KM ERP Privacy Policy

Preamble

Thank you for using the KM ERP cross-border e-commerce management platform. This Privacy Policy applies to all KM ERP products and related services. We attach great importance to the privacy rights and information security of our merchant users. In accordance with applicable laws, regulations, and industry standards, we have established safeguards designed to protect your business information, personal information, and commercial data. Please read this Privacy Policy carefully.

This Policy covers all functions, operational services, and value-added tools offered through the KM ERP platform. By registering an account, logging in, or using any service, you acknowledge that you have read and understood this Policy in full and voluntarily agree to its terms. This Policy does not apply to independently operated third-party services. Before using embedded third-party tools or following external links, please review the applicable third party's privacy rules and decide carefully whether to proceed.

The entity responsible for processing your personal and business information depends on your region, as follows:

· Users in Mainland China:

· Users outside Mainland China: VASTAR SINGAPORE TECHNOLOGY PTE. LTD is the information-processing entity.

This Privacy Policy explains how KM ERP collects, uses, stores, shares, transfers, and otherwise processes information, and describes the rights available to you. Provisions concerning important rights are highlighted for your attention. We may periodically update this Policy, and we recommend that you review the latest version available on this page.

Definitions

1. Authorized User: A staff member invited by an enterprise master account to join its organization and use system functions. A person granted backend configuration or store-management permissions is an administrator and may create and manage sub-accounts and assign permissions.

2. Individual User: An independent merchant who registers using a mobile-phone verification code or third-party account and uses KM ERP in an individual capacity.

3. Enterprise Contact: A person involved in a merchant's business cooperation, including contacts responsible for store operations, procurement, manufacturing, logistics, warehousing, or customer coordination.

4. Order Data Subject: A person to whom order-related information relates, including a buyer, recipient on an e-commerce platform, or person identified by a delivery address in connection with a merchant's order management.

5. All persons who directly register for, are authorized to access, or otherwise use KM ERP are collectively referred to in this Policy as "you."

1. Collection and Use of Information

To improve platform services, optimize system functions, and protect account and operational security, KM ERP collects only the information necessary for lawful purposes, including information you submit, authorize us to process, or generate through your use of the services.

1.1 Basic Account Information

To register a KM ERP account, you must provide a mobile-phone number, SMS verification code, and login password. You may later bind an email address for expedited login and account recovery. An enterprise administrator may create employee sub-accounts and enter an employee's name, mobile-phone number, login identifier, and other relevant information. Before entering such information, the enterprise administrator must obtain the employee's prior informed consent.

1.2 Enterprise Qualification Information

You may voluntarily supplement your business profile with information such as the invoicing entity name, business address, enterprise tax identification number, and business license. This information is used only for reconciliation, invoicing, and enterprise qualification verification.

1.3 Paid-Service Transaction Information

When purchasing a paid plan or value-added function, you may pay through a compliant third-party payment channel. The platform retains only reconciliation information such as transaction time, amount paid, order status, and payment records. We do not retain sensitive payment credentials such as a complete bank-card number or payment password. This information also enables you to review your billing history.

1.4 Customer-Service Communications

When you request technical support, ask questions about functions, or report a problem, the platform may retain communication records and account-verification information to identify the issue, track its resolution, and provide support.

1.5 Operational and Marketing Communications

Using the contact details you provide, we may send platform updates, operational guidance, promotional information, and industry news. You may unsubscribe from commercial communications at any time through the applicable SMS, email, or account-setting channel.

1.6 System Security and Operations Information

To maintain stable platform operation and mitigate account risks, the platform automatically collects operational data such as login IP addresses, device identifiers, operation logs, login times, and activity records. We use this data for risk-control measures, abnormal-account monitoring, troubleshooting, and prevention of account theft and unauthorized access.

1.7 Circumstances in Which Information May Be Used Without Separate Consent

Where permitted by applicable laws and regulations, the platform may process relevant information without obtaining your separate consent in the following circumstances:

1.7.1 Where necessary to perform statutory duties or obligations;

1.7.2 To safeguard national security, public safety, public health, or significant public interests;

1.7.3 To cooperate with lawful judicial investigations, court proceedings, or administrative inspections;

1.7.4 To protect a natural person's life, property, or other significant lawful rights and interests in an emergency;

1.7.5 To process information that you have lawfully made public;

1.7.6 To process information lawfully obtained from legitimate news reports or official government disclosures;

1.7.7 Where necessary to perform a service agreement between you and the platform;

1.7.8 To maintain the secure and stable operation of the platform and diagnose or repair faults;

1.7.9 For public-interest academic research after appropriate de-identification; or

1.7.10 In any other circumstance permitted by applicable laws and regulations.

1.8 Information Concerning Third Parties

Before submitting information about another natural person or business partner, you must obtain that person's lawful authorization and informed consent. If a new or upgraded function requires additional information, we will notify you in advance through a page prompt or in-platform notice and will collect and use the information only after obtaining the required consent.

1.9 Enterprise Collaboration Information

1.9.1 An enterprise master account may enter employee positions, permissions, contact details, and other workplace information for team collaboration and management. The enterprise must confirm that the employee has authorized the entry of such information. The system automatically records the creation time and last login time of each sub-account solely for account-management purposes.

1.9.2 A merchant may synchronize order data from an e-commerce platform. KM ERP obtains only information necessary for order fulfillment, such as logistics information, order amount, order time, recipient name, telephone number, and delivery address. This information is used solely for shipment, customer management, and store operations. The merchant must ensure that it has obtained all permissions required to process the relevant order information.

1.9.3 The platform allows merchants to enter contact information for logistics providers, warehouses, suppliers, and other business partners. Before doing so, the merchant must obtain the relevant person's consent and use the information lawfully.

Note: The enterprise master account is primarily responsible for providing notices concerning the centralized management of information within its organization. Users with questions should first contact their enterprise administrator and may also contact platform customer service for assistance.

Data that has been de-identified so that it cannot reasonably identify a specific individual is not personal information as defined by law. If de-identified data is combined with personal information, the combined data will be protected in accordance with this Privacy Policy.

2. Sharing, Transfer, and Public Disclosure of Information
2.1 Information Sharing

KM ERP does not privately sell or arbitrarily share users' personal or business information. Information is shared only in the following lawful circumstances:

2.1.1 With your separate and explicit authorization;

2.1.2 In response to lawful requests or inspections by judicial or administrative authorities;

2.1.3 At the direction of an enterprise master account, with a designated business partner, provided that the platform verifies the security of the relevant third-party interface and protects the transmission of the data; or

2.1.4 To connect with compliant third-party plug-ins or logistics, payment, and e-commerce platform services, as further described in the platform's list of third-party services.

2.2 Information Transfer

2.2.1 Personal or business information may be transferred only after we obtain your explicit written consent.

2.2.2 If a merger, demerger, acquisition, asset restructuring, or other material corporate transaction involves the transfer of information, we will notify users of the recipient in advance and require the recipient to comply with this Privacy Policy. If the recipient is not bound by this Policy, we will obtain the user's authorization again.

2.3 Public Disclosure

User information will be publicly disclosed only with the user's separate consent or where disclosure is required by applicable law, judicial procedure, or a binding government order.

2.4 Transfers or Disclosures Not Requiring Prior Authorization

Prior authorization is not required where information sharing or transfer is necessary to perform a legal obligation, protect the public interest, cooperate with an investigation, respond to an emergency, process lawfully public information, or in any other circumstance provided by law.

3. Storage of User Information

The platform retains necessary business and account information only for the period required to provide the services and observes applicable minimum-retention requirements. After service termination or account deletion, we will promptly remove redundant data and anonymize or permanently delete information as required.

3.1 After an account-deletion request is approved, all personal information, store-operation data, transaction records, and other materials associated with the KM ERP account will be permanently deleted and cannot be recovered.
3.2 If the platform discontinues a relevant service, it will notify users through an in-platform announcement or email and will dispose of retained user data in a unified manner.
3.3 Information is not retained beyond the period required by applicable laws and regulations.
4. Information Security Measures

The platform uses an industry-leading, multilayered data-security framework designed to protect against unauthorized disclosure, alteration, theft, loss, and similar risks, including the following measures:

4.1 Encryption technologies are used to protect data in transit and in cloud storage;
4.2 Attack-detection and firewall risk-control systems are deployed to prevent network intrusions and data theft;
4.3 Strict internal access controls limit access to designated personnel, and personnel receive regular information-security training; and
4.4 A data-security incident-response mechanism is maintained. If an information-security incident occurs, we will promptly investigate and respond and will notify affected users, as appropriate, by email, SMS, or in-platform message of the relevant risks, remedial measures, and recommended precautions.

Important notice: No Internet environment can be guaranteed to be completely secure. You are responsible for safeguarding your KM ERP account credentials and must not lend your account or disclose login access to another person.

5. Your Information Rights

Subject to applicable law, every KM ERP user may exercise the following rights:

5.1 Right of Access: You may review personal and business information available through the platform backend. To request information that is not available online, contact customer service.
5.2 Right to Rectification: You may correct inaccurate information through the platform backend. For information that cannot be corrected online, you may submit a request to customer service, and we will process and respond within 5-7 business days.
5.3 Right to Deletion: You may request deletion of relevant personal information where it has been unlawfully collected, used without authorization, or is no longer required after termination of the services.
5.4 Right to Delete an Account: You may request account deletion at any time. We will complete the request within 5-7 business days after verifying your identity. Account deletion permanently removes all associated data.
5.5 Right to Obtain a Copy: You may request a complete copy of information retained about you. After verifying your identity, customer service will provide the copy by email.
5.6 Right to Data Portability: Where provided by applicable law, you may request that your personal and business information be transferred to a designated third-party platform.
5.7 Rights of Users Outside Mainland China: We provide users outside Mainland China with the rights required by applicable regional privacy laws. For users in California, we comply with applicable California consumer privacy laws and do not sell user information.

A request may be denied to the extent permitted by law where it would affect national security, the public interest, judicial proceedings, trade secrets, or where the right is being abused maliciously.

6. Protection of Minors

KM ERP's e-commerce operation services and enterprise-management functions are intended only for adult business operators. Persons under 18 may not register for or use the services. If we inadvertently collect information relating to a minor without the legally required consent of the minor's guardian, we will promptly delete it. A guardian who believes that a minor's information has been improperly retained may contact platform customer service.

7. Cross-Border Transfers

As part of KM ERP's global service operations, certain information relating to users outside Mainland China may be stored on compliant servers in Singapore.

7.1 Core transaction and fund-reconciliation information of users in Mainland China is stored and processed within Mainland China and is not transferred overseas.
7.2 Information that must be transferred across borders will be handled by a compliant overseas affiliate subject to equivalent data-protection safeguards.
7.3 For users in the European Union, cross-border transfers will be conducted in accordance with the General Data Protection Regulation (GDPR), including through appropriate standard data-protection agreements where required.

If you have questions about a cross-border transfer, contact customer service for further information.

8. Cookies and Similar Technologies

The platform uses Cookies and similar lightweight analytics technologies to improve access speed, identify account permissions, retain user preferences, and optimize platform functions. These technologies are used only for legitimate platform operations and not to unlawfully obtain personal information.

You may disable Cookies through your browser settings. Some platform functions may become slower or unavailable after Cookies are disabled.

9. Amendments to this Privacy Policy

We may amend this Privacy Policy from time to time in response to changes in applicable law or our services. Updated terms will be posted on the official page, and the date at the top of the page will be updated accordingly. Your continued login to or use of KM ERP after an update constitutes acceptance of the revised Policy.

10. Contact Us

If you have questions or comments about this Privacy Policy, wish to exercise an information right, or need assistance with an information-related matter, contact us as follows:

Customer service email: hemu.hl@raycloud.com

Telephone: 400-000-4365