HIOBuy Developer Platform Privacy Policy

1. Introduction

This Privacy Policy explains how HIOBuy ("we", "us") collects, uses, and protects personal and technical information when you use the HIOBuy Developer Platform, portal, and APIs.

2. Information We Collect

Account information: name, email, company, country, use case, and authentication data (including OAuth identifiers where used).

Technical information: API keys metadata, request logs, IP addresses, user agents, error reports, quota usage, channel authorization status, and integration configuration.

API usage information. We may collect, process, or aggregate information about how your App or integration uses the Services, including API endpoints accessed, API request volume, product search activity, product detail retrieval activity, image search activity, Marketplace channel, App / integration identifiers, request timestamps, rate-limit and quota usage, and API errors or response status information. These analytics are maintained primarily in aggregated form. We do not commit to permanently storing complete API request or response payloads.

Commercial information. We may collect billing details where applicable, plan tier, and commerce-related metrics associated with your integration when reported or measured through the Services. This may include orders created through the Services, paid orders, procurement activity and amounts, transaction currency, gross merchandise value ("GMV"), Marketplace transaction activity, fulfillment or shipment activity where available, and other commerce-related metrics.

3. How We Use Information

We use information to provide and operate the Developer Platform, authenticate users, measure API usage, manage API quotas and rate limits, manage Marketplace API access, monitor procurement and transaction activity, prevent abuse or unauthorized data extraction, detect unusual or disproportionate API usage, support platform security and risk management, plan capacity, review developer accounts, support billing where applicable, comply with legal and Marketplace requirements, improve the Services, and communicate about your account.

HIOBuy may analyze API usage in relation to order, procurement, GMV, and fulfillment activity to evaluate whether an integration is being used consistently with genuine commerce-related purposes, applicable Marketplace requirements, and the HIOBuy Developer Terms of Service.

Certain HIOBuy APIs rely on or interact with third-party marketplaces. We may process and analyze API usage, procurement activity, transaction metrics, and related information as reasonably necessary to comply with applicable marketplace access, usage, quota, security, and data policies.

We may use this information for quota management, account review, abuse prevention, and enforcement of the Developer Terms. This does not mean that access is automatically restricted or that accounts are automatically suspended solely by an algorithmic score.

We may aggregate and anonymize usage data for analytics and service improvement.

4. Sharing

We may share information with infrastructure providers, email delivery services, fraud prevention tools, and marketplace partners as needed to operate the Services, subject to contractual protections.

We may disclose information if required by law or to protect rights, safety, and platform integrity.

We do not sell personal information or Developer Commerce Analytics data. Sharing with marketplace partners or service providers is limited to what is reasonably necessary to operate the Services, process transactions, support procurement or fulfillment, maintain security, or comply with legal or marketplace requirements.

5. Security & Retention

We implement administrative, technical, and organizational measures to protect data, including encryption of sensitive marketplace tokens at rest. No method of transmission or storage is completely secure.

We retain data as long as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements, then delete or anonymize it where feasible.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information. Contact support@hiobuy.com to submit requests.

7. International Transfers

Your information may be processed in countries other than your own. We take steps designed to ensure appropriate safeguards where required.

8. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through the portal or by email where appropriate. Continued use after changes constitutes acceptance.

HIOBuy retains the final right of interpretation of this Privacy Policy to the extent permitted by applicable law.

9. Contact

Privacy inquiries: support@hiobuy.com

10. AI Services and Credits Data

AI services may process submitted product images, text and image URLs, generated or edited output, App and billing-account identifiers, task and request IDs, timestamps, usage and Credits records, purchase and payment references, and necessary security and fraud signals. We use these to perform and recover tasks, deliver results, reserve and settle Credits, investigate errors, administer payments, prevent abuse and meet applicable obligations.

Depending on the enabled function, processing uses Alibaba Cloud Aidge and Cloudflare compute, AI, image-processing and storage services, including R2 and database services. Stripe processes checkout and payment-related risk information. Content and operational data may be processed outside your country, including in China for relevant Aidge processing. This supplement remains subject to the international-transfer provisions and applicable data-protection obligations; it does not establish a guaranteed processing region.

When the Portal Playground uses private storage, access to source images and stored results is checked against the authorized App; the supplier receives a short-lived link limited to the relevant source file. Legacy integrations and images hosted at public URLs may still be readable by anyone who obtains the URL. Use this service only for product materials you are entitled to use that contain no sensitive or confidential information; remove unnecessary personal information before submission.

Temporary inputs, processed files, task records, request or provider logs and billing records have different storage and cleanup needs. We do not promise one fixed deletion period for all of them, or that hiding a result or archiving an App deletes every related record, cached copy or provider-held copy. Access and deletion requests can be made through support@hiobuy.com under the existing rights section; necessary financial, security, dispute or legally required records may need to be retained.

Uniform provider commitments on training use, complete retention terms and all processing locations have not been verified. We do not make an unverified guarantee that providers never use data for model training. If you need a no-training commitment, a specified processing region or a fixed deletion period, contact us to confirm applicable conditions before submitting material requiring those safeguards. This does not reduce any information, protection or other rights required by applicable law.