AinFad Privacy Policy
Who we are
AinFad is operated by Suzhou Pinzheng Textile & Garment Co., Ltd. We are responsible for the personal information described in this policy. Contact jason@ainfad.vip for privacy questions or requests. This policy explains how our iOS app and connected account, checkout, payment, order, delivery and support services handle your information. Your account and account-linked records use the shared AinFad account service.
Account and contact information
You can browse products without an account. An account is required to continue checkout and view your orders. We collect your email address, account identifier and account creation information, and store a salted password hash rather than a plain-text password. When you save an address or submit checkout, we collect the recipient name, contact email, street address, city, region, postal code and country. A contact phone number is collected when requested for payment verification or delivery. Your address book also stores the label you enter, such as Home or Work, and your default-address choice. We use these details for your account, order and delivery, not for marketing.
Checkout and order information
When you select Continue to payment, we send your selected products, colours, sizes, quantities and delivery information to our service and create a checkout record associated with your account. We record checkout and order identifiers, prices, delivery charges, applicable taxes, totals, currency, timestamps and status history. This happens even if you have not saved the address to your address book. Closing the payment screen does not itself erase the checkout record. Unconfirmed checkout records are not displayed in My Orders. Orders also include payment and refund references, delivery updates, and cancellation or return requests. Editing a saved address does not change the address already recorded for an order.
Payments and bank verification
We use Airwallex to process card and Apple Pay payments and refunds. When you use the payment components, payment information is transmitted securely to Airwallex and, where needed to complete or authenticate the payment, the relevant banks, card networks and payment services. This information includes cardholder and billing details, card number, expiry date and security code for a card payment, or an encrypted payment token and contact details you authorise for Apple Pay. A card issuer may request additional authentication through 3D Secure. Follow the issuer’s verification instructions and do not send banking passwords or verification codes to AinFad support. Airwallex also processes information under its own privacy policy, linked below.
Payment records we keep
Our order database and application logs do not retain full card numbers or security codes. We keep the payment-provider customer or transaction identifiers, the payment method or transaction token reference, card brand and last four digits where returned, amounts, currency, payment and refund status, and relevant timestamps. These records support order confirmation, reconciliation, refunds, dispute handling and prevention of duplicate charges. Payments are one-off purchases; we do not enable a saved-card or recurring-payment agreement through this checkout. A transaction reference does not authorise a new purchase.
Payment security and service analytics
Airwallex payment components collect information about payment-service use and device characteristics to operate the payment flow, prevent fraud and improve their services. This includes device identifiers, device type, operating-system and SDK versions, payment-component interactions, and customer or session identifiers associated with the payment. We disclose these practices together with our own data handling. We do not use payment or device information for advertising, sell it to advertisers, or use it for cross-company advertising tracking. Optional processing that requires consent is subject to the choices described below.
Delivery and fulfilment
We share the information needed to prepare, dispatch and deliver your order with our fulfilment and delivery providers. This can include your order reference, purchased items, recipient name, delivery address, and contact email or phone number where needed for delivery or customs processing. Providers return delivery references, tracking events and delivery status for order lookup and support. They do not receive your account password or full payment-card details. Information collected through Apple Pay is used and shared only to facilitate or improve delivery of the goods and services you request.
Customer support
Cancellation, return and refund requests contain the request type, reason, order reference, status and correspondence needed to resolve the request. If you choose Write an email, the app opens an editable draft in your mail app and does not send it automatically. When you send an email, we receive the sender address, message, order references and any attachments you choose to provide. We use these details to answer your request, handle after-sales matters and maintain necessary records. Do not send passwords, full card numbers, security codes or bank verification codes.
Information handled on your device
The shopping bag and app-entry preference are stored on your device. Local product searches, recently viewed products and checkout edits that have not been submitted remain on your device. Login and refresh credentials are stored in the device Keychain, and product images may be cached. Selected bag items and checkout details are transmitted when you continue to payment. Payment information entered into Airwallex components is transmitted as described above; it is not limited to local processing. We do not upload your local search history or recently viewed list as an advertising or recommendation profile.
Service and security information
Requests expose IP and network information to our hosting and infrastructure providers. We use short-lived hashed IP and email rate-limit keys to prevent abuse. Service logs can include request paths, response status, timestamps, network information and error details used to operate, secure and troubleshoot the service. We do not intentionally record passwords, access tokens, full address payloads, full card numbers or security codes in logs. Payment-provider device and risk data is handled separately as described in this policy.
Why we use information
We use information to create and secure accounts, provide saved addresses, calculate checkout totals, process and confirm payments, maintain order history, arrange delivery, handle refunds and after-sales requests, prevent fraud, diagnose service problems and meet applicable legal obligations. Payment-service usage information is also used for the service analytics described above. We do not use this information for advertising, unsolicited marketing or personalised product recommendations. Where applicable, processing is necessary to provide the services you request, fulfil legal duties or protect service security; where consent is required, we obtain it before the relevant processing.
Sharing and international processing
Authorised staff and our hosting, infrastructure, email, payment and fulfilment providers process only information relevant to their roles. We require service providers acting for us to protect personal information appropriately, restrict its use to agreed purposes and apply protections consistent with this policy and applicable requirements. Airwallex, banks, card networks and some delivery providers also have independent legal duties and privacy notices. We may disclose necessary information to comply with law or protect legal rights. We do not sell personal information or share it with data brokers for advertising. Our primary application server is in Singapore. Information may be accessed by our operating company in China and processed in countries where our service providers operate. We apply legally required safeguards to international transfers; contact us for information about the safeguards relevant to your request.
Retention
We keep account information while your account is active and saved addresses until you remove them or delete your account. Unpaid checkout drafts with no payment attempt, pending funds or unresolved matter are removed within 30 days after their last activity. Records with an unresolved payment or support matter are protected until the matter is resolved. We keep order information to provide order history, fulfilment and after-sales service. Minimum references for real payments, refunds and chargebacks that support our accounting records are retained for 30 years from the beginning of the calendar year following the relevant financial year, under the accounting requirements applicable to our operating company. These restricted references contain the order and provider reference, transaction type, amount, currency and dates; they do not include account passwords, delivery addresses, full card numbers or security codes. Deleting your account removes its link to those references. At the end of the retention period, records are reviewed for disposal; an unresolved legal or accounting matter can require continued restricted retention. The original accounting archive follows its applicable appraisal and disposal procedures.
Backups, logs and support records
Our restricted rolling database backups, operational and security logs, and deletion or privacy-request completion protection records are kept for no more than 30 days. Protection records contain an identifier and completion time, not a copy of correspondence, and prevent restored backups from reactivating deleted accounts or completed privacy requests. Account deletion creates a restricted support follow-up task so that authorised staff can review related mailbox correspondence. The task temporarily retains your contact email while it is being handled, and clears it when the task is completed. Completed task records are removed within 30 days. We aim to complete privacy follow-up within 30 days, or sooner where required by law, and explain any lawful extension. An unresolved request remains restricted and is escalated rather than automatically marked complete. Support correspondence that is no longer necessary is deleted or anonymised; legally required material is transferred to restricted records with its retention basis and deadline. Staff verify your authority before acting on mailbox records; an unverified account email is not proof of mailbox ownership. Airwallex and other independent providers retain information under their own notices and legal obligations; our 30-day service limit does not apply to their records.
Delete your account
Open Me → Account → Delete account, enter your current password and confirm. Keep the app open until it reports the result. Successful deletion immediately removes your login account and saved address book, revokes all sessions using the shared AinFad account service, and removes associated personal information that is not required for a legal obligation or your privacy-request follow-up. It clears this device’s shopping bag and recent views; other devices’ local guest bags are not remotely erased. Minimum legally required transaction references remain restricted under the retention rules above. The separate support follow-up does not block account deletion and temporarily retains the contact details needed to process your request. Deleting your account does not itself cancel a purchase, stop a delivery or request a refund. You can still contact support with an order reference to resolve an outstanding order or after-sales request. You do not need to contact support to initiate normal in-app account deletion.
Your choices and rights
You can browse without signing in, edit or delete saved addresses, choose whether to make a purchase, and initiate account deletion in the app. Depending on where you live, you may request access, correction, a copy, deletion or restriction of your information, object to eligible processing, withdraw consent where processing relies on consent, or complain to a privacy regulator. Withdrawing consent does not change processing already carried out lawfully. You can manage available optional choices in the relevant service or contact jason@ainfad.vip; we will explain the effect and any lawful limitation. Declining optional uses does not prevent essential account or shopping functions. If you cannot sign in, email us for help. We verify identity proportionately, never ask for your password or full card details, and respond within the time required by applicable law.
Children and device permissions
AinFad is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can investigate and act. The app does not request access to your contacts, camera, photos, microphone or device location. You enter a delivery address yourself. The service does not use cross-company advertising tracking and does not request advertising-tracking permission.
Security and policy updates
We use HTTPS, salted password hashing, hashed server session credentials and restricted operational access. We limit data access to the work a person or provider needs to perform. No method of storage or transmission is completely secure. We update this policy when our practices change, revise its effective date, and provide additional notice or obtain consent where required. This policy is available in the app without signing in and at https://staging-api.pinzheng.top/privacy.html. Contact jason@ainfad.vip for privacy assistance.