引言与合规承诺：
深圳市阿方索智能商贸有限公司（以下简称“阿方索”、“我们”或“本公司”）高度重视用户的隐私保护与数据合规。本《隐私政策》详细阐明了在您访问我们的官方网站、使用我们的数智商贸系统、TikTok 开发者与开放平台 API 服务或向我们提交业务咨询时，我们如何收集、使用、存储、共享与保护您的信息。
一、我们收集的信息类型
为了向您提供优质的智能商贸、跨境供应链与开发者系统集成服务，我们可能收集以下类型的信息：
- 您主动提供的信息：当您在网站预约咨询、注册开发者服务或与我们联系时，您所填写的姓名、职务、公司名称、联系电话、电子邮箱、意向合作类型及业务需求详情。
- 开发者与开放平台对接数据：作为合规的第三方开发者与服务商，在获得您或平台（如 TikTok for Developers / TikTok Shop Open Platform / TikTok Marketing API）授权的情况下，我们可能根据接口规范同步商品 Catalog、订单状态、履约运单号及广告投放分析等必要元数据。我们严格遵守最小必要原则，绝不超范围索取或持久化存储敏感个人隐私。
- 系统日志与设备信息：访问日志、IP 地址、浏览器类型与版本、操作系统、访问时间及页面停留时长，仅用于系统安全性检测、防范恶意攻击及优化服务性能。
二、信息的使用目的
我们收集的信息将严格用于以下用途：
- 为您提供智能商贸咨询、海外仓配方案制定及客户服务支持；
- 执行合规的 TikTok 开放平台 API 授权与接口调用，实现店铺库存同步、订单履约自动化及跨渠道数据分析；
- 验证开发者接入身份，防止接口滥用、欺诈与未经授权的操作；
- 遵守中华人民共和国、欧盟《通用数据保护条例》(GDPR)、美国《加利福尼亚州消费者隐私法》(CCPA) 及 TikTok 平台政策之法律法规义务。
三、数据安全与保护措施
我们采用国际领先的工业级安全标准保护您的数据资产：
- 传输加密：所有网络通信均强制采用 TLS 1.3 / HTTPS 高强度加密协议；
- 存储隔离：数据库采用 AES-256 标准静态加密，并实施严格的基于角色的访问权限控制（RBAC）；
- 秘钥保护：开发者 API 凭据、Access Token 及 Client Secret 均通过专业加密密钥管理系统（KMS）保护，严禁明文暴露；
- 定期审计：定期开展代码安全审计与漏洞扫描，确保接口与数据流转无安全死角。
四、信息的共享、转让与披露
我们承诺绝不出售、出租或非法向任何第三方提供您的个人与商业数据。仅在下列极少数法定或授权场景下可能共享：
- 经您明确授权：在获得您单独书面或数字化同意的前提下；
- 合作服务集成：为完成订单跨境履约，向合规的国际干线物流、海关申报通道或持牌金融机构提供清关与物流必填信息；
- 法律合规要求：依据法律法规、司法机关或监管部门依法出具的法定要求进行必要披露。
五、您的权利与数据保留政策
根据适用法律法规，您对自己的个人信息享有完整的查阅、更正、导出及请求删除的权利：
- 数据访问与修改：您有权联系我们查询或更正我们留存的有关您的个人信息。
- 请求删除（数据擦除权）：若您决定终止使用我们的开发者服务或系统，您可向
[email protected] 发送请求，我们将在核实身份后 15 个工作日内完成数据注销与物理擦除。
- 数据保存期限：我们仅在实现业务目的所必需的最短期限内保留信息，达到保留期限后将彻底销毁或匿名化处理。
六、联系我们与争议解决
如您对本隐私政策有任何疑问、意见、建议或数据权利行使诉求，请通过以下方式与我们负责数据合规的团队联系：
Introduction & Compliance Commitment:
Shenzhen Afanso Intelligent Commerce Co., Ltd. ("Afanso", "we", "us", or "our") is firmly committed to protecting your privacy and maintaining data security. This Privacy Policy outlines how we collect, use, store, share, and protect your information when you access our official portal, use our intelligent commerce systems, interact with our TikTok Developer & Open API integrations, or reach out for business inquiries.
1. Information We Collect
To provide high-quality intelligent cross-border commerce, supply chain management, and developer API integration services, we may collect:
- Information You Provide Directly: Name, professional title, company name, telephone number, business email address, and collaboration proposals submitted through our forms.
- Developer & Platform API Data: As an authorized third-party developer and software solution provider, with your explicit authorization or via platform APIs (including TikTok for Developers, TikTok Shop Open Platform, and TikTok Marketing API), we process catalog metadata, inventory status, order fulfillment identifiers, and marketing analytics strictly based on the principle of data minimization. We do not solicit or persistently store sensitive personal consumer data beyond operational requirements.
- System & Device Logs: IP address, browser type and version, operating system, timestamp, and performance metrics, utilized solely for operational security, intrusion prevention, and service reliability optimization.
2. How We Use Information
Information collected is strictly utilized for the following legitimate purposes:
- Providing intelligent commerce consultations, supply chain coordination, and enterprise customer service;
- Executing authorized TikTok Open API requests to facilitate multi-channel inventory synchronization, automated fulfillment tracking, and performance analytics;
- Authenticating developer access to prevent unauthorized access, API misuse, or malicious activities;
- Complying with statutory obligations under GDPR, CCPA, and relevant local commerce & data protection regulations.
3. Data Protection & Security Standards
We implement state-of-the-art technical and organizational safeguards:
- Encryption in Transit: Mandatory TLS 1.3 / HTTPS encryption across all API and web endpoints;
- Encryption at Rest: Industry-standard AES-256 encryption for persisted databases with strict Role-Based Access Controls (RBAC);
- Secret & Credential Management: Developer API keys, client credentials, and access tokens are isolated within Key Management Systems (KMS);
- Security Auditing: Regular code reviews and automated vulnerability scanning to safeguard infrastructure integrity.
4. Information Sharing & Third Parties
We never sell, lease, or monetize your personal or commercial data. Data is only disclosed under the following strictly defined conditions:
- With your explicit prior authorization;
- To compliant logistics operators, customs clearance channels, or licensed financial settlement partners strictly necessary for executing international shipments and transactions;
- Where required by binding law, regulation, legal process, or governmental request.
5. Your Rights & Data Retention
You maintain full sovereignty over your data under applicable data privacy frameworks:
- Access and Rectification: You may request access to or correction of personal information held by us.
- Right to Erasure (Data Deletion): You may request complete deletion of your account and related credentials by contacting
[email protected]. We will verify and process deletions within 15 business days.
- Retention Period: Data is retained strictly as long as necessary to fulfill business objectives and legal compliance, after which it is securely destroyed or anonymized.
6. Contact Us & Legal Entity
For any questions, privacy concerns, or data rights requests, please contact our compliance and developer support office:
Company Name: Shenzhen Afanso Intelligent Commerce Co., Ltd.
Developer & Privacy Inquiries: [email protected] /
[email protected]
Office Address: Xintianxia Industrial City, Bantian Street, Longgang District, Shenzhen, Guangdong, China
