隐私政策Privacy policy

This policy applies to personal-information processing by Quanzhou Shenlan Engine Network Technology Co., Ltd. (“we”) through the Shenlan Engine website, the SaaS operating system, admin console, clients, and the open platform. In-product privacy links point here.

It covers:

• visitors to this website;
• people who contact sales by email or WeChat;
• administrators and authorized users of a Shenlan Engine account;
• individuals whose personal information a customer places into the system, such as order recipients.

Rules published by marketplaces, carriers, WeChat, and other third parties for their own services are not this policy. What a customer does outside Shenlan Engine is the customer’s responsibility.

If this policy conflicts with a contract you have with us, the contract governs that point. Where the contract is silent, this policy applies.

The personal-information handler is Quanzhou Shenlan Engine Network Technology Co., Ltd. Address: Room 707, Building 2, Xingyuehui Xingyuecheng, No. 216 Jinqi Road, Fengze District, Quanzhou, Fujian. Email: 80505883@qq.com.

Where we decide the purpose

For website visitors, sales contacts, and account-user information we process to provide accounts and security, we decide why and how the information is processed.

Where we follow the customer’s instruction

When a customer uses multi-shop operations, listing, fulfillment, on-demand production, warehouse coordination, or the open platform, the customer decides the purpose of recipient and similar information. We supply the system according to the customer’s configuration, actions, and contract. The scope is the functionality the customer actually uses.

Processing includes collection, storage, use, processing, transfer, provision, and deletion. This website does not ask for national ID numbers, biometrics, financial-account numbers, or movement tracks. Do not send sensitive personal information that is unrelated to the inquiry.

If a file or order field a customer uploads contains sensitive personal information, we process it only as needed for the instructed purpose. The customer must have a lawful basis.

We process personal information under the Personal Information Protection Law of the People’s Republic of China, mainly where:

• it is necessary to conclude or perform a contract with you, including opening a tenant, authenticating users, delivering functionality, coordinating billing, and providing support;
• it is necessary to meet a legal duty, including cooperating with regulators, keeping records the law requires, and reporting security incidents;
• we have asked for your consent for a separate purpose. You may withdraw consent. Withdrawal does not affect processing already carried out.

We do not send marketing email from this website. If we do so later, we will ask for consent separately.

We do not use automated decision-making as the sole basis for a decision that significantly affects your rights and interests.

When a customer connects shops, catalogs, orders, production files, or API calls to Shenlan Engine, personal information in that data is processed on the customer’s instruction. We do not sell it for advertising, and we do not use it to train a general-purpose model offered to others.

The customer must have a lawful basis and must have informed the individuals concerned. Recipients and similar individuals should first contact the seller — our customer. After we verify a request, we will help the customer respond.

Isolation, subprocessors, and deletion of business data are described in roles and ownership in the Data protection policy.

This website does not set third-party advertising or analytics cookies.

Your browser stores two preferences locally. They are not uploaded to our servers:

• shenlan-lang, for Chinese or English;
• shenlan-theme, for light or dark appearance.

Clearing site data for this website deletes both. The language and theme controls in the header overwrite them at any time.

To protect the service and troubleshoot, the website, the product, and security systems may keep access logs: IP address, time, browser type, request path, referrer, and error details. Logs are not used to build an advertising profile.

We do not sell personal information. We provide it only when:

• you instruct us to, or it is necessary to perform a contract with you. A marketplace, carrier, or warehouse partner you connect receives what that operation needs. Channels named on this website include Mercado Libre, SHEIN, TikTok Shop, Temu, Shopee, Ozon, and Shopify. Whether data moves, and which fields move, depends on the shops you connect and the actions you take.
• a hosting, email, or security provider needs it to deliver that service. We require them to process it only on our instruction and to protect it. You can ask for the current categories of providers. See subprocessors in the Data protection policy.
• a law, legal claim, or regulator requires it.
• we merge, split, or transfer assets. The recipient must remain bound by this policy. If the purpose or method changes, we will tell you.

WeChat is the sales channel. Messages you send after scanning the code are also subject to WeChat’s own rules. We process the contact details you choose to share so we can answer you.

We do not publicly disclose personal information unless the law requires it or we have separate consent.

Our operating company is in the People’s Republic of China. To carry out cross-border shop operations, listing, fulfillment, and on-demand production that you instruct, related data — which may include personal information — is sent to the overseas platforms and their providers that you select. That transfer is triggered by your authorization and your actions.

If we ourselves need to provide personal information outside China, we will complete the legally required assessment, standard contract, or certification, and we will describe the recipient, purpose, and method in this policy or in a separate notice.

The operational counterpart is cross-border transfer in the Data protection policy.

We keep personal information only as long as the purpose requires. A contract or a statute prevails where it says otherwise.

• Sales correspondence: no longer than 3 years after the last meaningful exchange, unless the law requires longer;
• Account and contract records: for the service term, and no longer than 3 years after it ends, for unresolved disputes and legal retention;
• Business data we process on instruction: during the service term, as the contract and retention and deletion in the Data protection policy describe. After you ask us to delete it, or after the contract ends and handover is complete, we delete or anonymize it within a reasonable period, unless the law requires us to keep it;
• Security logs: ordinarily no longer than 180 days. An open security investigation may extend that until the investigation ends.

After that, we delete or anonymize the information. Backups age out on the rolling backup cycle.

We use measures proportionate to the processing: encryption in transit, separation of business data by tenant, least privilege, and logs of sensitive administrative actions. The detail is in technical and organizational measures in the Data protection policy.

No system can promise absolute security. If an incident may harm your personal information, we notify affected customers as that policy describes, and we report to the competent authority when the law requires it.

Where the law gives you the right, you may:

1. access and copy personal information we process about you;
2. ask us to correct or complete information that is inaccurate or incomplete;
3. ask for deletion in the cases the law lists;
4. withdraw consent you previously gave;
5. ask us to explain this policy;
6. where the conditions set by the national cyberspace authority are met, ask to port personal information to a handler you name.

After a person dies, close relatives may, for their own lawful and legitimate interests, exercise access, copy, correction, and deletion rights over that person’s relevant personal information as the law provides.

Email 80505883@qq.com with the subject “Personal information request”, and state what you are asking and how to reach you. We may verify your identity before acting. We reply within 15 business days. If a request is complex, clearly excessive, or depends on someone else, we will tell you why more time is needed.

If you are an order recipient and we only process your information for a seller, contact that seller first. We will assist with requests the seller passes to us, within our role.

If you believe the processing harms your rights, you may complain to the Cyberspace Administration of China or the provincial cyberspace authority where you are, or bring a case in a competent people’s court.

Shenlan Engine is a service for businesses. It is not directed at children under 14, and we do not knowingly collect their personal information. If we learn that we have collected a child’s personal information without a guardian’s consent, we will delete it. A guardian can reach us at the email at the end of this policy.

We may update this policy when the product, the law, or our processing changes. The new text is published on this page, and the effective date and version at the top are updated.

If a change materially reduces your rights, we will say so by a notice on this website, in the product, or by email, as appropriate. Where the law requires fresh consent, we will ask for it. Continuing to use the service means you have had a chance to read the updated policy.

Write to us by email about personal-information matters so there is a record. WeChat is for sales conversations, not for formal rights requests.

• Operator: Quanzhou Shenlan Engine Network Technology Co., Ltd.
• Address: Room 707, Building 2, Xingyuehui Xingyuecheng, No. 216 Jinqi Road, Fengze District, Quanzhou, Fujian
• Email: 80505883@qq.com
• Phone: 15375837555
• Companion document: Data protection policy