Privacy and data use
Version 2026-10-30. This notice explains the information the product stores and the controls available to you.
Information stored
The service stores account identity, language and destination preferences, consent and verification records; seller business information and licence documents; product originals, translations and provenance; sourcing conversations, saved products, messages and files; RFQs, quotes, orders, payment confirmations, disputes, fees and audit events. Passwords are hashed and session tokens are stored as hashes. Seller payment details and outgoing email bodies are encrypted.
How information is used
Information supports discovery, seller verification, bilingual communication, transaction records, security and dispute resolution. Destination and quantity determine eligibility and estimates. The same approved catalogue supplies the website and assistant. Local embedding inference processes search/listing text on the server. When configured, the translation and assistant provider receives bounded message/product context for the requested task. Payment credentials are not included in prompts. Email and exchange-rate providers are used only for their configured service purposes.
Who can access it
Published product media and approved listing text are public. Private licence documents are limited to their owner and authorized verification staff. Conversation and order files are limited to their participants; staff access requires an applicable report, review or dispute and is logged. Confirmed-order payment details are revealed only to its buyer. Original messages and translations are retained together, with original-display controls for readers.
Your controls
You can change UI/chat language, destination and message preferences; inspect originals; flag translations; block or report users; export account data; and request deletion. Exports exclude passwords, login/recovery tokens, other users’ secrets and encrypted payment details. Deletion revokes sessions, removes unnecessary personal information and schedules private-file cleanup. Open transactions and shared evidence may need to be retained under an anonymized account to preserve the parties’ record.
Retention and security
Verification and recovery links expire and can be used once. Expired sessions and transient rate-limit records are cleaned by background maintenance. Business records and audit events remain while needed for the recorded transaction, disputes and service accountability. Files marked for deletion are purged by a durable job. Access controls apply on the server; no business records depend on browser local storage. Report suspected account or payment-detail misuse through the reporting workflow.