前言与适用范围

Scope & Applicability

本隐私政策阐明了 GPFulfillment Smart Cloner（以下简称“应用”或“我们”）如何处理通过浏览器插件或 Shopify 应用后台收集的信息。本应用由 PGS Tech Limited (Gray Poplar) 开发并运营，专门作为技术服务商为独立站商户提供商品一键同步抓取与版权合规迁移服务。

This Privacy Policy explains how GPFulfillment Smart Cloner ("we", "us", or the "App") processes information gathered through our browser extension and Shopify back-end. The App is developed and operated by PGS Tech Limited (Gray Poplar), serving strictly as a technical provider assisting independent merchants with catalog sync and IP-compliant migration.

信息收集与使用限制

Data Collection Limits

我们恪守“最小化收集”与“无云端化”原则。我们绝不收集、不上传、不转储商户或最终消费者的任何商业或隐私数据。在插件运行期间，为了提供服务所必需，相关配置仅临时处理并完全存储在以下本地载体：

We strictly adhere to zero-cloud data preservation. We NEVER upload, collect, or store any merchant or consumer data. The App strictly processes necessary parameters in the following local contexts:

• 商品规格本地缓存Local Product Specifications Cache: 您抓取的商品标题、价格、属性矩阵与配图数据，均全部且仅保存在您本地的浏览器缓存（Chrome Local/Sync Storage）中。 Catalog details, options matrix, pricing, and image references are stored solely in your local browser Cache (Chrome Local/Sync Storage).
• 本地授权凭证Local Store Access Tokens: Shopify 官方 OAuth 连接 Access Token 亦加密存放在本地浏览器沙盒内，仅用于与 Shopify 接口通信。 Secure Access Tokens granted via Shopify OAuth are stored encrypted within your local browser sandbox, used exclusively to request official Shopify endpoints.

凭证保护与本地加密安全

Credentials Security & Local Encryption

为了向您提供无缝的同步操作，应用采用行业最高安全机制：

To execute secure background synchronization, we deploy industry-standard security architectures:

• 拒绝留存密码No Password Retention: 我们绝不会以任何形式索取或储存您的 Shopify 登录密码。所有接口交互均依赖本地浏览器向官方接口发起 OAuth 授权。 We do not request or store your password credentials. We strictly invoke secure OAuth connections directly from your client-side browser.
• 安全过期的短期 TokenExpiring Access Tokens: 我们支持短期过期的 Shopify Access Token 保护技术，在本地设置有定点生命周期清除逻辑，最大化防止凭证长期静态暴露。 Our app supports Shopify's expiring access tokens. Stored tokens inside your local extension storage feature auto-expiry properties, minimizing potential leak surfaces.
• 直连传输加密 (TLS)Direct Transit Encryption: 本地浏览器插件向 Shopify API 传输数据时均使用强加密的 TLS 1.3 / HTTPS 协议直连，不经过中转代理服务器，防止中间人拦截或篡改。 All communication links between the browser plugin and Shopify APIs are directly enforced using TLS 1.3 / HTTPS encryptions with zero middleware intercepts.

数据共享与第三方披露

Data Sharing & Third-Party Processing

由于应用采用纯客户端（Client-side）轻量化架构，我们不设任何中心化云端服务器来存取您同步的内容，因而我们绝无可能将您的店铺资产或任何数据共享、披露或销售给任何第三方。所有业务流水及抓取操作仅发生在商户和源货源网站、Shopify 平台之间。

Because this application runs on a pure client-side architecture, we do not host a centralized cloud server to inspect or retain your synchronizing activity, making it physically impossible to share, sell, or disclose your catalog assets to third parties. All activities are restricted to your local machine.

商户在版权合规（DPA 1.1.13）下的义务

Merchant Obligations & Compliance

GPFulfillment Smart Cloner 作为一款中立的技术同步与过滤工具，旨在协助商户提高商品数据同步效率。在使用本应用进行同步操作时：

GPFulfillment Smart Cloner functions as a neutral tool designed to improve catalog efficiency. By invoking our sync operations:

• 商户必须确保已被原版权人合法授予商品数据的使用、传播及再销售许可。 Merchants warrant they hold necessary licenses or copyrights to replicate products from external domains.
• 商户应合理开启应用的“品牌词合规扫描”功能，对于未经授权的品牌词、商标词以及可能侵权的产品图进行二次处理，防范侵权风险。 Merchants should review filtered drafts to clean out copyrighted trademark items before pushing them live on Shopify.

变更与联系渠道

Policy Updates & Support

我们可能会根据隐私法律的发展或应用功能的迭代，不定期更新本隐私政策。若有重大调整，我们会在本页面中更新日期。

We may revise this privacy policy from time to time. Updates will be visible directly on this canonical page.

如果您对我们的数据保护策略或本政策有任何疑问，欢迎联系 Gray Poplar 的技术与法务团队：

If you have questions regarding data privacy and operations, please contact the PGS Tech Limited team:

• Email: graypoplarr@gmail.com
• WhatsApp: +86 13135652957
• Address (Shenzhen): 28/F, 168 Fuhua 3rd Road, Futian District, Shenzhen, China
• Address (Hong Kong): 2/F, 204-210 Texaco Road, Tsuen Wan, Hong Kong