隐私政策
厦门脉搏网络科技有限公司（下称“我们”）运营 imbshop.com 及其消息平台（下称“平台”）。平台帮助企业客户（下称“客户”）通过 Meta Platforms, Inc. 提供的 WhatsApp Business Platform 与其用户收发消息。本政策说明我们收集哪些数据、如何使用、保存多久以及你享有的权利。
1. 我们收集的数据
1.1 来自客户（使用平台的企业）
- 企业名称、联系人、邮箱、电话、账单信息
- Meta Business Manager 编号、WhatsApp Business Account（WABA）编号、电话号码编号
- 通过 Meta Embedded Signup 授予的访问令牌，以 AES-256-GCM 加密存储
1.2 来自最终用户（客户的顾客），代表客户处理
- WhatsApp 电话号码与资料名称
- 与客户的 WhatsApp 号码之间收发的消息内容
- 消息的送达与已读状态
- 同意记录：来源、时间戳、同意凭证
- 退订请求
2. 数据用途
- 通过 WhatsApp Business Platform 在客户与其用户之间传递消息
- 执行退订请求与消息频率限制
- 监控消息质量、送达率与账号健康状况
- 向客户提供其自身消息活动的统计分析
- 遵守 Meta 的 WhatsApp Business Platform 政策及适用法律
我们不会出售个人数据，不会将最终用户的消息内容用于广告或训练模型。
3. 法律依据（GDPR）
- 履行与客户之间的合同（第 6(1)(b) 条）
- 平台安全与防滥用的正当利益（第 6(1)(f) 条）
- 最终用户就营销消息给予客户的同意（第 6(1)(a) 条）
对最终用户数据而言，我们是数据处理者，客户是数据控制者。我们向所有客户提供数据处理协议（DPA）。
4. 数据共享
- Meta Platforms, Inc.：消息通过 WhatsApp Business Platform（Cloud API）传输，受 WhatsApp Business 条款与 Meta 隐私政策约束。
- 云服务商：位于中国大陆以外的云基础设施提供商，用于托管平台。
- 法律要求：法律或有效法律程序要求时。
5. 保留期限
| 数据 | 保留期 |
|---|---|
| 消息内容 | 90 天后删除 |
| 送达状态与统计（不含内容） | 24 个月 |
| 同意与退订记录 | 为执行退订并证明合规所需的期间 |
| 客户账户数据 | 合同期内及终止后 12 个月 |
6. 安全措施
访问令牌加密存储；所有传输使用 TLS；生产数据访问仅限授权人员并留有日志。
7. 你的权利
最终用户可向与其对话的客户，或向我们（zengjing@imbshop.com）请求访问、更正、删除或限制处理其数据。操作方式见数据删除说明。欧盟居民可向所在地监管机构投诉。
8. 跨境传输
数据可能在中国大陆以外的地区处理。对欧盟数据，我们依据标准合同条款（SCC）进行传输。
9. 联系我们
厦门脉搏网络科技有限公司
中国（福建）自由贸易试验区厦门片区高崎南十二路16号306单元
邮箱：zengjing@imbshop.com
Privacy Policy
Xiamen Maibo Network Technology Co., Ltd. ("we", "us") operates imbshop.com and its messaging platform (the "Platform"). The Platform enables businesses ("Clients") to send and receive messages with their customers through the WhatsApp Business Platform provided by Meta Platforms, Inc. This policy explains what data we collect, how we use it, how long we keep it, and your rights.
1. Data we collect
1.1 From Clients (businesses using the Platform)
- Business name, contact person, email, phone, billing information
- Meta Business Manager ID, WhatsApp Business Account (WABA) ID, phone number IDs
- Access tokens granted through Meta's Embedded Signup, stored encrypted (AES-256-GCM)
1.2 From end users (customers of our Clients), on behalf of the Client
- WhatsApp phone number and profile name
- Message content sent to or received from the Client's WhatsApp number
- Message delivery and read status
- Consent records: source, timestamp, and evidence of opt-in
- Opt-out requests
2. How we use data
- To deliver messages between Clients and their customers via the WhatsApp Business Platform
- To enforce opt-out requests and messaging frequency limits
- To monitor message quality, delivery rates and account health
- To provide Clients with analytics about their own messaging
- To comply with Meta's WhatsApp Business Platform policies and applicable law
We do not sell personal data. We do not use end-user message content for advertising or to train models.
3. Legal basis (GDPR)
- Performance of a contract with our Clients (Art. 6(1)(b))
- Legitimate interest in platform security and abuse prevention (Art. 6(1)(f))
- Consent of end users, collected by our Clients, for marketing messages (Art. 6(1)(a))
We act as a data processor for end-user data on behalf of our Clients, who are the data controllers. A Data Processing Agreement is available to all Clients.
4. Sharing
- Meta Platforms, Inc.: messages are transmitted through the WhatsApp Business Platform (Cloud API), governed by the WhatsApp Business Terms and the Meta Privacy Policy.
- Hosting providers: cloud infrastructure providers located outside mainland China.
- Legal requirements: when required by law or valid legal process.
5. Retention
| Data | Retention |
|---|---|
| Message content | Deleted after 90 days |
| Delivery status and analytics (no content) | 24 months |
| Consent and opt-out records | As long as needed to honor the opt-out and demonstrate compliance |
| Client account data | Duration of the contract plus 12 months |
6. Security
Access tokens are encrypted at rest. All traffic uses TLS. Access to production data is restricted to authorized staff and logged.
7. Your rights
End users may request access, correction, deletion or restriction of their data by contacting the Client they communicated with, or us at zengjing@imbshop.com. See our Data Deletion page. EU residents may lodge a complaint with their supervisory authority.
8. International transfers
Data may be processed outside mainland China. For EU data we rely on Standard Contractual Clauses.
9. Contact
Xiamen Maibo Network Technology Co., Ltd.
Unit 306, No. 16 Gaoqi South 12th Road, Xiamen Area, China (Fujian) Pilot Free Trade Zone, Xiamen, Fujian 361006, China
Email: zengjing@imbshop.com