EchoTik

GDPR overview

No mention of the GDPR appears anywhere on the site: the acronym is absent from every page collected, privacy policy and terms included. What exists is a conditional rights clause — "Depending on the law that applies, you may have a right to" access, rectify, erase, obtain a copy, restrict or object to processing, port data, withdraw consent and lodge a complaint with a statutory authority. Rights are exercised in writing to support@echosell.com, and a Grievance / Data Protection Officer is named at the Singapore head office. There is no Article 27 EU representative, no Data Processing Agreement, and no published subprocessor list. The privacy policy has not been revised since December 2022, may change without notice, and the terms place the contract under Chinese law.

Who owns the data?

Two distinct layers of ownership apply. Personal data — name, email and payment details — remains the user's, collected under the privacy policy and erasable on request. Market data is the opposite: the terms state that public market data independently collected, aggregated and analysed by EchoTik, along with industry insights and trend reports, is EchoTik's intellectual property, usable only within the granted scope and never resold, redistributed or commercially exploited. The platform, its code, algorithms, data models, documentation, trademarks and logos likewise belong to EchoTik. Conversely, users carry full legal responsibility for whatever they upload or generate on the service.

Reuse rights

Reuse is deliberately narrow. The service agreement grants a right to use platform data only within the authorised scope, and expressly forbids resale, secondary distribution and commercial exploitation of the market data, insights and trend reports EchoTik compiles. Reverse engineering, cracking, copying, altering and redistributing the platform are prohibited, as is any unauthorised commercial resale. In practice this means exports may inform internal decisions — product selection, creator shortlisting, competitor benchmarking — but may not be repackaged into a product or dataset sold onward. Anything the user uploads or generates stays their own responsibility. Data obtained through the API falls under the same restriction, and any use beyond it requires written permission.

Data retention & training

Hosting summary

EchoTik states, in the footer repeated on every page, that its data is stored on AWS servers in the United States. No AWS region is named, no regional alternative is offered, and the site publishes no trust or security page. No certification such as SOC 2 or ISO 27001 is claimed. The privacy policy promises reasonable security measures to prevent loss, misuse or unauthorised alteration, while explicitly declining to guarantee absolute security; the service agreement repeats that undertaking and disclaims liability for unforeseeable attacks and vulnerabilities. Note that the web server itself resolves to Frankfurt, Germany, on a Zenlayer network — a content delivery node, which says nothing about where customer data actually resides. The combination worth noting is jurisdictional: a Singapore-registered publisher, a Beijing operating entity in the terms, contract governed by Chinese law, and data physically held in the United States.