Privacy Policy

1. Data Controller & Contact

ChinaBrandPath Tools (tools.chinabrandpath.com) is operated by Yinghang Wu (Independent Developer), based in Jinhua, Zhejiang, China, as the data controller for this Service. For privacy inquiries, data export requests, or account deletion requests, email partner@chinabrandpath.com.

2. Browser-Local Spreadsheet Processing (Zero Server Upload)

When you open the calculator, import Excel/CSV files, adjust landed cost formulas, or export QuickBooks/Tally `.xlsx` workbooks or PDF drafts, all calculations run locally inside your browser memory and localStorage. Your supplier unit costs, SKU tables, and profit margins are not uploaded to our servers during local spreadsheet operations.

3. Smart Document Parsing & Mobile QR Transfer (Transient Processing)

If you voluntarily use Smart Import, Smart Quote Audit, or Mobile QR Document Transfer:

• Smart Document Parsing transmits your selected invoice/quote image, PDF, or text temporarily to our API worker solely to extract structured SKU rows or surcharge line items. We do not retain or store original uploaded invoice images or PDFs after the response completes.
• Mobile QR Upload Relay temporarily buffers your transferred file in encrypted Cloudflare R2 storage for immediate pickup by your authenticated desktop session. Files are deleted automatically upon desktop pickup, and any uncollected session expires within 15 minutes and is purged by scheduled cleanup (within 24 hours maximum).

4. Account, Authentication & Billing Data We Collect

To manage login sessions, monthly smart-scan quotas, and paid entitlements, we collect and store only necessary operational records in Cloudflare D1:

• Account Email & Login Method: Work email address used for passwordless magic links or Google sign-in, plus session cookie tokens.
• Plan & Quota Metadata: Subscription tier, license activation status, expiration timestamp, monthly scan count, and optional country code / paid amount metadata from Creem & Waffo order webhooks.
• Payment Security: Card numbers, local wallet credentials, bank details, billing addresses, and tax IDs are collected directly and securely by Creem or Waffo under their respective Privacy Policies; ChinaBrandPath Tools never sees or stores raw card or wallet credentials.
• Voluntary Submissions: Public tool comments you submit for moderation and optional lead-export emails.

5. Infrastructure Subprocessors

We rely on trusted infrastructure providers to run the Service cleanly: Cloudflare (Workers, D1 database, ephemeral R2 relay, country routing headers), Creem (Merchant of Record payments, tax compliance, and license order webhooks), Waffo (global card & local wallet checkout processing and RSA-signed payment notifications), Google (optional OAuth sign-in and Gemini API strictly for on-demand document parsing), and Resend (transactional sign-in emails sent from tools@chinabrandpath.com).

6. Your Rights & Data Retention

You may request access to, correction of, or deletion of your account record and any public comments associated with your email at any time by emailing partner@chinabrandpath.com. We verify ownership via your account email and complete deletion requests promptly.