Privacy Policy

1. Information We Collect

When you use CloudPic AMZ, we collect the following categories of information:

• Account Information: Email address, display name, and authentication tokens provided through third-party OAuth providers (Google, GitHub, Microsoft).
• Usage Data: SKU identifiers from uploaded spreadsheets, image file names and metadata, and batch processing logs.
• Technical Data: Browser type, device information, IP address, and interaction logs for debugging and service improvement.
• Payment Information: Billing details processed through our payment provider (Dodo Payments). We do not store credit card numbers on our servers.

2. How We Use Your Information

• To provide and operate the CloudPic AMZ image workflow service.
• To process batch image uploads, SKU mapping, compression, and export operations.
• To manage your subscription and billing.
• To communicate service updates, security alerts, and support responses.
• To improve our service through anonymous usage analytics.

3. Data Storage and Security

Your data is stored on:

• Cloudflare R2 Storage: Uploaded images and processed files are stored in region-specific R2 buckets (US and EU regions available).
• Supabase: Account data, subscription information, and application state are stored in a managed PostgreSQL database.

All data in transit is encrypted via TLS/HTTPS. Data at rest is encrypted by our infrastructure providers.

4. Auto-Destruct Privacy Shield

Uploaded images and associated processing data are automatically deleted from our servers 21 days after upload. This feature is enabled by default to protect your seller account privacy and minimize data exposure.

5. Image Metadata Handling

CloudPic automatically strips EXIF metadata (including GPS coordinates, camera information, and timestamps) from uploaded images before generating export URLs. This prevents accidental leakage of sensitive information through your product listings.

6. Anti-Association Protection

When using custom domain features, image URLs are served through isolated domains that are not linked to your CloudPic account or other seller accounts. This design prevents cross-account association by marketplace platforms.

7. Data Sharing

We do not sell, trade, or rent your personal information or image data to third parties. We share data only with:

• Service Providers: Cloudflare (hosting and CDN), Supabase (database), and Dodo Payments (billing) — each under their own privacy policies.
• Legal Requirements: When required by law, court order, or government regulation.

8. Cookies and Local Storage

CloudPic uses minimal local storage for authentication tokens (JWT), theme preferences, and session state. We do not use tracking cookies or third-party advertising scripts.

9. Your Rights

You have the right to:

• Access and download your personal data.
• Request deletion of your account and associated data.
• Opt out of non-essential communications.
• Export your images and processing history before deletion.

To exercise these rights, contact us at cloudpic@126.com.

10. Data Retention

Uploaded images are retained for a maximum of 21 days (Auto-Destruct Privacy Shield). Account data is retained for the duration of your subscription and deleted within 30 days of account closure. Anonymized usage statistics may be retained indefinitely for service improvement.

11. International Users

CloudPic services are available globally. Your data may be processed and stored in the United States or European Union, depending on your selected storage region. By using our service, you consent to the transfer of your data to these jurisdictions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or requests, contact us at cloudpic@126.com.