1. Introduction

This Privacy Policy describes how Shuyuan Network Technology Co., Ltd. ("KIDI", "we", "us", or "our") collects, uses, stores, and shares information when you use the KIDI E-commerce Assistant Chrome extension and any related backend services that you choose to connect to (collectively, the "Service").

By installing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please remove the extension and discontinue use.

2. Information We Collect

We collect information in two ways: (a) information stored locally in your browser, and (b) information sent to the KIDI backend you configure.

2.1 Information stored locally in your browser

• Authentication tokens — access and refresh tokens issued by the KIDI backend after you sign in with your phone number. Stored using the standard chrome.storage.local API.
• User profile — your user ID, display name, and workspace ID returned by the backend.
• Extension settings — your UI language preference, knowledge base selection, and the "Fully-Automatic Mode" schedule (working hours, polling interval, daily run cap).
• Saved credentials — if you opt in, your phone number and password are cached locally so you do not have to re-enter them on the next sign-in. You can clear this at any time from the login form.

2.2 Information sent to the KIDI backend

To provide AI-powered reply generation, knowledge-base lookup, and automated buyer messaging, the extension transmits the following to the KIDI backend only when those features are actively used:

• Buyer messages and conversation context from the Amazon Seller Central page you are viewing (used to generate replies).
• Knowledge-base content you author, import, or curate inside the extension.
• Product metadata you choose to import (titles, descriptions, ASINs) when using the "Learn from product pages" feature.

We do not transmit your Amazon password, your device's full cookies, or any data unrelated to the Service.

3. How We Use Information

We use the information described above solely to:

• Authenticate you and maintain your session across browser restarts.
• Generate AI replies grounded in your own knowledge base.
• Run "Fully-Automatic Mode" — fetching "Needs Response" conversations, dispatching AI replies, and respecting your configured working window and daily run cap.
• Sync, preview, and import knowledge entries you have authorized.
• Provide customer support when you contact us.

We do not use your data to train general-purpose AI models, and we do not sell or rent your data to any third party.

4. Data Storage and Security

• Local data is stored in your browser's chrome.storage.local and is never written to disk in plaintext outside Chrome's managed storage.
• Network communication with the KIDI backend is performed over HTTPS/TLS.
• Authentication tokens are short-lived; the refresh token is rotated on use.
• Knowledge-base content is stored in the KIDI backend you configure and is logically isolated per workspace.

No method of transmission or storage, however, is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

The extension integrates with the following platforms' group bot APIs solely to push anomaly alerts to chat groups that you have configured. The extension will only contact a platform's bot webhook when both of the following are true: (a) you have explicitly enabled the "Anomaly Alerts" feature in settings, and (b) you have entered that platform's group bot webhook URL:

• Feishu / Lark (open.feishu.cn) — group bot webhook
• WeCom / 企业微信 (qyapi.weixin.qq.com) — group bot webhook
• DingTalk (oapi.dingtalk.com) — group bot webhook

The payload sent to the bot contains only the alert text generated by the extension based on the detected anomaly (for example, a short message indicating that an API call failed). We do not transmit your authentication tokens, knowledge-base content, Amazon buyer messages, or any other personal data to these platforms.

These integrations are not used for sign-in. Account authentication is performed exclusively against the KIDI backend using your phone number.

The extension also interacts with sellercentral.amazon.com and related Amazon domains to render the AI assistant panel inside Amazon Seller Central. You are bound by Amazon's own terms and privacy practices when using those services.

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — update or correct inaccurate data via the extension's settings page.
• Delete — remove your knowledge-base entries, account, and all associated data. Removing the extension clears all locally stored data immediately.
• Withdraw consent — sign out at any time, which invalidates your authentication tokens.
• Opt out of optional features — Fully-Automatic Mode, "Remember Me", and "Learn from product pages" are all opt-in. You can disable them at any time.

To exercise any of these rights, contact us at the address in Section 9.

7. Children's Privacy

The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will provide additional notice — for example, a banner inside the extension or a notification in the knowledge preview page. Your continued use of the Service after a change constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Company: Shuyuan Network Technology Co., Ltd.
• Email: service@kidi.chat
• Website: https://kidi.chat