Privacy & Data Rights

1. What this document covers

This document explains how ShopLink AI handles information when you use shoplinkai.com, Mr.Host, BOX products, sourcing coordination and connected integrations.

2. Data we may process

Depending on how you use the service, we may process:

• account data such as name, email, phone and login information;
• chat messages, tasks, Working Contracts, files and agent memory needed for your workflow, including the AI action log described in the Mr.Host AI Agent Agreement;
• business information you provide, such as products, customers, positioning and content plans;
• sourcing and factory-coordination data, such as RFQs, quotations, sample records and communication with manufacturers in the ShopLink Factory Network, conducted on your behalf under the Sourcing & Factory Representation Agreement;
• integration information, including identifiers, permissions and credentials/tokens required to connect authorized services;
• payment and order information such as BOX tier, amount, duration, payment status and transaction reference;
• technical information such as device, browser, IP, session and security logs.

3. Why we use the data

We process data to provide the service, authenticate users, keep the agent context, execute requested workflows, coordinate sourcing and factory communication, connect integrations, process payments, prevent abuse, provide support and improve reliability.

4. Connected integrations

When you connect a third-party service, ShopLink AI may receive and use data that the service makes available within the permissions you approved. We use that access to perform the requested integration functions.

You can revoke access from ShopLink AI where the product provides that control and/or directly from the connected provider's account settings.

5. Sharing, including cross-border transfers

We may use infrastructure, payment, communication, analytics, sourcing/factory-coordination and integration providers to operate ShopLink AI. They may process information on our behalf according to their role and applicable terms.

Because ShopLink AI coordinates with manufacturers, fulfillment partners and service providers located both inside and outside Vietnam, information relevant to your project (for example, a specification shared with a factory, or an order shared with a US fulfillment partner) may be transferred outside Vietnam as needed to perform the work you requested.

We may also disclose information when required by law, to protect users or the service, or as part of a legitimate corporate transaction subject to appropriate safeguards.

6. Retention

We retain information for as long as reasonably needed to provide the service, maintain account, sourcing and payment records, resolve disputes, meet legal obligations and protect security. Different data categories may have different retention periods.

7. Your controls and deletion

You can ask us to access, correct or delete personal data associated with your account, subject to legal and technical limitations.

To request deletion, email support@shoplinkai.com from the address associated with the account and write Data deletion in the subject. Include enough information to identify the account. We may need to verify the request before deletion.

Deleting data does not require us to remove records that must be kept for legal, accounting, anti-fraud, sourcing-audit or dispute purposes.

8. Cookies and local storage

ShopLink AI may use cookies, local storage and similar technologies for login sessions, language/theme settings, security, preferences and service operation.

9. Security

We use reasonable technical and organizational measures to protect service data. No online service can promise absolute security. Users should protect their login methods and connected accounts.

10. Contact and updates

Privacy requests: support@shoplinkai.com

Legal contact: mrhost@shoplinkai.com

We may update this document when the product or legal requirements change. The effective date below identifies the current version.

Version: 4.0

Effective date: 15 September 2026