Privacy Policy

Last Updated: 2026

1. Statement & Operating Entity

The "XYCubic Multi-Carrier Logistics Integration System" (hereinafter referred to as the "Service" or "System") is operated by PIXMA Business Co., Ltd. (雲卡商業有限公司, hereinafter referred to as the "Company"). The Company strictly adheres to the Personal Data Protection Act of Taiwan (R.O.C.) and developer data compliance standards mandated by partner e-commerce platforms (including but not limited to Shopee). This Privacy Policy explains our practices regarding the processing, ephemeral caching, and protection of data.

2. Collection of Account & Technical Data

To maintain core SaaS functions and account authentication, the System records only the minimum necessary data:

• Seller Account Profile: Username, contact email address, phone number, and connected store identifiers provided during registration.
• API Authorization Tokens: OAuth access tokens granted voluntarily by the merchant to sync unfulfilled orders and generate shipping labels in real time.
• Technical Access Logs: IP addresses, browser user-agent strings, and system operation timestamps utilized exclusively for server security monitoring and connection diagnostics.

3. Buyer Personal Data: "1-Hour Ephemeral Cache" & Zero-Persistence Principle

The System functions strictly as a fulfillment layout and batch printing utility. Regarding end-consumer personal data (buyer names, contact numbers, pickup store branches, delivery addresses, and purchased items) ingested via API sync or file imports, we enforce strict zero-persistence and trace-free processing:

• In-Memory & Ephemeral Rendering: Buyer data resides temporarily in server memory and transient cache only for rendering shipping waybills, custom delivery labels, and smart wave picking lists during active print sessions.
• Automated 1-Hour Physical Hard Delete: All transient caches, generated label image assets, and temporary order data tables are physically and irreversibly purged (hard-deleted) by automated backend cleanup routines within 1 hour after generation, print completion, or user session termination. The database maintains zero long-term retention or cold backups of buyer PII.
• Local & Offline Protection: Session caches invalidate immediately upon logging out or closing the workspace, preventing data residues on shared workstations.
• Strict Prohibition of Commercial Exploitation: The Company strictly prohibits selling, leaking, leasing, duplicating, analyzing, or transferring buyer and store data to any third party for commercial purposes beyond immediate print processing.

4. Information Security Measures

All network communications are protected by mandatory high-standard TLS / SSL 256-bit encryption to prevent interception or tampering during transit. Backend server environments enforce the Principle of Least Privilege (PoLP), strict firewall isolation, and regular security patching.

5. Data Subject Rights & Data Deletion Instructions

In accordance with applicable privacy regulations and third-party developer policies, users maintain full control over their personal data:

• Revocation of Store API Access: Sellers can revoke XYCubic's API access permissions at any time directly through the Shopee Seller Centre (or equivalent platform console), immediately terminating all data synchronization.
• Account Deletion & Data Erasure: To request complete account cancellation and removal of all associated merchant profile records, contact our official support email. We will process and execute permanent erasure within 3 business days and send confirmation via email.

6. Policy Updates & Contact Channels

This Privacy Policy may be updated periodically to reflect regulatory revisions or system architecture enhancements. The revised policy takes effect upon publication on this page. For questions or concerns regarding this policy, please reach out to our technical support team: [email protected].