Privacy Policy

1. Who we are

Wenzhou Talos Packaging Co., Ltd. is a manufacturer and seller of packaging products, registered in Wenzhou, Zhejiang Province, People's Republic of China. We sell our products directly to customers on e-commerce marketplaces. We develop and operate Duoshou ERP, an ERP application that connects to those marketplaces through their official APIs. We use it for our own stores, and we also provide it as a hosted service to other cross-border sellers; each such seller authorises our application for their own seller and advertiser accounts.

2. What data we collect, and where it comes from

We do not collect data directly from consumers through this website. The data we process is obtained from e-commerce platforms through their official APIs, for seller accounts that have authorised our application. This includes:

• Order data — order identifiers, order items, quantities, order status, shipment status and tracking references.
• Product and listing data — product identifiers, listing attributes, images, variation relationships and enhanced content, and available and inbound inventory quantities.
• Pricing data — the seller's own item prices, and competitive pricing information the platform makes available for the seller's listings.
• Fulfilment data — inbound shipment plans, shipment status and received quantities.
• Financial data — settlement reports, fees, refunds, reimbursements and related financial events.
• Shipping service data — for merchant-fulfilled orders, shipping service offers and rates, the service selected, and package tracking information through to delivery.
• Account and performance data — seller account health and performance metrics the platform reports for the authorising account.
• Market and brand analytics data — where the platform makes it available and the seller is enrolled in the relevant brand programme, aggregated search term performance, market basket and repeat purchase data relating to the seller's own brand. This data is aggregated by the platform and does not identify individual buyers.
• Advertising performance data — for advertiser accounts that have authorised our application through TikTok for Business, or have granted our application access through Walmart Connect, the advertiser account identifier and name, campaign, ad group, advertised item, keyword and ad settings (name, status, objective, budget, bid, schedule), and aggregated daily and intraday performance metrics such as spend, impressions, clicks, conversions, gross merchandise value and return on ad spend. These metrics are aggregated by the platform and do not identify individual viewers or buyers. We do not access audience lists, pixel event data, lead form submissions, ad comments or creator data.
• Account and authorisation data — the identifier of the authorising seller or advertiser account and the access tokens issued to our application.

Consumer personal information is handled marketplace by marketplace, according to what each platform's fulfilment model requires and what our application is authorised for:

• Temu (semi-managed) — under the semi-managed model the seller arranges delivery, so the platform provides, for each order, the recipient's name, the shipping address, and a platform-issued relay telephone number and relay email address. For most orders the platform delivers these contact values in masked form. We use them only to fulfil and ship that order, and we do not use them for marketing, profiling or automated decision-making.
• Amazon and the other marketplaces we operate on — we do not collect buyer names, shipping addresses, telephone numbers or email addresses. We have not requested any platform permission or restricted role that grants access to restricted buyer data.

We do not obtain platform data from any external source other than the platform's own APIs. We do not use data brokers, scraped datasets or third-party data providers.

3. Why we process it

We process this data solely to provide the ERP service to the seller or advertiser whose account authorised our application — whether that is our own selling business or a client seller. Specific purposes are:

• Consolidating orders and inventory so the seller's operations team can process and monitor fulfilment.
• Planning replenishment and reconciling shipments received against shipments sent.
• Calculating revenue, expenses and product-level profitability by combining platform financial data with the seller's own product cost data.
• Producing reports for the seller on sales trends, order volume, product performance and inventory turnover to support purchasing and operational decisions.
• Monitoring for operational exceptions such as delayed shipments, low stock or price deviations.
• Creating and maintaining the seller's listings, and applying price changes according to target prices and margin rules the seller has configured.
• Obtaining shipping service rates, purchasing the selected service for merchant-fulfilled orders, and tracking packages through to delivery.
• Presenting aggregated market and search performance data alongside the seller's own sales data to support product selection and listing optimisation.
• Combining the advertiser's aggregated ad performance with that seller's own orders, product cost and platform fees, to show advertising cost and return on ad spend per product, and allowing authorised users to manually create and edit campaigns, ad groups, advertised items, keywords and bids, adjust budgets, or pause and resume campaigns and ad groups. Every such change is initiated by a signed-in user and recorded in an audit log.

We do not use this data to target advertising at, profile or make automated decisions about individuals, and we do not use one advertiser's data for the benefit of any other advertiser.

4. Who we share it with

We do not sell platform data, and we do not share it with third parties for their own purposes.

Each seller using our application is a separate tenant. A seller's data is logically isolated from every other tenant and is accessible only to that seller's own users, with permissions the seller controls, and to our authorised personnel where needed to operate and support the service, on a least-privilege basis determined by job function. One seller's data is never shown to, or used for the benefit of, another seller.

Where an infrastructure or logistics provider necessarily processes data on our behalf in order to deliver a service to us, that provider is bound by contract to equivalent confidentiality and security obligations and may not use the data for any other purpose. We disclose such arrangements to the relevant platform where the platform requires it.

5. Where data is stored

Where data is stored depends on the marketplace it comes from, so that each platform's data residency requirements are met.

• TikTok Shop US — data from TikTok Shop for the United States market is stored and processed in the United States, on infrastructure separate from our other systems. It is not stored or processed in China. Our systems located in China do not hold this data; where an internal report needs to reflect it, the report is produced from aggregated figures that contain no order, buyer or transaction level records.
• Other marketplaces and advertising data — data from the other marketplaces, including advertising performance data obtained through TikTok for Business and Walmart Connect, is stored and processed in our primary production environment in Singapore. Daily backups and a pre-release staging copy used for testing are held on our systems in China.

Any change to the physical location of stored data is approved internally and disclosed to affected platform partners before it takes effect.

6. How long we keep it, and how it is deleted

• We retain platform data only for as long as it is needed for the purposes described in Section 3.
• An authorising seller may withdraw authorisation at any time. Our access ceases immediately, and that account's data is deleted within 30 days. This applies equally to an advertiser account revoking access through TikTok for Business or Walmart Connect.
• At the end of a contractual relationship with a platform, all collected customer data in our possession is deleted within 30 days, including from backups on their next rotation.
• We assist platforms and sellers in responding to requests to delete, update or provide data, within the timeframe the platform specifies.

7. How we protect it

• Encryption in transit — all traffic between our application, our users and platform APIs is encrypted using TLS. Only TLS 1.2 and TLS 1.3 are enabled on our public endpoints; TLS 1.1 and earlier are disabled.
• Encryption at rest — API credentials and tokens are encrypted using AES-256 before storage. The buyer contact details received with semi-managed marketplace orders — recipient name, telephone number, email address and the street address lines — are also encrypted at the column level using AES-256-GCM before storage. Storage volumes are encrypted at the disk level. Encryption keys are held separately from the data they protect and are rotated on a defined schedule.
• Access control — role-based access with least privilege; administrative access is protected by multi-factor authentication; access is revoked within 24 hours of a change of role or departure.
• Isolation — each authorising seller account is held in a logically isolated tenant; data from one account is not readable from another.
• Network — production services are published to the public internet only through a reverse proxy; the origin servers are not directly exposed. Administrative interfaces and databases are not published to the public internet and are reachable only over a private, authenticated zero-trust network.
• Governance — these controls are documented in our Information Security Policy, which is reviewed at least every six months.

8. Security incidents

We maintain a written incident response plan with defined roles and reporting channels, reviewed at least every six months. If we detect a security incident involving data belonging to a platform or a seller, we notify the affected platform and seller within 24 hours of detection, through the channel that platform specifies, and make any regulatory notification required by law.

As at the last update of this policy, we have not experienced any security breach leading to the accidental or unlawful exposure of personal data, and we have received no complaint or notice from any data protection or regulatory authority.

9. Your rights

If you believe we hold data relating to you, or you are a seller or platform seeking the deletion, correction or provision of data we hold, contact us at sggtong@gmail.com. We will acknowledge your request and respond within 30 days, or sooner where a platform or applicable law requires it.

Depending on where you are located, you may also have the right to lodge a complaint with your local data protection authority.

10. Changes to this policy

We review this policy at least every six months and update it whenever our practices, systems or obligations change materially. The effective date and last-updated date at the top of this page always reflect the current version. Where a change materially affects an authorising seller or platform partner, we notify them directly.

11. Contact