SelloraFlow（带货工坊）隐私政策 / Privacy Policy

1. 适用范围与服务提供方

欢迎使用 SelloraFlow（带货工坊）。我们提供面向跨境与内容电商卖家的 AI 选品分析、商品视觉生成与带货短视频创作服务，服务入口包括官方网站 https://www.selloraflow.com 与工作台 https://app.selloraflow.com。如有任何隐私或数据相关问题，请通过官方联系邮箱 jedediahxu99@gmail.com 与我们联系。

2. 我们收集的信息

我们遵循最小必要原则，仅收集为您提供账户登录、内容生成及安全保障所需的信息：

• 账户注册与登录信息：当您使用邮箱注册或登录时，我们会收集您的电子邮箱地址、账户昵称及经单向加密哈希（bcrypt）处理的密码摘要。
• Google 一键登录（OAuth 2.0）信息：当您选择“使用 Google 账号继续（Continue with Google）”时，我们仅请求基础身份权限范围（openid、email、profile），读取您的 Google 唯一账户标识符（sub）、已验证的邮箱地址、显示名称及头像链接。
• 商品素材与生成作品：您在工作台中主动上传的商品图片、参考视频、提示词指令，以及系统为您生成的商品图与带货视频资产。
• 设备、日志与交易记录：为防范恶意请求并保障积分账单准确，我们会记录基础访问日志（IP 地址、浏览器类型、请求时间）以及积分充值与消耗明细。

3. Google 用户数据合规与受限使用声明（Google API Services User Data Policy）

• 用途严格受限：您的 Google 账号基础资料（邮箱、昵称、头像及唯一标识符）仅用于验证您的登录身份、自动创建或绑定您的 SelloraFlow 账户，以及在导航栏向您本人展示登录头像与名称。
• 绝不触碰敏感权限：SelloraFlow 不会请求或读取您的 Gmail 邮件正文、Google 云端硬盘（Drive）文件、通讯录或任何其他敏感权限。
• 绝不出售或用于广告及模型训练：我们绝不会将您的 Google 用户数据出售、出租或共享给任何第三方广告网络、数据经纪商，也不会将您的 Google 个人资料或私有商品素材用于公开基础大模型的训练。

4. 我们如何使用信息

• 创建并维护您的账户会话，使您在官网（www.selloraflow.com）与工作台（app.selloraflow.com）之间实现无缝登录衔接。
• 根据您提交的选品需求、商品原图与脚本提示词，调用图像与视频生成工作流并返回结果。
• 发送必要的账户验证码、安全提醒及重要的服务变更通知（不含未经授权的垃圾营销邮件）。
• 排查系统故障、拦截自动化滥用攻击并维护平台安全稳定运行。

5. Cookie 与分析工具

• 必要身份凭证 Cookie：我们使用受保护的 HttpOnly; Secure; SameSite=Lax 会话 Cookie（作用域 .selloraflow.com）保存登录状态，前端脚本无法恶意窃取该令牌；同时使用语言偏好 Cookie 记录界面语种选择。
• 站点流量统计：我们使用 Google Analytics（GA4）收集汇总级、去标识化的页面访问与性能指标，用于持续改进页面加载体验与功能设计。您可通过浏览器隐私设置或广告拦截插件随时停用分析 Cookie。

6. 数据存储、安全保护与第三方服务

全站通信均强制采用 HTTPS / TLS 加密传输。用户密码经强哈希加密存储，上传素材与生成结果保存在受访问权限控制的对象存储与数据库中。仅当执行您主动发起的 AI 图像/视频生成任务或完成支付结算时，相关任务载荷才会在受保密约束的基础设施服务商之间安全传输。

7. 数据保留与账户/数据删除权利

• 您可随时登录 https://app.selloraflow.com 查看、下载或手动删除已上传的素材及生成的作品。
• 您可随时在 Google 账号安全设置（myaccount.google.com/permissions）中撤销对 SelloraFlow 的登录授权。
• 如需彻底注销账户并永久删除您的全部个人数据（含绑定的 Google 登录资料与历史素材），请使用注册邮箱发送申请至 jedediahxu99@gmail.com，我们将在收到核实请求后的 7 个工作日内完成清理并邮件回复确认（法律法规要求留存的必要财务合规凭证除外）。

8. 联系我们

如果您对本隐私政策、个人信息保护或数据处理有任何疑问、意见或删除请求，请联系：
应用名称：SelloraFlow（带货工坊）
联系邮箱：jedediahxu99@gmail.com

1. Scope & Identity

SelloraFlow (also known as Sellora / 带货工坊) operates the marketing website at https://www.selloraflow.com and the AI commerce workspace at https://app.selloraflow.com. This Privacy Policy describes what data we collect, how we use and safeguard it, and how you can access or delete your data. For any privacy inquiries, contact us at jedediahxu99@gmail.com.

2. Information We Collect

• Account Credentials: When you register with email, we collect your email address, display name, and a cryptographically hashed password (bcrypt).
• Google OAuth 2.0 Sign-In Data: When you sign in using “Continue with Google”, we request only basic non-sensitive identity scopes (openid, email, profile) and receive your Google unique user ID (sub), verified email address, display name, and profile avatar URL.
• Workspace Content: Product photos, reference videos, text prompts you upload, and the AI-generated listing images and short-form selling videos created in your workspace.
• Technical & Billing Records: Essential server security logs (IP address, user-agent, request timestamps) to prevent abuse, as well as credit balance and subscription transaction records.

3. Google API Services User Data Policy & Limited Use Disclosure

• Strictly Authentication & Profile Display: We use Google user data (openid, email, profile) solely to authenticate your identity, create or link your SelloraFlow account, and display your name and avatar inside the SelloraFlow interface.
• No Access to Gmail or Private Files: SelloraFlow never requests access to, reads, or modifies your Gmail messages, Google Drive files, Google Contacts, or any restricted/sensitive Google scopes.
• No Sale, No Ad Targeting, No Public Model Training: SelloraFlow never sells, rents, or transfers Google user data to third-party advertisers or data brokers, and never uses Google user data or your private merchant uploads to train public foundation AI models.

4. How We Use Information

• Authenticate and maintain your session seamlessly across www.selloraflow.com and app.selloraflow.com.
• Process product research queries, AI image generation, and video synthesis tasks initiated by you.
• Send essential transactional emails such as verification codes, security alerts, and billing receipts.
• Protect platform integrity, enforce rate limits, and detect unauthorized access or fraud.

5. Cookies & Analytics

• Essential Session Cookies: We set an encrypted HttpOnly; Secure; SameSite=Lax cookie scoped to .selloraflow.com solely to keep you signed in across our main site and workspace, plus a locale cookie for your UI language preference.
• Analytics: We use Google Analytics (GA4) to understand aggregated traffic and page performance. You can opt out at any time using browser cookie controls or standard analytics opt-out extensions.

6. Data Retention, Security & Deletion

• All traffic is encrypted in transit via HTTPS/TLS, and stored assets are protected by strict access controls.
• You may delete uploaded product assets and generated media directly within your workspace at https://app.selloraflow.com, and you may revoke Google OAuth access anytime at myaccount.google.com/permissions.
• To request complete account termination and permanent deletion of all associated personal data (including Google profile attributes and workspace assets), email jedediahxu99@gmail.com from your registered email address. Verified deletion requests are completed within 7 business days.

7. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:
Application: SelloraFlow
Email: jedediahxu99@gmail.com