BPS Privacy Policy

Last Updated: November 5, 2026

This Privacy Policy explains how BESTFULFILL LIMITED (“we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you use our dropshipping and print-on-demand (POD) management SaaS web application (the “Service”). The Service is intended for merchants and business users; it is not directed to minors.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

1. Who We Are

BESTFULFILL LIMITED, registered in Hong Kong, is the controller of the account and business information described in this Policy, except where we act as a processor on behalf of merchants (see Section 6).

Privacy contact: info@bestfulfill.com

2. Information We Collect

2.1 Registration and Login

Email registration: email address, email verification code, password, password confirmation, invitation code (optional).

Google account registration and login (OAuth): Google account ID, Google email address, and Google nickname. Authentication is completed via OAuth redirect; tokens are exchanged server-side.

Shopify embedded login: Shopify-issued id_token and session token, and shop domain, used to establish your session automatically.

Account profile cached locally after login: user ID, name, email, phone number, merchant ID (merchant_id, oms_merchant_id), account role (Owner or Staff), settlement currency, account balance, and contact information.

2.2 Account Profile and Settings

Information you maintain in settings, such as name, phone number, contact information, settlement currency, and organization time zone. Team member management involves member email addresses, roles, and permission assignments.

2.3 Store Binding and Authorization

Store information you bind to the Service (shop domain, store identifier) and authorization tokens, used to retrieve order, product, and logistics data.

2.4 Order Fulfillment (Including End-Consumer Information)

When merchants process orders through the Service, we process order data and the recipient information of end consumers (buyers) contained in those orders: recipient name, shipping address, contact phone number, tracking number, and logistics status.

The purpose of this processing is to complete the fulfillment services entrusted by merchants (purchasing, quality inspection, packing, and handover to carriers). In this context, the merchant is the controller of its store’s consumer data and is responsible for obtaining any necessary authorizations. We act as a processor and process such data only to the extent necessary for fulfillment. See Section 6.

2.5 Products and Procurement

Product information, product mapping relationships, and procurement and inventory data, used for product selection, listing, and fulfillment management.

2.6 Finance and Payments

Account balance, top-up records, and billing details. Top-ups are processed through our fund service (fund.bestfulfill.tech) and payment callbacks (pay-callback), involving payment transaction information.

2.7 Usage and Diagnostic Data

Behavioral analytics data: page views, clicks, dwell time, referral source, device, and IP information collected by Sensors Analytics and Google Analytics 4 (see Section 3).

Error diagnostic data: exception stacks and context collected by Sentry.

Channel attribution parameter bps_ref: captured from the URL and stored in browser local storage for 14 days to identify promotional channel sources.

2.8 Customer Support, Tickets, and Reviews

Zhichi customer service session content, attachments, and contact details you voluntarily provide.

Ticket content in our ticketing system (ticket-api.bestfulfill.tech).

Email address, name, and merchant identifier submitted through Trustpilot reviews.

3. SDKs and Third-Party Services

The following SDKs and third-party services are integrated into the Service. Where required, they load only under the conditions described.

SDK notes:

Wujie micro-frontend framework (v1.0.29): runs only locally in the browser and does not transmit data to third parties; it is not listed in the SDK disclosure table. Internal sub-applications it hosts are described in the “Sharing” section.

On-demand loading: GA4 loads only in production after a measurement ID is configured; Shopify App Bridge loads only in embedded mode. The Trustpilot embedded component is not displayed in certain scenarios and can be permanently dismissed by the user.

4. Third-Party Account Authorization (OAuth, Not SDK Loading)

The following capabilities are enabled through OAuth authorization flows. No analytics SDKs of the relevant platforms are loaded on the front end during these flows. Each platform’s privacy policy applies:

Google account login and registration: OAuth redirect; tokens exchanged server-side; we obtain the Google account ID, email address, and nickname.

Google Ads account binding: after the merchant voluntarily authorizes, we obtain an ad account access token to display marketing data (connect-account module).

Shopify authorization and embedded installation: store authorization, installation callback, and embedded session token exchange (bps/auth and the embedded onboarding flow).

Ad attribution and tracking settings: integrated with our ad attribution service (attribution.bestads.com), hosting the tracking-settings sub-application and ad data APIs.

5. How We Use Information

We use the information described above to:

I. Providing, Maintaining, and Improving Core Services

1. Account Authentication and Login To create and manage your account, verify your identity, and ensure account security, we collect your email address (for password recovery or login notifications), and account password (stored in encrypted format). If you choose to log in via a third-party platform (e.g., Google, Shopify), we will obtain your unique identifier, profile picture, and nickname from that third party to bind to your local account. Refusing to provide your email will prevent you from completing registration or logging in.
2. Order Fulfillment and Product/Inventory Management When you place an order for products or services, we collect the recipient’s name, contact number, shipping address, order item details, order time, and order amount to identify order validity, fulfill deliveries, and update inventory. During the delivery process, we share the above necessary shipping information with our logistics partners to complete package delivery and provide status updates. Refusing to provide shipping information will prevent us from completing the delivery.
3. Store Management (For Merchant/Seller Users) If you join our platform as a merchant, we collect your entity name, business registration number, business address, contact person information, and bank account details to complete store activation, qualification review, and settlement. Such information is necessary to fulfill the platform entry agreement and statutory obligations (e.g., tax compliance).
4. Financial Settlement and Payment Processing To complete transaction settlements, refunds, and reconciliation, we record your payment method, payment transaction ID, transaction amount, and transaction time. Sensitive information such as payment card numbers or third-party payment account details is processed directly by our partner payment institutions; we only receive payment results and desensitized transaction identifiers.
5. Product Analytics and Service Optimization To track feature usage, diagnose performance issues, and improve interface design, we use Sensors Data and Google Analytics 4 (GA4) to collect your device model, operating system version, browser type, IP address, page navigation paths, click events, and feature dwell time. The above data is used for analysis in an aggregated or de-identified manner and will not be used to identify you personally. You can limit certain tracking through your browser settings or by logging out, though this may affect the precision of our experience optimization.

II. Customer Support

1. Online Customer Service and Ticket Processing When you contact customer service or submit a support ticket, we collect your account ID, order number, communication content (text/images/audio/video), and contact information to verify your identity, locate the issue, and document the resolution. Call or chat records will be retained for a necessary period for quality assurance and dispute resolution. Refusing to provide order information may prevent us from verifying specific transaction details.
2. After-Sales and Return/Exchange Processing When processing return, exchange, or repair requests, we may require you to provide the reason for the return/exchange, photos/videos of the product issue, and the return tracking number. For refunds, we need to verify your receiving account information (processed by the payment institution). Such information is necessary to fulfill our after-sales service obligations.

III. Marketing and Interaction (Optional; Refusal Does Not Affect Core Functions)

1. In-App Marketing Display To assist you in promoting your products, we will display your product information, promotional activities, coupons and store updates on the platform (such as the homepage recommendation section, associated recommendations on product detail pages, store pages, internal messaging/notification center, marketing tags in search results, etc.).
2. Service Review Invitations (Trustpilot) After an order is completed or a service ends, we may send you an email inviting you to review the service on Trustpilot. For this purpose, we will provide your email address and order number to Trustpilot (to verify the authenticity of the review). The invitation email will include a clear unsubscribe link, allowing you to opt out at any time and stop receiving such invitations.
3. Marketing Emails and Unsubscribing If you subscribe to marketing emails, we will use your email address to send product updates, promotional offers, and other information. Every marketing email includes an “Unsubscribe” link at the bottom; clicking it will immediately remove you from the marketing email list. Please note that unsubscribing from marketing emails does not affect your receipt of service-related notifications, such as order status updates and account security alerts.

IV. Security Assurance

1. Identity Verification, Session Protection, and Risk Detection To prevent account theft, fraud, and abnormal transactions, we collect login IP addresses, login times, device identifiers, and browser fingerprints, and analyze your operation frequency and transaction patterns to identify abnormal behavior. When high-risk rules are triggered (e.g., login from an unusual location, multiple high-value orders in a short time), we may require secondary verification (e.g., SMS verification code).

V. Fulfilling Legal Obligations and Protecting Legitimate Rights

1. Legal Compliance and Dispute Resolution In the following circumstances, we will retain and use necessary personal information:

• Tax and Auditing: Retain transaction records and invoice information (invoice title, taxpayer identification number, receiving email) for the statutory period as required by laws and regulations.
• Cooperation with Regulatory/Judicial Authorities: Provide requested account information, order records, and fund flows upon receipt of valid legal documents (e.g., court investigation orders, regulatory inquiries).
• Dispute Resolution: Use communication records, transaction logs, and logistics delivery receipts as evidence when you or a third party has a dispute with us, to protect our or your legitimate rights and interests.

6. Order Fulfillment and End-Consumer Data (Important)

When merchants use the Service to fulfill orders, we process order data and the recipient information of end consumers (buyers), including recipient name, shipping address, contact phone number, tracking number, and logistics status.

We process this data solely to perform the fulfillment services entrusted by the merchant (purchasing, quality inspection, packing, and handover to carriers). The merchant is the controller of its store’s consumer personal information and must obtain any necessary authorizations from consumers. We act as a processor and process such data only to the extent necessary for fulfillment.

7. Sharing and Disclosure

We do not sell personal information. We share information with the following recipients and for the following purposes:

We may also disclose information where required by law, to respond to lawful requests, to protect our rights and the safety of users, or in connection with a merger, acquisition, or sale of assets (subject to appropriate safeguards).

8. Local Storage and Cookies

You can restrict or clear cookies and local storage through your browser settings. Note that restricting them may affect subsequent analytics and the availability of some features.

9. Data Security

1. Full-site transmission encryption (HTTPS) Our website and all pages involving the transmission of personal information are enabled with HTTPS encryption transmission. Through the TLS protocol, the communication content between the client and the server is encrypted to prevent your account information, order information, payment instructions, etc. from being eavesdropped on, intercepted, or tampered with by man-in-the-middle attacks during transmission.
2. Password security handling Your account password is only used for transmission during the login and registration processes. The front-end page will not cache or retain the password in plaintext form. The password is protected by HTTPS encryption during transmission, and the server stores it in an irreversible manner. We do not have your plaintext password. We recommend that you set a strong password and avoid using it repeatedly on multiple platforms.
3. Embedded session security (Shopify embedded scenarios) When you use this service through the Shopify embedded environment, we verify the session token, check the validity of the id_token, and verify the matching relationship of the authorization token to ensure that the session is consistent with the current user identity, preventing the embedded session from being forged, hijacked, or misused, and ensuring the security of your account and operations in the embedded scenario.
4. Evaluation data integrity protection (Trustpilot) When submitting evaluation-related data to Trustpilot, we sign the request using the HMAC-SHA256 algorithm on the server side before submitting it. The recipient can verify the source and integrity of the data through the signature to prevent the request from being tampered with or forged during transmission, ensuring the authenticity and reliability of the evaluation data.

10. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Retention periods vary by data category as set out below. When a retention period expires, we delete or irreversibly anonymize the data, unless a longer period is required by law or for the establishment, exercise, or defense of legal claims.

1. Account and Profile Data Data: user ID, name, email, phone number, merchant ID, account role, settlement currency, contact information, team member records. Retention: for the duration of the account relationship, and for [24 months] after account closure or the last activity, after which it is deleted or anonymized, except where retention is required for legal, tax, or dispute-resolution purposes.
2. Login and Session Data Data: login tokens and cached account profile in browser local storage (app-store). Retention: on the client, until logout or until the user clears browser data. Server-side session and authentication logs are retained for [6 months] for security and fraud-prevention purposes.
3. Store Binding and Authorization Data Data: shop domain, store identifier, authorization tokens. Retention: for as long as the store remains bound to the Service; authorization tokens are deleted or revoked within [30 days] after unbinding. Associated order/product/logistics data follows the periods in 10.4 and 10.5.
4. Order Fulfillment Data (Including End-Consumer Information) Data: order data and recipient name, shipping address, contact phone number, tracking number, and logistics status. Retention: for as long as necessary to complete fulfillment, and thereafter for [the period required by applicable law or contract, generally 3–7 years] to meet tax, accounting, consumer-protection, and dispute-resolution obligations. Where we act as a processor, the retention period is determined by the merchant’s instructions and our agreement with the merchant. After the applicable period, data is deleted or anonymized.
5. Product, Procurement, and Inventory Data Data: product information, product mapping, procurement and inventory records. Retention: for the duration of the business relationship and for [3 years] thereafter for audit and reconciliation purposes, then deleted or anonymized.
6. Finance and Payment Data Data: account balance, top-up records, billing details, payment transaction information. Retention: for [7 years] or such longer period as required by applicable tax, accounting, and anti-money-laundering laws, after which it is deleted or anonymized.
7. Behavioral Analytics Data (Sensors Analytics, GA4) Data: page views, clicks, dwell time, referral source, device and IP information, anonymous device identifier, account identifier. Retention: analytics data is retained in our analytics systems for [14 months] (or the period configured in the relevant tool), after which it is deleted or aggregated. GA4 cookie lifetimes follow Google’s defaults (approximately 13–24 months) and can be cleared by the user at any time via browser settings.
8. Error Diagnostic Data (Sentry) Data: error stacks and context, exception page URLs, device information, account identifiers, IP address. Retention: [90 days] by default, unless a longer period is needed for a specific investigation, after which it is deleted or anonymized.
9. Channel Attribution Data Data: bps_ref attribution parameter stored in browser local storage. Retention: 14 days in the browser, after which it expires automatically.
10. Customer Support, Tickets, and Reviews Data: Zhichi customer service session content and attachments, ticket content, contact details, Trustpilot review data (email, name, merchant identifier). Retention: customer service sessions and tickets for [3 years] after the case is closed; review records for [3 years] or as required by the review platform’s terms, after which they are deleted or anonymized.
11. Marketing and Consent Records Data: marketing subscription status, unsubscribe requests, consent records. Retention: for as long as the marketing relationship continues and for [3 years] after unsubscribe or objection, to demonstrate compliance with applicable marketing laws.
12. Legal and Compliance Records Data: records required for legal claims, regulatory requests, or compliance obligations. Retention: for the period required by applicable law or until the relevant matter is finally resolved, whichever is longer.
13. Aggregated and Anonymized Data We may retain aggregated or anonymized data that no longer identifies an individual for analytics and service-improvement purposes for as long as needed, as such data is not subject to the deletion obligations above.
14. Deletion Requests Where you exercise your right to deletion (see Section 11), we will delete or anonymize the relevant data within [30 days], subject to any legal retention obligations. Where we act as a processor, we will forward the request to the relevant merchant controller as appropriate.

11. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access and correction: you can view and update account information via in-app customer service, tickets, or the settings page.
• Deletion and account closure: you may request deletion of personal information or closure of your account through customer service or a ticket.
• Control analytics and cookies: you can restrict or clear cookies and local storage via browser settings.
• Dismiss review invitations: the Trustpilot component can be dismissed with one click, and the dismissal is remembered.
• Unsubscribe from marketing: marketing emails include an unsubscribe link.

If you are located in the European Economic Area, the United Kingdom, or certain U.S. states, you may also have the right to data portability, to object to processing, and to lodge a complaint with a supervisory authority, as provided by applicable law.

If you are in the European Economic Area (EEA): You additionally have the rights of data portability, the right to object to processing based on legitimate interests, the right to restrict processing, the right to be free from automated decision-making, and the right to file a complaint with the local data protection authority.

If you are in the United Kingdom: You additionally have the right to file a complaint with the ICO; for significant decisions based solely on automated processing, you can request reconsideration or a new decision within 1 month after receiving the notification.

If you are in California, United States: You additionally have the rights to opt out of the sale/sharing of your data, the right to restrict the use of sensitive personal information, and the right to be free from discrimination. You can exercise the right to opt out through [link/entry].

If you are in other states in the United States that have comprehensive privacy laws (such as Virginia, Colorado, Connecticut, etc.): You can exercise the rights of confirmation, access, correction, deletion, data portability, and opting out of targeted advertising; if we reject your request, you can appeal within the legal period.

To exercise your rights, contact us at info@bestfulfill.com.

12. International Data Transfers

Some of our service providers are located outside your jurisdiction (see Section 7). Where we transfer personal information internationally, we implement appropriate safeguards as required by applicable law, such as standard contractual clauses.

13. Children

The Service is intended for merchants and business users and is not directed to minors. We do not knowingly collect personal information from minors.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via in-app announcement or email. Updated versions take effect on the date of publication.

15. Contact Us

BESTFULFILL LIMITED

Email: info@bestfulfill.com