Legal

Privacy Policy

Last updated: July 11, 2026

This Privacy Policy explains how Qurifix collects, uses, shares, stores, and protects information when you use our website, product audit workflow, reports, subscriptions, and Qurifix Capture Chrome extension.

Qurifix is operated by Ningbo Tongbian Zhihua Technology Co., Ltd., a company registered in Mainland China. This company is the service operator and personal information handler for the information you submit to Qurifix.

Qurifix is a product evidence audit and repair workflow for ecommerce sellers. We do not sell personal information. We use submitted information to provide audits, accounts, billing, support, security, and service improvement.

Information We Collect

• Account and invitation information: approved email address, one-time invitation status, sign-in status, account plan, usage limits, subscription status, and related billing identifiers. Raw invitation tokens are stored only as hashes and expire after their limited registration window.
• Audit inputs: product URLs, selling platform, target market, competitor names, buyer concerns, optional category or target question, manual evidence text, and page evidence submitted by you.
• Screenshot evidence: text is extracted locally in your browser by default. If local OCR is insufficient, you may separately authorize a one-time Perplexity cloud OCR request for selected public product-page screenshots.
• Audit outputs: AI prompt tests, generated audit reports, Repair Assets, comparison data, retest schedules, and report exports.
• Technical information: session cookie, localStorage, sessionStorage, request metadata, rate-limit data, product host, audit IDs, hashed access tokens, and basic logs used to operate and secure the service.
• Support information: messages you send to [email protected] or information needed to resolve billing, privacy, security, or product questions.

Chrome Extension Evidence Capture

Qurifix Capture collects evidence only after you read the in-product disclosure, check the consent box, and click Capture. It may collect the current public product-page URL and host, page title, meta description, visible product evidence, structured product data, product image references, FAQ entries, visible text snippets, and redacted screenshots you choose to capture.

The extension processes the current public product-page URL after user action, but does not monitor other visits or build a browsing history. It does not collect cookies, passwords, payment information, seller-center credentials, or background page content. It blocks recognized admin, account, authentication, checkout, order, customer, billing, merchant, and seller-center pages before screenshot or extraction begins, and requires public product-page signals. Captured drafts are stored in Chrome extension local storage for no more than 24 hours and are removed after handoff or expiry. Handoff transfers the draft into the Qurifix-owned HTTPS form; submitting an audit remains a separate user action.

Qurifix uses extension data only to provide and improve the user-facing product evidence capture and audit workflow. We do not sell it, use it for personalized advertising or cross-site profiling, use it for lending or credit decisions, or permit routine human reading. Qurifix's use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Screenshot OCR starts locally and cloud OCR is off by default. If local recognition is insufficient, Qurifix displays a separate, unchecked authorization control that identifies Perplexity, the text-extraction purpose, the screenshot data being sent, and the non-persistence rule. No cloud screenshot request is made unless you actively check that control and authorize the request. Qurifix processes the authorized screenshot only in request memory, does not write it to its database, cache, queue, object storage, or application logs, and discards the request payload after OCR. Original screenshots are not retained for human review. Sensitive-page blocking and local redaction reduce risk, but you should still avoid capturing pages that show private information.

How We Use Information

• Run Audits, Repair Assets, batch audits, retests, and comparison reports.
• Save audit history according to your plan and show usage limits.
• Authenticate you with email and password sign-in.
• Process subscriptions, billing status, cancellation, and customer portal access.
• Send service emails, sign-in links, retest reminders, and support replies.
• Detect abuse, enforce rate limits, prevent unauthorized access, and troubleshoot failures.
• Improve product reliability, report quality, and operational workflows.

Service Providers

We may share necessary information with service providers that help us operate Qurifix. These include Perplexity for text-based live AI search prompt testing, generated analysis, and separately authorized one-time cloud screenshot OCR; Creem for checkout and subscription billing; Resend for service emails; Render for hosting; database providers; and browser platform services for the Chrome extension. Screenshots are not shared with Perplexity unless you give the separate request-specific authorization described above. Qurifix does not persist cloud OCR screenshots.

We do not authorize service providers to use your information for their independent marketing. Their own terms and privacy policies may also apply when you interact with their services, such as checkout or email delivery.

Cookies and Browser Storage

Qurifix uses an essential HttpOnly session cookie named qurifix_session for signed-in accounts. We also use localStorage and sessionStorage for language and theme preference, audit history convenience, workspace UI state, temporary audit drafts and report handoff, cookie consent acknowledgment, and extension handoff. See our Cookie and Storage Notice for details.

Cross-Border Data Transfer (China PIPL)

If you are located in the People's Republic of China or are otherwise subject to the Personal Information Protection Law of the People's Republic of China ("PIPL"), the following cross-border data transfer terms apply.

Personal information handler. Ningbo Tongbian Zhihua Technology Co., Ltd. operates Qurifix and is the personal information handler for the information you submit. Contact email: [email protected].

Purpose and method of cross-border transfer. To provide audits, reports, subscriptions, and support, Qurifix transfers your submitted email address, audit inputs (text evidence), report outputs, and billing identifiers to servers and service providers located outside of mainland China. These providers include Perplexity (United States, live AI search prompt testing, generated analysis, and optional cloud OCR), Creem (United States, subscription and payment processing), Resend (United States, service email delivery), Render (United States, application hosting), database providers, and browser platform services. Screenshots remain local by default. A selected public product-page screenshot is transferred to Perplexity only after separate request-specific authorization and is not persisted by Qurifix.

Legal basis. Cross-border transfer is necessary to perform the service contract you have requested, and Qurifix obtains your separate consent under PIPL. By continuing to use Qurifix, you acknowledge and agree to the cross-border transfer described above.

Sensitive personal information. Do not submit ID numbers, bank card numbers, facial images, health information, religious beliefs, location trajectories, or other sensitive personal information in audit evidence.

Minors. Qurifix is intended for individual ecommerce sellers and businesses, and is not directed to minors under 14. Do not submit personal information of minors.

Your rights. You may contact us at any time to exercise your rights of access, correction, deletion, restriction of processing, withdrawal of consent, copying, or export of your personal information. You may also close your account. Withdrawal of consent does not affect the legality of processing carried out before withdrawal.

Complaints. If you have questions or complaints about Qurifix's personal information handling, you may contact us, or file a complaint with the relevant cyberspace administration, market regulation authority, or judicial authority in your jurisdiction.

Retention

Audit history retention depends on your plan: invited experience records are retained for 7 days, Lite for 180 days, and Pro for 365 days. Enterprise retention follows its written agreement. Some logs, billing records, security records, and legal records may be retained longer when needed for fraud prevention, accounting, dispute resolution, compliance, or service security.

Your Choices and Rights

You can sign out, clear browser storage, delete local drafts, skip screenshot recognition, and decline optional cloud OCR without losing the ability to continue with existing page text. Every signed-in account can download a machine-readable account-data export from Account settings, regardless of plan. Account deletion is also self-service and explains its immediate and delayed effects before confirmation. Depending on your location, you may have additional privacy rights under laws such as the California Consumer Privacy Act or GDPR.

Requests that require review—such as correction, restriction, objection, or help with portability—can be submitted from Account settings to Qurifix's privacy case queue. You may also email [email protected] with the subject "Qurifix Privacy Request." We verify the signed-in account or requesting email before acting, record status changes, and retain only the billing, fraud-prevention, dispute, security, accounting, or legal records that must remain under the applicable retention policy.

Children

Qurifix is intended for individual ecommerce sellers and businesses, and is not directed to children under 13. Do not use Qurifix to submit personal information about children.

Security

We use email and password sign-in, HttpOnly session cookies, token hashing, webhook signature checks, access controls, product URL network restrictions, and operational safeguards. Report access tokens are stored as hashes for newly created reports. No internet service can guarantee perfect security, so please avoid submitting unnecessary personal information or credentials in audit evidence.

Changes

We may update this Privacy Policy as Qurifix changes. The updated version will show a new last-updated date.