隐私政策

深圳市晓通信息技术有限公司(下称"我们")是一家跨境电商企业,运营自有网店及自研的内部订单管理系统。本隐私政策说明我们收集哪些数据、为何收集、如何保护、保留多久,以及你可以如何就此与我们联系。

• 订单与物流数据:通过电商平台接口接收的自营店铺订单编号、商品与数量、订单状态、物流状态;买家个人信息不作超出订单处理所需的留存。
• 商品与库存数据:自营店铺的商品与库存信息。
• 内部账号数据:使用我们系统的本公司员工的姓名、工作联系方式与登录凭据。

上述数据仅用于运营自有电商业务:订单履约、物流协调、库存与供应链计划、销售分析。我们仅申请实现这些目的所必需的最小接口权限;不出售个人数据,也不将其用于面向第三方的广告。

• 全部数据经加密链路传输(TLS 1.2 及以上),存储于托管云平台并以 AES-256 静态加密。
• 访问实行基于角色的权限控制,遵循最小权限与知其所需原则,写操作留有审计日志。
• 登录凭据仅以加盐哈希形式存储;接口密钥与令牌加密存储。

我们仅在保密义务约束下,与运营业务严格必需的服务商(如云托管、物流服务商)共享数据,或在法律要求时依法披露;不与其他任何第三方共享电商平台数据。

数据仅在实现上述目的所需或法律要求的期限内保留。服务关系终止、应用取消授权或收到有效删除请求后,我们将在 30 天内删除所持有的相关个人数据,法律另有要求的除外。

商家、平台及个人可请求访问、更正、导出或删除我们持有的个人数据,我们将在 15 个工作日内响应。

你可以通过邮箱 contact@hersunei.com 或本网站公布的联系渠道与我们取得联系;个人数据相关请求由我们的数据保护负责人处理。

本政策至少每年评审并更新一次,页首的版本号与生效日期即为当前版本。

XT Technology Co., Ltd. (深圳市晓通信息技术有限公司, "we", "us") is a cross-border e-commerce company operating its own online shops and a self-developed internal order management system. This Privacy Policy explains what data we collect, why we collect it, how we protect it, how long we keep it, and how you can contact us about it.

• Order and logistics data received through e-commerce platform APIs for shops we operate: order identifiers, purchased items and quantities, order status, and logistics status. Buyer personal information is not persisted beyond what order processing requires.
• Product and inventory data for the shops we operate.
• Internal user account data of our own employees who use our systems: name, work contact details and login credentials.

We process this data solely to operate our own e-commerce business: order fulfillment, logistics coordination, inventory and supply-chain planning, and sales analysis. We request only the minimum API scopes necessary for these purposes. We do not sell personal data, and we do not use it for advertising to third parties.

• All data is transmitted over encrypted connections (TLS 1.2 or above) and stored on a managed global cloud platform with AES-256 encryption at rest.
• Access is limited by role-based access control on a least-privilege, need-to-know basis, and write operations are audit-logged.
• Login credentials are stored only as salted cryptographic hashes; API keys and tokens are stored encrypted.

We share data only with service providers strictly necessary to operate our business (such as cloud hosting and logistics providers), under confidentiality obligations, or where disclosure is required by law. We do not share e-commerce platform data with any other third party.

We keep data only as long as needed for the purposes above or as required by law. When a service relationship ends, an application is deauthorized, or we receive a valid deletion request, we delete the related personal data we hold within 30 days, unless retention is legally required.

Merchants, platforms and individuals may request access to, correction of, export of, or deletion of personal data we hold. We respond to such requests within 15 business days.

You can reach us by email at contact@hersunei.com, or through the contact channels published on this website. Requests concerning personal data are handled by our Data Protection Lead.

We review and update this Privacy Policy at least annually. The version and effective date at the top of this document identify the current revision.