YOUJIHUI ERP / Privacy Policy
Privacy Policy
Status & effective date
Effective and last updated: 17 October 2026. This policy describes current processing practices. Approved unified retention, backup cleanup and privacy request procedures have not yet been established, and human legal review remains outstanding. These matters remain subject to improvement; this policy is not a compliance certification.
Operator & contact
Operated by: Shenzhen Hengxin Trading Co., Ltd.. Registered Chinese legal name: 深圳市珩芯商贸有限责任公司. The English name is a translation, not a separately registered English legal name. Unified Social Credit Code: 91440300MAEWWRED5A. Registered in mainland China. Registered address and business location (as registered): 深圳市龙岗区坂田街道象角塘社区中浩工业城C5栋厂房220. Business and privacy email: kaifazheapp@hotmail.com. Telephone: +86 13168771381.
Data categories & sources
The introduction website has no account registration, contact submission form, advertising tracker or analytics integration. Hosting and reverse proxy access logs may record IP address, request URL, time, browser user agent and referrer. Within the ERP, authorized team members enter or upload account identifiers, role and access records, product costs, prices, store workspace records, purchase and stock records, campaign files, creator identifiers and contact details, recipient names, telephone numbers, addresses, sample orders, images and audit records. These are manually entered or imported business records; this notice does not imply an active TikTok API data feed.
Purposes
ERP records support internal costing, pricing, purchasing and replenishment, campaign preparation, creator and sample coordination, authorized team access, troubleshooting and operational accountability. Website request logs support delivery and diagnosis. Information should be limited to what these tasks require.
Accounts & access
The ERP uses authenticated sessions, main/subaccount roles and configured resource access checks. The browser stores the ERP session and language preference in local storage. The static website language switch uses ordinary links without storing a language cookie. Controls remain under internal testing; no guarantee of complete security or blanket isolation across every legacy module is made.
Storage & protection
Current ERP records are held in the existing cloud-hosted SQLite database; uploaded files, images and the operational backups checked in this review are on the same existing server. Server metadata confirms the Alibaba Cloud Malaysia (Kuala Lumpur) region. The operator is registered in mainland China, so overseas storage and cross-border processing arrangements require human review. ERP and website transport uses HTTPS. Supported ERP operations use authentication and permission checks and remain under internal testing. This website adds no database and does not read ERP records. No at-rest encryption, security certification or completed compliance audit is claimed. Hosting contractual roles, other backup destinations and access arrangements await operator review.
Actual retention & deletion
There is currently no approved unified retention period or automatic backup cleanup policy. Reviewed product-cost, purchase and creator business records use soft deletion; audit and historical records can remain. Interface deletion does not permanently erase all copies. Some obsolete campaign template file contents may be cleared only after explicit replacement confirmation and when no export reference remains; related metadata and audit history are retained. Account sessions are checked for expiry and revocation, which does not mean their history is automatically erased on a fixed schedule. Existing backups remain and are not automatically purged by deleting a business record. This website update performed no ERP deletion or cleanup. Retention, backup cleanup and request procedures remain to be completed and approved by the operator; unimplemented automatic erasure or fixed deadlines are not promised.
Third-party services & authorization
The existing server uses Alibaba Cloud. The website has a separate Let’s Encrypt HTTPS certificate; certificate domain details can appear in public certificate transparency records. The website adds no analytics, external fonts or social embeds. The contact mailbox uses Microsoft Hotmail. A mailto link opens your chosen email application, and email you choose to send is handled by the relevant email services. ERP access uses a separate application link. Future platform access would require necessary approval and store authorization, followed by an updated description of actual data, purposes, recipients and revocation handling. No current TikTok API permissions or official relationship is claimed.
Privacy requests
Send privacy requests to kaifazheapp@hotmail.com, or contact +86 13168771381. Explain your relationship to the system, the records concerned and whether you seek access, correction, deletion or another action. Do not include identity documents, passwords or complete order records in your initial message. Necessary and proportionate identity and authority checks may be needed. An approved handling procedure and response timetable have not yet been established and require operator review. Unimplemented deletion outcomes are not promised; actual business, audit and backup retention limits must be explained when requests are handled.
Human legal & cross-border review
A mainland China registered operator uses a server in Malaysia. Human legal review remains to be obtained of applicable mainland China and Malaysian personal-data requirements, overseas storage and cross-border handling, third-party arrangements, individual rights, notices and languages, retention and cleanup, and incident handling. This includes reviewing whether a Bahasa Malaysia notice is needed where applicable. This draft has not received human legal review and is not proof of legal compliance or platform review eligibility.