Dash

Legal

Privacy Policy

Last updated: October 1, 2026

1. Introduction

Overcast Digital Inc., doing business as Lightning Commerce (“we,” “us,” or “our”), operates Dash by Lightning Commerce (the “Service”), a TikTok Shop analytics dashboard. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information in the following ways:

Account Information

When you create an account, we collect your name, email address, and organization details. This information is stored in our application data systems operated on AWS; Amazon Cognito provides account authentication. If you sign in with Google, Google shares your name, email address, and Google account identifier with us.

TikTok Shop Data

When you connect your TikTok Shop account via OAuth, we access and store data from the TikTok Shop API on a read-only basis. This includes:

  • Shop performance metrics (GMV, orders, units sold, buyer counts)
  • Product catalog and inventory information
  • Video and LIVE session performance data
  • Financial summaries (revenue, fees, refunds, settlements)
  • Creator and affiliate performance data
  • Orders and returns, including the buyer details TikTok provides with them, such as the buyer's name, a TikTok-relayed email address, and shipping address
  • TikTok Ads performance and spend, if you connect a TikTok Ads account

We do not modify, create, or delete any data in your TikTok Shop account. Our access is strictly read-only.

Usage Data

When you sign in, we log security events with your IP address, approximate country, and browser user agent. We may also record page-performance timings (such as how fast a page loaded) tied to your account, and our servers keep standard request logs. We use this data to keep the Service secure and working well.

Cookies

We use only the cookies the Service needs to work and to remember your choices: your sign-in session, connection security while you connect TikTok or sign in with Google, invitation links, the company you have selected, and your appearance setting. We do not use analytics or advertising cookies. When you add a card, Stripe's payment form may set its own cookies for fraud prevention.

3. How We Use Your Information

  • Display your TikTok Shop analytics in the dashboard
  • Generate reports and insights from your shop data
  • Authenticate your identity and manage your account
  • Improve and maintain the Service
  • Communicate with you about your account or the Service

4. Third-Party Services

We use the following third-party services to operate Dash:

  • Amazon Web Services (AWS) — Application and data infrastructure, including Cognito authentication, ECS runtime hosting, managed PostgreSQL, S3 object storage, SES email, Secrets Manager, and a Valkey-compatible distributed rate-limit backend, hosted in the United States
  • Google — Optional sign-in with your Google account
  • TikTok — OAuth connections and the source of authorized TikTok Shop and advertising analytics
  • Stripe — Subscription billing and payment event processing
  • Amazon Simple Email Service (AWS SES) — Transactional email and operational alerts
  • Lark — Authenticated operational webhooks and context capture, including message text, message metadata, and attachment context received from connected Lark chats

Each third-party service has its own privacy policy governing how they handle data. We encourage you to review them.

5. Data Retention

We retain information according to our operational and legal requirements. Revoking a TikTok Shop connection stops future collection from that connection but does not automatically delete historical data. To request deletion of your account or associated data, email lightning@overcast.digital. We verify the requester's authority and the requested user, shop, or organization scope before processing the request, subject to applicable retention requirements and legal holds.

6. Data Security

We use safeguards including encrypted connections (TLS/SSL), secure authentication, scoped application authorization, encrypted provider credentials, and access controls for infrastructure and secrets. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data and account
  • Revoke your TikTok Shop connection and stop future collection at any time
  • Export your data in a portable format

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how it is used; to access and correct it; to delete it; to limit the use of sensitive personal information; and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined by the CPRA, and we will not discriminate against you for exercising any of these rights. To make a request, email lightning@overcast.digital.

9. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date.

11. Contact Us

Dash by Lightning Commerce is operated by Overcast Digital Inc., doing business as Lightning Commerce. If you have questions about this Privacy Policy, please contact us at lightning@overcast.digital.