Privacy Policy

1. Scope

This Privacy Policy applies to the MannaCrystal website at tk.mannacrystal.com and the business account authorization and API workflows described on this site.

2. Information we may process

When an account owner authorizes the integration, the service may process information made available under the permissions approved by the platform and granted by the account owner. Depending on the granted scope, this may include account profile information, authorized account media and metadata, comment information, content publishing information, authorization codes, access tokens, refresh tokens, and technical logs needed to operate and secure the integration.

3. How information is used

• To connect an authorized business account to MannaCrystal.
• To retrieve and display authorized account information and media.
• To support authorized comment-related workflows.
• To support content publishing when expressly initiated by an authorized user.
• To maintain authorization, security, troubleshooting and audit records.

4. Data minimization and access

We limit processing to information reasonably necessary for the approved integration purpose. Access is restricted to authorized personnel and systems involved in operating the business integration.

5. Sharing and sale

We do not sell personal information or authorized platform data. Information may be shared with service providers strictly as needed to operate, secure or host the integration, or where required by law. Service providers are expected to handle information only for the instructed purpose.

6. Retention

Information is retained only for as long as reasonably necessary for the authorized business purpose, security, compliance and dispute-resolution needs. Authorization credentials are removed or invalidated when they are no longer required or when access is revoked, subject to technical and legal retention requirements.

7. Security

We use reasonable administrative and technical safeguards designed to protect authorization data and business account information from unauthorized access, alteration or disclosure. No method of transmission or storage is guaranteed to be completely secure.

8. Account authorization and revocation

Users control whether they authorize the integration. Platform access can be revoked through the relevant platform account settings where available. After revocation, the integration will no longer intentionally use the revoked authorization for new API requests.

9. Data deletion requests

Authorized users may request deletion of data associated with the integration by following the instructions on our Data Deletion page or by emailing [email protected].

10. International processing

Business operations and service providers may be located in different jurisdictions. Where information is transferred, we handle it in accordance with applicable requirements and the purpose described in this policy.

11. Children

This business integration is not directed to children and is intended for business account owners and authorized adult users.

12. Updates

We may update this policy as the integration changes. The effective date at the top of this page will be revised when a material update is posted.

13. Contact

Business Contact: Adrian Walker
Email: [email protected]
Legal Entity: 封丘县栗凡百货有限公司