TESS Privacy Policy

Last Updated: October 28, 2026

Policy version: 2026-10-28

1. Introduction

KB Partners LLC operates The Fast Track Girl and TESS ("Company," "we," "us," or "our"). TESS helps TikTok Shop affiliates research products, track performance, and use content tools where available.

This policy covers TESS at app.thefasttrackgirl.com and the TESS mobile app for iPhone. The canonical TESS policy is app.thefasttrackgirl.com/privacy. The Fast Track Girl public website and its marketing activities have a separate privacy policy. Both services are operated by KB Partners LLC. Please read the policy for the service you use.

This policy explains our practices; using TESS or reading this policy does not replace any separate permission required for connected-account access, AI processing, tracking, or device features.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Email address
• Name (as provided during registration)
• Authentication credentials and verification information managed by Clerk

Payment Information:

Clubhouse and web payments are processed through Spiffy. TESS subscriptions bought in the iPhone app are processed by Apple through your Apple Account, and RevenueCat validates those purchases and reports their status to us. For app purchases we receive the product purchased, subscription event identifiers, subscription status, purchase, renewal and expiration dates, and whether the purchase was made in Apple's test (sandbox) environment. We link this information to your TESS account using your account identifier. TESS and our internal FastTrackCRM system receive customer and subscription identifiers, billing status, and transaction dates and amounts, and use membership and billing records to provide access, avoid charging Clubhouse members twice, and for support and accounting. Apple and Spiffy handle your payment-card details; we never receive your full card number. Please review the payment provider's privacy policy.

Content You Create:

• Messages, content requests, product details, and images you submit to available web content tools, and the scripts, hooks, and captions they generate
• Product search queries
• Favorites and folder organization preferences

2.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Search queries submitted
• Time spent on the Service
• Device type, browser type, and operating system
• IP address
• Referring URLs

Analytics Data:

TESS web uses PostHog for browser product analytics on signed-in sessions. Our servers also send account-linked operational events, such as TikTok sync status, to PostHog when it is configured, including for scheduled background syncs while you are not using TESS. Events are linked to your account identifier, so they are not anonymous. A sample of sessions is eligible for replay, with input and page-text masking. These safeguards reduce what is captured; they do not make account-linked analytics anonymous. Operational logs and error reports may also contain account identifiers and technical details.

2.3 Information from Third-Party Services

TikTok Login Kit and Shop Creator Data:

TESS uses separate TikTok connections and agency or market-data sources. When you connect TikTok Login Kit, we receive your authorized profile details, follower/like/video counts, and video metadata such as titles, captions, posting dates, covers, links, and engagement counts. When you authorize TikTok Shop Creator access, we receive authorized profile, showcase, affiliate-order, product, commission, collaboration, and sample information. Our backend stores this information and may refresh it while you are not actively using TESS, until the relevant connection is disconnected. Agency linkage and market-data APIs supply additional information described below.

Creator Marketplace and Discover Data (via Search Creator and Get Marketplace Creator Performance endpoints):

• TikTok username, display name, and profile avatar
• Bio/description and region/location
• Follower count and performance metrics
• Audience demographics (age, gender, geographic distribution)

Performance Metrics:

• Gross Merchandise Value (GMV) - total, by video, by livestream
• Units sold and sales ranges
• Commission rates and earnings
• GPM (GMV per mille) - overall, video, and livestream
• Video performance (views, likes, comments, shares, engagement rates)
• Livestream performance metrics
• Category and brand GMV distribution

Campaign & Product Data (via Campaign Performance endpoints):

• Products you're promoting in agency campaigns
• Product-level sales, commissions, and creator collaboration metrics
• Individual video/livestream performance for campaign products
• Sample fulfillment and shipping status

Reference Data (via Categories and Brands endpoints):

• Category names for GMV breakdown display
• Brand names for collaboration statistics

Note: Available fields depend on the particular TikTok API, provider permissions, and data coverage. Missing data and ranges are different from precise values. Discover also displays shared product, video, LIVE, and creator market rankings and profile/performance information received through FastTrackCRM; these are not your private connected-account reports. See section 4.1.

2.4 Trybe Creator Connector and Official Performance Data

On TESS web, if you choose to connect your Trybe creator account, the separate Fast Track Trybe Connector browser extension checks Trybe's authenticated profile endpoint and sends TESS only your normalized Trybe creator user ID, the connector version, and short-lived connection-challenge information. The connector discards the profile response immediately.

The connector does not collect or transmit your Trybe password, cookies, access tokens, chat messages, payout or banking details, Stripe information, tax information, or raw profile response.

A connector claim does not authorize access by itself. It remains pending until Fast Track independently verifies that the creator belongs to your account. After verification, TESS may display creator-scoped roster and performance information collected by FastTrackCRM through the official Trybe Partner API. Our separate Railway service continues to support broader brand discovery and is not used to verify your creator identity.

Connection attempts expire after five minutes and unlinked terminal attempt records are deleted after 30 days. Rejected, disconnected, and superseded associations and their audit events may be retained for up to two years for security and support. Disconnecting stops creator-specific Trybe performance access. It does not erase all existing connection records or delete your TESS account; use the deletion-request process in section 7.3 to request erasure.

The Fast Track Trybe Connector is provided by KB Partners LLC and is not an official Trybe browser extension unless Trybe expressly approves co-branding.

2.5 TESS Mobile App

The TESS iPhone app includes Analytics, Trybe, Discover, Earn, and Account and onboarding. You sign in with your email address and a password or an email verification code, managed by Clerk. The app uses the same account, connected-account and shared market information described in this policy. When you use the app it sends us:

• Your account identifier and sign-in session, so we can show your reports and check your access
• Onboarding answers you choose (your goals, stage and challenges)
• Brand searches you type in Trybe, and brands you watch or dismiss and alerts you read
• Commission upgrade requests you make in Earn
• Subscription purchase and restore requests, as described in section 2.1

The app does not include advertising, analytics or crash-reporting software, does not track you across other companies' apps or websites, and does not ask for access to your camera, photos, contacts, location, microphone or notifications. Web TESS AI tools and the browser connector extension are not part of the app. Trybe matching that already runs on our servers is described in section 4.2.

3. How We Use Your Information

3.1 To Provide and Maintain the Service

• Process your account registration
• Authenticate your identity
• Display your TikTok Shop performance data to you
• Provide product research, Trybe matching, and content generation where those features are available to your account
• Save and organize your created content

3.2 To Improve the Service

• Analyze usage patterns to improve features
• Identify and fix technical issues
• Develop new features based on user needs

3.3 Aggregate Analytics for Service Improvement

We may analyze aggregated, anonymized data across our user base to:

• Identify performance benchmarks for our agency members
• Improve our training and educational content
• Optimize platform features and user experience
• Provide better support and guidance to members

Important: This aggregated analysis is conducted solely to improve the Partner Services we provide to you and other members, in accordance with TikTok's Partner Terms of Service. We do not use TikTok data for any purposes outside of providing services to our agency members. We do not sell aggregated data to third parties.

3.4 To Communicate with You

• Send service-related announcements
• Respond to your inquiries and support requests
• Notify you of changes to our Terms or Privacy Policy

3.5 For Security and Fraud Prevention

• Monitor for suspicious activity
• Protect against unauthorized access
• Comply with legal obligations

4. How We Share Your Information

4.1 Private Reports and Shared Market Information

Your connected-account reports are accessed through account-scoped controls. Authorized staff and our internal FastTrackCRM system may process account, connection, membership, and performance information to provide support and operate the services. We do not make your private connected-account report a report for another member.

Discover is a shared market-research feature: other members can see creator names or handles, avatars, rankings, follower counts, and provider-supplied market performance information. Public or market-source creator information may therefore appear even when the creator is not the viewing member. This is separate from a member's private connected-account order and commission reports.

Shared product research: to decide which public TikTok Shop products to look up, TESS uses product identifiers that appear in connected accounts, such as products in a showcase or in affiliate orders, combined across members, together with product lists from TikTok's official market-data APIs and our agency campaigns. We then retrieve public product information, such as the product title, shop, price, units sold, rating, and public videos that feature the product, and show it to members in shared features such as Discover. We do not show which member, or how many members, connected or sell a product, and we do not show any member's private sales, commission, or order information to other members.

Media Kit share links: if you make a share link for a media kit, anyone who has that link can see the kit you set up for it, such as your TikTok handle, profile photo, and the sales numbers, videos, and products you chose to show for that brand. Commission, your email address, and your other brands are never included. Share links are kept out of search engines, and you can set an end date or turn a link off at any time. If you change your link name, links you already shared keep working and point to the new name; a link name you used is never given to another member.

4.2 Service Providers

We share information with third-party service providers who assist us in operating the Service:

Service providers process information to support the functions described above, subject to applicable service agreements and their privacy practices. The same operator uses FastTrackCRM internally for contact, membership, billing, TikTok/agency, Trybe, and support records. Account records may therefore be held in both TESS and FastTrackCRM.

App Store subscriptions stay linked to the TESS account that bought them while any subscription on that Apple Account is active. When none is active, a restore may link the purchase history to another TESS account you sign in to. An expired subscription does not provide paid access.

AI processing: OpenAI and Anthropic may process text you submit to the TESS AI tools on the web, and public product information. Product photos you choose to upload are processed by OpenAI and are not stored by TESS. Trybe matching may also send connected-account video titles, captions and posting dates, together with candidate product identifiers, titles, shop names and matching evidence, to OpenAI to identify products featured in a video. This processing is different from training a model. OpenAI and Anthropic do not use what you submit through TESS to train their AI models, and we do not use your TikTok performance data to train AI models. Current Trybe matching does not present a separate AI permission prompt. Reading this policy, connecting TikTok, or receiving feature access is not a separate AI permission. See section 15.3.

For customer support and related operational work, authorized staff sometimes submit customer messages, screenshots or contact details to AI tools. These tools may include OpenAI, Anthropic, Grok (xAI), OpenRouter and Cursor. This occasional staff use is separate from the automated features described above; not every provider receives every request. Information sent to a tool is subject to that provider's terms, privacy practices and the account settings in use. Reading this policy does not replace any separate permission required for that sharing.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests (e.g., court orders, subpoenas).

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Retention

5.1 Account Data

Cancelling a subscription does not delete your account or its stored information. We keep account information after cancellation unless you delete your account or removal is required by law. You can delete your account in the TESS app, as described in section 7.3, or by emailing support. Your deletion is completed within 30 days of your request. Some records are kept after deletion for legal, accounting and security reasons: billing and subscription transaction records, records of AI permission decisions (kept for 24 months as described in section 5.3), records of commission upgrades you agreed to in Earn, together with a minimal record of the TikTok account they apply to (kept for 24 months), an administrative log of changes to your TESS AI access, and a record that your deletion was carried out. Cost and usage totals are kept with your identity removed. Membership and billing records held in FastTrackCRM are kept as needed for accounting and legal obligations.

5.2 TikTok Performance Data

• Profile-statistics history: Follower, like and video-count snapshots have a rolling 90-day retention rule. Daily cleanup may leave a snapshot until the next cleanup run.
• Creator-order history: Normalized orders, commissions, rollups and related reporting history are a separate dataset, retained without a fixed age limit while the relevant authorization and reporting purpose remain active. They are not all deleted at 90 days. After Shop Creator authorization ends, the existing cleanup process makes this order history and its private archives eligible for deletion after a 90-day reconnect grace period. Reconnecting can cancel cleanup only before deletion starts; retries may delay completion. Account deletion is a separate request.
• Raw Creator-order evidence: Under the standard rule, raw database evidence becomes eligible for clearing after 180 days, only after its private archive is verified. Clearing may be delayed while archive verification or cleanup is retried. Private archives have no automatic age-based expiry; account-deletion cleanup includes those archives.
• Video and other connected-account data: Retained for reporting and matching, subject to applicable retention rules and your deletion request. Disconnecting a connection and requesting account deletion are separate actions.

5.3 Logs, Analytics and AI Evidence

Application logs, error reports, analytics and background-job history are retained under the relevant provider's retention settings; they are not all anonymous. Database activity and operational records may remain until account cleanup or another applicable retention rule removes them.

For traced AI operations, TESS requests deletion from Langfuse 30 days after each trace starts. Vendor processing and retries may take longer; this is not a guarantee that every copy disappears exactly on day 30. Trybe matching is not traced in Langfuse.

AI data-disclosure records become eligible for removal 24 months after they are recorded. AI permission decisions are kept while current or referenced by retained disclosures, and become eligible for removal 24 months after a later decision or account deletion supersedes them. These records document permission and processing. Network details associated with AI permission decisions are removed during account-deletion handling.

5.4 Content You Create

Messages, generated content, saved items and folders are retained until you delete them or request account deletion. Subscription cancellation alone does not erase them. Account requests require cleanup across TESS, FastTrackCRM and applicable service-provider copies; deleting a login alone is not confirmation that all copies have been erased.

If you use Report this output on a TESS AI result, we store your report: the reason you chose, any note you add, and a copy of the reported result. Only authorized TESS staff review reports, to find and fix problems with TESS AI. A report is kept for 12 months after you send it, even if you delete the original session, and is deleted sooner if you delete your account.

6. Data Security

6.1 Technical Safeguards

We implement industry-standard security measures including:

• Encryption in Transit: We use HTTPS/TLS to protect information sent between your device and the Service
• Encryption at Rest: Database is encrypted at rest; TikTok OAuth tokens are encrypted using AES-256-GCM
• Authentication: Authentication and verification through Clerk
• Access Controls: Role-based access controls limit employee access to user data

6.2 Security Limitations

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your data in a portable format
• View the TikTok statistics available to your account through the Service, subject to access and connection status

7.2 Correction

You may update your account information through the Service settings or by contacting us.

7.3 Deletion

You can delete your account from inside the TESS app: open Account, choose Delete account, and confirm with your password or a verification code. You can also email support@thefasttrackgirl.com from the email address on your account.

When you request deletion, your account is locked straight away and you can no longer view private reports. You then have a 14-day grace period in which you can change your mind by choosing Cancel deletion in the app. When the grace period ends, we disconnect your TikTok connections and ask TikTok to revoke our access, delete your TikTok Shop order history and other connected data, delete your TESS account data, delete your subscription customer record at RevenueCat, and finally delete your sign-in at Clerk. This is completed within 30 days of your request, except for the records described in section 5.1. Copies held by service providers are removed under their own deletion processes. Signing out or cancelling a subscription does not delete your account.

Deleting your account does not cancel a subscription. Cancel an App Store subscription in your Apple Account settings (Settings › your name › Subscriptions) before or after deleting your account. Cancel a Clubhouse membership through Spiffy or by contacting support.

7.4 Disconnection

You may disconnect TikTok through TESS's account connection controls. Disconnecting the relevant connection stops its new collection; TikTok Login Kit grant revocation is retried if the provider does not confirm it immediately. Shop Creator disconnection clears the stored Shop grant; you can also manage authorization with TikTok. You may disconnect your Trybe association from the web Trybe section to stop creator-specific performance access. Disconnecting does not delete your TESS account or cancel billing. To request erasure of previously collected information, use section 7.3.

7.5 Opt-Out of Analytics

You may opt out of certain analytics tracking:

• PostHog: Contact us to opt out of authenticated product analytics and sampled, privacy-masked session replay
• Do Not Track: TESS web configures browser PostHog analytics to respect supported browser Do Not Track signals; this does not control server-side operational events. See section 15.1
• Cookies: Manage through your browser settings

7.6 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at support@thefasttrackgirl.com.

7.7 Legal Basis for Processing (For Users Outside the US)

If you are accessing the Service from outside the United States, we process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you have subscribed to
• Legitimate Interests: Processing for our legitimate business interests (improving the Service, security) where not overridden by your rights
• Consent: Where you have given consent for specific processing activities
• Legal Obligation: Processing necessary to comply with applicable laws

8. Children's Privacy

TESS is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Our primary hosting and database services are in the United States. Information may also be processed internationally: our error and log monitoring provider stores application errors and logs in the European Union (Germany), and AI providers or other service providers may process information in other countries. These locations apply to the services described in this policy; a provider's regional endpoint does not mean every type of processing occurs only in that region. Any consent or other safeguards required for a transfer must be addressed separately; using the Service is not a substitute for them.

10. Third-Party Links

The Service may contain links to third-party websites (e.g., TikTok, Amazon). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

11. TikTok API Compliance

11.1 Data Source

TikTok information in TESS comes from different authorized connection, agency and market-data APIs, directly or through FastTrackCRM. The following agency/marketplace capabilities supplement the Login Kit and Shop Creator data described in section 2.3:

11.2 Required API Scopes

Different connections request different permissions. Login Kit uses user.info.basic, user.info.profile, user.info.stats and video.list. Shop Creator reads use creator.affiliate.info, creator.showcase.read and creator.affiliate_collaboration.read; LIVE data depends on additional provider capability. Agency and market integrations use separate scopes, including:

• seller.creator_marketplace.read - For creator search and performance data
• partner.tap_campaign.read - For campaign, product, and content statistics
• partner.authorization.info - For retrieving authorized category assets
• product.read - For category and brand name lookups

11.3 Data Use Restrictions

In accordance with TikTok's requirements, we:

• Use the relevant provider authorization for connected-account, agency and market-data access
• Use TikTok data solely to provide Partner Services to you
• Do not sell TikTok data to third parties
• Do not use TikTok data to create profiles for advertising purposes
• Keep private connected-account reports separate from shared Discover market information, as explained in section 4.1

11.4 TikTok's Privacy

For information about how TikTok collects and uses your data, please review TikTok's Privacy Policy at https://www.tiktok.com/legal/privacy-policy.

12. Cookies and Tracking Technologies

12.1 What We Use

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Analyze usage patterns
• Improve the Service

12.2 Types of Cookies

12.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on the Service
• Updating the "Last Updated" date
• Sending an email notification for significant changes

An updated policy does not automatically grant a separate permission required for new processing. We will request any such permission separately.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

KB Partners LLC — operator of The Fast Track Girl and TESS
Email: support@thefasttrackgirl.com
Website: https://app.thefasttrackgirl.com

To delete your account, use Account › Delete account in the TESS app, or email support@thefasttrackgirl.com with the subject line "Data Deletion Request."

Response Time: We will respond to privacy requests within 14 days (or as required by applicable law, such as 45 days under CCPA or 30 days under GDPR).

15. Additional Disclosures

15.1 Do Not Track

TESS web configures browser PostHog analytics to respect supported browser Do Not Track signals. Browser Do Not Track does not control server-side operational events, including account-linked TikTok sync events. This browser setting does not stop essential authentication, security, operational logging or processing you request. It is not a statement about The Fast Track Girl website's tracking settings. Contact support for analytics privacy requests. The TESS iPhone app does not track you and does not request Apple's App Tracking Transparency permission.

15.2 Data Processing Agreement

For Agency Members, our access to TikTok Shop data is governed by the TikTok Shop Partner Center Terms of Service, which includes data processing requirements.

15.3 AI-Generated Content

The TESS AI writing tools (Scripts, Hooks, Captions and Policy Checks) are available on the web. To write and check your content, they send what you give them to AI providers: the product name, brand and details you enter, product photos you choose to add, your choices and change requests, and any text you paste in, together with relevant catalog facts. Text goes to Anthropic (Claude) and OpenAI; product photos go to OpenAI. The writing tools do not send your sales, buyer details or information about other creators. Anthropic and OpenAI process this information to provide the tools to us and do not use it to train their AI models; they may keep it for a limited time under their own policies, for example to detect abuse. Do not include private information you do not want shared. Web AI feature access and permission to use stored TikTok account context are separate controls; this statement does not mean Trybe matching presents a separate permission prompt. Trybe's AI-assisted matching uses the connected-account video/product information described in section 4.2; it is not an AI writing tool. The TESS iPhone app does not include TESS AI tools or the browser extension.

Before you first use the TESS AI writing tools, TESS shows a one-time notice that explains this sharing and names the AI providers. Your choice is saved to your TESS account, and you see the notice again only if it changes in a way that needs a new decision. You can withdraw it at any time in Settings → AI & Privacy; the writing tools then ask again before sending anything. Records of these choices are kept as described in section 5.3.

In TESS web profile settings, the AI & Privacy page also shows AI-personalization choices when available. If it shows an active permission, choose Turn off to withdraw it for features governed by that permission. Contact support if you cannot access these controls. Withdrawal does not delete content already created. These controls do not govern current Trybe matching, which is described in section 4.2.

Every TESS AI result has a Report action you can use if a result seems harmful, incorrect or likely to break TikTok's rules. Reports are kept as described in section 5.4.

Langfuse receives redacted prompts, context, outputs and usage information for traced web AI operations so we can diagnose problems. Current TESS AI writing-tool traces are restricted to admin operations; member writing-tool operations and Trybe matching are not traced there. Redaction reduces unnecessary identifiers; it is not a promise that every contextual detail is anonymous. We do not use your TikTok performance data to train AI models. AI-generated content and inferred matches should be reviewed before use.