Effective date: May 1, 2026 · Last updated: May 8, 2026
YesMAM.shop ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Platform you agree to the collection and use of information as described here.
We collect the following categories of information: • Account information: name, email address, phone number, and password (hashed) when you register. • Creator profile data: TikTok display name, avatar URL, bio, follower count, and public video list — collected only when you connect your TikTok account via TikTok's Login Kit and only with your explicit consent. • Order information: customer name, phone number, delivery address, and order details when a purchase is made through the Platform. • Usage data: page views, clicks, referral sources, and tracking link interactions used for commission attribution and Platform analytics. • Payment information: mobile money account identifiers for payout processing. We do not store full card numbers.
We use the information we collect to: • Operate and personalize your YesMAM storefront and dashboard. • Process orders and calculate creator commissions. • Send order notifications via WhatsApp and email. • Process payouts to creators via MTN MoMo or other supported methods. • Improve Platform performance and user experience. • Comply with legal obligations. We do not sell your personal information to third parties.
When you connect your TikTok account, we access the following data through TikTok's official Login Kit API: • Basic profile: open_id (TikTok's immutable user identifier), display name, avatar URL • Profile details: bio description, profile link, verification status • Stats: follower count, following count, likes count, video count • Public videos: your public video list (paginated) This data is used exclusively to populate your YesMAM creator storefront. We do not use your TikTok data for advertising, profiling, or resale. TikTok access tokens are stored server-side only, encrypted at rest, and are never exposed to your browser or to third parties. You may disconnect your TikTok account at any time from your dashboard settings. Disconnecting revokes our access token and removes your TikTok profile data from our active systems within 24 hours.
We use session cookies to maintain your login state. We do not use third-party advertising cookies. Tracking links (yesmam.shop/r/[code]) record a click event when followed — this is used solely to attribute a sale to the correct creator for commission purposes.
We share your data only in the following limited circumstances: • With vendors: order details (name, phone, delivery address, items ordered) are shared with the fulfilling vendor to enable delivery. • With payment processors: Paystack and mobile money operators receive payment and payout data necessary to process transactions. • With service providers: Supabase (database hosting) and Vercel (application hosting) process data on our behalf under data processing agreements. • When required by law: we may disclose data to comply with a legal obligation or protect the rights and safety of our users.
We retain your account information for as long as your account is active. Order records are retained for seven years for financial compliance purposes. TikTok access tokens are refreshed automatically and revoked when you disconnect. Revoked tokens are deleted from our database within 30 days.
You have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Request deletion of your account and associated data. • Withdraw consent for TikTok data access at any time by disconnecting your TikTok account. • Receive a copy of your data in a portable format. To opt out of TikTok data access at any time, disconnect your TikTok account from your dashboard, or email privacy@yesmam.shop and we will action deletion within 30 days. To exercise any of these rights, contact us at: privacy@yesmam.shop or support@yesmam.shop
We use industry-standard security measures including HTTPS encryption in transit, AES-256-GCM encryption for sensitive tokens at rest, and role-based access controls. We conduct regular security reviews. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at security@yesmam.shop.
The Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform. The "Last updated" date at the top of this page indicates when the most recent changes were made.
For privacy-related questions or requests: Email: privacy@yesmam.shop Support: support@yesmam.shop Address: EHR Creator Commerce, Accra, Ghana