requesting owner and browser, and clears the cookie when the callback is processed. A failed authorization code is not stored or displayed.开始 Shop 授权时设置独立的 Secure、HttpOnly、SameSite=Lax Cookie，最长十分钟，将单次授权状态绑定到发起的所有者及浏览器，处理回调时清除。失败的授权码不会保存或显示。

11. Facebook Page read-only analyticsFacebook Page 只读分析

Facebook notice version: 2026-10-12-facebook. This connection is for company-operated Facebook Pages expressly selected by the workspace owner. A configured Meta application is not an authorized Page. Meta developer registration, app configuration, permitted app roles or permission review, and Page consent must be completed before any Page data is collected.Facebook 说明版本：2026-10-12-facebook。本连接用于工作台所有者明确指定的公司自营 Facebook Page。配置 Meta 应用本身不等于已授权 Page。收集 Page 数据前，须完成 Meta 开发者登记、应用配置、允许的应用角色或权限审核，以及 Page 同意授权。

We request only pages_show_list, pages_read_engagement and read_insights. Facebook may include its default public_profile permission. The authorization process reads the Pages available to the consenting account and their analysis tasks to locate the exact selected Page; only that Page token is retained. Short-lived and exchanged user tokens are used temporarily during this server-side check. Meta App ID, App Secret and retained Page tokens are encrypted in the private workspace with a runtime-managed key, not exposed in reports or exports.仅请求 pages_show_list、pages_read_engagement 及 read_insights。Facebook 可能同时包含默认的 public_profile 权限。授权过程读取授权账号可用的 Page 列表及分析任务权限，定位明确选定的 Page；仅保留该 Page 的令牌。短期及交换后的用户令牌仅在本次服务端核验中临时使用。Meta App ID、App Secret 和保留的 Page 令牌通过运行环境管理的密钥在私有工作台加密保存，不显示在报表或导出中。

After consent, the workspace retains the selected Page ID, name, public link and follower count; IDs, text excerpts, public links and publication times of its published posts; cumulative media views, reaction, comment and share counts; and daily Page media views, post engagements, profile views and follower snapshots. Media views include the total sources returned by Meta, and are not advertising spend, orders or revenue. Daily reports use Meta’s Pacific-time reporting boundaries; synchronization timestamps are shown in Beijing time. Missing values remain unknown, and daily metrics are kept separate from lifetime post metrics and follower snapshots.取得同意后，工作台保留所选 Page 的 ID、名称、公开链接和关注者数量；该 Page 已发布帖子的 ID、文案节选、公开链接和发布时间；累计媒体展示／播放、反应、评论及分享数量；以及每日 Page 媒体展示／播放、帖子互动、主页访问和关注者快照。媒体展示／播放包括 Meta 返回的全部来源，不等同于广告花费、订单或收入。每日报表采用 Meta 的美国太平洋时间报告边界；同步时间显示为北京时间。缺失值保留为未知，每日指标、帖子终身累计指标与关注者快照分别处理。

We do not request publishing, advertising management or messaging permissions. The connection does not collect private messages, comment bodies, individual commenters or audience identities. It does not post, edit or delete Facebook content. Data is used for authorized internal operations, not sold, shared for unrelated profiling, or written to the public company website. This public website does not receive Meta credentials or Page reports.不请求发布、广告管理或消息权限。本连接不收集私信、评论正文、具体评论者或受众身份，不发布、编辑或删除 Facebook 内容。数据用于获授权的内部运营，不出售、不用于无关画像，也不写入公开公司网站。公开公司网站不接收 Meta 凭证或 Page 报表。

The workspace saves only the most recent complete successful report for each Page. Failed or incomplete responses do not overwrite it. When the module is accessed, snapshots older than 30 days and Page connections without successful verification for over 30 days are removed. This is request-triggered cleanup, not an unattended deletion service. Removing a Page connection deletes its encrypted token and cached report from active workspace storage. Replacing the Meta app configuration requires confirmation and clears existing Facebook connections and cached reports, while other platform connections remain separate.工作台仅为每个 Page 保存最近一次完整成功报表。失败或不完整的返回不会覆盖它。模块在访问时清理超过 30 天的快照及超过 30 天未成功核验的 Page 连接。这由请求触发，并非无人值守的删除服务。移除 Page 连接会从当前工作台存储删除该 Page 的加密令牌及缓存报表。替换 Meta 应用配置须经确认，并清理已有 Facebook 连接和缓存；其他平台连接独立管理。

Starting Facebook authorization sets a separate Secure, HttpOnly, SameSite=Lax cookie for up to ten minutes. A single-use state binds the owner, browser, selected Page and app configuration revision. The cookie is cleared on callback, and authorization codes are not saved or displayed. Meta handles its own login, consent and platform cookies under its policies.开始 Facebook 授权时设置独立的 Secure、HttpOnly、SameSite=Lax Cookie，最长十分钟。单次状态绑定所有者、浏览器、所选 Page 和应用配置版本；回调时清除 Cookie，不保存或显示授权码。Meta 按其自身政策处理登录、同意授权及平台 Cookie。

12. Facebook data deletion instructionsFacebook 数据删除指引

In the private workspace, open Platform & Settings, select the relevant authorized Facebook Page, choose Remove Page connection and data, and confirm deletion. This removes that Page’s stored token and official cached report. It does not delete content on Facebook or revoke the app at Meta. To revoke platform access, remove AGILITHOR Social Operations in Facebook Business Integrations; removal at Meta may affect all Pages authorized to that app.在私有工作台进入“平台与设置”，选择相关获授权 Facebook Page，点击“移除 Page 连接与数据”并确认删除。这会删除该 Page 保存的令牌及官方缓存报表，不会删除 Facebook 内容，也不会在 Meta 撤销应用。撤销平台访问请在 Facebook“商家集成”中移除 AGILITHOR Social Operations；在 Meta 移除应用可能影响曾授权给该应用的全部 Page。

Facebook Business IntegrationsFacebook 商家集成

If you cannot access the workspace, or need removal of remaining company-controlled Facebook information, email support@agilithor.net with the subject “AGILITHOR Facebook data deletion”, the Page ID or public Page link, your workspace contact email, and the records to be removed. Do not send passwords, government IDs, App Secrets or tokens. We verify authority using existing account relationships and process the request manually within the time required by applicable law. Confirmation, exceptions and provider-controlled recovery copies are explained through the same contact channel. General manual records and downloaded exports require separate review.如无法访问工作台，或需清理公司控制的其余 Facebook 信息，请向 support@agilithor.net 发邮件，主题为“AGILITHOR Facebook 数据删除”，并提供 Page ID 或公开 Page 链接、工作台联系邮箱及需要删除的记录说明。不要发送密码、身份证件、App Secret 或令牌。我们通过现有账号关系核实权限，并按适用法律要求的期限人工处理，通过同一联系渠道说明完成情况、例外和服务商恢复副本。一般人工记录及已下载的导出须另行核查。

Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net

13. Updates & contact更新与联系

The date above identifies this policy version. We will post changes here and give additional notice or obtain consent where required before a material new use of personal information. This notice does not replace permissions required by a platform or applicable law.页首日期标识本版政策。发生变更时，我们会在此更新；对于个人信息的重大新用途，会在法律要求时提前另行通知或取得同意。本说明不能代替平台或适用法律要求的授权。

AGILITHOR PILATES LLC
Missouri, United States美国密苏里州
support@agilithor.net