Skip to content

Privacy Policy

Last updated: 1 September 2026

This policy explains what information Wecore Hub collects, why we collect it, how we protect it and the choices you have. It applies to our website and to the Wecore Hub application.

1. Who we are

Wecore Hub is operated by Wecore Ltd, a company registered in England and Wales, based in London, United Kingdom ("Wecore", "we", "us"). For customer account data we act as a data controller. For advertising data we process on behalf of our customers, we act as a data processor under our Data Processing Agreement. You can reach us at hello@wecorehub.com.

2. Data we collect

  • Account information: name, work email, company name, role, time zone and password hash (if you do not use single sign-on).
  • Billing information: billing address, VAT number and subscription history. Card details are handled by our payment processor and never stored on our servers.
  • WhatsApp reporting: phone numbers or group identifiers you add to receive reports, and your replies to report messages (for example "UNDO").
  • Product catalog data: product titles, descriptions, prices, stock, images and URLs from feeds you connect.
  • Usage data: log data, device and browser information, and actions taken in the app, used to operate and secure the service.

3. Data received from TikTok

When you connect a TikTok for Business account via OAuth, we receive an access token scoped to the advertiser accounts and permissions you approve. Using the TikTok Marketing API, we access:

  • Advertiser account details (account ID, name, currency, time zone, status)
  • Campaign, ad group and ad configuration, including budgets, bids, targeting and status
  • Reporting metrics such as spend, impressions, clicks, CTR, conversions, CPA and ROAS
  • Creative assets and metadata associated with your ads
  • Catalogs and product sets associated with your Business Center

We use this data only to provide the features you have enabled: launching campaigns from your catalog, optimizing campaigns according to your rules, analyzing creative performance and sending reports. We do not sell TikTok data, use it for advertising to third parties, combine it across unrelated customers, or use it to build profiles of TikTok users. We do not access TikTok user personal data beyond aggregated reporting provided by the API. Our use of TikTok data complies with the TikTok for Business Developer Terms.

4. How we use data

  • To provide, maintain and improve Wecore Hub
  • To execute changes to your campaigns that you have authorized through rules or approvals
  • To send daily summaries and alerts by email or WhatsApp
  • To provide support and communicate about your account
  • To detect, prevent and investigate security incidents and abuse
  • To comply with legal obligations

Optimization models are trained per workspace on your own historical performance. We do not use one customer's data to optimize another customer's campaigns.

Under the UK GDPR, EU GDPR and Brazil's LGPD, we rely on performance of a contract (to provide the service), legitimate interests (to secure and improve the service), consent (for optional marketing emails and non-essential cookies) and legal obligation (for tax and accounting records).

6. Sharing and processors

We share data only with service providers that help us run Wecore Hub, under written agreements:

  • Cloud hosting and databases (EU region)
  • Payment processing
  • WhatsApp Business messaging provider
  • Email delivery and customer support tooling

An up-to-date list of sub-processors is available on request. We may disclose information if required by law or to protect the rights and safety of our users.

7. International transfers

Data is primarily stored in the European Union. Where data is transferred outside the UK, EEA or Brazil, we use appropriate safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

8. Retention

We keep account data while your subscription is active. Reporting data synced from TikTok is retained for up to 25 months to power historical comparisons, unless you delete it sooner. Billing records are kept for as long as required by tax law (typically 6 years in the UK).

9. Data deletion

You can delete your data at any time:

  • Disconnect a TikTok account in Settings → Integrations. We revoke the access token immediately and delete synced TikTok data within 30 days.
  • Delete your workspace in Settings → Workspace. All associated data is deleted within 30 days, except records we must keep by law.
  • Email us at hello@wecorehub.com with the subject "Data deletion request". We confirm completion in writing.

You can also revoke Wecore Hub's access directly from TikTok Business Center at any time.

10. Security

Access tokens and credentials are encrypted at rest with AES-256 and in transit with TLS 1.2 or higher. Production access is limited to authorized staff using multi-factor authentication, and all access is logged. We run regular dependency scanning and third-party penetration tests. If you believe you have found a vulnerability, contact hello@wecorehub.com.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. You also have the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner's Office (ICO), your local EU data protection authority or Brazil's ANPD.

12. Cookies

Our website uses strictly necessary cookies for security and session management. With your consent, we use privacy-friendly analytics to understand how the site is used. You can change your preferences at any time.

13. Changes and contact

We will notify customers by email of material changes to this policy at least 14 days before they take effect. Questions? Contact Wecore Ltd, London, UK — hello@wecorehub.com.