Your signal. Your spreadsheet. Your control.

1. Scope and operator

This policy covers the Signal Studio public website, phone-friendly setup portal, Google Sheets tracker, and private connection service. Signal Studio by Remori is offered under the Remori brand and operated by Hartistic LLC, a Florida limited liability company. Joshua Hart is the product owner and contact representative.

For privacy or support questions, email support@remori.io. Include your Etsy order number when the request concerns a purchase. Never send a TikTok or Google password, access token, or verification code.

2. Information processed

Google connection information

• The Google account identifier, name, and email supplied during authorization so Signal Studio can identify the account creating the tracker.
• The identifier, name, and web address of the Signal Studio spreadsheet created in that Google Drive.
• The granted Google permissions and connection or synchronization timestamps.

Authorized TikTok information

• The TikTok app-specific account identifier and display name.
• Follower, following, account-like, and published-video counts.
• Recent public-video identifiers, captions, links, posting times, and public view, like, comment, and share counts.

Security and connection records

• For Etsy order verification, one-way keyed hashes derived from the receipt number and the matched purchase proof (either the purchase email Etsy provides or, when no receipt email is available, the buyer name shown on the receipt), an encrypted receipt-and-transaction identity, the purchased listing identifier, payment or cancellation state, verification timestamps, and a random purchase-entitlement identifier. Signal Studio does not retain the readable purchase email or receipt name in its entitlement record.
• For support recovery, a one-way hash of any activation code, its redemption limit and timestamps. Signal Studio does not retain a readable support code after it is issued.
• Random session and installation identifiers, a one-way hash of the secure access-cookie token, and short-lived, single-use OAuth state.
• Short-window abuse-prevention records containing a one-way hash derived from the network address or access session, an attempt count, and an expiry time. Raw network addresses are not placed in the rate-limit table.
• Google and TikTok access and refresh tokens, encrypted before they are stored server-side.
• Connection status, synchronization timestamps, granted scopes, and limited error information needed to operate or troubleshoot the service.

Information in your spreadsheet

Current tracker metrics and historical snapshots are written into the customer’s Google Sheet. That Sheet remains controlled by the customer through their own Google account.

3. How information is obtained and used

When automated Etsy verification is available, Signal Studio sends the receipt number to Etsy’s seller-authorized API and compares one receipt detail. If Etsy provides a purchase email, that email must match. Only when Etsy provides no usable receipt email may the buyer name shown on the receipt be used instead. Receipt names are normalized for Unicode, capitalization, and spacing before comparison, and every mismatch receives the same response. Signal Studio also confirms that the eligible listing is paid and not canceled, then issues one secure purchase entitlement. Order status webhooks may be used to recognize payment or cancellation promptly. Signal Studio does not use Etsy order details for advertising.

Signal Studio receives Google and TikTok information only after the account holder approves each provider’s authorization screen. Google access uses the drive.file permission, which allows Signal Studio to create and update the specific tracker used with the service without granting access to unrelated Drive files.

Signal Studio uses authorized information to:

• Create the customer’s Signal Studio spreadsheet and keep that file updated.
• Complete and maintain the authorized Google and TikTok connections.
• Retrieve the limited account and public-video metrics selected for the tracker.
• Populate and refresh the customer’s spreadsheet.
• Run optional background synchronization when available and enabled.
• Protect, troubleshoot, and maintain the connection service.

Signal Studio does not use TikTok information to publish, edit, or delete TikTok content, and it does not request advertising access.

Signal Studio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. Storage and service providers

Google and TikTok connection tokens are encrypted and stored in Signal Studio’s restricted server-side service together with the limited installation and purchase-entitlement records needed to operate the product. Provider tokens never appear in spreadsheet cells or ordinary browser storage. The purchase-entitlement and sign-in cookies are Secure and HttpOnly, which prevents page scripts from reading them. Tracker metrics and historical snapshots are stored in the customer’s Google Sheet and Google Drive.

Etsy supplies purchase verification and digital-file delivery; Google supplies account authorization, Drive, and Sheets services; TikTok supplies authorized creator information; and Signal Studio’s hosting provider operates the website, application service, and private database. Signal Studio does not sell Etsy, Google, or TikTok information or use it for targeted advertising.

5. Retention and deletion

Connection information remains while the tracker is connected or as needed to provide the service. OAuth state expires after about 10 minutes; consumed state is removed after a short troubleshooting period of up to 24 hours. Rate-limit records expire after their short abuse-prevention window. Expired sessions are deleted, and operational synchronization logs are retained for up to 90 days. Cleanup runs during normal service operation and the daily maintenance process.

The one-way Etsy receipt reference, one-way purchase-proof match, encrypted receipt-and-transaction identity, support-code record, and purchase-entitlement record may remain to validate the purchase, periodically check whether it remains paid and unrefunded, enforce its one-tracker limit, prevent reuse or abuse, recognize cancellation, and support reactivation. The matched purchase email or receipt name is not stored in readable form. Etsy receipt and transaction IDs are encrypted at rest and are not written to reconciliation logs. Choosing Delete connection data removes the linked provider account, tokens, tracker installation, sessions, and service-side sync history. It also removes the customer-account link from the purchase entitlement, but the protected purchase and entitlement records and secure access cookie can remain available for reactivation unless the customer asks support to revoke purchase access.

Disconnecting does not silently erase the customer-owned spreadsheet. Its metrics and retained history remain in Google Drive until the customer deletes the relevant rows, tabs, or file. The video-history tab is a rolling log with capacity for 5,000 video-day snapshots; older video snapshots are replaced as that capacity is reused. The account-history tab retains up to 5,000 daily rows. See the Data Deletion page for step-by-step instructions.

6. Security

Signal Studio uses Google per-file access, limited read-only TikTok permissions, seller-authorized Etsy receipt checks, encrypted server-side token storage, secure HttpOnly cookies, one-way keyed purchase hashing, rate limits, webhook signature and replay checks, and short-lived single-use authorization state. No online system can promise absolute security, but the service is designed to keep provider tokens out of customer spreadsheets and request only what the tracker uses.

7. Your choices

• Decline any requested Google or TikTok permission.
• Turn optional background synchronization off when that control is available.
• Disconnect or delete the connection from the Signal Studio setup portal on a phone or computer.
• Remove Signal Studio from your Google Account’s authorized-app settings.
• Remove Signal Studio from TikTok’s authorized-app settings.
• Delete current metrics or history from the customer-owned spreadsheet.
• Ask support to revoke the purchase entitlement so its secure access cookie can no longer activate setup.

8. Children, changes, and contact

Signal Studio is a business and creator productivity product and is not directed to children under 13. Users must also meet TikTok’s and Google’s eligibility requirements.

This policy may change when the service, its providers, or applicable requirements change. Material updates will be reflected by a revised effective date on this page.

For questions or deletion requests, email support@remori.io. Include your Etsy order number and, only if needed, the Google account email used during setup. Do not send spreadsheet contents, share a private Sheet link, or grant Drive access.