1. Overview
KreGou ("we", "us", or "our") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use kregou.com and its subdomains (the "Service").
2. Information We Collect
We may collect the following types of information:
- Account information: name, email address, password (stored encrypted)
- Social login data: when you sign in with Facebook or LINE, we receive your public profile (name, profile picture) and email address (if you authorize it)
- Transaction data: order details, payment records, shipping addresses
- Usage data: pages visited, device info, IP address, browser type
3. How We Use Information
We use your information to:
- Provide, maintain, and improve our Service
- Process your orders and transactions
- Verify your identity and manage your account
- Communicate with you, including service notifications
- Prevent fraud and ensure Service security
4. Information Sharing
We do not sell your personal information. We share your data only in the following cases:
- Tenant merchants: when you register or purchase from a merchant's storefront, that merchant can access your order and account data
- Service providers: third parties that help us operate the Service (such as payment processing, server hosting)
- Legal requirements: when required by law or to protect our legitimate rights
5. Data Storage and Security
Your data is stored on secured servers. We employ industry-standard security measures, including data encryption and access controls, to protect your personal information.
6. Cookies
We use cookies and similar technologies to maintain your login state and improve user experience. You can manage cookies through your browser settings.
7. Your Rights
You have the right to:
- Access and correct your personal information
- Request deletion of your account and related data
- Withdraw consent for social login
- Request export of your personal information
To exercise these rights, please contact us using the details below.
8. Data Deletion
You may request deletion of your account and personal information at any time. See our data deletion page for the detailed process.
9. KreGou FB Importer Chrome Extension
This section applies to the KreGou FB Importer Chrome browser extension (the "Extension").
9.1 Extension Functionality
The Extension helps KreGou platform users select product posts from Facebook group pages and sync the post content (text, images, comments) into the user's own KreGou store backend.
9.2 Data Collected by the Extension
The Extension only collects the following content when the user actively triggers it:
- Post content: text and images from posts the user manually selects in Facebook groups
- Post comments: comment content the user actively triggers fetching for (used for order intake)
- Post link: the permalink URL of selected posts
The Extension does not collect:
- The user's personally identifiable information, Facebook account, or password
- The user's browsing history or any data from non-group pages
- Any data scraped automatically in the background (all operations are user-triggered)
9.3 Data Storage
- Local storage: API connection settings (URL and key) are stored only in the user's browser locally (chrome.storage.local) and not uploaded to any third party
- Server transmission: selected post content is transmitted only to the user's own configured KreGou store API endpoint, never to any other server
9.4 Data Use
Data collected by the Extension is used solely to import Facebook group product posts into the user's own KreGou store. We do not sell, transfer, or share with third parties any data collected through the Extension.
9.5 Permissions
- Host permission (facebook.com): read group post content the user manually selects
- Host permission (kregou.com): sync data to the user's own KreGou store
- scripting: inject the post selection tool into Facebook pages
- storage: save API connection settings locally
- tabs: detect whether the current page is a Facebook group
- notifications: show import success or failure notifications
10. WhatsApp Business Integration
This section applies to KreGou platform tenants (merchants) using the WhatsApp Business integration (via the Meta WhatsApp Cloud API).
10.1 Integration Scope
Merchants can connect their WhatsApp Business Account through the KreGou admin panel to receive customer messages, send order notifications, and manage customer service conversations. The integration is implemented via Meta's official WhatsApp Cloud API.
10.2 WhatsApp Data We Collect
When customers communicate with merchants via WhatsApp, we collect and process:
- WhatsApp identifier: the customer's WhatsApp number (wa_id), used to identify the conversation participant
- Message content: text, images, videos, documents, button clicks, form submissions, and other conversation content
- Contact information: the customer's WhatsApp display name (if set as public)
- Message status: delivery, read, and failure status callbacks
- Conversation timestamps: when messages are sent and received
10.3 Customer-Initiated Conversation Principle
All WhatsApp conversations are customer-initiated. Customers can start a conversation through merchant-shared wa.me links, by clicking the "Continue in WhatsApp" button on the website, or by directly messaging the merchant's number. We do not:
- Import or purchase customer phone numbers from external sources
- Send unsolicited marketing messages without customer consent
- Use customer data for unauthorized advertising
10.4 Data Use
- Provide order placement, order tracking, payment notifications, and customer service conversations
- Enable merchants to effectively manage customer communications
- Comply with WhatsApp Business Policy message classification (utility / authentication / marketing)
10.5 Data Sharing with Meta (WhatsApp)
All WhatsApp messages are transmitted via the Meta WhatsApp Cloud API. Meta processes message delivery according to its own WhatsApp Business Policy and Privacy Policy.
10.6 Data Retention
WhatsApp conversation records are retained for merchant reference, with a default retention period of 24 months. Customers may request deletion of their conversation records at any time (see Section 8 "Data Deletion"). Upon merchant termination of service, related data will be deleted within 30 days.
10.7 Customer Opt-Out
Customers may stop receiving WhatsApp messages at any time by:
- Replying with "STOP", "UNSUBSCRIBE", or similar keywords
- Blocking the merchant's number in WhatsApp
- Contacting [email protected] to request removal from all merchant conversations
11. Policy Updates
We may update this Privacy Policy from time to time. The updated policy will be posted on this page with the "Last updated" date refreshed.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: [email protected]