Privacy Policy

1. Information we collect

• Account information: your email address, name, company name, role (customer or supplier), and your language and display currency settings.
• Request and order information: product links and descriptions, quantities, specifications, destination country and city, notes, quotes and order history.
• Supplier information: company name, contact name, country, city, website, phone or WeChat ID, quotes, carton data and product photos you upload.
• Payment records: amounts, dates and references of payments. We do not store full card or bank account numbers.
• Technical information: IP address, browser language, device and browser type, and server logs. We use your IP address and browser language to choose your default language and currency.
• Messages you send us by email or through the Service.

2. How we use your information

We do not sell your personal information, and we do not use it for targeted advertising.

• To provide the Service: create your account, send sign-in links, prepare quotes, place orders with suppliers and arrange delivery.
• To send service emails, such as sign-in links, quote-ready notices and order updates. We do not send marketing emails without your consent.
• To show the Service in your language and currency.
• To keep the Service secure, prevent fraud and fix problems.
• To meet legal, tax and accounting obligations, and to enforce our Terms.

3. Legal bases

Where the law requires a legal basis (for example under Brazil's LGPD), we rely on performance of a contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations, and your consent where we ask for it. You can withdraw consent at any time.

4. Who we share information with

We get exchange rates from Coinbase and open.er-api.com. We do not send them any personal information.

• Suppliers: only what they need to quote and produce your order, such as product details, quantity and destination. We do not give suppliers your name, email or delivery address.
• Logistics partners (including Shipitor) and carriers: the name, address and phone number needed to deliver your order and clear customs.
• Service providers that process data for us: Railway (hosting and database, United States), Resend (email delivery) and Cloudflare (network and security).
• Authorities, when the law requires it, or to protect our rights, our users or the public.
• A buyer or successor if REECARD is involved in a merger, acquisition or sale of assets.

5. Cookies

We use only cookies needed to run the Service: a secure session cookie that keeps you signed in, and cookies that remember your language and display currency. We do not use advertising or third-party analytics cookies, so there is nothing to opt out of.

6. International transfers

We are based in the United States and store data there. Order details may also be shared with suppliers in mainland China and Hong Kong and with carriers in transit countries. When we transfer personal information across borders, we use contractual and technical safeguards and share only what is needed.

7. How long we keep information

• Account information: while your account is open, and for up to 2 years after your last activity.
• Quotes, orders and payment records: up to 7 years, for tax and accounting purposes.
• Sign-in links expire after 15 minutes and can be used only once.
• Server logs: up to 90 days.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses, and to withdraw consent. To make a request, email [email protected] from the address linked to your account. We will reply within 30 days, or sooner if your local law requires it. We will not treat you differently for using your rights.

9. California residents

Under the California Consumer Privacy Act as amended by the CPRA, California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that would require a right to limit. You may use an authorized agent, and we may ask you to confirm your identity. The categories we collect are listed in section 1, the sources are you and your use of the Service, and the purposes are listed in section 2.

10. Brazil (LGPD)

If you are in Brazil, you have the rights in Article 18 of Law 13.709/2018 (LGPD), including confirmation of processing, access, correction, anonymization or deletion of unnecessary data, portability, information about sharing, and withdrawal of consent. You can contact us at [email protected], and you can also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

11. Argentina

If you are in Argentina, you may access your personal data free of charge at intervals of no less than six months, unless you show a legitimate interest, as provided in Article 14, paragraph 3 of Law 25.326. The Agencia de Acceso a la Información Pública, as the control body of Law 25.326, handles complaints about breaches of personal data protection rules.

12. Security

We protect your information with encryption in transit (HTTPS), hashed one-time sign-in tokens, secure httpOnly session cookies and limited internal access. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects you, we will notify you as the law requires.

13. Children

The Service is not meant for anyone under 18, and we do not knowingly collect information from children.

14. Changes to this policy

We may update this policy. We will post the new version on this page and change the date at the top. If a change is significant, we will tell you by email.

15. Contact

REECARD LLC

145 Speckled Alder, Irvine, CA 92618, USA

Email: [email protected]