Operação multicanal
Carregando painel
Preparando sua operação.
Carregando seu painel
TikTok Shop DSPR
Use this page while filling the TikTok Shop questionnaire. For each Yes answer, paste the English text in the text field and upload the matching PNG image in the image field.
Last reviewed: June 21, 2026
Privacy/security contact: vendas@leo.com.vc
Format: answer text in English, public evidence page, PNG attachment.
The Portuguese question is included so you can match it exactly in the TikTok form.
01 · Security
Pergunta no TikTok
Sua organização tem uma política ou programa de segurança da informação publicado?
Texto para colar
Yes. Leo Infinity maintains a published Information Security Program covering governance, access control, secure development, data protection, incident response, vulnerability management, endpoint baseline, vendor management, and periodic review. Evidence: https://app.leo.com.vc/seguranca/information-security-program
02 · Security
Pergunta no TikTok
Sua organização usa segregação de rede e implementa medidas de proteção para monitorar e prevenir ameaças à rede?
Texto para colar
Yes. Leo Infinity runs production on managed cloud infrastructure with separated production environments, HTTPS-only traffic, no public database write access, protected service-role credentials, provider network isolation, and monitoring through Vercel/Supabase logs. Admin access is restricted by least privilege. Evidence: https://app.leo.com.vc/seguranca/network-segregation-monitoring
03 · Security
Pergunta no TikTok
Sua organização instala software antivírus nos terminais da empresa?
Texto para colar
Yes. Company endpoints used for production administration must use operating-system malware protection such as macOS XProtect/Gatekeeper or an equivalent vendor tool, automatic security updates, screen lock, browser credential protection, and no local storage of marketplace protected data. Compromised or lost devices trigger credential rotation. Evidence: https://app.leo.com.vc/seguranca/endpoint-antimalware-baseline
04 · Security
Pergunta no TikTok
Sua organização implementa uma linha de base de segurança para operações diárias? Como bloqueio de tela, complexidade de senha, uma política de mesa limpa, autenticação multifator, etc.
Texto para colar
Yes. Leo Infinity maintains a daily operational security baseline requiring screen lock, strong passwords, MFA where supported by providers, clean-desk handling of seller data, protected environment variables for secrets, and restricted administrator access. Evidence: https://app.leo.com.vc/seguranca/daily-security-baseline
05 · Security
Pergunta no TikTok
Sua organização tem uma política de controle de acesso publicada e restringe o acesso a dados pessoais aos sistemas com base no princípio do privilégio mínimo?
Texto para colar
Yes. Leo Infinity has a published access-control policy based on least privilege. Seller data is separated by authenticated user account, marketplace account ownership is checked server-side, administrative access is limited to approved operators, and service-role credentials are kept out of the browser. Evidence: https://app.leo.com.vc/seguranca/least-privilege-access-control
06 · Security
Pergunta no TikTok
Sua organização tem uma política de classificação de dados publicada e criptografa dados confidenciais em trânsito e em repouso?
Texto para colar
Yes. Leo Infinity classifies marketplace data by sensitivity and protects confidential data with HTTPS/TLS in transit, managed cloud database/storage protections at rest, restricted service-role credentials, and server-side token handling. Evidence: https://app.leo.com.vc/seguranca/data-classification-encryption
07 · Security
Pergunta no TikTok
Sua organização tem uma política de resposta a incidentes publicada com funções e responsabilidades esclarecidas, bem como canais de comunicação/relatórios de incidentes?
Texto para colar
Yes. Leo Infinity has a published incident-response policy defining intake, triage, containment, credential rotation, investigation, remediation, documentation, and seller/regulatory communication when required. The reporting channel is vendas@leo.com.vc. Evidence: https://app.leo.com.vc/seguranca/incident-response-policy
08 · Security
Pergunta no TikTok
Sua organização possui um procedimento de gerenciamento de vulnerabilidades ou ameaças em vigor?
Texto para colar
Yes. Leo Infinity maintains a vulnerability-management procedure covering dependency updates, code review, build/type checks, provider alerts, secure configuration review, severity-based remediation, and post-fix verification. Evidence: https://app.leo.com.vc/seguranca/vulnerability-management
09 · Privacy
Pergunta no TikTok
A sua organização tem uma política interna de proteção de dados pessoais atualizada regularmente?
Texto para colar
Yes. Leo Infinity maintains an internal personal data protection policy aligned with LGPD principles: purpose limitation, data minimization, access restriction, transparency, retention control, and response to data-subject requests. Evidence: https://app.leo.com.vc/seguranca/data-protection-policy
10 · Privacy
Pergunta no TikTok
Você ajudará os vendedores ou a TikTok Shop a excluir/atualizar/fornecer dados mediante solicitação dos usuários?
Texto para colar
Yes. Leo Infinity assists sellers and marketplace partners with access, correction, deletion, export, and authorization-revocation requests when legally and technically applicable. Requests can be sent to vendas@leo.com.vc and are handled after account ownership verification. Evidence: https://app.leo.com.vc/seguranca/data-subject-rights
11 · Privacy
Pergunta no TikTok
A sua organização mantém uma política de privacidade atualizada regularmente?
Texto para colar
Yes. Leo Infinity maintains a public Privacy Policy that describes collected data, purposes, sharing, security controls, user rights, retention, and contact channels. It is reviewed at least annually and after material changes. Evidence: https://app.leo.com.vc/privacidade and https://app.leo.com.vc/seguranca/privacy-policy-review
12 · Privacy
Pergunta no TikTok
A sua organização tem um responsável pela proteção de dados (DPO)? Em caso afirmativo, insira o e-mail de contato do DPO.
Texto para colar
Yes. Leo Infinity has a designated privacy/data-protection contact for LGPD, seller data requests, and marketplace partner privacy questions: vendas@leo.com.vc. Evidence: https://app.leo.com.vc/seguranca/privacy-contact
Use these only when the form asks for details. Do not upload evidence for a No answer unless TikTok requires it.
No. Leo Infinity has no known personal-data security breach in the last three years. If an incident is confirmed, Leo Infinity will follow the published incident-response policy and notify affected parties when required.
No. Leo Infinity has no known privacy complaint, objection, regulatory notice, or similar correspondence in the last three years.
No. Leo Infinity does not currently hold ISO 27001, ISO 27701, SOC 2 Type II, ePrivacy, or similar third-party certifications. The company is documenting and operating internal controls before pursuing formal certification.
