TradeFlow 隐私政策
生效日期：2026-10-25
适用版本：1.0.0
运营者：Felix
联系邮箱：support@skyzeph.com
网站：https://www.skyzeph.com
1. 概要
TradeFlow 默认采用本地优先（local-first）设计。你的数据主要保存在你的设备上。我们不投放广告、不做跨 App 跟踪、不出售数据。
TradeFlow 处理的是你输入的客户联系方式、地址、发票与收款记录。它们默认只保存在设备上。若你启用“后端集成”，App 会把完成该操作所需的数据发送到后端（例如创建 Stripe 支付链接、发送邮件/短信、同步 QuickBooks/Xero、上传备份）。你可以配置我们运营的云备份服务（https://www.skyzeph.com/tradeflow-api），也可以配置你自己的后端；第三方服务仍受其各自条款约束。
2. 我们处理的数据
• 客户联系方式、地址、发票、收款记录：默认本地保存；启用后端时由后端处理
• 现场照片/文件：仅在你主动选择时读取，保存在 App 文档目录
• 支付卡数据：App 不收集；支付由 Stripe 等第三方处理
• 分析/广告/跟踪：无
3. 数据存储位置
- 默认：设备本地 App 沙盒 / 文档目录。
- 可选后端：仅当你主动在设置中配置 Base URL 与 Token 并触发相关操作时，数据才会发送到该后端。
- 我们运营的云备份服务位于日本（腾讯云东京）；备份和 OAuth token 使用 AES-256-GCM 加密存储，备份默认保留最近 10 份。
- 首次使用云端功能时，官方服务会生成随机商家 ID 与访问令牌（仅用于隔离数据，不含姓名、邮箱、设备广告 ID）。
- 可选商店购买：Apple App Store / Google Play 的应用内购买处理购买与权益；我们不接触支付卡号。
4. 数据共享
- 我们不会出售你的数据。
- 不会为广告/跟踪目的共享数据。
- 只有你主动触发的外部集成（支付、邮件/短信、会计、云同步）会把必要数据发送给对应服务。
- 我们运营的云备份服务使用 Stripe（支付链接）、Resend（邮件）、Twilio（短信）、Intuit QuickBooks / Xero（会计）、腾讯云（服务器与存储）作为服务提供商。
- 在线收款使用 Stripe Connect：开户/KYC 由 Stripe 直接处理，我们只保存 Stripe 账户 ID；客户付款进入商家自己的 Stripe 账户，我们不代收、不保管资金。
- 法律要求时，可能依法律程序披露。
5. 数据保留与删除
- 本地数据由你控制；可在设置中清空/删除。
- 导出的备份文件由你保管。
- 使用我们运营的云备份服务时：备份默认保留最近 10 份；OAuth token 保留至你断开连接；可发邮件至 support@skyzeph.com 请求删除服务器上的备份与 token。
- 若你配置自己的后端，请参考该后端的保留/删除政策。
- 卸载 App 会删除设备上的本地数据（除非你已导出）。
6. 权限
- 文件/照片：仅在你主动选择导入/附件时访问。
- 相机/照片（现场记录）：仅在你主动拍照并附加到单据时访问，照片保存在本机。
- 网络：用于你配置的可选后端/商店购买。
7. 儿童
本 App 不面向 13 岁以下儿童主动收集数据。若你为儿童使用，请由监护人管理设备与数据。
8. 安全
我们采用合理的传输/存储保护；但没有任何系统能保证绝对安全。请保护设备锁屏与备份文件。
9. 国际用户
若你使用我们运营的云备份服务，数据在日本处理；若你配置自己的后端，数据可能在该服务器所在国家/地区处理。请确保符合当地法律。
10. 变更
我们可能更新本政策；重大变更会在 App 内或商店页面提示。
11. 联系我们
support@skyzeph.com
网站：https://www.skyzeph.com
TradeFlow Privacy Policy
Effective date: 2026-10-25
Version: 1.0.0
Operator: Felix
Contact: support@skyzeph.com
Website: https://www.skyzeph.com
1. Summary
TradeFlow is local-first by default. Your data is primarily stored on your device. We do not show ads, track you across apps, or sell your data.
The app processes customer contact details, addresses, quotes, invoices, payments, job photos and checklists. If you enable an optional backend integration, the app sends only the data needed for that action to a backend (Stripe, email/SMS, QuickBooks/Xero, cloud backup). You can use the cloud backup service we operate at https://www.skyzeph.com/tradeflow-api or configure your own backend; third-party services remain subject to their own terms.
2. Data we process
- Customer contact details, addresses, quotes, invoices, payments, job photos and checklists (local by default; processed by a backend when enabled).
- Files/photos you choose to import or attach.
- Optional backend: data needed to create links, sync, OCR, send messages or validate purchases.
- Purchases: handled by Apple App Store / Google Play; we do not receive card numbers.
3. Storage
- Default: the app's local sandbox/documents directory.
- Optional backend: the server you configure. Our cloud backup service is hosted in Japan (Tencent Cloud Tokyo); backups and OAuth tokens are AES-256-GCM encrypted at rest, and the latest 10 backups are retained by default.
- The first time you use a cloud feature, the official service creates a random merchant ID and access token (used only to isolate data; no name, email or advertising ID).
- Store purchases: Apple App Store / Google Play.
4. Sharing
We do not sell data or share it for advertising. Data is sent to a third party only when you trigger an integration (payment, email/SMS, accounting, sync). Our cloud backup service uses Stripe (payment links), Resend (email), Twilio (SMS), Intuit QuickBooks / Xero (accounting) and Tencent Cloud (hosting/storage) as service providers.
- Online payments use Stripe Connect: Stripe handles onboarding/KYC directly; we store only the Stripe account ID. Customer funds go to the merchant's own Stripe account; we do not collect or hold funds. Legal requests may require disclosure.
5. Retention and deletion
- Local data is controlled by you; you can clear it in Settings.
- Exported backups are controlled by you.
- If you use our cloud backup service: the latest 10 backups are retained by default; OAuth tokens are kept until you disconnect. Email support@skyzeph.com to request deletion of server-side backups and tokens.
- If you use your own backend, follow that backend's retention/deletion policy.
- Uninstalling the app deletes local data unless you exported it.
6. Permissions
- Files/photos: only when you choose an import/attachment.
- Camera/photos (job records): accessed only when you take and attach a photo; images stay on your device.
- Network: optional backend and store purchases.
7. Children
The app is not directed to children under 13 for data collection. A guardian should manage the device and data.
8. Security
We use reasonable safeguards, but no system is perfectly secure. Protect your device lock and backups.
9. International users
If you use our cloud backup service, data is processed in Japan. If you configure your own backend, data may be processed in the country where that server is located. Ensure compliance with local law.
10. Changes
We may update this policy; material changes will be announced in the app or store listing.
11. Contact
Felix
support@skyzeph.com
https://www.skyzeph.com