This Privacy Policy applies to KaiwuERP, a service operated by SKYCOLORFULLIFE ONLINE STORE. KaiwuERP is also presented as KAIWU AI Business OS ("KAIWU", "we", or "us"). This policy applies to the KaiwuERP web and desktop applications and the business integrations that an authorized administrator connects to the service in the Philippines.

• Account and company data: authorized user identity, role, company profile, settings and security events.
• Session data: the essential session cookie used to keep an authorized user signed in and protect access to company information.
• Facebook and Messenger data: connected Page identifiers and names, Page-scoped user identifiers, profile information supplied by Meta, messages, attachments, timestamps, delivery/read events and platform error status.
• Optional Meta interaction data: Page posts, comments, live interactions or lead-form records only when the corresponding feature is enabled and Meta has granted the required permission.
• Business records: customer and supplier details, products, orders, inventory, receipts, payment evidence, files and the audit history needed to operate the authorized company account.
• Technical data: request identifiers, security events and diagnostic information needed to protect and operate the service.

We process information to provide the requested ERP, customer-service and integration features; connect an authorized Facebook Page; receive and reply to Messenger conversations; maintain business records; prevent duplicate or unauthorized activity; enforce company and role boundaries; provide support; and meet security, accounting, audit and legal obligations.

KAIWU does not use public comments, names or phone numbers to silently create or merge customers, orders or payment records. Sensitive business actions require an authorized user and the applicable server-side permission checks.

Information is available only to authorized users of the connected company and to service providers required to operate KAIWU, such as hosting, storage and security providers. Meta processes Facebook and Messenger data under Meta's own terms and privacy policy. If a company administrator enables an AI provider, the authorized context needed for the requested AI feature may be sent to that provider. KaiwuERP is not used to sell personal information or advertising audiences.

We retain data only for as long as needed to provide the connected company account, preserve security and auditability, resolve disputes, and comply with applicable accounting or legal duties. Integration credentials are retained only while the connection is active or while needed to complete a secure revocation. Disconnecting a Page stops future collection from that connection but does not rewrite legitimate historical business or audit records.

Deletion requests are reviewed against the relevant company relationship and legal obligations. Data that must be preserved as an accounting, fraud-prevention or audit fact may be restricted or de-identified instead of being silently erased. Residual copies may remain in backups until the applicable backup-retention period ends.

KAIWU uses HTTPS, access controls, company isolation, server-side authorization, protected private-media access, audit logs, encrypted integration credentials and webhook signature verification. No security measure is perfect, but we limit access and investigate suspected unauthorized use.

Depending on applicable law and the business relationship, a person may request access, correction, restriction, export or deletion of personal information. An authorized administrator may also disconnect a Facebook Page from KAIWU without deleting historical business facts.

Meta may submit a signed deletion request to our registered callback at https://kaiwuerp.com/api/integrations/meta/data-deletion. This callback accepts verified requests from Meta and is not a general-purpose form. Individuals may contact us by email below. Requests are registered, verified and reviewed before any deletion or anonymization is performed.

KAIWU is a business operations service and is not directed to children.

We may update this policy when our services or legal obligations change. The current version and effective date will remain available at this address.

For a privacy and security request, email 977900270lzc@gmail.com. Please do not send passwords, access tokens, full payment credentials or unnecessary identity documents by email.

本隐私政策适用于 KaiwuERP；KaiwuERP 是由 SKYCOLORFULLIFE ONLINE STORE 运营的服务。 KaiwuERP 在系统内也会显示为 KAIWU 开物智能商业操作系统（以下简称“KAIWU”或“我们”）。 本政策适用于 KaiwuERP 网页端、桌面端，以及经授权管理员连接到该服务的业务集成；运营国家为菲律宾。

• 账号与公司资料：获授权用户身份、角色、公司资料、系统配置和安全事件。
• 会话信息：维持获授权用户登录状态并保护公司资料访问所必需的会话 Cookie。
• Facebook 与 Messenger 数据：已连接主页的标识和名称、主页范围用户标识、Meta 提供的资料、消息、附件、时间、送达/已读事件及平台错误状态。
• 可选 Meta 互动数据：只有在相应功能已启用且 Meta 已授予所需权限时，才处理主页帖子、评论、直播互动或潜在客户表单记录。
• 业务记录：客户和供应商资料、商品、订单、库存、收款、付款证据、文件，以及运营获授权公司账号所需的审计历史。
• 技术信息：保障服务安全与运行所需的请求编号、安全事件及诊断信息。

我们仅为提供用户请求的 ERP、客户服务和集成功能而处理信息，包括连接获授权的 Facebook 主页、 接收并回复 Messenger 会话、维护业务记录、防止重复或越权操作、执行公司与角色隔离、提供支持， 以及履行安全、会计、审计和法律义务。

KAIWU 不会仅凭公开评论、姓名或手机号静默创建或合并客户、订单或收款记录。敏感业务操作必须由 授权人员确认，并再次通过服务端权限校验。

信息仅向已连接公司的授权用户及运行 KAIWU 所必需的托管、存储和安全服务提供商开放。 Facebook 与 Messenger 数据同时受 Meta 自身条款和隐私政策约束。如果公司管理员启用 AI 服务， 系统可能向相应提供商发送获授权且完成所请求 AI 功能所需的上下文。KaiwuERP 不用于出售个人信息或广告受众。

我们仅在提供已连接公司账号、维护安全和审计追溯、解决争议及履行适用会计或法律义务所需期间保留数据。 集成凭据只在连接有效期间或完成安全撤销所需期间保留。断开主页连接会停止从该连接继续收集数据， 但不会改写合法形成的历史业务和审计事实。

删除请求将结合相关公司关系和法律义务进行审核。依法必须保留的会计、防欺诈或审计事实，可能采取限制访问 或去标识化处理，而不是静默删除。残留副本可能在适用的备份保留期结束前继续存在于备份中。

KAIWU 使用 HTTPS、访问控制、公司隔离、服务端授权、私有媒体受控访问、审计日志、集成凭据加密和 Webhook 签名校验等措施。任何安全措施都无法保证绝对无风险，但我们会限制访问并调查疑似未授权使用。

根据适用法律及业务关系，相关人员可以申请访问、更正、限制、导出或删除个人信息。获授权管理员也可以将 Facebook 主页与 KAIWU 断开，而无需删除历史业务事实。

Meta 可向我们登记的回调地址 https://kaiwuerp.com/api/integrations/meta/data-deletion 提交已签名的删除请求。该地址只接收 Meta 已验证的回调，并非面向公众的申请表单；个人申请请使用下方邮箱。 系统会先登记、验证并人工复核，再执行适当的删除或匿名化处理。

KAIWU 是面向商业运营的服务，不以未成年人为目标用户。

服务或法律义务发生变化时，我们可能更新本政策；当前版本及生效日期会持续在本地址公开。

如需提交隐私或安全申请，请发送邮件至 977900270lzc@gmail.com。 请勿通过邮件发送密码、访问令牌、完整支付凭据或非必要身份证明文件。