BXMedia
01. Controller and contact
Controller: Anhui Yifan E-Commerce Co., Ltd. Registered address: No. 835 Renmin Road, Industrial Park, Dongcheng Subdistrict, Jieshou, Fuyang, Anhui, China. Privacy and ARCO contact: info@yifanglobal.com. This notice covers the BXMedia app and public pages; external services have their own notices.
A company registered in China. Unified Social Credit Code: 91341282MAER09634L. The company name and address are translated for readability. Serving creators in Mexico does not mean the company is incorporated in Mexico.
02. Data used
Account and authorization: creator identifiers, name or alias, avatar, market, permissions and authorization status; technical credentials needed to maintain an authorized connection. You enter your password on TikTok, not BXMedia.
Collaborations: products, samples, shipment and task status, links, evidence you provide, authorized indicators, invitations and team relationships.
Contact and support: email, WhatsApp, preferences, questions, complaints and attachments you supply.
Commission and reward information: product commissions, reward points and changes, payment requests, reviews and payment records. We process necessary recipient, selected bank or wallet, account and CLABE details you provide for TAP to verify and pay through external channels. Financial data requires a valid legal basis and express consent where applicable.
Files and technical records: photos or videos selected for a feature, IP address and access, request, error and security logs necessary for operation. File access depends on your actions and system permissions.
03. Purposes
Identify accounts, maintain authorized connections, show opportunities, manage samples and tasks, verify deliverables and product commissions, calculate and record TAP rewards, handle payment requests, provide necessary payout details to TAP and the actual payment channel, reconcile results, manage direct invitations and resolve disputes.
Technical records help deliver the service, diagnose faults and protect accounts. Optional promotional uses require a separate choice where applicable; declining them should not prevent essential functions.
04. Sources and permissions
Information comes from you, your actions, authorized TikTok services and parties involved in a collaboration, within the necessary scope. Review permissions before connecting an account.
Manage device permissions in settings and revoke connections on the relevant platform. This may disable related features but does not automatically erase previously processed data: request deletion through privacy support.
05. Recipients and transfers
Authorized operations and support staff access necessary data by role. The TAP entity responsible for payment and your selected bank, PayPal or other actual payment channel may receive identity, account, amount and transaction information needed for verification and payment. TikTok, brands and logistics providers receive only information needed for their respective activities; not every recipient receives all data.
Providers and related services: Amazon Web Services (AWS) provides cloud infrastructure. TikTok and TikTok Shop provide authorized account connections, product collaboration information and their own settlement records. TAP handles this service's reward payment requests through PayPal, banks or other payment services actually selected. External services process necessary details under their respective roles and privacy terms; TAP reward payments are not official TikTok payments. Hosting and operational access locations: The primary app and website server is hosted on Amazon Web Services (AWS) in the Mexico (Central) region. The team of the China-registered operator may access necessary information from China with access restricted by role. Data needed for authorized features is also processed through TikTok's official channels. The primary server's location does not mean that every external service or backup is located in the same region.
Domestic and international transfers require the applicable legal basis and safeguards. Where needed, consent is requested before transfer; accepting terms is not an unlimited authorization.
06. Retention and deletion
Retention arrangements for accounts, authorizations, files, technical records, compensation and backups: We retain account, authorization, collaboration, file, points and technical records only as long as needed to deliver the service or meet a valid purpose. Access, withdrawal and deletion requests are assessed by data category. Where a legal or valid contractual obligation, dispute or fraud prevention requires retention, we limit the data and its use to what is necessary. Our response explains what is deleted or anonymized and what is retained, why and for the applicable period, including affected backups. At the end of that period, we delete or irreversibly anonymize the data. We do not apply one fixed retention period to every category.
Manual deletion handling and completion-notification process: Our team manually handles requests received at info@yifanglobal.com and coordinates their execution. After receiving a valid request and completing the necessary identity verification, we will immediately stop routine use of the account data and new authorized synchronization, and deactivate BXMedia sessions. Within 7 calendar days, we will delete or irreversibly anonymize data that does not need to be retained under a legal or valid contractual obligation, and notify you of the outcome. Records that must be retained will have restricted access and use; we will explain what is retained, why and for how long, and delete or irreversibly anonymize it when that period ends. Any shorter deadline required by law or an applicable TikTok agreement will apply. Deleting a BXMedia account does not delete your TikTok account.
Account closure is not data erasure. Where information must be retained, identify the category, reason and period, restrict its use and erase or de-identify it when that period ends.
07. ARCO rights and withdrawal
Request access, rectification, cancellation, opposition, withdrawal of consent or limits on use through info@yifanglobal.com. Provide a reply channel, account and request. For rectification, explain the change. Identity is verified through a proportionate channel.
ARCO determinations are communicated within the statutory 20-day period and, if approved, implemented within 15 days after the response, subject to justified extensions allowed by law. You may approach the competent authority, including the Secretaría Anticorrupción y Buen Gobierno where applicable.
Do not send passwords, codes or complete documents in an initial email. The team will identify a suitable channel for necessary verification.
08. Website technologies
These pages contain no advertising, third-party analytics, automatically submitted forms or tracking cookies. The server receives technical information needed to serve visits. Changing language opens another page and does not create a profile.
The request composer prepares an email on your device: it does not send it to the server or confirm receipt. You must send it in your email app. External services, including email and WhatsApp, also apply their own terms.
09. Security, minors and changes
Security measures appropriate to the data and lawful incident handling are required. No system is infallible. Report incidents to the privacy contact without credentials or unnecessary third-party data.
BXMedia is intended for creators aged 18 or older. Report any improper processing of minors' data.
The effective version is published at this URL with its date. Changes requiring notice or renewed consent will be communicated as appropriate. You may save or print this notice.