YiwuPro Privacy Policy

Version date: July 13, 2026

1. Data controller and contact

The data controller for personal data processed through YiwuPro is YIWU PENGXIN TRADING COMPANY, an entity incorporated in Hong Kong (the "Operator", "we", "us").

For any question about this Privacy Policy, or to exercise your rights over your data, write to soporte@yiwupro.app.

2. YiwuPro's core promise

This section summarizes the product's core commitment; the rest of this Policy details how your data is collected, used, and protected in practice.

3. What data we collect

3.1 Account data. Name, email and/or phone number, WeChat ID (optional), profile photo, role within your organization, preferred language, password (stored encrypted by our authentication provider).

3.2 Business data you enter. All the information you capture in the App to run your business:

• Suppliers: name, company, phone, WeChat, market location (district/street/stall), notes, rating, WeChat QR code image.
• Products: photos, names in multiple languages, descriptions, prices, measurements, voice notes, item numbers (货号).
• Clients: name, company, country, contact, preferred currency, configured markup.
• Quotations, orders, payments, and contracts generated within the App.
• Photos of products, packaging, labels, business cards, and warehouse inspections.

3.3 Technical data. Usage logs, IP address, device identifiers, operating system type, and product analytics and error-monitoring data when those tools are active. We use, or plan to use:

• Sentry (error/crash monitoring) — as a potential data sub-processor.
• PostHog (product analytics: activation, feature usage, retention) — as a potential data sub-processor.

These tools are not necessarily active from day one; when they are, this Policy will be updated and the version date will reflect that.

4. Where your data is stored and processed

• Database, authentication, and file storage: managed third-party cloud infrastructure, hosted in the Singapore region.
• Web application and serverless functions (AI backend proxy, document generation): hosting provider distributed via a global CDN (data in transit may pass through nodes in different regions, but persistent storage remains in Singapore).
• Payments: RevenueCat (mobile subscriptions via App Store/Google Play) and Stripe (web subscriptions) process payment data; YiwuPro does not store card numbers.

By using YiwuPro, your data may be transferred to and processed outside your country of residence, including Singapore and the regions where our sub-processors operate. We adopt reasonable contractual and technical measures to protect that data during transfer and processing.

5. Artificial intelligence (AI)

When you use the photo capture, OCR, or voice features, those photos and audio are sent — through a gateway/backend we operate (never directly from your device) — to third-party AI model providers (configured and updated from our admin panel based on whichever model offers the best quality/cost at any given time) to extract the requested information (product name, text from a card, transcription of a voice note, etc.).

• YiwuPro does not use your photos, audio, or business data to train its own AI models.
• We do not control each third-party AI provider's internal retention policies for the calls they process; we select providers with reasonable commitments not to use content to train their models, and we will update this Policy if that changes.
• AI-generated results are stored in your account like any other business data (subject to the same confidentiality promise in Section 2).

6. Who we share data with

We do not sell your personal data or business data to anyone, under any circumstances.

We share data only with:

• Sub-processors that operate the Service's infrastructure: database/storage providers, hosting/CDN provider, AI providers (photo/voice processing described above), RevenueCat/Stripe (payments), Resend or similar (transactional email), and monitoring/analytics tools when active. Each processes data only according to our instructions and to operate the Service.
• Authorities, when a valid legal obligation requires us to.
• A buyer of the business, in the event of a merger, acquisition, or sale of the Operator's assets — with the obligation that the acquirer honor this Policy or notify a change before applying a different one.

We never share your supplier or client database with other YiwuPro users, nor do we use it to build public directories or third-party products.

7. Data retention

We retain your data while your account is active. If you cancel or delete your account:

• Your data is marked for deletion and permanently erased within 30 days of cancellation (a period used for recovery from accidental errors or to fulfill pending legal obligations, such as billing records).
• Backup copies may persist for a limited additional period until their natural rotation, but are not used for any purpose other than disaster recovery.
• Billing records and data we must retain due to legal obligations (for example, tax or accounting) are kept for the period required by applicable law, even after account closure.

8. Your rights

You can, at any time, by writing to soporte@yiwupro.app:

• Access the personal data we hold about you.
• Rectify inaccurate data (many fields are also directly editable in the App).
• Export your entire business catalog (suppliers, products, photos, clients, quotations) in Excel/ZIP directly from the App, with no need for a written request.
• Request deletion of your account and personal data, subject to the legal exceptions in Section 7.
• Object to certain uses of your data, where applicable under the law of your jurisdiction.

We will respond to requests within a reasonable period (we aim not to exceed 30 days).

9. Cookies and similar technologies

YiwuPro makes minimal use of cookies/local storage:

• Strictly necessary cookies or tokens to keep you signed in and for the website to function.
• Local device storage (IndexedDB/Dexie) for the offline capture queue (photos, voice, forms) while there is no signal.
• We do not use advertising or cross-site tracking cookies. If we activate analytics (PostHog) in the future that use cookies or similar identifiers, we will update this section and, where the law requires it, request your consent.

10. Minors

YiwuPro is not directed at individuals under 18 and we do not knowingly collect data from minors. If you become aware that a minor has provided us with personal data, contact us so we can delete it.

11. Security

We apply reasonable technical and organizational measures to protect your data: encryption in transit (HTTPS), role-based and organization-based access controls (row-level security in the database), and strict data separation between organizations. No system is 100% secure; if a security incident affects your data, we will notify you as required by applicable law.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will publish the current version in the App and/or at yiwupro.app along with its update date. If a change is material, we will make reasonable efforts to notify you by email or within the App in advance.

13. Contact

YIWU PENGXIN TRADING COMPANY — Hong Kong.
Email: soporte@yiwupro.app

Version: July 13, 2026.