21. Who we are
2market is a product of 2found, operated by Trần Hoàng Chân, an individual based in Ho Chi Minh City, Vietnam (“we”, “us”). Contact: [email protected].
This policy covers the 2market website (2market.app), the 2market desktop app and the 2market service at api.2market.app. It does not replace the privacy policies of TikTok, Meta, Google or any AI provider you choose; their own policies apply to what they process.
2. This website
The website is a set of static pages. It has no sign-up form, advertising pixels, analytics or tracking cookies. Cloudflare, which serves and protects the site, processes connection data such as IP address, browser information and request time to deliver pages and block abuse.
3. Information we collect
- Account: your email address and name; a password hash if you use a password, or your Google account identifier if you sign in with Google; session records.
- Projects and content: project and brand descriptions, the text you write, draft revisions, and the images and videos you upload, with their file names and technical details.
- Connected channels: when you connect a platform account, we receive its account, Page or channel identifier and display name, the permissions you granted, and access tokens. Tokens are stored encrypted.
- Publishing records: what you chose to post, where, the settings you selected, the time you gave consent, the post’s status and the identifier the platform returns.
- Security data: IP address, device and browser information and request logs, used to keep accounts and the service secure.
We do not read your feeds, messages, followers, comments or other people’s content, and we do not collect data from platforms beyond what is listed in section 9.
4. How we use it
We use this information only to provide 2market to you: signing you in, storing your projects and content, publishing the posts you review and approve, showing their status, keeping your connections working, preventing abuse, and answering your support requests. We rely on your consent and on the need to provide the service you request.
We do not sell personal data, use it for advertising, or use data received from platforms to build profiles or train AI models.
6. AI features and your own keys
AI features in 2market run on your computer and call the AI providers you choose with your own API keys. Those requests go from your device directly to that provider under its own terms. We do not receive your AI keys or route AI requests through our servers.
7. How long we keep it
- Platform tokens are deleted as soon as you disconnect a channel, or as soon as the platform tells us you removed 2market.
- Account data, content, media and publishing history are kept while your account exists and deleted within 30 days of your account-deletion request.
- Backups expire automatically within 30 days, so deleted data leaves our backups within that time.
- Server logs are rotated automatically and never contain your tokens or passwords.
8. How we protect it
Connections use HTTPS. Platform tokens are encrypted before storage, passwords are stored only as strong hashes, uploaded media is kept in private storage, and every record is restricted to its owner. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
9. Data from each platform
TikTok (permissions user.info.basic, video.publish): your TikTok user ID and display name, and the posting options TikTok reports for your account. We upload only the videos and photos you approve, with the settings you choose. Revoke access in TikTok’s app permissions. See the TikTok Privacy Policy.
Facebook Pages (permissions pages_show_list, pages_read_engagement, pages_manage_posts): the list of Pages you manage, their names and IDs, and Page access tokens for the Pages you select. We publish only the posts you approve to the Page you choose. See the Meta Privacy Policy.
Threads (permissions threads_basic, threads_content_publish): your Threads user ID, username and name, and your remaining posting quota. We publish only the posts you approve. See the Meta Privacy Policy.
YouTube (scopes youtube.upload, youtube.readonly): your channel ID and title, and the processing status of videos you upload through 2market. We upload only the videos you approve, with the title, description and settings you choose. 2market uses YouTube API Services; by using the YouTube features you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke 2market’s access at any time in your Google security settings. 2market’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
10. Your rights and choices
You can ask to access, correct, export or delete your personal data, or withdraw your consent, by emailing [email protected] from your account’s email address. We answer within 30 days and may ask you to confirm your identity. These rights include those under Vietnam’s personal data protection law and the law where you live; you may also complain to your data-protection authority.
You can disconnect any channel in the app at any time. Step-by-step instructions are on the data deletion page.
11. Children
2market is for people aged 18 or older. We do not knowingly collect data from children; if you believe a child has used 2market, contact us and we will delete the account.
12. Changes to this policy
When we change this policy we update the effective date above. If a change is material, we tell you in the app or by email before it applies.