1. Our role
LIPPEM LLC is responsible for the data needed to manage accounts, security, support and billing. When a business connects its channels and serves its own contacts, that business determines the purposes of communication and Lippem processes data under its instructions, unless otherwise required by law.
2. How we protect data
Provider tokens are stored encrypted, data is isolated by tenant and access is subject to authentication, authorization and session controls. When a Meta channel is disconnected, Lippem requests removal of its webhook subscription and deletes the reusable token from active systems.
3. TikTok Business Messaging
The TikTok Business Messaging integration requires an eligible account and is subject to TikTok’s permissions and restrictions. It processes the data needed to serve business conversations. OAuth credentials are encrypted server-side with AES-256 and webhook signatures are verified. Channel access depends on the plan, permissions and provider approval. This integration does not include TikTok Shop or grant access to advertising or video publishing.
4. Access and AI use
Each business manages its users and automations within its workspace. AI replies require the relevant configuration and may send necessary content and context to the AI provider used. The privacy policy describes those uses and transfers. Do not use conversations for purposes incompatible with the contact’s authorization or channel rules.
5. Retention, backups and deletion
Deletion in active systems and backup expiry are different processes. Our retention commitment for deleted data in recovery copies is a maximum of 90 days. Disconnecting a channel removes its reusable credentials; it does not by itself confirm deletion of all history. Consult the deletion instructions to request review of messages, media and integration data.
6. Rights and privacy contact
You may request access, a copy, export, correction or deletion of data and, where applicable, restriction of processing or consideration of an objection. The team responsible for privacy handles requests at support@lippem.com, including requests from people without a Lippem account. We verify identity and authority before disclosing or deleting data.
7. Report an incident or vulnerability
Email support@lippem.com with the subject Security and describe the affected service, when it happened and how to reproduce the issue. Do not include passwords, tokens or unnecessary personal data. Do not test third-party accounts or disrupt the service. A security assessment, audit report or certification is represented as current only when evidence supports its scope and date.