Who we are and what this policy covers
FlowOrder Browser is operated by 上海兆林科技有限公司 (Shanghai Zhaolin Technology Co., Ltd.), based in mainland China. In this policy, “FlowOrder,” “we,” “us,” and “our” refer to that company. Our website is floworderbrowser.com. For privacy questions, email haozhifang@weililiang1.com or call +86 13552692019.
This policy explains information handling on our public website, in product inquiries and support, and, where separately made available, in a FlowOrder Browser pilot or workspace. The public website is an informational site: it has no account registration, payment form, store connection form, or seller-data upload. A visit to this site does not connect a marketplace account or upload your browser profile.
For website operations and our own business correspondence, we determine why and how information is used. Where an organization uses a workspace to manage its employees or store data, that organization also determines access and use within its team. Applicable service terms and any data-processing agreement describe our responsibilities when processing data on its behalf. A feature described below is available only if it has actually been enabled for your service; this policy does not announce a product launch or platform approval.
Information you choose to provide
When you email, call, request a demonstration or quote, or ask for support, we receive the information you provide. This may include your name, business email address, phone number, company, role, countries of operation, team size, number of store environments, service requirements, and the contents and attachments of your correspondence.
If you participate in a separately arranged pilot, we may also process the account and team details needed to provide it, such as your user identifier, organization, role, assigned stores, environment settings, and service or support history. Provide only information relevant to your request, and obtain appropriate authority before sharing another person’s information.
Please do not email marketplace passwords, verification codes, API secrets, cloud credentials, full payment-card details, identity documents, or buyer personal information. If support needs diagnostic material, remove unrelated personal information and credentials first. We do not need those secrets to answer a product inquiry.
Technical information collected when you visit
Our origin server and the providers delivering and protecting this website process connection information. Depending on the request and provider, this can include your IP address, requested URL, request time, browser or user-agent information, referring page when supplied, response status, and security or error information. An IP address may also indicate an approximate country or region; this site does not request precise device location.
This information is used to deliver pages, maintain availability, diagnose failures, and investigate malicious traffic. We do not use it to build advertising audiences. Our public pages do not request access to your camera, microphone, contacts, local files, or marketplace accounts. Product illustrations use sample workspace data rather than customer records.
Cookies, browser storage, and tracking choices
The public website does not set application cookies, save language preferences in browser storage, embed advertising pixels, or load audience analytics scripts, external fonts, or social-media widgets. Language selection is part of the page URL. Your browser may keep ordinary cached copies of public page resources.
Cloudflare, which provides delivery and security, may use security cookies or related technical signals when a protection or challenge is needed. Those mechanisms support site security and are not FlowOrder advertising trackers. Their use can depend on the security checks applied to a particular visit.
You can manage cookies and cached resources in your browser. Blocking security cookies can affect access during a security challenge. We do not sell or share personal information for cross-context behavioral advertising, including when a browser sends Global Privacy Control or Do Not Track signals. If optional analytics or other nonessential tracking is introduced, we will update this notice and provide choices required for that use before activating it.
Browser environments and team workspaces
If your organization uses a FlowOrder Browser pilot or client, store environments may contain browser cookies, session identifiers, website storage, store and platform identifiers, environment configuration, and connection status. A browser profile on your device is separate from the public marketing website. Marketplace pages you open can process information under their own privacy notices.
Where shared-session or recovery functionality is enabled, selected session data may be transferred to the service so authorized team members or devices can restore a store session. This data can grant access to a marketplace account and should be treated as sensitive. It is handled for the assigned store and team, rather than made public or shared with unrelated customers.
Workspace administrators determine team membership and store assignments and may view relevant operational or audit records. Service records can include user and store identifiers, actions and timestamps, connection results, traffic usage, errors, and support activity. Ask your organization about its employee-monitoring and access rules. Removing a member’s access does not automatically erase legitimate organization records or copies already downloaded to a device.
Marketplace connections and Amazon seller information
Current Amazon status: the Amazon Selling Partner API integration is under development and is not open to public authorization. Availability depends on Amazon approval and integration testing. This public website does not collect Amazon passwords, OAuth authorization codes, access or refresh tokens, or seller order data.
When a supported marketplace connection is separately made available, access must be authorized for the relevant seller and the permissions actually approved by that platform. The planned Amazon connection uses seller-initiated Amazon OAuth. Opening a store in a browser is not an API authorization. Advertising access, where offered, requires its own applicable authorization.
The intended initial Amazon scope covers seller and marketplace identifiers and the product, SKU, inventory, order, sales, fee, settlement, and financial information needed for the authorizing seller’s operating tools and reports. It excludes buyer names, delivery addresses, and telephone numbers. We do not request restricted buyer information for that initial scope or describe authorized seller data as access to competitors’ private sales.
Before public seller connections are enabled, we will publish the actual applicable permissions, service providers, storage locations, retention and deletion rules, and access safeguards. Seller information will be handled for the authorized service and applicable platform requirements, rather than sold, used for unrelated advertising, or exposed to another seller.
Optional AI, translation, and image features
The public website does not send your visit or inquiry through an AI assistant. If your separately arranged product service includes AI writing, customer-support assistance, page translation, or image generation, the relevant feature may send submitted text, selected page content, product details, images, instructions, and necessary request context to the provider processing that task.
Review the feature’s data notice and the applicable provider terms before using it. Provider-specific processing locations, retention, and any model-improvement use depend on the actual provider and service arrangement; this website does not promise zero retention or a particular provider’s training settings. Do not submit passwords, session tokens, payment information, or unnecessary buyer or employee information. AI output may be inaccurate and should be reviewed before use or sending to another person.
Why we use information and the applicable legal grounds
We use relevant information to deliver and secure the website; answer inquiries; arrange demonstrations, pilot access, and written quotes; provide requested support; administer an agreed workspace and its access rules; deliver features you request; keep necessary service and transaction records; prevent abuse; and meet applicable legal obligations.
Where a law such as the EU or UK GDPR requires a legal basis, the basis depends on the activity: taking steps at your request before an agreement or performing an agreement; our legitimate interests in maintaining a secure website and responding to business correspondence, subject to your rights; compliance with a legal obligation; or consent where it is required for a particular optional use. We do not treat merely visiting this page as consent to unrelated processing.
Providing inquiry details is voluntary, although we may be unable to respond or prepare a quote without sufficient contact information. Information needed for a workspace or authorized connection is required only for that requested service. We do not use public-website information for solely automated decisions producing legal or similarly significant effects about you.
When information is shared
Information is made available only as relevant to its purpose. Recipients can include authorized personnel handling your request; your organization’s authorized administrators and team members for workspace data; and providers supporting hosting, delivery, security, email, and any separately enabled product feature.
This website’s origin is hosted by Amazon Web Services (AWS), and its delivery and security are provided by Cloudflare. Our business email provider processes messages sent to our contact address. A marketplace or an optional AI provider receives information when the corresponding authorized service requires it. These recipients have different roles; their own privacy notices may apply to processing they determine independently.
We may disclose relevant records when required by applicable law or a valid legal process, or as necessary to investigate abuse, protect rights, or respond to a security incident. If a corporate transaction requires a transfer of information, it must remain subject to applicable confidentiality and privacy obligations, with notice where required. We do not sell personal information, rent inquiry lists, or share data for behavioral advertising.
Where information is processed
The public website’s origin server is in the United States. Cloudflare operates a distributed network and may process requests in other countries. Our team in mainland China handles inquiries and support, and email or other providers may process information where their relevant services operate. A particular store’s network exit country does not by itself identify every location in which service data is processed.
Cross-border transfers are subject to the rules applicable to the particular information and service. Where transfer safeguards or other steps are legally required, they must be in place for that transfer; access to this website is not a waiver of your rights. You can contact us to ask about the locations and safeguards relevant to your information. We will identify the actual arrangements for a seller connection before making it publicly available.
How long information is kept
Retention depends on the purpose and type of information. We do not apply one indefinite retention period to every record.
- Origin website logs: logs are rotated daily, with approximately 14 days of rotated history under the current server configuration. Specific records may need to be preserved longer to investigate an incident or meet a legal obligation.
- Inquiries and support: correspondence is kept while handling the request and relevant follow-up. We review it for deletion when it is no longer needed, considering any active service relationship, dispute, or required business record. There is currently no single fixed period for every inquiry.
- Workspace and seller records: an applicable pilot or service arrangement must identify its retention rules. Stopping synchronization or revoking access stops future access; it does not necessarily delete previously obtained reports, audit records, local profiles, or exports. The public website currently holds no connected-seller dataset.
- Provider and backup records: delivery, security, email, and other providers may retain their own operational records under their applicable terms. Copies in backups may remain until the relevant backup cycle expires, with restricted use.
When a record is no longer needed for its disclosed purpose or a valid retention requirement, it should be deleted or irreversibly de-identified. Where a request cannot be fully completed because a specific record must be retained, we will explain the reason and relevant limits.
Stopping access and requesting deletion
You can stop sending inquiries, end an optional feature, ask your organization to remove workspace access, or request deletion of information we control. For a marketplace connection, use the platform’s own authorized-app controls to revoke the application’s authorization. A separate FlowOrder “stop access” action, where available, ends access within our service; it is not a substitute for revoking the app on the marketplace.
To request deletion, email haozhifang@weililiang1.com with “Privacy request — deletion” in the subject. Identify the contact address or organization concerned, the relevant service or store identifier if necessary, and what you want removed. Do not send passwords, tokens, or a full browser-profile archive. We may need to verify your identity and, for business data, your authority to act for the organization.
We will clarify the records covered, applicable exceptions, and completion status. Locally stored profiles, downloads, exports, and copies held independently by your organization or a marketplace require action by their respective holders. Revocation, account closure, and deletion are separate actions, and previously shared copies cannot always be recalled.
How we protect information
This website uses HTTPS, restricted server-administration access, and site security controls. Workspace design includes organization and store access boundaries and controls for sensitive connection or session data. Access should be limited to the people and services that need it for an authorized purpose, and sensitive material should not be included in public pages or ordinary support messages.
No transmission, storage system, or security control can guarantee absolute protection. Protect your devices and email account, manage team permissions carefully, and notify us promptly if you suspect unauthorized access involving FlowOrder. We will investigate reported incidents and make notifications required by applicable law and relevant service obligations. This policy does not claim a security certification or marketplace endorsement.
Your privacy rights and how to make a request
Depending on the law that applies to you, you may have rights to know whether we process your personal information; obtain access or a copy; correct inaccurate information; request deletion; restrict or object to certain uses; receive portable data where applicable; and withdraw consent where processing is based on consent. Withdrawal does not change the lawfulness of processing before it. Rights can be subject to conditions and exceptions.
Send a request to haozhifang@weililiang1.com with “Privacy request” in the subject, or use the phone number listed in this policy. Describe the right you wish to exercise and provide enough information to locate the relevant record. We will seek proportionate verification, avoid asking for unnecessary sensitive information, and respond within the time required by applicable law. If additional time or a permitted refusal is necessary, we will explain it.
If we process data for your organization, we may direct the request to its administrator or assist the organization in responding, as appropriate. An authorized representative may contact us with evidence of their authority. We will not deny you a right merely because you exercise a privacy right.
Additional information for international visitors
For individuals in the European Economic Area or the United Kingdom, applicable rights may include objection to legitimate-interest processing and a complaint to your local supervisory authority. For individuals elsewhere, including mainland China and US states with applicable privacy laws, the available rights and the conditions for exercising them depend on the law and the circumstances of the processing.
We do not sell personal information or share it for cross-context behavioral advertising. This website does not use sensitive personal information to infer characteristics about visitors. Where a law provides an appeal of a privacy-request decision, you can request review through our privacy contact and may also contact the competent regulator. You do not need to resolve a concern with us before using any independent complaint right available to you.
Children’s information
FlowOrder Browser is intended for business users and is not directed to children under 18. We do not knowingly seek personal information from children through this website. If you believe a child has provided personal information to us, contact our privacy email so we can investigate and, where appropriate, remove it. We do not request a child’s identity documents to make an initial report.
Other websites and independent services
Following an email or phone link, visiting a marketplace, or using an independently provided service places you in a different service context. The relevant provider’s privacy notice governs its own processing. Third-party marketplace cookies used within a store browser environment are separate from cookies on this public website.
FlowOrder Browser is an independent product. References to Amazon, eBay, Mercado Libre, AliExpress, Coupang, AWS, or other providers describe use cases or service providers; they do not imply a partnership, certification, or approval. We cannot delete records that an independent provider controls, but can help identify the relevant service when reasonably possible.
Changes to this policy and contact details
This version was last updated on October 22, 2026. We publish revisions at this same address and change the date when this policy is revised. If a change materially affects existing users, we will provide additional notice through an appropriate available channel, and seek consent where required before starting the new use. The applicable service notice will be updated before public seller-data authorization becomes available.
Privacy contact: 上海兆林科技有限公司 (Shanghai Zhaolin Technology Co., Ltd.), mainland China.
Email: haozhifang@weililiang1.com — use the subject “Privacy request.”
Phone: +86 13552692019.
You can also find these details on our contact page.