隐私 Privacy

AireelHub ("we", "us") provides AI video and creative services for cross-border ecommerce sellers. This policy explains how we collect, use, disclose and protect your personal information. By continuing to use the service, you agree to this policy.

(a) Account: email, name, phone (optional), bcrypt-hashed password. (b) Order: order number, plan, amount, payment provider reference (PayPal / Alipay txn id), product name, product URL, notes. (c) Uploads: files you upload to Cloudflare R2, used solely for order fulfillment. (d) Deliverables: generated assets shared via 7-day presigned URLs. (e) Communication: emails between us, AI assistant transcripts (for service quality). (f) Technical logs: IP address, user agent, request timestamps (for security and abuse prevention). We do NOT collect biometric, facial, or identity-document data.

We use the information only for: - Account creation, login, password reset - Order processing, reconciliation, refunds - Producing and delivering the video/image assets you purchased - Sending order status emails (you can opt out of marketing emails in /account/security) - Security, anti-abuse - Service improvement (de-identified aggregate analytics) We do NOT sell your personal information to third parties.

We use the following third-party processors, who handle data only on our instructions: - Cloudflare (US): CDN + R2 object storage + DNS - Resend (US): transactional email delivery - PayPal: international card payments - Alipay (CN): merchant QR reconciliation - Google Gemini API (US): AI assistant text generation; we pass only the last 20 chat messages, no order number or PII - VPS hosting providers in the US: Postgres + Redis All processors are contractually committed to GDPR and ISO 27001 baselines.

AireelHub servers are primarily in the United States. If you are in mainland China, EU, or elsewhere, your data will be transferred to the US and other third-party locations. We protect transfers with TLS 1.3 in-transit and at-rest encryption, and have Data Processing Agreements (DPAs) with all processors.

Regardless of location, you have the following rights: - Access: view your orders and account in /account - Rectification: change email/password in /account/security - Erasure: email [email protected] to request account deletion (order data will be anonymized but retained for tax/reconciliation duties) - Portability: request export of your data (CSV/JSON) - Withdrawal of consent: stop using the service; we will delete non-mandatorily-retained data within 30 days If unsatisfied, you may complain to your local data protection authority.

- Account: until deletion - Order + financial records: retained at least 5 years (China) / 7 years (US) per tax law - Uploads: auto-deleted 90 days after order completion (R2 lifecycle) - Deliverables: 90 days for download, archived for 1 year then deleted - Support logs: 6 months - Technical logs: 30 days

We use: - Essential: aireelhub_session (JWT login, 30 days) - Preference: aireelhub_consent (consent state, 1 year) No third-party tracking or advertising cookies.

We use Google Gemini for AI customer support. Gemini does not train its base model on your conversations (Google's enterprise API includes data isolation guarantees). Our video generation runs on local ComfyUI workflows; your product images and uploads are never sent to third-party training pipelines.

This service is for ecommerce sellers and is not directed at minors under 18. If we learn that we have collected information from a minor, we will delete it immediately.

Material changes will be announced at least 7 days in advance via in-app banner or email. Continued use constitutes acceptance.

Data Protection Officer: Sam Wang Email: [email protected] Working hours: 10am-10pm (GMT+8)