DATA PRIVACY & SECURITY · PRIVACY POLICY
Back to Home

Privacy Policy

We protect merchant data assets and commercial confidentiality. This policy explains how we collect, process, encrypt, and safeguard your information.

Terms of ServicePrivacy PolicyRefund Policy
Last Updated: October 14, 2026

1. Scope & Privacy Commitment

This Privacy Policy applies to the Fiktu Web Workspace, AI Visual Tools, and Fatkun Browser Extensions operated by AGINNOV TECHNOLOGY LIMITED ("Fiktu"). We recognize that your product selection library, supplier URLs, and store credentials are confidential business assets. We never sell, rent, or monetize your merchant data with third-party advertisers.

Core Security Commitment: Your product catalog, AI-processed images, and connected marketplace credentials are strictly isolated per tenant and used solely to execute your explicit workflow instructions.

2. Information We Collect

We follow the principle of data minimization and collect only the data required to deliver the features you actively invoke:

  • Account & Identity Data: Email address, encrypted authentication tokens, and workspace language/theme preferences.
  • Product & Media Assets: Product URLs, titles, SKU attributes, and image/video URLs you submit when using Product Collection, AI Image Translation, Watermark Removal, or Video Generation.
  • Marketplace Store Credentials: Encrypted OAuth Access Tokens and API keys when you connect Shopify, Coupang, Temu, Ozon, or Shopee stores in Store Management (/stores).
  • Billing & Transaction Metadata: Order IDs, subscription tiers, and credit ledger records processed via PCI-DSS compliant payment gateways (Airwallex, Stripe, Alipay, WeChat Pay). We never store raw credit card numbers or CVV codes.

3. How We Use & Process Your Data

We process your data exclusively to fulfill your requested operations:

  • Executing OCR text detection, multi-language translation, image inpainting, background replacement, and video synthesis.
  • Synchronizing and publishing structured product listings to your authorized target e-commerce stores via official marketplace APIs.
  • Maintaining your cloud product repository, resumable pipeline states, and credit transaction history.
  • Ensuring platform security, preventing API abuse, and providing customer support.

4. Data Storage, Encryption & Retention

All data in transit between your browser, extensions, and Fiktu cloud servers is encrypted via TLS/HTTPS. Store API tokens and credentials are encrypted at rest with strict tenant isolation.

  • Cloud Product Catalog & Generated Media: Retained while your account remains active; you may delete individual or batch products and media at any time from /products.
  • Temporary Processing Cache: Ephemeral media caches used during AI inference and ZIP packaging are automatically purged on a scheduled basis.
  • Extension Local Storage: UI preferences and filter rules stored in chrome.storage remain local to your browser and are removed upon uninstalling the extension.

5. Subprocessors & Third-Party Services

We share data only with vetted infrastructure subprocessors bound by strict confidentiality obligations:

  • Cloud Hosting & Object Storage (CDN/OSS) for storing merchant catalogs and processed high-resolution product images.
  • Enterprise AI Inference Providers solely to process image/text payloads when you trigger an AI tool (payloads are not used to train public models).
  • Regulated Payment Processors (Airwallex / Stripe / Alipay / WeChat Pay) for subscription and credit checkout.

6. Your Rights & Data Deletion (GDPR / CCPA)

You retain full control over your personal and merchant data, including the right to access, export, revoke authorization, and delete your data:

  • Revoke Store Access: Disconnect any marketplace store immediately in /stores to permanently destroy stored OAuth/API credentials.
  • Self-Service Deletion: Delete any collected products, translated images, or task records directly within the workspace.
  • Full Account Erasure: Email support@fiktu.com to request complete account deletion; all associated cloud data will be permanently erased within 15 business days.