Privacy Policy

• Account information: sign-in name (can be an email address), display name, role (admin / designer), whether the account is deactivated, and account settings like daily quota and code letters. Your password is stored only as an irreversibly encrypted (hashed) value, so we can't see your original password.
• Sign-in records: the time of your last successful sign-in; the number of consecutive wrong password attempts and the lockout time (recorded per sign-in name entered). After you sign in, your browser stores a sign-in cookie, and the server keeps only an irreversibly processed value of it. If you check "Stay signed in for 7 days", it lasts 7 days. If you don't, it expires when you close your browser (after at most 24 hours on the server side).
• Cross-border transfer consent records: the version you agreed to and when you agreed; if you withdraw, when you withdrew. No IP address or other details are recorded with it.
• Access logs: the web server's access logs record the visitor's IP address, the time of access, the URL visited, the browser identifier (User-Agent) and the referring page (Referer), which we use to troubleshoot problems. They're kept for 30 days.
• Extension connection code: when you open the website while signed in, the extension automatically asks the server for a code that only this extension on this computer uses (you can also generate one in "Settings · Extension connection code"). The server stores only an irreversibly processed value. The original code is stored only in the browser extension on your own computer; the web page itself can't get it.
• Collected product information: the extension opens TEMU pages in your own browser and collects product information that's publicly shown on the page: product images, titles, product links, prices, original prices, discounts, sales, ratings, review counts, rankings, whether a listing is in an ad slot, store ID and store name, plus ranking snapshots of search results. To troubleshoot collecting, the extension also uploads snippets of the product area of the page (with the account greeting, shipping address, email address, and similar details removed before upload) and the extension's run logs. The extension looks at the TEMU pages you have open to see whether you're signed in and whether it's the United States site in English with USD. It sends only the result (for example "not signed in" or "UK site") to the server, so the website can tell you what to do. The page text isn't uploaded, and the extension doesn't read TEMU cookies, passwords, or any other sign-in credentials. See section 8 for details.
• Extension status: about every 30 seconds the extension tells the server what it's doing (waiting for a job, collecting image N, waiting for you to sign in to TEMU or complete a check), plus its version number, browser type (Chrome / Edge) and a random ID the extension creates when it's installed (to tell apart which computer and browser it's on; it contains no personal information), so the website can show "Extension connected" and what step is missing.
• Images you upload: reference images you upload when you create a new batch; mockup files uploaded by admins.
• Generated content: remixed designs, background-removed images, mockup images, lifestyle photos with models, English titles, Chinese product names, print files, exported Miaoshou spreadsheets and images (Miaoshou is a listing ERP widely used by Chinese cross-border sellers), plus the "Keep / Drop" ratings and reasons you give designs.
• Feedback and ratings: the text you write and the screenshots you upload in "Feedback" at the bottom-right of the workspace (along with the address of the page you were on and your browser window size when you submitted), plus the overall rating and the reasons you write once 100 images have been generated.
• Cost records: each processing step that costs money (for example, generating remixed images, the IP risk pre-check, writing titles, generating lifestyle photos with models, and creating Chinese names) is logged with the time, batch, step, and an amount estimated from the provider's pricing, under the batch owner's name.
• Local browser storage: besides the sign-in cookie, the website stores only a few small things in your browser: a marker that "this browser has signed in before", your "Mockup view / Flat view" choice on the results page, a marker that you've downloaded the extension zip (from "Install the extension"), the interface language you picked (Chinese / English, kept for one year), and the settings you last used on the One-click page (which steps are on, the shirts and options you chose, and the title template you typed, so they're there next time; a theme you add is used only for that batch and isn't saved in your browser). The website doesn't include any analytics, advertising, or tracking code.

We use the information above only to provide image generation, collecting, and exporting (including troubleshooting problems with these features), and for per-person billing: recording how much each person spends and controlling each person's daily quota.

To improve the Service, we review the ratings you give images in the workspace, the reasons you choose, and the feedback text and screenshots you submit.

• You: your own batches, images, collect jobs, and export records. On the workspace Home page, you can see how much of today's quota you've used.
• Admins (the admin account): can see all accounts' batches and images, collect jobs and extension logs, Miaoshou export records, each person's spending today and this month, last sign-in time, whether each person has a valid extension connection code (but not the code itself, and not passwords), and whether each person has agreed to the cross-border transfer, along with when they agreed or withdrew. Admins can deactivate accounts, reset passwords, revoke connection codes, and adjust quotas.
• The mockup library is visible to every signed-in account.
• Images exported for Miaoshou: so that Miaoshou ERP can pull images from the links in the spreadsheet, exported mockup images are placed at links that open without signing in. Anyone who has a link can open it, and these links currently don't expire automatically.

• The following steps send images or text to two third-party AI service providers outside China for processing:
  • OpenAI (OpenAI OpCo, LLC, United States): remix image generation (sends the reference image, which may show a model, along with the generation instructions and the "Add a theme" text you type), pattern extraction (sends the reference image), and generating lifestyle photos with models (sends mockup images). Under OpenAI's terms, data sent through its API isn't used to train models; abuse-monitoring logs are kept for up to 30 days, or longer when required by law or reasonably necessary to protect its services or others from harm. Official details: https://developers.openai.com/api/docs/guides/your-data
  • Google Gemini API (Google LLC, United States; we use a paid project with billing enabled): the pre-check and type check of reference images (sends the reference image, which may show a model), the IP risk pre-check (sends the design being checked), writing English titles (usually sends the mockup image; on the "Titles" page or when mockups are off, it sends the cut-out, the remix or the image you uploaded, which may show a model; along with the text you fill in for the title template), checking the print on lifestyle photos (sends the generated lifestyle photo and the design), spell checks and wording checks, and Chinese naming (sends text only). Under Google's terms, content (images and text) sent from paid projects and the results returned aren't used to improve Google's products; to detect and prevent policy violations (and for any legally required disclosures), Google keeps them for up to 55 days and uses them only to enforce its policies. Official terms: https://ai.google.dev/gemini-api/terms; retention: https://ai.google.dev/gemini-api/docs/usage-policies
• This is a cross-border data transfer: the Service's servers are in Singapore (Tencent Cloud), so when you use the Service from within China, the data you upload and generate is transferred to servers outside China. The two providers above process it outside China (both are US companies; data may also be processed or temporarily stored at their facilities in other countries), and a copy of each daily backup is also stored on the operator's (Zhiming Hu's) own computer located in the United States (see Section 5).
• Your separate consent is required: because all of this sends data outside mainland China, you need to give separate consent before you start using the Service, apart from agreeing to this policy and the Terms of Service. After you sign in, a "Separate consent for cross-border data transfer" window appears. It states who the overseas recipients are, how to contact them, what they use the data for, how it's processed, which data is processed, and how to withdraw consent and request deletion. You need to check "I agree to transfer the data above outside mainland China for processing" yourself to continue. Without consent you can't use the Service (its core features all need to send data abroad), and you'll be signed out.
• How to withdraw: at any time, click "Withdraw cross-border consent" in "Settings · My account". You'll be signed out right away; images in your account that haven't finished won't be sent to the two providers above (they'll be marked as failed), and collect jobs in progress will stop; you'll need to agree again the next time you sign in. Withdrawing doesn't affect processing completed before you withdrew. If this section changes, we'll ask you to agree again the next time you use the Service.
• Steps done on our own servers and not sent to third parties: background removal, mockups, upscaling (print files), mockup recoloring, and duplicate image checks.
• Other third parties that come into contact with data: the cloud provider that hosts our servers (Tencent Cloud); after you import an exported spreadsheet into Miaoshou ERP, Miaoshou ERP pulls images from our servers through the links; when an admin opens "Trending" or "Data", product thumbnails load in the browser directly from TEMU's image servers.

• Where: our servers are located in Singapore.
• Backups: an automatic backup runs once a day (around 3:30 AM Beijing time, covering the database and images). Backups are kept for 14 days, and older ones are deleted automatically. A separate full backup is stored on the operator's (Zhiming Hu's) own computer in the United States (a cross-border transfer, see Section 4), which also keeps only the most recent 14 days. Automatic snapshots aren't turned on for the cloud server; manual snapshots are taken from time to time.
• How long: the system doesn't delete data automatically. Accounts, batches, images, collect records, and cost records are kept for as long as you use the Service; after an account is deactivated, its data is kept until you request deletion.
• What happens when an account is deleted: the system currently has no feature for deleting accounts. Admins can only deactivate them. Once an account is deactivated, it can no longer sign in, and its sign-in sessions and extension connection code stop working immediately. But the account's batches, images, collect records, export records, and cost records are all kept, and admins can still see them. To have your account and data deleted, email mc89779460@qq.com to request deletion. We'll complete it within 15 working days of receiving your email. After deletion, old data may remain in the daily backups (on the server and on the operator's computer in the United States) for up to 14 days, and is deleted as the backups rotate. If the data is also in a manual snapshot taken before deletion, it's deleted only when that snapshot is deleted.

• The whole site uses HTTPS encryption in transit.
• Passwords, sign-in cookies, and extension connection codes are stored on the server only as irreversibly processed values.
• After 5 wrong password attempts in a row for the same sign-in name, sign-in is locked for 15 minutes.
• There's no public sign-up. Accounts are created by an admin, and admins can deactivate accounts and revoke connection codes at any time.

• View: see your sign-in name and display name in "Settings · My account".
• Change: change your password yourself in "Settings · My account" (after you change it, you'll be signed out in other browsers). To change your display name, ask an admin.
• Delete: request it by email, see Section 5.
• Withdraw cross-border transfer consent: in "Settings · My account", see Section 4.
• If you have questions, contact your admin first. You can also email mc89779460@qq.com.

The collector extension runs in Chrome or Edge on your own computer. It does one thing: on TEMU, it finds best-selling printed T-shirt images for the search words you enter on the website, and saves them to your TUZAO account.

• What it collects: product images, titles, sales numbers and product links shown publicly on TEMU pages (plus other product details visible on the page, such as prices, ratings, rankings and store names; see section 1), snippets of the product area and the extension's run logs for troubleshooting; and the extension status plus the result of checking whether TEMU is signed in and set to United States / English / USD (only the result, never the page text).
• Where it goes: only into your own TUZAO account (servers: see section 5). Your admin can see it; see section 3. On your computer the extension keeps only the connection code, the connected account's name, its install ID, its settings and recent run logs, which are removed when you remove the extension.
• What it doesn't collect: the extension works only on TEMU and tuzaopod.com. It doesn't read other websites you open, doesn't collect your browsing history, and doesn't read TEMU cookies, passwords or other sign-in credentials. When TEMU shows a human check, it stops and waits for you to do it yourself; it never clicks through it for you.
• No selling: we don't sell this data or use it for advertising, and we don't give it to anyone other than the processors listed in section 4.
• Connecting your account: when you open the website while signed in, the extension connects to your account by itself. It only accepts a code from tuzaopod.com, and other websites can't get it. If you sign in with a different account, the extension switches too.
• To stop using it: remove the extension on your browser's extensions page. "Revoke" in "Settings · Extension connection code" makes the code on the server stop working right away, but the extension connects again the next time you open the website while signed in; to stop for good, remove the extension.

Future changes will be posted on this page, and the effective date above will be updated. If a change affects Section 4 (cross-border transfer), we'll ask you to agree again. For the rules for using the Service, see the Terms of Service.

If the English and Chinese versions differ, the Chinese version prevails.