Last Updated: October 8, 2025
Effective Date: October 8, 2025

Terraflare.ai ("Terraflare", "we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our websites, applications, cloud-based AI advertising services, and related offerings (collectively, the "Services").

1. Definitions

• "Services" refer to Terraflare.ai's cloud-based AI advertising platform, analytics tools, APIs, and any related technologies or support offered by us.
• "Personal Data" (EU/GDPR), "Personal Information" (PIPL/中国), or "用户数据" means any information that identifies or can be used to identify you, either directly or indirectly.
• "Processing" means any operation performed on Personal Data, such as collection, storage, use, sharing, or deletion.

2. Scope of Application

This Privacy Policy applies to all users of the Services, including individuals, businesses, and partners.

• If you access our Services via third-party platforms (e.g., Amazon Ads, Walmart Ads, DSPs), this Policy applies in addition to their own privacy terms.
• We strictly comply with Amazon’s Acceptable Use Policy (AUP) and Data Protection Policy (DPP), ensuring that all data access, storage, and usage are aligned with Amazon’s API terms and security protocols.
• This Policy does not apply to services offered by other companies or websites that we do not own or control.

3. Information We Collect

We may collect the following categories of information:

We do not collect, store, or use any Personally Identifiable Information (PII) of Amazon customers such as name, address, phone number, or email. Our platform only accesses non-PII business metrics necessary for advertising optimization, with prior seller authorization.

1. Account & Contact Information — Name, email, phone number, company, job title, billing address, login credentials (stored securely using encryption).
2. Service Usage Data — Advertising performance metrics (impressions, clicks, conversions, ACOS, CPC, ROI), AI prompts and responses, access logs (IP address, browser type, OS, timestamps).
3. Payment & Transaction Data — Payment details processed via third-party providers (e.g., Stripe, PayPal). We do not store full credit card numbers.
4. Device & Technical Information — Cookies, device IDs, session data, error logs, IP addresses.
5. Voluntarily Provided Information — Feedback, survey responses, customer support chats or emails.

4. How We Use Information

We use your information for the following purposes:

• To provide, maintain, and improve the Services.
• To improve our AI models using data solely from each authorized seller's activity, without aggregating or combining data across different sellers under any circumstances.
• To send you service updates, newsletters, and promotional content (you may opt-out at any time).
• To ensure security, prevent fraud, and comply with legal obligations.
• To conduct analytics, market research, and business operations.
• To fulfill our contractual obligations to you.

5. Cookies & Tracking Technologies

We use the following types of cookies and similar tracking technologies:

• Strictly Necessary — For session management, login, and basic site functionality.
• Analytics — For usage statistics and performance monitoring (e.g., Google Analytics, internal BI tools).
• Advertising — For personalized ads and retargeting (where applicable).
• Preferences — To remember language, interface, or display settings.

🔒 You may manage or disable cookies via your browser settings, but this may limit certain features. We do not collect sensitive personal data (e.g., race, religion, health) through cookies unless with your explicit consent.

6. How We Share Information

We do not sell your personal data. We may share your information with the following parties:

• Service Providers — Such as cloud hosting (e.g., AWS), payment processors (e.g., Stripe), and analytics tools.
• Data retrieved through the Amazon API is used solely for the purpose of providing analytics and advertising optimization services to the authorized seller. We do not share or resell this data to any third parties. Internally, data access is restricted on a need-to-know basis.
• Legal Authorities — If required to comply with applicable laws or regulations.
• Corporate Transactions — In the event of merger, acquisition, or asset transfer.

🔐 We require all third parties to comply with strict data protection and confidentiality obligations, and to use your data only for authorized purposes.

7. International Data Transfers

Your data may be stored and processed in Singapore, the United States, or the European Union.

• We implement safeguards such as encryption, data minimization, and Standard Contractual Clauses (SCCs) to ensure international transfers are secure.
• For users located in China, we comply with the Personal Information Protection Law (PIPL) and Cybersecurity laws, and do not transfer data abroad without consent or legal basis.
• For users in the EU/EEA, we use SCCs or other lawful transfer mechanisms (e.g., EU-U.S. Data Privacy Framework where applicable).

8. Data Retention

• We retain your data only as long as necessary to provide the Services or meet legal obligations.
• Upon account closure, we will delete or anonymize your personal data within 90 days.
• Certain records (e.g., financial or legal data) may be retained longer in accordance with applicable laws (e.g., up to 5–7 years for tax or audit purposes).

9. Your rights

Depending on your jurisdiction (e.g., GDPR, CCPA, PIPL), you may have the following rights:

• Access, correct, or delete your personal data.
• Restrict or object to its processing.
• Request data portability.
• Withdraw consent where applicable.
• Lodge a complaint with a data protection authority.

If you are an authorized user and wish to access, modify, or delete your data, please contact us at: [email protected]. We will respond to your request within 7 business days in accordance with applicable data protection laws.

📩 To exercise your rights, please contact us at: [email protected]. We will respond to your request within 30 days and may require identity verification to protect your account.

10. Security Measures

We implement industry-standard security measures, including:

• AES-256 encryption for data at rest and in transit.
• TLS 1.3 for secure communications.
• Role-based access control (RBAC).
• Regular penetration testing and security audits.
• Zero Trust Architecture.

11. Children's Privacy

Our Services are not intended for individuals under the age of 16 (or other applicable minimum age under local law, e.g., 13 in the U.S., 14 in China).

• If we become aware that we have collected personal data from a child without appropriate consent, we will delete it promptly.
• We do not knowingly market to or collect data from minors without parental/guardian consent.

12. Third-Party Links

Our Services may contain links to third-party websites or services. ⚠️ This Privacy Policy does not apply to those third parties. We encourage you to review their privacy practices independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

• Minor updates will be effective immediately.
• Major changes will be notified via email, in-app notifications, or dashboard alerts.
• The "Last Updated" date at the top of this page reflects the latest revision.

Continued use of the Services constitutes your acceptance of the revised Policy.

14. Contact Us

📧 Email: [email protected]
🏢 Company: Shenzhen Yantu Technology Co., Ltd.