隐私政策

生效日期：2026-10-07 · 最近更新：2026-10-07

本政策适用于冰川 ERP（下称「本产品」或「我们」）的网站访客与注册用户。我们说明：收集什么、为何收集、如何存储与保护、与谁共享、保存多久、如何删除，以及你的权利。涉及亚马逊店铺数据的部分，同时遵循亚马逊 Data Protection Policy（DPP）与 Solution Provider Portal 协议。

1. 我们是谁（数据控制方）

深圳市冰川控股有限公司（占位，上线前以营业执照为准）。联系方式见本页末尾与「联系我们」页面。

2. 我们收集什么

类别内容来源
账户信息姓名/称呼、邮箱、手机号、公司名你注册/联系我们时主动提供
店铺授权数据OAuth 令牌（不含账号密码）、店铺 ID、站点亚马逊官方授权流程
店铺经营数据订单、库存、货件、财务/费用、广告与促销报表、搜索词报告SP-API / 广告 API 只读接口
使用日志登录时间、功能使用、IP、浏览器类型产品运行自动记录

我们默认不申请买家姓名、地址、邮箱等个人信息（PII）所需的受限角色；订单数据仅使用运营必需的非敏感字段。

3. 我们用来做什么（目的）

  • 提供订单、库存、货件、利润、广告等 ERP 功能（合同履行）；
  • 产品改进与故障排查（合法利益，使用去标识化/聚合信息）；
  • 安全审计、滥用防范（合法利益与法定义务）；
  • 经你同意的服务通知（可退订）。

4. 存储与保护

数据存储于我们租用的云服务器（当前位于中国大陆境内机房）；传输 TLS 1.2+、存储 AES-256 加密；访问控制、最小权限与事件响应详见「数据安全」页面。涉及跨境访问时（如亚马逊海外端点回传），仅传输接口返回的业务数据，不包含买家 PII。

5. 与谁共享

  • 不出售、不出租、不交换任何客户数据；
  • 次级处理方仅云基础设施服务商（托管与存储），不接触业务数据内容；
  • 依法强制披露时，按法律要求评估并尽可能提前告知。

6. 保存多久

  • 套餐期内按套餐约定保留（免费版 90 天 / 标准版 2 年）；
  • 撤销授权或停用后 30 天内删除该店铺全部已同步数据；备份最长再滚动保留 30 天；
  • 账户注销后，账户信息在 30 天内删除（财务/税务法定留存除外）。

7. 你的权利

你可以：访问、更正、导出、删除你的数据；撤销亚马逊授权（后台「管理应用」或产品内一键断开）；撤回营销同意；向我们投诉或向有管辖权的数据保护机构投诉。行使方式：发邮件至「联系我们」页所列邮箱，我们在 30 天内响应。

8. Cookie

官网仅使用必要的会话 Cookie 与语言偏好（localStorage），不使用第三方广告追踪 Cookie。

9. 未成年人

本产品面向企业用户，不面向 16 岁以下未成年人，也不主动收集其信息。

10. 政策变更

重大变更会在官网公告并（对已注册用户）邮件通知，继续使用时生效；历史版本可索取。

11. 联系我们

数据保护负责人邮箱：support@glacier-erp.example.com（占位，上线前替换为真实域名邮箱）。通信地址：广东省深圳市南山区（详细地址上线前补）。

Privacy Policy

Effective: 2026-10-07 · Last updated: 2026-10-07

This Policy applies to visitors and registered users of Glacier ERP ("we", "the Product"). It explains what we collect, why, how we store and protect it, who we share it with, how long we keep it, how we delete it, and your rights. For Amazon store data, we also comply with Amazon's Data Protection Policy (DPP) and the Solution Provider Portal Agreement.

1. Who we are (data controller)

Shenzhen Glacier Holdings Co., Ltd. (placeholder — final legal entity name will match our business registration at launch). Contact details appear at the end of this page and on our Contact page.

2. What we collect

CategoryContentSource
Account informationName, email, phone, company nameProvided by you at signup or when contacting us
Store authorization dataOAuth tokens (never passwords), seller ID, marketplaceAmazon's official authorization flow
Store business dataOrders, inventory, shipments, finance/fees, ads & promotion reports, search term reportsRead-only SP-API / Ads API endpoints
Usage logsLogin times, feature usage, IP, browser typeAutomatic product telemetry

We do not request restricted roles covering buyer PII (name, address, email) by default; order processing uses only non-sensitive fields required for operations.

3. Why we use it (purposes)

  • Delivering ERP features — orders, inventory, shipments, profit, ads (performance of contract);
  • Product improvement and troubleshooting (legitimate interest; de-identified/aggregated data);
  • Security auditing and abuse prevention (legitimate interest and legal obligations);
  • Service notices with your consent (opt-out anytime).

4. Storage & protection

Data is stored on cloud servers we lease (currently in mainland China). TLS 1.2+ in transit, AES-256 at rest. Access control, least privilege and incident response are described on our Security page. Cross-border transfers (e.g., responses from Amazon's overseas endpoints) carry only business data returned by the APIs — no buyer PII.

5. Who we share with

  • We never sell, rent, or exchange customer data;
  • Our only sub-processor is the cloud infrastructure provider (hosting/storage), with no access to business data content;
  • Where disclosure is legally compelled, we evaluate the request and notify you in advance where lawful.

6. Retention

  • During subscription: per plan (Free 90 days / Standard 2 years);
  • After authorization revocation or closure: all synced store data deleted within 30 days; backups roll off within another 30 days at most;
  • After account deletion: account information deleted within 30 days (except statutory financial/tax retention).

7. Your rights

You may access, correct, export, or delete your data; revoke Amazon authorization (in "Manage Apps" or with one click in our product); withdraw marketing consent; complain to us or to a competent data-protection authority. To exercise these, email the address on our Contact page — we respond within 30 days.

8. Cookies

This site uses only essential session cookies and a language preference (localStorage). No third-party advertising trackers.

9. Minors

The Product is for business users. We do not target or knowingly collect information from anyone under 16.

10. Changes

Material changes are announced on this site and emailed to registered users, effective upon continued use. Prior versions available on request.

11. Contact

Data protection contact: support@glacier-erp.example.com (placeholder — replaced with our real domain mailbox at launch). Postal address: Nanshan District, Shenzhen, Guangdong, China (full address TBD).