Chính sách bảo mật

1. Scope and operator

This policy applies to the official BIOSPHERE-AI website (biosphere-ai.com, the "Site"), operated by Guangzhou Biosphere Cosmetics Co., Ltd. ("we", "us"). The Site is a B2B showcase and inquiry platform for cosmetics OEM/ODM services.

This policy explains what we collect, how we use, store and protect it, and the rights you have. Please read it carefully.

2. Information we collect

The Site has no visitor account system. We collect only the minimum needed to respond to your business inquiry:

• Inquiry details: the name, company, email, country/region and requirements you submit through the inquiry form;
• AI feature input: text and images you actively submit to features such as AI co-creation or AI skin analysis, used solely to generate the corresponding result;
• Technical logs: access time, IP address, device and browser type, used for security and anti-abuse auditing;
• Browser local storage: your language preference and inquiry list are stored in your own browser, never uploaded; clearing browser data removes them.

We do not collect bank accounts, government IDs, biometric data, precise geolocation or other sensitive personal information.

3. How we use information

• To respond to and follow up on your inquiries and business requests;
• To provide and improve AI co-creation, AI skin analysis and similar features;
• To detect and defend against abuse (scraping, bulk submissions, attacks);
• To produce anonymised, aggregated statistics that improve the Site;
• To meet legal and regulatory obligations.

4. Sharing and third parties

We do not share, sell or transfer your personal information to any third party, except:

• Essential service providers: the Site runs on Cloudflare (which processes technical data such as IP and user agent); AI features rely on third-party model providers, which receive only the content needed to generate a result, never your identity;
• Legal requirements: where we believe in good faith that disclosure is necessary to comply with law or protect legitimate interests;
• Your explicit consent: in specific scenarios you have agreed to in advance.

5. Storage and cross-border transfer

The Site is served by Cloudflare’s global network, so your data may be stored outside mainland China. Transport is encrypted (HTTPS/TLS) and admin credentials are stored as one-way hashes.

6. Retention

• Inquiry details: retained while the business conversation is active; if no cooperation results, no longer than 24 months after last contact;
• Security and access logs: no longer than 90 days, used only for security auditing;
• AI feature input: not used for any other purpose after the result is generated, and never used to train models.

7. Your rights

You may access, correct or delete the personal information you have left with us, or withdraw prior consent. Email huanggw20@gmail.com and we will respond within 15 working days. You may also lodge a complaint with your local supervisory authority.

8. Cookies and local storage

• Essential cookies: used only for the admin console session; ordinary visitors need no login cookies;
• Local storage: remembers your language preference and inquiry list, kept on your own device.

The Site uses no third-party advertising or tracking cookies.

9. Minors

The Site serves business customers and industry professionals and is not directed at minors.

10. Changes to this policy

We may revise this policy from time to time. Material changes will be flagged on this page with an updated effective date. Continued use of the Site constitutes acceptance.

11. Contact

Questions about this policy, or requests to exercise your rights: huanggw20@gmail.com.

This policy is published in Chinese and English; if versions diverge, the Chinese text prevails.