Privacy policy

Effective date: 28 September 2026.

Operator and contact

Customer Service Bot is operated by 徐俊文 (Xu Junwen) in mainland China. For privacy requests, contact maliao4639@gmail.com.

Information we process

• Merchant email addresses, password hashes, store names, policies, FAQs, usage counts and session identifiers.
• Visitor questions, AI replies, conversation identifiers and email addresses voluntarily supplied for follow-up.
• Operational information needed for requests and security, including IP addresses and error information.
• Support correspondence and, when paid billing is available, transaction and subscription identifiers and payment status.

Purposes

We use information to authenticate users, generate answers, display conversations and inquiries to the relevant merchant, enforce usage limits, troubleshoot problems, protect the service and respond to requests. Where applicable, processing relies on performing our service contract, legitimate operational and security interests, consent or legal obligations.

AI and other providers

To generate answers, relevant merchant information, FAQs, recent conversation messages and the current question are sent to DeepSeek through its API. Avoid submitting unnecessary confidential or sensitive data.

Our server is hosted by Vultr. Support email is handled through Gmail. Paddle is used for sandbox billing tests and is the intended payment provider for future paid subscriptions. Card information is entered in Paddle's payment interface; our application does not store full card numbers. Providers process information under their own terms and policies. Processing may occur outside your country, including in China and in countries where our hosting and other providers operate.

Merchants can access conversations and follow-up details from their own widget. Their handling of information after access or export is governed by their own privacy practices. We do not sell chat records or use them for advertising.

Cookies and storage

The merchant dashboard uses a signed login session cookie. The widget uses browser storage for conversation state. Opening a Paddle checkout may involve payment and fraud-prevention cookies or storage. We have not added advertising trackers to the service.

Retention and deletion

Account information and conversations are retained to operate the account and provide history. Conversations currently have no fixed automatic deletion period. Contact us to request access, correction or deletion; we may verify your identity. We may retain information required for legal obligations, fraud prevention or disputes. Deleted records can remain in rotating backups until they expire. Payment providers retain their own records according to their policies.

Your choices and security

Depending on your location, you may have rights to access, correct, delete, restrict processing, object, request portability or withdraw consent. Visitors may contact the store or us with the store website and approximate conversation time. Do not send passwords or full payment details. You may complain to the relevant supervisory authority where applicable.

We use HTTPS, password hashing and access controls, but no system guarantees absolute security. This business support service is not designed for children to create accounts. Contact us if information from a child should be removed. Changes to this policy will be published with a revised effective date.