This Privacy Notice for Rainbow Bubble Co., Ltd. (doing business as 1688 Assistant) (“we,” “us,” or “our”), describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including our Chrome Browser Extension and website at https://aicom.wecomerainbowbubble.com/.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at j5251418@gmail.com.

⭐ CHROME EXTENSION DATA PRACTICES #

(Data Collection, Processing, Storage, and Sharing)

To strictly comply with the Chrome Web Store User Data Policy, we explicitly disclose how our browser extension handles your data:

1. What Data We Collect and How We Collect It: #

1688 Assistant is a browser extension designed to help e-commerce sellers efficiently manage product data. When a user visits specific supported websites (e.g., 1688.com) and actively uses the extension, it reads product information directly from the webpage DOM (Document Object Model). This includes extracting product titles, image URLs, specifications, and prices. We do not monitor or collect your background browsing activity.

2. Data Processing and Storage: #

• Local Processing: The extracted product data is processed locally within your browser to format the data for exporting to other e-commerce platforms.
• Temporary Local Storage: Data is temporarily stored in the browser’s local extension storage to facilitate the export process.
• Secure Server Storage: Data is sent to our secure servers (Google Cloud Firestore/Firebase) ONLY when the user explicitly requests export or synchronization to other e-commerce platforms (like Shopee, Rakuten, Coupang). All user account data (such as login credentials and point balances) is stored securely using Firebase infrastructure.

2.1 Server Data Clarification: #

Only the following information may be transmitted to our servers explicitly by the user:

• User account information (email, user ID, authentication token)
• User point balance and subscription status
• Product data that the user explicitly chooses to export or synchronize

We do NOT automatically upload full webpage content, unrelated browsing activity, background tab data, or browsing history to our servers.

3. File Download Functionality: #

The extension may generate and download product data files (such as Excel files) locally to the user’s device when the user explicitly initiates an export action. No files are downloaded automatically without user interaction.

4. Chrome Extension Permissions Usage: #

Our extension requests the following permissions strictly to provide core functionalities:

• activeTab: Used to access and interact with the currently active 1688.com tab only when the user explicitly activates the extension via the action button.
• tabs: Used programmatically to temporarily open new individual 1688.com product pages in the background, extract the necessary product data for the user’s export task, and then automatically close those tabs. All background tabs opened for product processing are restricted to 1688.com domains and are automatically closed immediately after data extraction is completed. We strictly DO NOT read, monitor, or collect the browsing history or information from any other unrelated tabs.
• scripting: Used to inject necessary scripts into 1688.com pages to extract product information upon user request.
• storage: Used to locally store temporary product data and user session information.
• identity: Used for secure OAuth login with Google.
• downloads: Used to export and download product data files (e.g., Excel) to the user’s local device when initiated by the user.
• alarms: Used to manage background tasks such as session validation or scheduled token refresh.
• offscreen: Used to support secure background authentication and processing tasks required by Firebase services (without opening visible tabs).
• host_permissions: Used strictly to read data from 1688.com and communicate with necessary APIs (Firebase, Google, Rakuten, Shopee, Coupang) for data synchronization. All host permissions are strictly limited to 1688.com and necessary APIs; no other domains are accessed.

5. What We DO NOT Do: #

• We DO NOT collect your browsing history outside of 1688.com.
• We DO NOT access personal emails or messages.
• We DO NOT collect precise location data (GPS).
• We DO NOT sell your personal data or extracted product data to any third parties.
• Advertising & Profiling: The extension does not use user data for advertising, behavioral profiling, personalized marketing, or data brokerage purposes.

No Continuous Monitoring: The extension operates only when actively triggered by the user and does not run persistent background surveillance of browsing activity.

TABLE OF CONTENTS #

1. What information do we collect? #

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• names
• email addresses
• contact or authentication data
• e-commerce product data from 1688.com
• product titles, specifications, prices, and image URLs extracted from the web pages users visit on 1688.com for export purposes.

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by NewebPay (藍新金流). You may find their privacy notice link(s) here: https://www.newebpay.com/main/privacy. We do not collect or store any credit card information. All payment transactions are processed securely by NewebPay, a third-party payment processor.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details, like your Google or Facebook account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called “HOW DO WE HANDLE YOUR SOCIAL LOGINS?” below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Limited technical information may be logged when users access our website or backend services.

When users access our official website or backend services (such as authentication or synchronization servers), limited technical information such as IP address and basic device information may be automatically logged for security, fraud prevention, and service stability purposes.

The Chrome extension itself does NOT independently track browsing behavior, does NOT collect background browsing history, and does NOT perform analytics tracking.

Google API

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising purposes, nor do we allow human access to such data except as necessary for security or support purposes.

2. How do we process your information? #

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries/offer support to users.
• To fulfill and manage your orders.
• Product Data Extraction and Exporting. To read and extract product details (titles, images, and prices) from 1688.com as requested by the user for the purpose of exporting to other e-commerce platforms.

3. What legal bases do we rely on to process your personal information? #

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason.

If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information.

• Consent. We may process your information if you have given us permission.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.

4. When and with whom do we share your personal information? #

In Short: We may share information in specific situations described in this section and/or with the following third parties.

The third parties we may share personal information with are as follows:

• Allow Users to Connect to Their Third-Party Accounts: Google account and Facebook account
• Functionality and Infrastructure Optimization: Cloud Firestore
• Invoice and Billing: NewebPay
• Web Content Access (Not Data Sharing): The extension reads publicly available product data from 1688.com webpages solely at the user’s request. No user personal data is transmitted to 1688.com.
• System Error Reporting (Internal Use Only): We may use Discord webhooks strictly for internal system error notifications and debugging alerts. No personal user data, browsing history, product content, or authentication credentials are transmitted to Discord.

5. Do we use cookies and other tracking technologies? #

In Short: The extension itself does not use advertising or tracking cookies.

The Chrome extension does not deploy advertising or third-party tracking cookies. Authentication tokens and session data required for Firebase or Google login are stored securely using browser storage mechanisms and are used solely for service functionality.

6. How do we handle your social logins? #

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or Google logins). Where you choose to do this, we will receive certain profile information about you from your social media provider (such as your name and email address).

7. Is your information transferred internationally? #

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. Please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information.

8. How do we keep your information safe? #

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We implement reasonable technical and organizational security measures to protect your personal information, including encrypted HTTPS transmission, Firebase security rules, access controls, and authentication safeguards. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

9. How long do we keep your information? #

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

Retention Policy:

• We retain account-related data (such as email and user ID) for as long as the user maintains an active account.
• If a user requests account deletion, all associated personal data will be permanently deleted from our Firebase databases within 30 days.
• Product export data stored on our servers (if the user explicitly enables synchronization) is automatically deleted within 30 days unless required for ongoing synchronization services.
• Product data processed locally within the browser is removed when the export task is completed or when the extension storage is cleared.
• Backup Retention: Backup copies stored for security and disaster recovery purposes may persist for a limited period but are automatically purged according to our secure data retention cycle.

10. Do we collect information from minors? #

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. If you become aware of any data we may have collected from children under age 18, please contact us by emailing us at j5251418@gmail.com. Parents or guardians should contact us if they believe we have inadvertently collected information from their child.

11. What are your privacy rights? #

In Short: You may review, change, or terminate your account at any time.

Depending on your region, you have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. You can make such a request by emailing us at j5251418@gmail.com.

Account Information: If you would at any time like to review or change the information in your account or terminate your account, you can submit a request through our official support email for permanent data erasure (Right to be Forgotten).

12. Controls for do-not-track features #

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. We do not respond to DNT browser signals at this time.

13. Do United States residents have specific privacy rights? #

In Short: Yes, if you are a resident of specific states.

To exercise these rights, you can contact us by emailing us at j5251418@gmail.com.

14. Do we make updates to this notice? #

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Revised” date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15. How can you contact us about this notice? #

If you have questions or comments about this notice, you may email us at j5251418@gmail.com or contact us by post at:

16. How can you review, update, or delete the data we collect from you? #

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please contact us by emailing us at: j5251418@gmail.com.