Privacy Policy

This Privacy Policy explains how BellNova Corporation ("BellNova," "we," "us," or "our") collects, uses, stores, discloses, and deletes information when customers and their authorized users use BellNova websites, dashboards, applications, integrations, automation tools, and related support services (collectively, the "Services").

This policy applies to information processed through integrations with TikTok, Amazon, Google, Shopify, and other platforms identified in the Services. Platform-specific addenda form part of this policy and provide additional terms where platform requirements differ:

• TikTok Services Privacy Addendum
• Amazon Services Privacy Addendum (SP-API and Amazon Ads API)

If an addendum imposes a stricter requirement for data from a particular platform, that addendum controls for that platform data.

BellNova generally acts as a processor or service provider when processing platform and business data on a customer's documented instructions. BellNova may act as an independent controller for account administration, billing, security, website operations, legal compliance, and direct communications with its customers.

Depending on the Services used and the permissions granted, we may collect or process the following categories of information.

2.1 Account and Contact Information

Names, business email addresses, telephone numbers, company names, job roles, account identifiers, authentication records, subscription information, support requests, and communications with BellNova.

2.2 Authorization and Connection Information

OAuth grants, access and refresh tokens, marketplace or advertiser identifiers, permission scopes, connection status, and other credentials required to maintain an authorized platform connection. We do not ask customers to provide platform passwords or to paste raw credentials into prompts, documents, or support messages.

2.3 TikTok Information

Depending on the TikTok product and scopes authorized, this may include shop and advertiser identifiers, product and listing information, inventory, order and logistics status, advertising campaigns, creatives, creator collaboration information, campaign settings, performance reports, conversion information, and authorization status. Additional details are provided in the TikTok Services Privacy Addendum.

2.4 Amazon Information

Depending on the approved non-restricted Amazon Selling Partner API roles and Amazon Ads API functionality authorized, this may include seller, vendor, advertiser, agency, marketplace, account, and profile identifiers; catalog and listing data; inventory and pricing; non-PII order, fulfillment, return, and shipment status; non-restricted financial, operational, and performance reports; advertising portfolios, campaigns, ad groups, ads, creatives, products, keywords, targets, placements, budgets, bids, recommendations, impressions, clicks, spend, attributed conversions and sales; authorization records; and API metadata. BellNova does not apply for Amazon Restricted Roles, request restricted data tokens, or request or process Amazon customer PII through SP-API. Additional details are provided in the Amazon Services Privacy Addendum.

2.5 Google and Shopify Information

For Gmail integrations, we may process the connected user's email address, basic profile information, authorization information, and information required to send messages requested by the user. Where only the gmail.send scope is used, BellNova does not use that scope to read inboxes, drafts, sent items, or contacts.

For Shopify integrations, we may process store identifiers, products, inventory, orders, fulfillment status, and related commerce information authorized by the merchant.

For Launchpad's YouTube integration, see Google & YouTube Data for the permissions requested and the additional restrictions that apply to Google user data.

2.6 Service Usage and Security Information

We may process IP addresses, browser and device information, timestamps, feature usage, API request metadata, error records, authentication events, and audit and security logs. We configure logs to avoid platform customer PII unless it is necessary for a documented legal or regulatory purpose.

2.7 Information Provided by Customers

Customers may submit campaign materials, product information, instructions, reports, files, and other business content when using the Services or requesting support. Customers are responsible for ensuring that they have authority to provide this information to BellNova.

We use information only for documented and legitimate purposes, including to:

• create and administer customer accounts;
• authenticate users and maintain authorized platform connections;
• synchronize and display products, inventory, orders, logistics, advertising, and performance information;
• provide campaign management, creator collaboration, reporting, analytics, and optimization features requested by customers;
• carry out actions that an authorized user initiates or configures, including approved automation;
• monitor availability, prevent fraud and abuse, troubleshoot errors, and protect the Services;
• provide customer support and service communications;
• enforce agreements and comply with law and applicable platform policies; and
• improve the reliability and usability of the Services using aggregated or de-identified information where permitted.

We do not use platform data for purposes prohibited by the platform that supplied it. In particular, we do not sell, rent, sublicense, or independently monetize Amazon Information; use Amazon Information for marketing directed at Amazon customers; reidentify individuals from Amazon Ads Data; or combine Amazon Ads Data with third-party data without Amazon's required approval. We do not sell TikTok or Amazon platform data.

Where applicable law requires a legal basis, we rely on performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the Services, or consent. A customer may withdraw consent at any time, without affecting processing that occurred before withdrawal.

Some Services can synchronize information, monitor inventory, generate recommendations, or optimize campaigns automatically after an authorized user enables and configures those features. We describe material automation, relevant inputs, limitations, and available controls in the product interface or service documentation.

BellNova does not intentionally make decisions that produce legal or similarly significant effects about individual consumers solely through automated processing. Customers remain responsible for reviewing material business decisions and ensuring that their use of recommendations, audience tools, and automated actions complies with applicable law and platform rules.

Users can disable configured automation, disconnect an integration, or revoke platform authorization through BellNova or the relevant platform, subject to product functionality.

We do not sell or rent personal information or platform data. We may disclose information only as necessary to:

• the customer and users authorized by that customer;
• TikTok, Amazon, Google, Shopify, or another connected platform to complete authorized requests;
• vetted hosting, infrastructure, security, monitoring, communications, and support providers acting for BellNova under contractual confidentiality and data protection obligations;
• professional advisers, auditors, insurers, or transaction counterparties subject to appropriate safeguards;
• public authorities or other parties when required by law or necessary to protect rights, safety, and service integrity; or
• a successor in connection with a merger, acquisition, financing, or sale of assets, subject to applicable notice and platform requirements.

We limit access to personnel and services that need the information to perform the relevant function, and we do not disclose one customer's non-public platform data to another customer.

BellNova hosts its Services using Amazon Web Services in the United States, including the us-west-1 region. BellNova and providers needed to operate a connected platform may process information in other locations disclosed by those providers. We handle international transfers as required by applicable law and platform terms.

Platform-specific localization or transfer restrictions continue to apply. BellNova will not transfer protected platform data to a location or recipient prohibited by the applicable platform agreement. Customers should contact us for information about safeguards relevant to their use of the Services.

We retain information only for as long as needed for the purposes described in this policy, the customer's documented instructions, applicable law, and platform requirements. Our principal retention rules are:

• Account and service records: for the customer relationship and a limited period afterward as needed for account closure, disputes, audits, and legal obligations.
• OAuth credentials: while an integration remains authorized or as needed to maintain and document its connection status. BellNova stops using revoked or expired credentials for future API access.
• TikTok platform data: while the customer account or authorized feature remains active and afterward only as reasonably necessary for legal, security, dispute, or platform requirements. Customers may request deletion as described below.
• Amazon Information: SP-API and Amazon Ads API retention and secure-deletion requirements described in the Amazon addendum apply.
• Security and audit logs: for as long as reasonably necessary to protect the Services, investigate incidents, and meet legal or platform requirements.
• Support, billing, tax, and legal records: for the period required by applicable accounting, tax, limitation, and regulatory rules.

When information is no longer reasonably required, BellNova deletes it or restricts its use as required by applicable law and platform terms. Residual copies may remain in backups until they are overwritten in the ordinary course, unless a platform requires a specific deletion deadline or certification.

BellNova uses reasonable administrative and technical safeguards appropriate to the nature of the Services. These include authenticated access controls, restrictions on access to production information, transport security for network communications, and application and operational logging. Additional controls may apply to a particular platform integration when required by that platform.

No system is completely secure. Customers must protect their accounts, use authorized platform connections, restrict access to trusted users, and notify BellNova promptly of suspected unauthorized activity.

If we detect a security incident, we investigate, contain, remediate, preserve appropriate evidence, and provide notices required by law, contract, and applicable platform rules. Reports concerning an actual or suspected privacy issue, security vulnerability, or misuse of Amazon Information may be submitted to marketing@bellnova.com with the subject "Amazon Privacy or Security Report." Platform notifications may be subject to shorter deadlines than customer notifications.

BellNova accesses connected platform data only under permissions granted by an authorized account holder. Customers should grant only the scopes needed for the features they use.

Users may revoke authorization through the relevant TikTok, Amazon, Google, or Shopify account settings and, where available, through BellNova. Revocation stops future API access but does not automatically eliminate information that must be retained for security, billing, legal, or regulatory reasons. Remaining information is handled under Section 7.

Customers acting as controllers are responsible for providing required notices, obtaining any required consents, responding to their end users, and giving BellNova lawful processing instructions.

Depending on location and applicable law, an individual may have rights to request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of certain sale, sharing, or targeted advertising; and appeal a denied request. BellNova does not sell personal information.

To exercise a right, email marketing@bellnova.com with the subject "Privacy Request" and describe the request and the relevant BellNova account. We may verify identity and authority before responding.

If BellNova processes information solely for a business customer, we may direct the requester to that customer and assist the customer as required by contract and law. Individuals may also complain to the data protection authority in their jurisdiction.

The Services are designed for businesses and authorized business users and are not directed to children. BellNova does not knowingly collect personal information directly from children through the Services. If you believe a child has provided personal information to BellNova, contact us so that we can review and delete it where appropriate.

We may update this policy as our Services, laws, or platform requirements change. We will post the revised version with an updated date and provide additional notice when required by law or when changes materially affect customer rights. Continued use after the effective date is subject to the updated policy, but we will seek consent where legally required.

For privacy questions, requests, or complaints, contact:

• Company: BellNova Corporation
• Website: https://www.bellnova.com
• Privacy and Security Email: marketing@bellnova.com
• Last Updated: September 25, 2026
• Effective Date: August 3, 2026

When you connect a YouTube channel to Launchpad, you authorize access through Google's official OAuth flow. We request only the permissions needed to provide the features you use, and we handle Google user data in accordance with the Google API Services User Data Policy, including the Limited Use requirements. The restrictions in this section control for Google user data if other provisions of this policy are broader.

Data We Access and Permissions We Request

Depending on the permissions you grant, Launchpad may access:

• Read channel and video data (https://www.googleapis.com/auth/youtube.readonly): access your YouTube channel ID, name, avatar, and video metadata and statistics to display your dashboard and channel/video performance.
• Upload videos (https://www.googleapis.com/auth/youtube.upload): upload and publish videos you explicitly choose.
• Manage your videos and engagement (https://www.googleapis.com/auth/youtube.force-ssl): manage metadata and engagement, such as comments, for videos you own, as requested by you.
• OAuth access and refresh tokens: maintain your authorized connection. Tokens are stored encrypted at rest.

How We Use YouTube Data and Google Limited Use

We use YouTube data solely to provide the features you request: display your channel/video performance, upload and publish the videos you choose, and manage metadata and engagement of videos you own. We do not use Google user data for advertising, we do not sell or rent it, and we do not use it to train or improve generalized AI/ML models.

Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We do not share Google user data except with service providers acting on our behalf under confidentiality obligations as needed to provide the features you request and in accordance with the Limited Use requirements, or where required by law. We never sell your Google data.

Storage, Retention & Deletion

Tokens are encrypted at rest; data is retained only while your account is connected or as needed for legal and operational purposes, subject to applicable Google and YouTube requirements. You can disconnect your YouTube account on Launchpad's Accounts page to revoke access, or revoke it at Google Account permissions. To request deletion of your Launchpad account and associated Google and YouTube data, email support@BellNova.com. Revoking access stops future API access but does not by itself delete data already stored; deletion requests are handled subject to the retention requirements described above.

Contact

For questions or deletion assistance concerning Google or YouTube data, contact support@BellNova.com.