We turn messy data into decision-ready analytics by connecting, cleaning, and harmonizing sources—delivered through automated reports and dynamic dashboards
Know what’s working. We break down behavioral, operational, and content data to uncover what drives results and sharpen your strategy.
Track your brand in the wild. Our AI tools monitor visibility, relevance, and shifting perceptions across platforms and people.
Why pay twice? We unlock the full value of research you already own—proprietary, third-party, or public—turning it into fast, cost-efficient, insight-rich strategy.
FAT CAT 9 LLC · FAT CAT 9Effective date: 24 August 2026 · Last updated: 24 August 2026 · Version 1.0This is the public privacy notice of FAT CAT 9 LLC (“FAT CAT 9”, “we”, “us”). It describes how we handle personal data when you visit https://www.fatcat9.com/ and when a TikTok Shop seller authorizes our software to connect their shop. This document is written to match our current operations. It is not a substitute for legal advice.
FAT CAT 9 LLC operates under the brand FAT CAT 9. We provide data intelligence, business-intelligence reporting, and software that connects authorized TikTok Shop stores to analytics dashboards and an AI assistant. Our public website is https://www.fatcat9.com/.For TikTok Shop Partner Center (United States) we act as an Independent Software Vendor (ISV). The first production application we are registering is a Custom app: it is not listed on the TikTok Shop App Store. Sellers we already operate with authorize it through a private authorization link.Privacy contact / designated data protection contact: info@fatcat9.com. You may also use the contact form on https://www.fatcat9.com/.
This notice covers (a) visitors of our website; (b) sellers and shop staff who authorize our Custom app or use our dashboards; and (c) individuals whose data appears in TikTok Shop payloads that we receive after a seller authorization (for example buyers, to the extent TikTok includes their details in an order or webhook event).For website visitors, FAT CAT 9 LLC determines the purposes of processing (controller).For TikTok Shop data, the seller (and TikTok, under TikTok’s own terms) remain responsible for the shop relationship with buyers. We process shop data as a service provider / processor on the seller’s instructions, solely to provide the authorized integration: order and event analytics, operational reporting, and the in-product AI assistant. We do not use TikTok Shop buyer data for our own marketing.
The public site describes our services and offers a contact path. Depending on how you contact us, we may process name, email address, company name, and the content of your message. We do not run advertising pixels as part of this notice’s described product stack. If the hosting platform sets strictly necessary cookies to deliver the page, those cookies are limited to site operation.
After a seller authorizes our app, we receive data from TikTok Shop APIs and webhooks. In our current architecture that includes:
Honesty about minimization: hashing the email into email_hmac does not remove personal data that may still sit inside the raw payload. Until a given event is deleted, that JSON may contain personal data in the form TikTok transmitted it. We do not sell that data. We do not use it to contact buyers.Dashboard and AI use: authorized users query semantic views in BigQuery (for example cleaned order views) through Looker Studio and an assistant that translates questions into SQL via Google Vertex AI. Prompts and results may include shop operational data that originated in TikTok Shop events.
We process personal data only for:
Depending on the jurisdiction, we rely on: performance of a contract with the seller; legitimate interests in securing the integration and producing the analytics the seller requested; compliance with legal obligations; and, where required, the seller’s instructions as controller. We do not rely on buyer consent collected by FatCat9 for marketing.
Application compute and data stores run on Google Cloud Platform in the United States, primarily region us-east1: Cloud Run, BigQuery, Firestore, Secret Manager, Cloud Logging, Artifact Registry, and Cloud Build. Encryption at rest uses Google-managed AES-256. Data in transit uses TLS.Personnel who operate the platform may access Google Cloud from Argentina under least-privilege IAM. That is a cross-border access path to data hosted in the United States. We do not operate our own on-premise data centers.Company laptops and PCs that access GCP run Microsoft Defender Antivirus. The application runtime itself is Cloud Run, not an employee endpoint.
We do not sell personal data. We do not share it for cross-context behavioral advertising. We do not disclose TikTok Shop data to unaffiliated third parties for their own purposes.We share data only as needed to run the service:
We may disclose data if required by law, to protect rights and security, or in connection with a corporate transaction, subject to appropriate safeguards.
TikTok Shop event data in BigQuery is retained for two years (730 days) under table partition expiration, then purged automatically. OAuth shop records in Firestore are kept while the shop remains authorized and are updated on re-authorization.When the contractual relationship with a seller ends, or when TikTok or the seller instructs us to delete, we delete personal data we hold for that shop from BigQuery and other stores, except where we must keep a limited record to meet legal, security, or accounting obligations. We will help sellers and TikTok Shop honor buyer requests to access, update, or delete data that we hold.
We apply least-privilege service accounts, Secret Manager for credentials, webhook signature verification, anti-replay time windows, shop_id matching, structured logging without secrets, container image scanning, and a documented incident-response process. If a personal-data incident is confirmed, we notify TikTok within 24 to 48 hours and notify affected sellers as required.FAT CAT 9 LLC does not hold its own ISO 27001 or SOC 2 Type 2 certification. Infrastructure is hosted on Google Cloud, which publishes those certifications for its platform.
Subject to applicable law (including, where relevant, US state privacy laws, Argentina’s data-protection framework, and other rules that apply to a given dataset), you may request access, correction, deletion, restriction, objection, or a copy of personal data we hold about you.Buyers of products on TikTok Shop should usually start with the seller or with TikTok, because they hold the customer relationship. If we hold a copy in our integration, we will support the seller or TikTok to fulfill the request. Sellers and website visitors may write to innovation@fatcat9.com. We will not discriminate against you for exercising privacy rights.
Our website and software are for businesses. We do not knowingly collect personal data from children. If you believe we have, contact innovation@fatcat9.com and we will delete it.
If you are a resident of a US state with a comprehensive privacy law (including California), in the preceding 12 months we may have processed the following categories, only as described above: identifiers (shop and seller IDs, contact details you send us); commercial information (orders and related events); internet or network activity (security logs of our services); and inferences used only to produce the analytics the seller requested. We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about consumers for our own purposes. Authorized agents may submit requests to the email above.
We review this notice at least annually and when our systems or the law change. The “Last updated” date at the top will change. Material changes will be posted on this page.
FAT CAT 9 LLC (FatCat9)Website: https://www.fatcat9.com/Privacy / data-protection contact: info@fatcat9.com