隐私政策Privacy Policy
1. 引言1. Introduction
本隐私政策说明广州市云深致远技术有限公司在提供跨境电商 ERP SaaS 平台及相关技术服务（以下统称“本服务”）过程中，如何收集、使用、存储、共享与保护信息。我们重视数据安全与用户隐私，并按照适用法律法规及所对接电商平台的开发者政策处理数据。 This Privacy Policy explains how Guangzhou Yunshen Zhiyuan Technology Co., Ltd. collects, uses, stores, shares and protects information in the course of providing the cross-border e-commerce ERP SaaS platform and related technical services (the "Services"). We are committed to data security and user privacy, and process data in accordance with applicable laws and the developer policies of the marketplaces we integrate with.
本政策适用于本公司的官方网站、SaaS 平台及通过电商平台官方开放接口（包括但不限于 Amazon Selling Partner API）进行的数据交互。 This policy applies to our corporate website, the SaaS platform, and data interactions conducted through official marketplace open APIs, including but not limited to the Amazon Selling Partner API.
2. 我们收集的信息2. Information We Collect
2.1 账户与企业信息2.1 Account & Corporate Information
- 企业名称、统一社会信用代码、联系人与联系方式（用于账户开通、合同履行与技术支持）Company name, unified social credit code, contact person and contact details (for account provisioning, contract performance and support)
- 登录凭证（以加密或不可逆方式存储）Login credentials (stored encrypted or in irreversible form)
2.2 电商平台授权数据2.2 Marketplace-Authorized Data
经用户（即卖家）明确授权后，我们通过电商平台的官方开放接口获取下列与业务运营直接相关的数据： Upon the user's (i.e. the seller's) explicit authorization, we obtain the following data directly related to business operations through official marketplace open APIs:
- 订单与配送数据（订单信息、买家配送信息、发货与物流状态）Order and shipping data (order details, buyer shipping information, fulfillment and tracking status)
- 商品与库存数据（Listing、SKU、可售数量、仓库库存）Product and inventory data (listings, SKUs, available quantity, warehouse stock)
- 财务与结算数据（平台结算报告、佣金与费用明细）Financial and settlement data (settlement reports, commission and fee details)
- 店铺与账户的基础配置信息（店铺标识、站点、币种）Basic store and account configuration data (store identifier, marketplace, currency)
我们不会请求与上述业务功能无关的数据权限，也不会获取买家的支付卡号等敏感支付凭证。 We do not request data scopes unrelated to these business functions, and we do not obtain sensitive payment credentials such as buyers' card numbers.
2.3 使用与日志信息2.3 Usage & Log Information
- 操作日志、访问时间、IP 地址与设备类型（用于安全审计与故障排查）Operation logs, access times, IP addresses and device type (for security auditing and troubleshooting)
- 网站访问的 Cookie 及类似技术信息（详见第 9 条）Cookies and similar technologies on our website (see Section 9)
3. 我们如何使用信息3. How We Use Information
我们仅在下列目的范围内使用所收集的信息：We use the information collected only for the following purposes:
- 提供服务：订单处理、库存同步、履约发货、财务对账与经营分析等平台核心功能Providing the Services — order processing, inventory synchronization, fulfillment, financial reconciliation and analytics
- 身份与权限管理：验证用户身份、分配操作权限、记录操作轨迹Identity & access management — authenticating users, assigning permissions and recording audit trails
- 技术支持与客户服务：排查问题、响应用户请求Technical support & customer service — diagnosing issues and responding to requests
- 安全与合规：防止未授权访问、欺诈行为，履行法律义务Security & compliance — preventing unauthorized access and fraud, and meeting legal obligations
- 产品改进：以聚合、去标识化方式分析功能使用情况以优化产品Product improvement — analysing feature usage in aggregated, de-identified form
我们不会将电商平台授权数据用于上述目的以外的用途，包括但不限于：向第三方出售或出租数据、为其他卖家的竞争性用途分析数据、投放与用户无关的广告。 We do not use marketplace-authorized data for any purpose beyond those listed above, including but not limited to: selling or renting data to third parties, analysing data for other sellers' competitive purposes, or serving unrelated advertising.
4. 电商平台数据专项说明（含 Amazon）4. Marketplace Data — Specific Provisions (incl. Amazon)
针对通过 Amazon Selling Partner API 等平台接口获取的数据，我们进一步承诺： With respect to data obtained through the Amazon Selling Partner API and other marketplace APIs, we further commit that:
- 用途限定：数据仅用于为该授权卖家提供本服务（订单履约、库存同步、财务对账与经营分析），不用于任何其他目的。Purpose limitation — data is used solely to provide the Services to the authorizing seller (fulfillment, inventory sync, reconciliation, analytics) and for no other purpose.
- 不转售、不共享：不向任何第三方出售、出租或共享此类数据，除非为提供服务所必需的分包处理方（见第 5 条）或法律法规要求。No resale or sharing — we do not sell, rent or share such data with any third party, except sub-processors strictly necessary to deliver the Services (see Section 5) or where legally required.
- 不用于营销：不将平台数据用于定向广告或与用户无关的商业推广。No marketing use — platform data is not used for targeted advertising or unrelated commercial promotion.
- 遵循平台政策：处理方式符合平台的数据保护政策与开发者协议要求，包括数据最小化与安全保护要求。Compliance with platform policies — processing conforms to the platform's data-protection policy and developer agreement, including data-minimization and security requirements.
- 授权可撤销：卖家可随时在平台后台撤销授权；撤销后我们将在合理期限内停止访问并按下述流程删除相关数据。Revocable authorization — sellers may revoke authorization at any time through the marketplace; upon revocation we cease access within a reasonable period and delete the data as described below.
5. 信息共享与披露5. Sharing & Disclosure
我们不会出售您的个人信息。仅在以下情形下可能共享必要信息：We do not sell your personal information. We may share necessary information only in the following circumstances:
- 授权与同意：经您明确同意的情形。With your explicit consent.
- 服务提供商：为本服务提供云基础设施、日志监控等必要支撑的受托处理方，均受保密与数据保护义务约束，且仅可按我们的指示处理数据。Service providers — processors supporting cloud infrastructure and monitoring, bound by confidentiality and data-protection obligations and acting only on our instructions.
- 法律要求：为遵守法律法规、司法或行政机关的合法要求所必需。Legal requirements — where necessary to comply with applicable law or lawful requests from judicial or administrative authorities.
6. 数据安全6. Data Security
- 传输环节采用 TLS 加密，敏感凭证加密存储。TLS encryption in transit; sensitive credentials stored encrypted.
- 基于角色的访问控制（RBAC），按最小必要原则分配权限。Role-based access control (RBAC) following the least-privilege principle.
- 操作审计日志记录关键数据的访问与变更行为。Audit logs record access to and modification of critical data.
- 定期备份与灾难恢复演练，保障数据可用性。Regular backups and disaster-recovery drills to ensure data availability.
- 员工保密协议与安全意识培训。Employee confidentiality agreements and security-awareness training.
尽管我们采取上述措施，互联网环境不存在绝对安全。如发生数据安全事件，我们将按法律要求及时通知受影响用户及相关监管机构。 Despite these measures, no internet environment is absolutely secure. In the event of a data-security incident, we will notify affected users and relevant authorities in a timely manner as required by law.
7. 数据保留与删除7. Data Retention & Deletion
我们仅在为实现本政策所述目的所必需的期限内保留数据，或按法律法规要求的期限保留： We retain data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:
- 账户与合同数据：服务关系存续期间及此后法律要求的期限。Account and contract data — for the duration of the service relationship and any legally required period thereafter.
- 平台业务数据：服务存续期间保留；用户终止服务或撤销平台授权后，我们将在 30 日内 停止处理并删除或匿名化处理相关数据，法律法规另有要求的除外。Platform business data — retained during the service term; following termination or revocation of marketplace authorization, we cease processing and delete or anonymize the data within 30 days, unless otherwise required by law.
- 日志数据：一般保留不超过 12 个月，用于安全审计。Log data — generally retained for no more than 12 months for security auditing.
用户可通过本政策第 11 条所列联系方式申请查询、更正或删除其数据。我们将在核实身份后于合理期限内响应。 Users may request access, correction or deletion of their data via the contact details in Section 11. We will respond within a reasonable period after verifying identity.
8. 数据存储地点与跨境传输8. Data Location & Cross-Border Transfer
数据主要存储于我们使用的云服务器环境中。如涉及跨境传输，我们将遵守适用法律关于数据出境的规定，并采取必要的保护措施（如标准合同条款或其他合法机制）。 Data is primarily stored in the cloud environments we use. Where cross-border transfer is involved, we comply with applicable data-export regulations and implement necessary safeguards (such as standard contractual clauses or other lawful mechanisms).
9. Cookie 与类似技术9. Cookies & Similar Technologies
我们的网站使用必要的 Cookie 以维持会话状态与语言偏好。您可通过浏览器设置管理或禁用 Cookie，但部分功能可能因此受影响。我们不使用第三方广告追踪 Cookie。 Our website uses essential cookies to maintain session state and language preference. You may manage or disable cookies in your browser settings, though some functionality may be affected. We do not use third-party advertising-tracking cookies.
10. 未成年人10. Minors
本服务面向企业与商业用户，不面向未成年人。我们不主动收集未成年人的个人信息。 The Services are intended for business and commercial users, not for minors. We do not knowingly collect personal information from minors.
11. 联系我们11. Contact Us
如对本隐私政策有任何疑问、意见或数据相关请求，请联系： For any questions, comments or data-related requests regarding this Privacy Policy, please contact:
12. 政策更新12. Changes to This Policy
我们可能不时更新本隐私政策。重大变更将在本页面公示并更新生效日期；如变更实质性影响您的权利，我们将通过邮件或平台通知等方式另行提示。 We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date; where changes materially affect your rights, we will provide additional notice by email or in-product notification.