Menu

Privacy Policy

Effective: 2026-01-01 · Last updated: 2026-05-31

1. Who we are

I Love Shopping For You (https://iloveshoppingforyou.com) is operated as a content + affiliate shopping platform powered by AI-generated personas. We do not collect personal information beyond what's described below.

2. Information we collect

2.1 Automatically collected

  • Cookies and analytics: We use Google Analytics 4 to understand how visitors use our site (anonymized IP, pages viewed, referrer). You can opt out via browser settings or Google's opt-out tool.
  • Advertising: We display ads via Google AdSense, which uses cookies to serve ads based on a user's prior visits. You can opt out at Google Ads Settings.
  • Affiliate tracking: When you click an affiliate link (e.g., Amazon), the destination site sets its own tracking cookies to attribute the referral to us.

2.2 Voluntarily provided

  • Contact: If you email us via the Contact page, we store your message + email to reply.
  • Newsletter (when active): Email address only, via Brevo. Unsubscribe link in every email.

3. Affiliate disclosure (FTC §255.5)

As an Amazon Associate I earn from qualifying purchases. Some links on this site are affiliate links — purchasing through them earns us a small commission at no cost to you.

Amazon-specific notice: As an Amazon Associate, we earn from qualifying purchases. We participate in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.

4. AI persona disclosure

Personas on this site (Ava Sinclair and others) are AI-generated virtual creators. Reviews are based on publicly available product information and ingredient research, not personal experience.

Our personas (Ava Sinclair and others listed at https://iloveshoppingforyou.com) are AI-generated virtual creators. They do not have personal experiences with the products they review; reviews are constructed from publicly available product information, ingredient analysis, and creator consensus research. We disclose this on every persona page and in every piece of content (video burn-in text, captions, and pinned comments) in accordance with FTC Endorsement Guides and applicable state laws (including N.Y. Civil Rights Law on synthetic performers).

5. Social media integrations (TikTok, YouTube, Instagram, Pinterest)

Our personas publish AI-generated short-form video content to their own social media accounts via the platforms' official APIs. We connect to these accounts via OAuth 2.0, where each persona's owner explicitly grants publishing permission. The following describes what data we receive and how we use it, with particular detail for TikTok where required by the TikTok Developer Platform.

5.1 TikTok integration

We use the TikTok Content Posting API (Direct Post v2) to publish short-form videos from our admin tool to each persona's own TikTok account, with the persona owner's explicit per-publish approval.

Data we receive from TikTok (per connected account):

  • access_token + refresh_token — to call the Content Posting API on the account's behalf. Stored Fernet-encrypted at rest, never logged in plaintext.
  • creator_username, creator_nickname, creator_avatar_url — displayed to the operator in our publish-confirmation modal so the operator can verify the correct account before each publish (TikTok UX policy requirement).
  • privacy_level_options and account-level comment_disabled / duet_disabled / stitch_disabled flags — to drive the operator's per-publish interaction controls and prevent the operator from selecting options the creator has disabled at the account level.
  • max_video_post_duration_sec — to validate uploads do not exceed the creator's allowed length.

How we use TikTok data:

  • Solely to publish operator-approved videos to the creator's TikTok account.
  • To populate the publish-confirmation modal with the creator's identity and interaction controls (TikTok-required UX).
  • Every published video carries the is_aigc=true AIGC label, as all our content is AI-generated.

What we do NOT do with TikTok data:

  • We do not train machine-learning models on any TikTok data.
  • We do not share TikTok tokens, creator profile data, or publish history with any third party.
  • We do not use TikTok data for analytics, ad targeting, or any purpose unrelated to publishing the creator's content.
  • We do not access TikTok content uploaded outside of our admin tool.

Retention & deletion: Tokens and creator profile data are retained as long as the creator's account remains connected to our admin tool. The creator (or their authorized owner) may revoke the connection at any time by removing the account in our admin tool or by revoking the app from TikTok account settings → Manage app permissions. Upon revocation, we delete the stored tokens and profile fields within 24 hours.

5.2 YouTube, Instagram, Pinterest integrations

The same principles apply to our other social-media integrations: OAuth-scoped tokens are stored Fernet-encrypted, used only to publish operator-approved content, and deleted within 24 hours of revocation. Specific scopes requested per platform:

  • YouTube (Google): youtube.upload + youtube.readonly + openid + email
  • Instagram (Meta): Graph API instagram_basic + instagram_content_publish
  • Pinterest: pins:read/write + boards:read/write + user_accounts:read

6. Third-party services

  • Google Analytics, Google AdSense — analytics + ads
  • Amazon Associates — affiliate program
  • Firebase (Google) — hosting + serverless functions
  • Brevo (Sendinblue) — email (when newsletter active)
  • TikTok, YouTube, Instagram, Pinterest — content publishing only (see §5)

7. Your rights

You may request access to, correction of, or deletion of any personal data we hold about you by emailing the address in the Contact page. EU/UK visitors: GDPR rights apply. California visitors: CCPA rights apply.

Connected social-media account owners may additionally disconnect their account from our admin tool at any time, which triggers deletion of all stored OAuth tokens and platform profile data within 24 hours (see §5.1).

8. Children

This site is not directed at children under 13. We do not knowingly collect data from minors.

9. Changes

We may update this policy. Material changes will be highlighted on the homepage for at least 14 days.

10. Contact

Questions? Contact us.