How we handle
client data.

1. Scope of this policy

This policy applies to the advertising services we provide, our in-house AdOps Workspace platform, and this informational website. It covers information we handle about client contacts, platform users, and website visitors, plus advertising data we process on a client’s behalf. TikTok separately controls information stored in the TikTok platform and explains its own privacy practices.

2. Operator and role

AdOps Workspace is operated by MTL Central inc. For client advertising data, we act on the client’s instructions and only for the accounts we are engaged to manage. For our own website, enquiries, and business records, we act as the controller. Neither MTL Central inc. nor AdOps Workspace is affiliated with or endorsed by TikTok.

3. Information we process

Depending on the permissions approved by the account owner and the work we are engaged to do, we may process:

• Advertiser identifiers, business identifiers, account names, and account configuration supplied by TikTok.
• Campaign, ad-group, ad, budget, schedule, targeting, status, and review information.
• Approved creative assets, media metadata, identity information, and Spark authorization references.
• Business Center, member, asset, balance, and fund-allocation information needed for authorized workflows.
• Advertising reports and performance metrics provided through TikTok reporting.
• Pixel identifiers and names, plus event data we send on a client’s instruction — event name, time, unique event ID, click ID and hashed email where supplied, plus any value, currency, and page URL supplied.
• Connection credentials for the TikTok account, encrypted at rest, plus redacted activity and audit records.
• Information entered into our platform by our team or a client, including labels, notes, links, and campaign drafts.
• Contact details and correspondence when you email us about an engagement, a review, or a privacy request.

4. How information is used

We use information to:

• Authenticate and maintain authorized TikTok connections.
• Prepare, review, launch, pause, or update advertising activity we are engaged to run.
• Organize creative assets and connect the correct advertiser, identity, and campaign.
• Retrieve reports, reconcile platform results, and support advertising decisions.
• Support authorized Business Center administration and fund allocation.
• Create pixels and send conversion events for the client’s measurement.
• Display conversion metrics returned in TikTok reports and inspect existing pixel configuration.
• Report results to clients and answer their questions about account performance.
• Maintain security, prevent misuse, diagnose errors, and satisfy legal obligations.

We do not sell or redistribute TikTok data or use it for unrelated profiling. Access is limited to advertising, measurement, reporting, and Business Center workflows for the client accounts we are engaged to manage.

5. How information is shared

Information may be processed by hosting, infrastructure, security, and support providers acting on our behalf under confidentiality and security obligations. Information may also be disclosed when required by law, to protect rights or safety, as part of a business transaction, or with the client’s instruction.

Campaign results are shared with the client whose account they belong to. Requests to TikTok are sent only through the authorized connection. We do not sell personal information or TikTok data.

6. Retention and deletion

Information is retained for as long as we run the account, and afterward as needed to maintain accurate operational and audit records, resolve disputes, and meet legal obligations. Retention periods depend on the account, the type of information, and the engagement.

Disconnecting revokes or removes locally stored connection credentials. Other records may remain subject to operational, security, backup, and legal retention requirements. See Data deletion for the request process.

7. Security

Our platform uses server-side authorization handling, encrypted credential storage, request redaction, session protection, and restricted team access. These controls reduce risk but cannot guarantee absolute security. Keep platform credentials private and notify us promptly if unauthorized access is suspected.

8. Your choices and rights

Account owners can revoke the connection through TikTok’s authorization settings or ask us to disconnect it. Clients can raise a request with their account lead. Depending on applicable law, individuals may request access, correction, deletion, restriction, or portability of information. Some requests may need to be directed to the client that owns the advertising account, because it controls the relevant data.

9. Children

Our services and platform are intended for business use and are not directed to children. We do not knowingly use the platform to collect children’s personal information.

10. Changes to this policy

This policy may be updated to reflect changes in our services, legal requirements, or TikTok platform terms. The date at the top identifies the latest revision.

11. Contact

For privacy, account-access, or data requests, contact MTL Central inc. at dev@mtlcentral.com. For deletion requests, follow the data deletion instructions.