Chuangke Xingtu SellerOpsSeller operations workspace

Privacy policy

Privacy Policy

This policy explains how HONG KONG INNOVATION STARLIGHT LIMITED (香港創科星途有限公司) handles information for Chuangke Xingtu SellerOps, including seller authorization, order activity reporting, inventory review, listing checks, pricing review, and finance exports.

Effective date: July 31, 2026Company: HONG KONG INNOVATION STARLIGHT LIMITED / 香港創科星途有限公司

We only connect a seller account after the account owner or administrator approves access. We do not ask for seller passwords by website form, email, or support chat.

1. Scope

This policy applies to Chuangke Xingtu SellerOps, its public website, seller account onboarding, authorized data processing, reporting, exports, and customer support. Each seller company is responsible for the accounts it chooses to connect.

2. Data We Process

Depending on the service ordered and the access approved by the seller, we may handle:

  • Seller account IDs, marketplace IDs, store names, connection status, and setup details.
  • Non-PII order summaries, sales metrics, inventory summaries, stock status, and listing status.
  • Catalog, pricing, offer, fee, settlement, refund, reimbursement, and finance report records.
  • Authorization codes, access tokens, refresh tokens, token metadata, and logs needed to keep the connection working.
  • Contact details customers send to us when requesting a quote or support.

We do not request or process buyer names, shipping addresses, phone numbers, email addresses, or other restricted buyer personal data for this service.

3. Purpose and Basis of Processing

We use the data to prepare reports, watch for exceptions, support replenishment planning, review listings, check prices, prepare finance files, answer support requests, and keep the service secure.

We process information to perform the service requested by the customer, maintain security, respond to support requests, meet legal obligations, and pursue legitimate operational interests that do not override applicable rights. We do not sell seller data, rent seller data, or use seller data for unrelated advertising, profiling, or third-party marketing.

4. Authorization and Credentials

Seller authorization is completed through the official OAuth flow. Each seller reviews the requested application access and can revoke it from its account settings. Client secrets and tokens are handled server-side and are not placed in public pages, browser scripts, screenshots, support messages, or public repositories.

5. Data Sharing

We do not sell, rent, or trade seller data. Limited information may be processed by hosting, network, security, backup, support, or maintenance providers when needed to operate the service. Access is limited to the relevant service and subject to confidentiality and security requirements. We may also disclose information when required by law or to protect the service, customers, or others from fraud or security threats.

6. International Processing

Our company is registered in Hong Kong. The public website and application services currently use Alibaba Cloud infrastructure in Guangzhou, Mainland China. When information is processed across borders, we apply contractual, access-control, encryption, and security measures appropriate to the service and applicable requirements.

7. Retention and Deletion

We keep data only while it is needed for the agreed service, business records, legal obligations, or security review. When a connection is removed or data is no longer needed, we delete, anonymize, or restrict it according to the customer agreement and applicable law.

8. Security Measures

We use HTTPS/TLS, server-side credential handling, customer workspace separation, access controls, limited staff permissions, operational logging, backups, and incident-response procedures. Access to seller data is limited to personnel and systems that need it for the agreed work. More information is available on our Security page.

9. Customer Requests and Authorization Management

Sellers can revoke authorization in their account settings. Customers may contact us to request access, correction, deletion, export, or restriction of data we maintain for the service, subject to identity verification and legal obligations.

10. Public Website Data

Our public website does not intentionally use advertising trackers or request seller credentials. Standard web-server records may include IP address, request time, requested path, browser information, and security events needed to deliver and protect the website.

11. Policy Updates

We may update this policy when services, legal requirements, security practices, or API policies change. Updates will be posted on this page with a revised effective date.

12. Contact

Company
HONG KONG INNOVATION STARLIGHT LIMITED / 香港創科星途有限公司