Cangxin AI — Data Processing Addendum

Version 1.1 (Beta) · Effective date: November 11, 2026

1. Parties and roles

This addendum is part of the Terms of Service between Westwake Inc. ("Platform") and each warehouse business ("Warehouse") and each seller business ("Seller") using Cangxin AI.

Words such as "personal information", "controller", "processor", "service provider" and "business" have the meaning given by applicable US privacy law (for example the CCPA).

2. Instructions

• The Platform processes customer personal information only to provide Cangxin AI as described in the Terms and in the product, on the documented instructions of the Warehouse and the Seller (including the settings they choose), or as the law requires.
• The Platform does not sell or share customer personal information, does not use it for advertising, and does not combine it with other data except as needed to provide the service.
• The Warehouse instructs the Platform on behalf of its Sellers and confirms that it has an agreement with each Seller that is at least as protective as this addendum (see section 11).

3. Confidentiality and access

Only people who need access to provide or secure the service have it, and they are bound to confidentiality. Each customer's data is separated from other customers' data by access rules that are tested automatically.

4. Security

The Platform applies the measures in Annex 2. It may improve them, but will not reduce the overall level of protection.

5. Sub-processors

• The customer authorizes the sub-processors listed on our Sub-processors page.
• The Platform gives at least 30 days' notice by e-mail to account owners before adding a sub-processor that receives customer personal information. The customer may object on reasonable data-protection grounds. If we cannot resolve the objection, the customer may close its account.
• The Platform has contracts with its sub-processors with data-protection terms at least as protective as this addendum, and remains responsible for them.

6. Retention and deletion

• Recipient names, addresses, phone numbers, e-mail addresses, label files and import rows of shipped orders are anonymised at most 30 days after shipment. Country, state and the first 3 ZIP digits are kept for statistics and billing records. The Warehouse can shorten this period to between 1 and 30 days; the software does not allow a longer period or switching the deletion off.
• Packing photos are kept as claim evidence, visible only to the Warehouse, unless the Warehouse chooses to have them deleted with the recipient data. They can show a shipping label.
• Backups are kept for at most 30 days.
• After an account is closed, the Platform deletes or anonymises customer personal information within 90 days, unless the law requires keeping it. The customer can export its data before closing.

7. Requests from individuals

The Platform helps the customer answer requests from individuals (access, deletion, correction) within 30 days of the customer's request, using the functions of the software where possible. If an individual contacts the Platform directly about customer data, the Platform forwards the request to the customer and does not answer it itself unless the law requires.

8. Security incidents

• The Platform notifies affected customers without undue delay after becoming aware of a security incident affecting their personal information, with a target of 72 hours, and sooner where the law requires.
• If Amazon information is involved, the Platform also notifies Amazon within 24 hours of detection, as Amazon's data protection rules require.
• The notice describes what happened, the data and number of records concerned, the steps taken and a contact person.

9. Amazon and other marketplace data

For order data from Amazon (or another marketplace with similar rules), the Platform, the Warehouse and the Seller each:

• use it only to fulfil the orders, calculate charges and meet tax and legal obligations;
• collect and keep only the recipient data needed for that, and delete it as section 6 requires;
• never disclose one seller's data to another seller;
• do not send its recipient data to AI features. The AI assistant never receives recipient names, street addresses, cities, ZIP codes, phone numbers or e-mails. AI-assisted order import sends at most the column headers and up to 20 sample rows of a spreadsheet, with recipient columns and recipient-like values masked (ZIP codes cut to 3 digits), and never sends pasted order text or order photos or PDFs;
• protect it with the measures in Annex 2.

10. Security information

On reasonable written request, at most once a year, the Platform answers a security questionnaire and provides summaries of its written security policies.

11. Between Warehouse and Seller

For the Seller's personal information, the Warehouse and the Seller agree that:

• the Seller is the controller and the Warehouse is the processor;
• the Warehouse processes it only to provide its warehouse services to the Seller, through Cangxin AI;
• sections 2 to 10 apply between them, with "Warehouse" in place of "Platform";
• the Seller authorizes the Platform as the Warehouse's sub-processor.

12. Order of precedence

If this addendum conflicts with the Terms on personal information, this addendum applies.

13. Language

This addendum is written in English. Translations are for convenience only; if a translation differs, the English text applies.

Annex 1 — Processing details

• Subject matter and duration: Cangxin AI services, for the term of the account plus the deletion periods in section 6.
• Nature and purpose: storage, warehouse operations, order fulfilment, label purchase through the customer's own carrier or shipping account, parcel tracking, usage and charge calculation, AI-assisted features, support.
• Individuals: the customer's staff; sellers' staff; parcel recipients.
• Data: names, business contact details, addresses, phone numbers, e-mail addresses, order contents, tracking numbers and scan events, label files.
• Sensitive data: none intended. Customers must not upload identity documents, government ID numbers or financial account numbers where a feature does not ask for them.

Annex 2 — Security measures in place

• encrypted connections (HTTPS) for all traffic;
• backups encrypted with AES-256 on our server before a copy leaves it, kept for at most 30 days;
• access rules separating every customer's data, with automated isolation tests;
• firewall allowing only web and administration access; database not reachable from the internet;
• provider keys stored so that they cannot be read back; secrets kept outside source code;
• written security policies (access control, incident response, key management, data retention, logging, vulnerability management, devices, sub-processors);
• automatic anonymisation of recipient data after the retention period (section 6).