Privacy Policy

1. Introduction

Welcome to our retail inventory management system (the "System," "IOE," "we," or "us"). We recognize the importance of personal information and are committed to protecting it. We process personal information for clear and limited purposes, collect only what is needed, maintain appropriate safeguards, and provide transparent ways for individuals to exercise their rights.

Read and understand this policy before using the System.

2. Information we collect and how we use it

2.1 Information we collect

When the System is used, we may collect:

• Account information: username, password, and email address.
• Customer information: name, phone number, gender, birthday, and address.
• Transaction information: purchase history, amounts, payment methods, and store credit.
• Device information: IP address, browser type, and operating system version.
• Log information: access times, pages visited, and recorded actions.

2.2 Why we use this information

We use personal information to:

• Provide the service: support sales, customer management, inventory, and related features.
• Manage accounts: create and administer accounts and verify identity.
• Provide support: respond to questions and complaints and resolve issues.
• Protect the System: prevent fraud, misuse, and security incidents.
• Analyze performance: improve service quality and the user experience.
• Meet legal obligations: comply with applicable laws and lawful regulatory requests.

2.3 Consent

Where consent is required, we request it through methods such as:

• Selecting "I have read and agree to the Privacy Policy" during registration.
• A clear notice and authorization request before a specific feature is used.
• Controls made available in the System settings.

3. Storage and protection of personal information

3.1 Storage location and retention

• Storage location: personal information is stored on servers in the People's Republic of China.
• Retention periods:
  • Account information: while the account remains active and for six months after closure.
  • Transaction records: at least ten years, as required for tax compliance.
  • Log information: three to six months.

3.2 Security measures

We use measures designed to protect information, including:

• Protected storage: sensitive data, such as payment references, is stored with appropriate safeguards.
• Access controls: permissions restrict access to the minimum required.
• Secure transmission: HTTPS encrypts data in transit.
• Audit logs: important business actions are recorded for traceability.
• Backup and export: the System provides backup and business-data export tools.

3.3 Data incident response

If a personal information breach occurs, we will:

1. Activate the incident response process and take steps to contain the breach.
2. Notify affected users within 72 hours where required.
3. Report the incident to the relevant authorities where required.
4. Help affected users reduce reasonably foreseeable risks.

4. Your rights

Subject to applicable law, including the Personal Information Protection Law of the People's Republic of China, you may have the following rights.

4.1 Access

You may request access to personal information we hold about you by:

• Signing in and reviewing your profile.
• Contacting support to request a copy of your data.

4.2 Correction

You may request correction of personal information that is inaccurate or incomplete.

4.3 Deletion

You may request deletion of personal information when:

• The processing purpose has been fulfilled or can no longer be fulfilled.
• We stop providing the product or service.
• You withdraw consent where consent is the basis for processing.
• We process your personal information unlawfully.

Note: we must retain certain transaction records for at least ten years for tax and financial compliance. When such records must be retained, we anonymize your identifying information instead of deleting the transaction data.

4.4 Data portability

You may request a copy of your personal information in a commonly used structured format, such as CSV or JSON.

4.5 Objection

You may object to profiling or evaluation based solely on automated decision-making, subject to applicable law.

4.6 Exercising your rights

To exercise any of these rights:

• Email zhtyyx@gmail.com.
• Include your registered email address, store name, and the request you want us to process.

We will respond within 15 business days.

5. Cookies and similar technologies

Cookies are small text files stored on your device. We may use:

• Essential cookies: maintain your session and keep the System working. These cannot be disabled through the System.
• Functional cookies: remember preferences. These may be disabled.
• Analytics cookies: help us understand usage and improve the service. These may be disabled.

You can manage cookies in your browser. Disabling cookies may prevent some features from working correctly.

6. Third-party services

The System may use the following third-party services:

• Payment services: Alipay and WeChat Pay, each subject to its own privacy policy.
• Cloud infrastructure: Tencent Cloud, used to operate the System and store data.

We assess service providers against relevant data-protection requirements. Each provider processes information under its own privacy policy, which you should review.

7. Children

The service is primarily intended for business users. Anyone under 18 should use the System only with a parent or guardian's guidance. We do not knowingly collect children's personal information.

8. Changes to this policy

We may update this Privacy Policy. We will notify you of material changes through one or more of the following:

• A notice in the System.
• An email notification.
• A notice displayed when you sign in.

An updated policy takes effect when published. Continued use of the System constitutes acceptance of the updated policy.

9. Contact us

For questions, comments, or requests concerning this Privacy Policy, contact us at:

• Email: zhtyyx@gmail.com

We will respond within 15 business days.

10. Governing law and disputes

This Privacy Policy and disputes relating to it are governed by the laws of the People's Republic of China. The parties should first attempt to resolve a dispute through good-faith consultation. If consultation does not resolve the dispute, either party may bring proceedings before a court with jurisdiction where the System operator is located.