Incident Response Policy

Roles and responsibilities

• Incident Owner: Carlos Henrique Ferreira Guimaraes — leads the response, decides on containment, communicates with TikTok Shop, sellers, users and authorities.
• Any person who suspects an incident must report it immediately to [email protected].

Process

1. Detect and report — alerts from antivirus, TikTok notices, unusual account activity or user reports.
2. Contain — revoke the app authorization, rotate the app secret and tokens, change passwords, isolate the affected device.
3. Assess — determine what data and accounts were affected.
4. Notify — TikTok Shop is notified through the Partner Center ticket channel and the partner contact email within 48 hours of confirming an incident involving TikTok Shop data; affected sellers and users and the ANPD are notified as required by LGPD.
5. Recover and learn — restore service, record the root cause and update controls.

Records

Every incident is recorded with timeline, impact, actions and lessons learned.

Approved by Carlos Henrique Ferreira Guimaraes, Managing Partner, on November 6, 2026.