Legal
Subprocessors
Last updated 6 August 2026
The third-party providers that process data on our behalf. We share only what the service cannot run without, and only to the extent required.
| Provider | Purpose | Processing region |
|---|---|---|
| Cloudflare, Inc. | Application hosting, database, CDN, WAF, DDoS protection | United States (database primary region), global edge network |
| Stripe, Inc. | Payment processing, storage of payment credentials, invoicing | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | United States |
| Telegram FZ-LLC | Internal alerts for security events and sign-ups. No TikTok Shop seller data is sent | Global |
Data residency
Data obtained through the TikTok Shop Open API is stored in a database whose primary region is in the United States. Backups remain in the same region.
What we do not do
- We do not share seller data with any party outside this list.
- We do not sell data or give advertising networks access to it.
- We do not use seller data to train machine-learning models.
Changes to this list
This list is updated before a new provider gains access to data, not after. The date of the last change appears at the top of the page. Questions: privacy@tikshopro.com.