Privacy Policy

1. Data Controller

Information submitted through this website is handled by the ExporterFlow operating team. To request access, correction, deletion, or withdrawal of consent, please use the cooperation inquiry form and include “Privacy Request” in the project brief.

2. Information We Collect

• Information you provide: company name, company type, phone number, messaging account or work email, and your project brief.
• Security and technical information: Cloudflare and Turnstile may process IP address, browser, device, and verification information to protect the website and form.
• Communication records: if we contact you about an inquiry, we may retain communications and status information directly relevant to the assessment.

3. How We Use Information

• Understand and evaluate your cooperation inquiry;
• Contact you and arrange follow-up discussions;
• Prevent abuse, duplicate submissions, fraud, and other security risks;
• Troubleshoot and improve the website and inquiry service.

We do not use inquiry information for unrelated advertising, and we do not sell your personal information.

4. Storage and Retention

Inquiry information is stored in Cloudflare D1 and protected by appropriate access controls. If no cooperation relationship is established, we generally retain inquiry information for no longer than 12 months after the last substantive communication, unless a longer period is required by law, necessary for dispute resolution, or agreed as part of a business relationship. We then delete or anonymize the information.

5. Service Providers

• Cloudflare Pages, D1, and Turnstile: website hosting, data storage, security verification, and automated attack prevention.
• Resend: email notification to the ExporterFlow team when an inquiry is submitted.

These providers may process necessary information in locations where their infrastructure operates, including outside your jurisdiction. We use them only as necessary for the purposes described in this policy and apply protections required by applicable law.

6. Information Security

We use HTTPS, server-side validation, access controls, submission protection, contact deduplication, and secret isolation to reduce the risk of unauthorized access, disclosure, alteration, or abuse. No internet service can guarantee absolute security. If a security incident occurs, we will take remediation and notification measures as required by law.

7. Your Rights

Subject to applicable law, you may request access to, a copy of, correction of, supplementation of, or deletion of your personal information, and may withdraw consent. We may request information necessary to verify your identity. Withdrawal does not affect processing lawfully carried out before withdrawal.

8. Children

This website and its enterprise cooperation services are not directed to children under 14. If you believe a child has provided personal information without appropriate consent, please contact us through the cooperation inquiry form.

9. Policy Updates

We may update this policy when our purposes, methods, information categories, or service providers materially change. Where required, we will seek renewed consent. The latest version is always available on this page.