Privacy Policy

This Privacy Policy applies to the YitaiCOS ERP web workspace, desktop browser experience, mobile web routes, and YitaiCOS Mobile native app, package name cn.yitaicos.app. The service is provided for business users of NINGBO ELIOT INTERNATIONAL TRADE CO., LTD. and its authorized workspaces.

YitaiCOS is an ERP workspace for authorized staff. It supports products, inventory, orders, dispatch, customers, suppliers, files, finance, tasks, approvals, warehouse scanning, product lookup, picking, tracking and pickup checks, and operational monitoring.

On iOS and Android, the app asks for camera access when you use a camera-based feature. Normal barcode scanning processes camera frames on your device. It uses the decoded code for lookup and authorized workspace operations; it does not upload the scanner live video stream or save barcode-camera photos.

If you choose to update your profile photo, the photo you select through the system picker or capture is uploaded to the service for your profile. This is separate from barcode scanning and does not upload your entire photo library.

When a user scans or manually enters a code, the app may process the raw code, normalized code, scan mode or work area, scan source, timestamp, quantity, selected warehouse or location, matched product, order, shipment, tracking, location, and the ERP action chosen by the user.

The decoded code may be sent to the tenant ERP backend to resolve products, orders, tracking numbers, shipments, inventory locations, and permissions. If the user confirms an action, the backend may create cart entries, inventory events, dispatch picking records, pickup workflow actions, work assignments, and audit events.

During an authenticated session, the app may download a bounded index of product and order codes, names, identifiers, order stages, record revisions and workflow settings to make scan previews faster. The index and recent list data are held in app memory and refreshed while the app is active. A cached preview is not proof that an operation succeeded: the server checks permissions and current records before confirming business changes. Inventory and shipment operations are not queued for offline execution.

To provide the service, YitaiCOS processes account identifiers, profile information, tenant and workspace membership, roles, permissions, session data, operational records, products, inventory, orders, dispatch records, customers, suppliers, files, tasks, approvals, notifications, and audit logs.

To detect failures and improve reliability, the app sends limited technical observations such as app/platform version, operation and outcome codes, correlation identifiers and elapsed times, including camera-open to first code and image loading times. Camera timing includes the time spent positioning a code, not decoder execution alone. These observations are associated with the authenticated user and workspace on the server; they are not anonymous.

Diagnostic observations do not contain raw scanned codes, image content, image URLs, passwords or business record payloads. A small temporary in-memory delivery queue retries technical observations for up to two minutes. It does not survive app termination and is not a queue for stock, packing or shipment operations.

Data is used to authenticate users, enforce tenant isolation and permissions, resolve scans, run ERP workflows, prevent unauthorized access, troubleshoot service issues, maintain audit trails, support customer operations, and comply with legal or security obligations.

For processing governed by the PRC Personal Information Protection Law, the responsible merchant must identify an applicable condition under PIPL Article 13. YiTaiCOS does not use a generic “legitimate interest” as a substitute. Separate consent and a documented necessity assessment are required where sensitive personal information, cross-border transfer, public disclosure, or another legally specified activity requires them.

Tenant checks and permission checks are enforced server-side. Users should only access and change records allowed by their workspace role. Native mobile code does not make final ERP authorization decisions.

YitaiCOS may process data through infrastructure, database, hosting, storage, messaging, notification, security, and operational service providers needed to run the ERP service. These providers are used to deliver the service and are not allowed to use the data for their own advertising purposes.

The app does not sell personal or sensitive user data and does not use scanner data for advertising or cross-app tracking.

ERP records, scan-derived workflow actions, and audit logs are retained for as long as needed to provide the workspace service, maintain operational history, comply with contractual or legal obligations, resolve disputes, and protect the system. Session-only scanner history in the mobile UI is temporary.

Some device data persists between app launches, including language and appearance preferences, scan sound/vibration preferences, the preferred initial screen and a bounded cached profile image. These local values do not grant account or workspace access. Authentication remains subject to the service session checks. Signing out discards session-scoped business previews and the app cached profile image; server business and audit records have separate retention rules.

YitaiCOS uses access controls, tenant scoping, permission checks, transport security, audit logging, and operational safeguards to protect workspace data. No method of transmission or storage is completely risk-free, but the service is designed to limit access to authorized users and roles.

Users can deny camera permission, but scanner features that require the camera will not work without it. Users can still use manual input where available. Workspace administrators control account access, roles, and many ERP records.

Depending on applicable law, users may have rights to access, correct, delete, restrict, or export personal data. Requests should be sent to the workspace administrator or the developer contact published in the app store listing.

When a merchant authorizes Shopify, YiTaiCOS processes only the scopes enabled for order, customer, catalog, inventory, or fulfillment functions. Verified Shopify privacy requests are fulfilled through tenant- and shop-bound workflows: data requests produce a protected merchant export; customer redaction removes the Shopify source without deleting unrelated shared CRM identities; shop redaction disables credentials and removes or anonymizes Shopify projections after retention and legal-hold checks.

Customers may request access, correction, deletion, restriction, withdrawal of consent, or export through the responsible merchant. YiTaiCOS does not use Shopify customer data for solely automated decisions that produce significant personal effects.

YitaiCOS is a business ERP service and is not intended for children or consumer use.

This policy may be updated when the app, ERP workflows, permissions, service providers, or legal requirements change. The updated date at the top of this page shows when the policy was last revised.

For privacy questions, contact your workspace administrator or use the developer contact published in the Google Play or App Store listing for YitaiCOS Mobile.