Cangxin AI — Privacy Policy

Version 1.1 (Beta) · Effective date: November 11, 2026

1. Who we are

Cangxin AI is operated by Westwake Inc., 5540 Pal Mal Ave, Temple City, CA 91780 ("we", "us"). Privacy questions and requests: privacy@cangxinai.com.

Cangxin AI is a service for businesses (warehouses and sellers). It is not meant for consumers or for anyone under 18.

2. Two roles

Our own users. For people who visit our site, sign up, or use Cangxin AI as warehouse staff or sellers, we decide how their information is used. This policy explains how.
Data we process for our customers. Warehouses and sellers put their own business data into Cangxin AI, including their customers' (parcel recipients') names and addresses. For that data we act on our customers' instructions as a service provider, under our Data Processing Addendum. If you received a parcel and have a question about your data, please contact the seller you bought from; we will help the seller answer.

3. What we collect

Category	Examples	Source
Account and contact details	name, e-mail, phone (optional), company or store name, warehouse type and address, job title	you
Login and security	password (stored only as a hash), two-step verification settings, login events, IP address, browser data in server logs	you, your device
Acceptance of our terms	which version of the terms and of this policy you accepted at sign-up, when, and from which IP address	you, your device
One-free-workspace check	a random device ID in a cookie; keyed hashes of your e-mail mailbox, phone number, device ID and network	you, your device
Early-access list	company, name, WeChat ID or phone, state, orders per month, current system	you
Business data in a workspace	products, stock, orders, charges, contracts, prepaid balance records kept by warehouses, documents, messages	warehouses and sellers
Recipient data (for customers)	parcel recipients' name, address, phone, e-mail, label files	sellers, warehouses, connected marketplaces
Tracking data	tracking numbers, carrier codes, carrier scan events and their locations	warehouses, sellers, tracking providers
Verification	business documents you upload (for example licence, state registration, DBA, seller's permit, EIN letter), the check result, the owner or authorized-representative confirmation (name, title)	you
Directory and Fulfillment Score	public profile content (only when you publish it), score data, appeals, seller reports (the reporter's identity is kept but never shown to the warehouse and never published), views of private share links	you, the system, sellers
AI features	what you type or upload to the AI features, the AI's answers, an audit record of AI actions	you
Messages to us	e-mails and their content	you

Payments. If you buy AI credits, Stripe processes the payment. Card details are entered directly at Stripe and never reach us; we receive the payment status, amount, card brand and last four digits, and the billing name and e-mail. What we do not collect. We do not collect bank account details. We do not ask for identity documents or selfies, and we do not collect biometric data. Files that our checks recognise as identity documents are refused or not read.

4. Why we use it

to create, run and secure accounts and workspaces, and to provide the features you use;
to enforce one free workspace per business and to prevent fraud and abuse;
to measure usage against the Free plan and show it to you;
to compute Fulfillment Scores, run the directory and apply the published self-service rules (verification, pauses, holds, appeals); some of these decisions are automatic (see section 8);
to send service messages (confirmations, notices, password resets). We do not send newsletters or marketing e-mails;
to provide AI features (section 6);
to comply with the law and enforce our terms.

5. Who receives it

Service providers (sub-processors) that host our servers, store encrypted backups, track parcels or provide AI, under contract and only for these purposes. The current list is on our Sub-processors page.
Other users, when you choose: the warehouses you send a quote request to see your contact details and you see theirs; the warehouse you work with sees your orders, including recipient data, to fulfil them; your public profile is visible to anyone once you publish it; a private share link shows your score to the one seller you name.
Carriers and shipping services, through the warehouse's or seller's own accounts, to buy labels and ship parcels.
Authorities, when the law requires it; and a buyer of our business if it is sold, with notice to you.

We do not sell personal information and do not share it for cross-context behavioral advertising.

6. AI processing

Some features use an AI model provided by Anthropic, PBC (USA), our sub-processor. Our AI Notice explains what is sent, feature by feature. In short:

AI never receives recipient personal data. The AI assistant never receives recipients' names, street addresses, cities, ZIP codes, phone numbers or e-mail addresses.
When orders are imported and our rules cannot map the columns of a spreadsheet on their own, only the column headers and up to 20 sample rows are sent, with recipient names, companies, streets, cities, phone numbers and e-mails masked and ZIP codes cut to their first 3 digits. Pasted order text and order photos or PDFs are never sent.
For other uploads (inbound notices, products, setup data), text is masked the same way before it is sent; photos and PDFs of these documents may be sent as images. They are not expected to contain recipient data.
A warehouse can switch AI off for its uploads ("rules-only import").

7. Cookies

We use only cookies needed for the site to work. We do not use advertising, analytics or tracking cookies, so there is no cookie banner.

Cookie	Purpose	Lifetime
`session_id`	keeps you logged in	ends after a period of inactivity (at most 7 days)
`frontend_lang`	remembers the language you chose	365 days
`wms_ss_device`	random device ID used to enforce one free workspace (not readable by scripts)	400 days
other technical cookies of the underlying Odoo software (for example selected company or time zone)	make the app work	short-lived, technical

8. Automated decisions

The published rules on /self-serve/rules decide automatically whether a warehouse's public profile passes verification, is paused, put on hold or restored, using carrier data and seller reports. These decisions affect only the public profile and directory listing, never the private workspace.
While a profile is paused, the public page shows only "temporarily offline". The reason is told only to the warehouse.
The warehouse can appeal. An automatic appeal outcome is preliminary, and the warehouse can ask for a human review.
Fulfillment Scores are computed automatically by the published method on /score/methodology. The score reflects shipping performance only and is not an assessment of credit, financial condition or legal compliance.
The AI does not make these decisions.

9. How long we keep it

Data	How long
Recipient name, address, phone, e-mail, label files and import rows of shipped orders	anonymised at most 30 days after shipment; country, state and the first 3 ZIP digits stay. A warehouse can shorten the period (1 to 30 days) but cannot lengthen it or switch it off
Packing photos of shipped orders	kept as claim evidence and visible only to the warehouse; they can show a shipping label. A warehouse can choose to have them deleted with the recipient data
Recipient data in AI records	removed after 30 days
AI conversation text	90 days
AI action audit records	1 year (free text kept only as a length and a fingerprint)
Backups (they contain all data)	at most 30 days, encrypted
Security event records (logins, IP addresses)	up to 400 days
Terms acceptance records and the appeals and decisions log	while the account exists, and afterwards as long as we may need them to handle legal claims
Uploaded business documents and other workspace business data	while the account is open; deleted or anonymised within 90 days after it closes
Accounting records	as long as tax law requires
Early-access list	until you ask us to delete it
E-mails to us	up to 2 years after the last contact

10. Security

Encrypted connections (HTTPS) for all traffic.
Backups are encrypted (AES-256) on our server before a copy leaves it.
Each customer's data is separated by access rules that are tested automatically.
Staff access is limited; provider keys are stored so that they cannot be read back.

No system is perfectly secure. We will notify you of a security incident as the law requires. Please report security issues to security@cangxinai.com.

11. Your rights

Depending on where you live (for example California), you may ask to know and access the personal information we hold about you, correct it, delete it, receive a copy, and limit the use of sensitive information. We use sensitive information (such as login credentials) only to provide and secure the service. We do not sell or share personal information, so there is nothing to opt out of. We will not treat you differently for using your rights.

Send requests to privacy@cangxinai.com. We will confirm your identity (usually by e-mail from your account address) and answer within 45 days. You may use an authorized agent. For recipient data, please ask the seller; we will help the seller answer.

12. Where data is stored

Our production servers are in the United States (Hillsboro, Oregon), hosted by Hetzner.
Encrypted backup copies are stored with Cloudflare R2. Cloudflare cannot read them.
Our AI provider processes data in the United States.
If you use Cangxin AI from outside the United States, your information is transferred to and processed in the United States.

13. Changes

We post changes on this page with a new version and date. We tell account owners by e-mail about material changes before they take effect.

14. Language

This policy is written in English. Translations are for convenience only; if a translation differs, the English text applies.

15. Contact

Westwake Inc., 5540 Pal Mal Ave, Temple City, CA 91780, privacy@cangxinai.com.