Privacy Policy

1. Controller

Foshan Majiada Trading Co., Ltd. (佛山市马佳达贸易有限公司), Foshan, Guangdong, China. Email: support@kixflow.com

2. What we collect

• Account data: name, email address, password (stored only as a one-way hash), language, and the company details you add (company name, country, WhatsApp or phone number).
• Photos and requests: product photos, descriptions, quantities, your answers to questions, your messages with our team, and the quotes we prepare for you.
• Payment records: plan, amounts, dates, payment method and reference, invoice numbers. We do not store card numbers.
• Usage and security logs: sign-in times, IP address, a browser identifier (cookie), and technical error reports (without your name or email).
• The emails we send you and whether sending succeeded.

3. Why we use it, and the legal basis

• Providing the service (account, analysing photos, contacting factories, preparing quotes, messages): performance of our contract with you.
• Payments, invoices and accounting: legal obligation.
• Security, preventing fraud and abuse (for example one free trial per person, sign-in limits), fixing errors and improving the service: our legitimate interests.
• Service emails (verification, request updates, receipts): performance of our contract.
• Marketing emails: our legitimate interests, or your consent where the law requires it. You can unsubscribe at any time with the link in each email.
• Optional analytics cookies: only with your consent.

4. Who receives your data

• Our email delivery provider (to send our emails).
• Our AI service provider (to analyse product photos and descriptions and to translate messages).
• Our hosting and database provider.
• Payment providers and banks (when you pay).
• Factories and suppliers in China receive the product details, photos and quantities needed for a quote. We do not give them your name or contact details unless you ask us to (for example, for an order).
• Search and sourcing services in China receive product descriptions, not your personal details.
• Authorities, where the law requires it.
• We do not sell your personal data.

5. International transfers

Kixflow operates from China and serves customers in other countries, so your data is processed in China and in the countries where our service providers operate (including the United States for our AI provider). Where the GDPR or Gulf laws require it, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, and we follow the cross-border rules of China's Personal Information Protection Law where it applies.

6. How long we keep it

• Account data, requests and photos: while your account is open. After you ask for deletion, they are deleted or anonymized within 14 days (the period in which you can still cancel).
• Draft requests you never send: deleted with their photos 30 days after they were created.
• Invoices and payment records: for as long as tax and accounting law requires; after your account is deleted they are kept without your name and contact details.
• Security logs and email records: while your account is open; deleted or anonymized with the account.
• Technical error reports: up to 90 days.
• Backups: up to 14 days, then overwritten.

7. Your rights

• You have the right to access your data, to receive a copy of it ("Download my data" on your account page), to correct it (on your account page), to delete it ("Delete my account"), to restrict or object to its use (including marketing), to withdraw your consent at any time, and to complain to the data protection authority in your country.
• We answer requests within 30 days and may need to confirm your identity first.

8. Security

Passwords are stored as one-way hashes, connections use HTTPS, access to data is limited to the staff who need it, and staff actions on accounts are logged.

9. Cookies

• We use only essential cookies: __Host-kx_customer and __Host-kx_session (sign-in session), kx_clocale and kx_locale (language), kx_theme (display), kx_device (a browser identifier for security and one free trial per device) and kx_consent (your choice in the cookie banner).
• We do not use analytics or advertising cookies at present. If we add analytics, it will run only after you accept it in the cookie banner. You can change your choice with "Cookie settings" at the bottom of the page.

10. Children

The service is not meant for anyone under 18, and we do not knowingly collect their data.

11. Changes to this policy

The date at the top shows the current version. If a change is material, we will ask you to accept the new version.

12. Privacy requests

Write to support@kixflow.com with the subject "Privacy request".