隐私政策Privacy Policy
1. 引言1. Introduction
本隐私政策说明广州市云深致远技术有限公司在提供致远开票通（YSZY Tax Invoice Hub）及相关技术服务（以下统称“本服务”）过程中，如何收集、使用、存储、共享与保护信息。我们重视数据安全与用户隐私，并按照适用法律法规及所对接电商平台的开发者政策处理数据。 This Privacy Policy explains how Guangzhou Yunshen Zhiyuan Technology Co., Ltd. collects, uses, stores, shares and protects information in the course of providing YSZY Tax Invoice Hub and related technical services (the "Services"). We are committed to data security and user privacy, and process data in accordance with applicable laws and the developer policies of the marketplaces we integrate with.
本政策适用于本公司的官方网站、SaaS 平台，以及通过电商平台官方开放接口（包括但不限于 Amazon Selling Partner API）进行的数据交互。致远开票通聚焦 Amazon 税票归档与导出，不提供 NF-e 入账、库存 Kardex、税务申报或代账服务。 This policy applies to our corporate website, the SaaS platform, and data interactions conducted through official marketplace open APIs, including but not limited to the Amazon Selling Partner API. YSZY Tax Invoice Hub focuses on Amazon tax invoice archiving and export; it does not provide NF-e bookkeeping, inventory Kardex, tax filing or accounting services.
2. 我们收集的信息2. Information We Collect
2.1 账户与企业信息2.1 Account & Corporate Information
- 企业名称、统一社会信用代码、联系人与联系方式（用于账户开通、合同履行与技术支持）Company name, unified social credit code, contact person and contact details (for account provisioning, contract performance and support)
- 登录凭证（以加密或不可逆方式存储）Login credentials (stored encrypted or in irreversible form)
2.2 Amazon 授权与税务发票数据2.2 Amazon Authorization & Tax Invoice Data
经用户（即卖家）明确授权并授予 Tax Invoicing（税务发票） 角色后，我们通过 Amazon SP-API 获取下列与税票归档直接相关的数据： Upon the user's (i.e. the seller's) explicit authorization and grant of the Tax Invoicing role, we obtain the following data directly related to invoice archiving through Amazon SP-API:
- 税票 / 发票数据：税票或发票文档、报告及相关元数据（用于归档、导出与财务交接）Tax invoice data — invoice documents, reports and related metadata (for archiving, export and financial handoff)
- 开票所需订单买方信息：买方姓名、地址、税务标识（如适用）等生成或归档合规税票所必需的字段Order buyer information needed for invoicing — buyer name, address, tax identifier (where applicable) and other fields necessary to generate or archive compliant invoices
- 订单基础信息：订单号、订单日期、金额等用于与税票对应和账期核对的信息Basic order data — order ID, date, amount and similar information used to match invoices and reconcile periods
- 店铺与站点信息：店铺标识、站点、币种、授权状态Store and marketplace data — store identifier, marketplace, currency and authorization status
我们不会请求与上述业务功能无关的数据权限，也不会获取买家的支付卡号等敏感支付凭证。 We do not request data scopes unrelated to these business functions, and we do not obtain sensitive payment credentials such as buyers' card numbers.
2.3 客户主动提供的信息2.3 Information You Provide
- 询价、支持或沟通中主动提供的联系人、公司信息与问题描述Contact details, company information and problem descriptions provided during inquiries, support or communications
- 为排查问题而主动提供的文件或截图（仅用于支持目的）Files or screenshots voluntarily provided for troubleshooting (used for support only)
本产品不以客户上传的巴西 NF-e XML 作为权威入账来源；如客户在支持过程中主动提供相关文件，我们仅用于排查问题，不将其用于库存成本核算或税务申报。 The product does not use customer-uploaded Brazilian NF-e XML as an authoritative ledger source. If a customer voluntarily provides such files during support, we use them only for troubleshooting and not for inventory costing or tax filing.
2.4 使用与日志信息2.4 Usage & Log Information
- 操作日志、访问时间、IP 地址与设备类型（用于安全审计与故障排查）Operation logs, access times, IP addresses and device type (for security auditing and troubleshooting)
- 网站访问的 Cookie 及类似技术信息（详见第 10 条）Cookies and similar technologies on our website (see Section 10)
3. 我们如何使用信息3. How We Use Information
我们仅在下列目的范围内使用所收集的信息：We use the information collected only for the following purposes:
- 提供本服务：卖家授权、税票与买方必要信息拉取、按店铺/站点/账期归档、导出与财务交接Providing the Services — seller authorization, retrieval of invoices and necessary buyer information, archiving by store/marketplace/period, export and financial handoff
- 身份与权限管理：验证用户身份、分配操作权限、记录操作轨迹Identity & access management — authenticating users, assigning permissions and recording audit trails
- 技术支持与客户服务：排查问题、响应用户请求Technical support & customer service — diagnosing issues and responding to requests
- 安全与合规：防止未授权访问、欺诈行为，履行法律义务Security & compliance — preventing unauthorized access and fraud, and meeting legal obligations
- 产品改进：以聚合、去标识化方式分析功能使用情况以优化产品Product improvement — analysing feature usage in aggregated, de-identified form
我们不会将电商平台授权数据用于上述目的以外的用途，包括但不限于：向第三方出售或出租数据、为其他卖家的竞争性用途分析数据、投放与用户无关的广告。 We do not use marketplace-authorized data for any purpose beyond those listed above, including but not limited to: selling or renting data to third parties, analysing data for other sellers' competitive purposes, or serving unrelated advertising.
4. 电商平台数据专项说明（含 Amazon）4. Marketplace Data — Specific Provisions (incl. Amazon)
针对通过 Amazon Selling Partner API 等平台接口获取的数据，我们进一步承诺： With respect to data obtained through the Amazon Selling Partner API and other marketplace APIs, we further commit that:
- 用途限定：数据仅用于为该授权卖家提供本服务（税票归档、导出与财务交接），不用于任何其他目的。Purpose limitation — data is used solely to provide the Services to the authorizing seller (invoice archiving, export and financial handoff) and for no other purpose.
- 不转售、不共享：不向任何第三方出售、出租或共享此类数据，除非为提供服务所必需的分包处理方（见第 6 条）或法律法规要求。No resale or sharing — we do not sell, rent or share such data with any third party, except sub-processors strictly necessary to deliver the Services (see Section 6) or where legally required.
- 不用于营销：不将平台数据用于定向广告或与用户无关的商业推广。No marketing use — platform data is not used for targeted advertising or unrelated commercial promotion.
- 遵循平台政策：处理方式符合平台的数据保护政策与开发者协议要求，包括数据最小化与安全保护要求。Compliance with platform policies — processing conforms to the platform's data-protection policy and developer agreement, including data-minimization and security requirements.
- 授权可撤销：卖家可随时在平台后台撤销授权；撤销后我们将在合理期限内停止访问并按下述流程删除相关数据。Revocable authorization — sellers may revoke authorization at any time through the marketplace; upon revocation we cease access within a reasonable period and delete the data as described below.
- 无 Amazon 背书：Amazon 未对本服务进行审核、认证或背书；Amazon、Selling Partner API 等名称仅用于说明集成关系。No Amazon endorsement — Amazon has not reviewed, certified or endorsed the Services; Amazon and Selling Partner API names are used only to describe the integration.
5. 税务发票（Tax Invoicing）与 PII 数据专节5. Tax Invoicing & PII Data — Specific Provisions
本节专门说明致远开票通在处理 Amazon 税票数据与订单买方个人信息（PII）时的范围、目的、保留、删除与安全措施。本节与第 4 条及 巴西方案、SP-API 说明 相互补充。 This section specifically describes the scope, purpose, retention, deletion and security measures for Amazon tax invoice data and order buyer personal information (PII) processed by YSZY Tax Invoice Hub. It supplements Section 4, the Brazil solution and the SP-API overview.
5.1 收集范围5.1 What We Collect
- 授权卖家店铺的税票 / 发票文档、报告及相关元数据Tax invoice documents, reports and related metadata for the authorizing seller's stores
- 生成或归档税票所必需的订单买方信息：姓名、地址、税务标识（如适用）等Order buyer information necessary to generate or archive invoices: name, address, tax identifier (where applicable), etc.
- 订单基础信息：订单号、日期、金额、币种Basic order data: order ID, date, amount and currency
- 店铺 / 站点元数据、授权状态、操作与审计日志Store/marketplace metadata, authorization status, operation and audit logs
我们不收集买家的支付卡号、银行账户等敏感支付凭证，也不收集与税票归档无关的买家画像或行为数据。 We do not collect buyers' card numbers, bank account details or other sensitive payment credentials, nor buyer profiles or behavioural data unrelated to invoice archiving.
5.2 使用目的5.2 Why We Use It
- 为授权卖家生成或归档符合当地税务要求的 Amazon 销售税票To generate or archive Amazon sales tax invoices that meet local tax requirements for the authorizing seller
- 按店铺、站点、账期整理税票包，导出给卖家及其财务团队或外部会计师To organize invoice packages by store, marketplace and period and export them to the seller, its finance team or external accountants
- 核对归档完整性、处理差异与提供技术支持To verify archive completeness, handle discrepancies and provide technical support
- 履行法律义务与安全审计To meet legal obligations and perform security auditing
我们遵循最小必要原则：仅访问与上述目的直接相关的字段，不请求广告、库存优化、跨卖家分析等无关权限。 We follow the principle of minimum necessity: we access only fields directly relevant to these purposes and do not request unrelated scopes such as advertising, inventory optimization or cross-seller analysis.
5.3 不用于什么5.3 What We Never Use It For
- 向第三方出售、出租或转售税票数据或买方 PIISelling, renting or reselling invoice data or buyer PII to third parties
- 跨卖家竞争分析、 benchmarking 或与授权卖家无关的分析Cross-seller competitive analysis, benchmarking or analysis unrelated to the authorizing seller
- 与税票归档无关的广告、营销或用户画像Advertising, marketing or profiling unrelated to invoice archiving
- 信用评估、贷款审批或其他与税票归档无关的决策Credit assessment, loan approval or other decisions unrelated to invoice archiving
5.4 保留期限5.4 Retention
- 订单买方 PII：按 Amazon 数据保护政策（DPP）及适用法律要求的最短必要期限保留；在实现开票或归档目的后不再需要的，及时删除或匿名化。Order buyer PII — retained for the shortest period necessary under Amazon's Data Protection Policy (DPP) and applicable law; deleted or anonymized when no longer needed for invoicing or archiving.
- 税票归档数据：按客户配置的归档期限及适用税务法规要求保留；客户可随时导出。Invoice archive data — retained for the customer's configured retention period and as required by applicable tax law; customers may export at any time.
- 日志数据：一般保留不超过 12 个月，用于安全审计。Log data — generally retained for no more than 12 months for security auditing.
5.5 撤销授权与删除5.5 Revocation & Deletion
- 卖家可随时在 Amazon 后台撤销授权，或通过第 12 条联系方式提出删除请求。Sellers may revoke authorization in Amazon at any time or request deletion via the contact details in Section 12.
- 撤销授权或终止服务后，我们将在 30 日内 停止处理并删除或匿名化相关数据，法律法规另有要求（如税务留存义务）的除外。After revocation or termination, we stop processing and delete or anonymize the data within 30 days, unless otherwise required by law (e.g. tax-retention obligations).
- 建议客户在撤销前自行导出所需税票包；删除完成后，相关数据无法恢复。Customers should export any needed invoice packages before revocation; deleted data cannot be recovered.
5.6 安全措施5.6 Security Measures
- TLS 加密传输；敏感凭证与税票数据加密存储。TLS encryption in transit; sensitive credentials and invoice data encrypted at rest.
- 基于角色的访问控制（RBAC），按最小必要原则分配权限。Role-based access control (RBAC) with least-privilege permissions.
- 关键操作审计日志；异常访问告警。Audit logs for key operations and alerts for anomalous access.
- 员工保密协议与安全意识培训；分包处理方受保密与数据保护义务约束。Employee confidentiality agreements and security training; sub-processors are bound by confidentiality and data-protection obligations.
5.7 与 Amazon 的关系5.7 Relationship with Amazon
致远开票通是独立开发的第三方服务，不是 Amazon 官方产品。Amazon 未对本服务进行审核、认证或背书。我们仅在卖家明确授权并授予 Tax Invoicing 角色的范围内访问数据。 YSZY Tax Invoice Hub is an independently developed third-party service, not an official Amazon product. Amazon has not reviewed, certified or endorsed the Services. We access data only within the scope explicitly authorized by the seller through the Tax Invoicing role.
6. 信息共享与披露6. Sharing & Disclosure
我们不会出售您的个人信息。仅在以下情形下可能共享必要信息：We do not sell your personal information. We may share necessary information only in the following circumstances:
- 授权与同意：经您明确同意的情形。With your explicit consent.
- 服务提供商：为本服务提供云基础设施、日志监控等必要支撑的受托处理方，均受保密与数据保护义务约束，且仅可按我们的指示处理数据。Service providers — processors supporting cloud infrastructure and monitoring, bound by confidentiality and data-protection obligations and acting only on our instructions.
- 法律要求：为遵守法律法规、司法或行政机关的合法要求所必需。Legal requirements — where necessary to comply with applicable law or lawful requests from judicial or administrative authorities.
7. 数据安全7. Data Security
- 传输环节采用 TLS 加密，敏感凭证加密存储。TLS encryption in transit; sensitive credentials stored encrypted.
- 基于角色的访问控制（RBAC），按最小必要原则分配权限。Role-based access control (RBAC) following the least-privilege principle.
- 操作审计日志记录关键数据的访问与变更行为。Audit logs record access to and modification of critical data.
- 定期备份与灾难恢复演练，保障数据可用性。Regular backups and disaster-recovery drills to ensure data availability.
- 员工保密协议与安全意识培训。Employee confidentiality agreements and security-awareness training.
尽管我们采取上述措施，互联网环境不存在绝对安全。如发生数据安全事件，我们将按法律要求及时通知受影响用户及相关监管机构。 Despite these measures, no internet environment is absolutely secure. In the event of a data-security incident, we will notify affected users and relevant authorities in a timely manner as required by law.
8. 数据保留与删除8. Data Retention & Deletion
我们仅在为实现本政策所述目的所必需的期限内保留数据，或按法律法规要求的期限保留。税票与买方 PII 的具体保留规则见第 5.4 与 5.5 条。 We retain data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specific retention rules for invoices and buyer PII are set out in Sections 5.4 and 5.5.
- 账户与合同数据：服务关系存续期间及此后法律要求的期限。Account and contract data — for the duration of the service relationship and any legally required period thereafter.
- 平台业务数据：服务存续期间保留；用户终止服务或撤销平台授权后，我们将在 30 日内 停止处理并删除或匿名化处理相关数据，法律法规另有要求的除外。Platform business data — retained during the service term; following termination or revocation of marketplace authorization, we cease processing and delete or anonymize the data within 30 days, unless otherwise required by law.
- 日志数据：一般保留不超过 12 个月，用于安全审计。Log data — generally retained for no more than 12 months for security auditing.
用户可通过本政策第 12 条所列联系方式申请查询、更正或删除其数据。我们将在核实身份后于合理期限内响应。 Users may request access, correction or deletion of their data via the contact details in Section 12. We will respond within a reasonable period after verifying identity.
9. 数据存储地点与跨境传输9. Data Location & Cross-Border Transfer
数据主要存储于我们使用的云服务器环境中。如涉及跨境传输，我们将遵守适用法律关于数据出境的规定，并采取必要的保护措施（如标准合同条款或其他合法机制）。 Data is primarily stored in the cloud environments we use. Where cross-border transfer is involved, we comply with applicable data-export regulations and implement necessary safeguards (such as standard contractual clauses or other lawful mechanisms).
10. Cookie 与类似技术10. Cookies & Similar Technologies
我们的网站使用必要的 Cookie 以维持会话状态与语言偏好。您可通过浏览器设置管理或禁用 Cookie，但部分功能可能因此受影响。我们不使用第三方广告追踪 Cookie。 Our website uses essential cookies to maintain session state and language preference. You may manage or disable cookies in your browser settings, though some functionality may be affected. We do not use third-party advertising-tracking cookies.
11. 未成年人11. Minors
本服务面向企业与商业用户，不面向未成年人。我们不主动收集未成年人的个人信息。 The Services are intended for business and commercial users, not for minors. We do not knowingly collect personal information from minors.
12. 联系我们12. Contact Us
如对本隐私政策有任何疑问、意见或数据相关请求（包括访问、更正、删除、撤销授权），请联系： For any questions, comments or data-related requests (including access, correction, deletion or revocation), please contact:
13. 政策更新13. Changes to This Policy
我们可能不时更新本隐私政策。重大变更将在本页面公示并更新生效日期；如变更实质性影响您的权利，我们将通过邮件或平台通知等方式另行提示。 We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date; where changes materially affect your rights, we will provide additional notice by email or in-product notification.