Release Date: March 27, 2026

Effective Date: March 27, 2026

Thank you for visiting the e-commerce business management platform. This Privacy Policy applies to the provision of 4Seller products and services. We attach great importance to the protection of your privacy and personal information security. We will strictly comply with legal and regulatory requirements, adopt appropriate security measures, and endeavor to protect your personal information and privacy. To this end, we have formulated this “4Seller Privacy Policy” (hereinafter referred to as “this Privacy Policy”) and would like to draw your attention to the following:

This Privacy Policy applies to all functions and services provided by the 4Seller e-commerce business management platform. Before using any functions or services we provide, please carefully read and thoroughly understand this Privacy Policy, and only start using them after confirming that you fully understand and agree to it. This Privacy Policy does not apply to services provided by other third parties. Before choosing to use third-party services, you should fully understand the product functions and privacy protection policies of such third-party services before deciding whether to use the corresponding functions or services.

Depending on your location, the entity responsible for processing your personal information (i.e., the personal information controller/handler, hereinafter referred to as “we,” “us,” or “4Seller”) is as follows:

• Users in North America and Europe: If you are a registered user of this service and are located in North America or Europe, the entity responsible for processing your personal information is VASTAR SINGAPORE TECHNOLOGY PTE. LTD.
• Users in China: If you are a registered user of this service and are located within China, the entity responsible for processing your personal information is Shenzhen Dianxiaomi Network Technology Co., Ltd.

To safeguard your relevant rights, this Privacy Policy explains how 4Seller-related products and services collect, use, and store your personal information and what rights you are entitled to. Please read, understand, and agree to this Privacy Policy before using 4Seller-related products or services. Important content regarding your personal information rights and interests is highlighted in bold; please pay special attention. We will regularly check and update our policy; please visit this page periodically to ensure you are aware of the latest version of the Privacy Policy.

Definitions

• Enterprise User refers to an organization that obtains management authority by authorizing users to register, log in to, and use 4Seller products or services, including but not limited to legal entities, government agencies, partnerships, sole proprietorships, and other unincorporated organizations. Enterprise Users may create sub-accounts, establish their work teams, and invite Authorized Users to join their work teams through the 4Seller product or service platform.
• Authorized User refers to a natural person authorized or invited by an Enterprise User to join the organizational structure established by the Enterprise User within this service and to use this service (typically an employee of the Enterprise User). The natural person designated by the Enterprise User to configure this service and exercise backend management authority on behalf of the Enterprise User is referred to as the Administrator (for clarity, referred to as “Administrator User” in this Privacy Policy). Administrator Users may invite other Authorized Users to use this service.
• Individual User refers to a natural person who registers for a 4Seller account using a mobile number and verification code, or logs into the 4Seller platform using a third-party account authorization, and uses 4Seller products or services as an individual.
• Enterprise Contact refers to contacts of an Enterprise User’s suppliers or other partner companies, such as store contacts, purchasing contacts, manufacturer contacts, logistics personnel, warehouse personnel, customer contacts, etc.
• End Consumer refers to the personal data subjects involved in orders managed by Authorized Users during their use of this service, such as buyers registering and placing orders on third-party e-commerce platforms, consignees in orders, etc.
• Authorized Users and Individual Users who directly register and use the platform services are collectively referred to as “you.”

This Privacy Policy will help you understand the following:

1. 1. How We Collect and Use Your Personal Information
2. 2. How We Share, Transfer, and Disclose Your Personal Information
3. 3. How We Store Your Personal Information
4. 4. How We Protect Your Personal Information
5. 5. Your Rights
6. 6. How We Handle Minors’ Personal Information
7. 7. How Your Personal Information is Transferred Globally
8. 8. How We Use Cookies and Similar Technologies
9. 9. Changes to This Privacy Policy
10. 10. Contact Us
11. Appendix I: EU Appendix
12. Appendix II: US Appendix

1. How We Collect and Use Your Personal Information

To provide services to you and Enterprise Users, optimize our services, and ensure account security, 4Seller collects the following information that you actively provide, authorize, or that arises from your use of the service during registration and use:

Basic Account Services

When you register for an account on the 4Seller platform, you need to provide your email address, email verification code, mobile number, and login password to create the account. After registration, you may log in to the platform using your email address and login password.

If you are an Administrator User authorized by an Enterprise User, you may register sub-accounts for other Authorized Users and manage sub-account permissions. To assist Administrator Users in opening sub-accounts, Administrator Users need to provide us with the username and password of the Authorized Users. When Enterprise Users and Administrator Users use this function to authorize us to collect employee personal information, they shall ensure that they have obtained the informed consent of the employees themselves.

Additional Account Services

When you wish to improve your account profile, you may voluntarily upload other personal information through the platform, including nickname, country, currency, and time zone information.

Subscription Purchase and Transaction Management

Some of our products or services require payment to use. When you need to use these paid products or services, you need to provide your bank card information. To facilitate this, we collect your transaction information, including transaction date, transaction method, transaction amount, payment status, payment summary, and details (reference number, order ID, tracking number), as well as top-up records, including top-up ID, time, status, amount, payment method, and type, to support you in managing transaction details under your account. You may order products or services for others, in which case you are required to provide the actual orderer’s aforementioned personal information. Before providing us with the actual orderer’s aforementioned personal information, you shall ensure that you have obtained the authorization and consent of that individual.

To confirm the transaction status and provide transaction dispute resolution services, we collect information related to the transaction progress through the transaction counterparty, transaction method, third-party payment institution, logistics company, etc., based on your transaction selection, or share your relevant information with these service providers.

After-Sales and Customer Service

When you contact customer service through the platform for assistance, our after-sales personnel will provide consultation and technical support regarding the product issues you raise. To facilitate contacting you, help resolve your issue quickly, or record the processing plan and results of the issue, we may collect necessary account information and retain your communication records with customer service.

Marketing

We may use the contact information you provided to invite you to participate in surveys about our products and services, carry out service-related marketing activities, and push the latest market activity information and offers. If you do not wish to receive commercial advertisements from us, you may unsubscribe via the instructions in the text message or email prompts, or through other methods we provide.

Operations and Security Operations

To ensure the safe operation, operational quality, and efficiency of the software and services, we collect your IP address, operation logs (username, operation time, operation location, operation content), and device identifiers (i.e., a string of characters programmed into the device by the manufacturer, used to uniquely identify the device, such as the phone’s IMEI number, Android_ID, IMSI, SIM serial number).

Exceptions to Obtaining Authorization and Consent

Please understand that, in the following circumstances, according to laws, regulations, and relevant national standards, we may collect and use your personal information without requiring your authorization or consent:

• Where it is related to our fulfillment of obligations stipulated by laws and regulations;
• Where it is directly related to national security and national defense security;
• Where it is directly related to public safety, public health, or major public interests;
• Where it is directly related to criminal investigations, prosecutions, trials, and enforcement of judgments;
• Where it is necessary to protect the vital legitimate rights and interests, such as life and property, of the personal information subject or other individuals, but it is difficult to obtain consent;
• Where the personal information collected is information you have voluntarily disclosed to the public;
• Where the personal information is collected from legally publicly disclosed information, such as legitimate news reports, government information disclosure, etc.;
• Where it is necessary for signing or performing a contract according to your request;
• Where it is necessary for maintaining the safe and stable operation of the software and related services, for example, discovering and addressing faults in the software and related services;
• Where it is necessary for legitimate news reporting;
• Where it is necessary for academic research institutions to conduct statistical or academic research based on public interest, and when providing the results of academic research or descriptions externally, the personal information contained in the results is de-identified;
• Other circumstances stipulated by laws and regulations.

Other Uses

If the information you provide contains personal information of other individuals, before providing us with such personal information, you shall ensure that you have obtained lawful authorization.

To provide you with better services, we will regularly update the online platform’s functions and the services provided. In principle, when new functions or services are related to the functions or services we currently provide, the collection and use of personal information will have a direct or reasonable association with the original processing purpose. In scenarios where there is no direct or reasonable association with the original processing purpose, when we collect and use your personal information, we will inform you and obtain your consent again through reasonable means such as page prompts, interaction processes, and agreement confirmation, in accordance with legal and regulatory requirements.

User Services Provided When We Act as a Personal Information Processor

We will assist Authorized Users in processing the following personal information based on the instructions of the Enterprise User and the agreement between us and the Enterprise User:

If you are an Authorized User, during your use of this service, in addition to information collected through the system and proactively submitted by you, to enable you to use this service more conveniently, the Enterprise User and Administrator User will provide us with personal information necessary to realize the functions and services of this service. This includes Authorized User name, mobile number, email address, DingTalk ID, roles, and permissions. The Enterprise User and Administrator User will update this information from time to time based on actual circumstances.

During your use of the account, the system will also automatically collect the sub-account creation time and last login time.

According to the representations and warranties of the Enterprise User, before the Enterprise User or Administrator User provides us with your aforementioned personal information, they have obtained your explicit authorization and fully informed you of the purpose, scope, and manner of collecting and using your personal information. If you cannot confirm the above, we recommend that you immediately stop accessing or using this service and confirm the matter with the Enterprise User or Administrator User. You may also contact us through the methods provided in this Privacy Policy, and we will cooperate with you to handle the relevant matters within our capacity.

When Authorized Users use this service, they may manage and maintain the order data of End Consumers. We obtain buyer order information from the third-party platform where the End Consumer places the order for order fulfillment and customer management purposes. This includes order ID, order status, product price, product quantity, order amount, customer payment amount, order time, payment and latest shipment time, and order details (including order platform, logistics service, store name, buyer name, payment method, shipping address).

When Authorized Users collect the personal information of End Consumers, they shall ensure that they have obtained the End Consumer’s informed consent (including separate consent where required) or other legal basis compliant with applicable laws.

When Authorized Users use this service, they may manage and maintain Enterprise Contact information, typically including logistics contacts, warehouse contacts, etc. We collect Enterprise Contact information uploaded by Authorized Users or obtained from third-party platforms, including Enterprise Contact name, currency, contact number, email, country, address, and postal code.

When Authorized Users fill in the personal information of Enterprise Contacts, they shall ensure that they have obtained the contact’s informed consent (including separate consent where required) or other legal basis compliant with applicable laws.

For personal information collected when we act as a personal information processor, the Enterprise User is responsible for informing you of the purpose, method, and scope of personal information collection and use. If you have questions regarding the relevant content or wish to assert relevant personal information rights, you understand and acknowledge that you may contact the Enterprise User or Administrator User to handle the matter.

Please note: Information that cannot identify you individually or in combination with other information does not constitute your personal information under the law. When information that can identify you individually or in combination with other information, or when data that cannot be linked to any specific individual is combined with other information that can identify you, such information will be treated as your personal information and protected under this Privacy Policy during the period of combination.

2. How We Share, Transfer, and Disclose Your Personal Information

Sharing

We do not share your personal information with other organizations or individuals, except in the following circumstances:

• After obtaining your separate consent, we may share your personal information with other parties.
• We may share your personal information externally based on legal and regulatory requirements, litigation, arbitration resolution needs, or requests from administrative or judicial authorities as required by law.
• Based on the instructions of the Enterprise User, we may provide the Enterprise User’s data to third parties designated by the Enterprise User. However, please note that such third parties are not selected by us, and we ourselves do not provide your personal information to third parties. In such cases, we will exercise reasonable prudence, test the data interface security of the third party, and ensure the secure transmission of Enterprise User data.
• To ensure the realization of product-related functions and the safe and stable operation of applications, we may integrate services provided by third parties to achieve our goals. Such third parties include statistical service third parties, network security service third parties, etc.

Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

• Transfer with Explicit Consent: Upon obtaining your explicit consent, we will transfer your personal information to other parties;
• In the event of a merger, division, dissolution, acquisition, or bankruptcy declaration, if personal information is transferred, we will inform you of the name and contact information of the recipient. We will require the new company, organization, or individual holding your personal information to continue to be bound by this Privacy Policy. Otherwise, we will require such company, organization, or individual to obtain your authorization and consent again.

Disclosure

We will only publicly disclose your personal information in the following circumstances:

• After obtaining your separate consent;
• Based on Legal Disclosure: We may publicly disclose your personal information when required by law, legal proceedings, litigation, or compulsory requirements from government authorities.

Exceptions to Obtaining Prior Authorization and Consent for Sharing, Transferring, and Publicly Disclosing Personal Information

Sharing, transferring, and publicly disclosing your personal information without your prior authorization or consent is permitted in the following circumstances:

• Where necessary for performing statutory duties or obligations;
• Where directly related to national security and national defense security;
• Where necessary for concluding or performing a contract to which you are a party;
• Where directly related to public safety, public health, or major public interests, e.g., responding to public health emergencies or necessary to protect natural persons’ life, health, and property safety in emergencies;
• Where directly related to criminal investigations, prosecutions, trials, and enforcement of judgments;
• Where necessary to protect the vital legitimate rights and interests, such as life and property, of you or other individuals, but obtaining your authorization is difficult;
• Where processing information you have voluntarily disclosed or other information already legally publicly disclosed is within a reasonable scope according to laws and regulations, e.g., legitimate news reporting, government information disclosure channels, etc.

3. How We Store Your Personal Information

Unless a longer retention period is required or permitted by law, we will retain information collected from you or about you for the shortest period necessary to fulfill the purposes described in this Privacy Policy. When information is no longer needed for these purposes, we will delete it or retain it in an anonymized form. When determining this retention period, we consider various criteria, including the type of service you request or use, the nature of our relationship with you, the impact on our ability to provide services if we delete certain information, and legally mandated retention periods. Please note that after you successfully apply for the cancellation of your 4Seller account, we will complete the review of your account cancellation as soon as possible. Once the application is approved, we will completely delete your personal data. If we cease operation of our products or services, we will notify you individually or via announcement and delete your personal data after ceasing operations.

4. How We Protect Your Personal Information

We use industry-standard security measures to protect the personal data you provide from unauthorized access, public disclosure, use, modification, damage, or loss. We will take the following reasonably feasible measures to protect your personal data:

• We use encryption technology to ensure data confidentiality;
• We use trusted protection mechanisms to prevent malicious attacks on data;
• We have implemented access control mechanisms to ensure that only authorized personnel can access personal data. We have also conducted security and privacy training courses to enhance employee awareness of the importance of protecting personal data;
• We use secure encryption technology to protect your personal data during transmission. We take all appropriate organizational, management, and technical measures to protect the security of the personal data you provide within our internal organization.

If our physical, technical, or managerial safeguards are breached, resulting in unauthorized access, public disclosure, alteration, or destruction of data that harms your legal rights, we will assume liability. In the unfortunate event of a personal data security incident, we will promptly inform you as required by laws and regulations: the basic facts of the security incident and its potential impact, the measures we have taken or will take, and suggestions for you to independently prevent and mitigate risks, as well as remedial measures we are taking. We will promptly notify you of incident-related information via email, letter, phone, push notification, etc.

While our business aims to protect your personal information, please understand that currently, no 100% security exists anywhere, whether online or offline. A 4Seller account requires a username and password to log in. Please keep your username and password safe and never disclose them to third parties.

5. Your Rights

Based on the relevant laws, regulations, and standards in your location, as well as common practices in other countries and regions, we guarantee you the right to exercise the following rights regarding your personal data. You have the right to request that we:

Access Your Personal Information

You have the right to access your personal information, except for exceptions stipulated by laws and regulations. If you wish to exercise your data access right, you may do so through the product interface. For personal information that cannot be accessed directly within the product, you may contact us using the methods provided in this Privacy Policy, and we will respond to your access request within the time limit prescribed by law.

Correct Your Personal Information

When you discover that the personal information we process about you is inaccurate, you have the right to request that we make corrections. You may correct your personal information directly through the product interface.

If you are unable to correct this personal information through the product interface, you may contact us using the methods listed in Section 10 of this Privacy Policy. We will respond to your correction request within 5-7 business days.

Delete Your Personal Information

You may request the deletion of your personal information by sending an email to us in the following circumstances:

• If our processing of personal information violates laws or regulations;
• If we collect or use your personal information without your consent;
• If our processing of personal information violates our agreement with you;
• If you no longer use our products or services, or you cancel your account;
• If we no longer provide products or services to you.

If we decide to respond to your deletion request, we will also notify entities that have obtained your personal information from us to delete it promptly, unless otherwise provided by laws and regulations or such entities have obtained your independent authorization.

Cancel Your Account

You may cancel your registered account at any time. You may send an account cancellation request email to us using the contact information listed in Section 10 of this Privacy Policy. We will respond and perform the relevant operations within 5-7 business days after verifying your identity. After canceling your account, we will stop providing products or services to you and immediately delete your personal information.

Obtain a Copy of Your Personal Information

You have the right to obtain a copy of your personal information. If you need a copy of your personal information collected by us, you may contact us using the methods listed in Section 10 of this Privacy Policy. We will respond and perform the relevant operations within 5-7 business days after verifying your identity. We will provide the copy of your personal information via email. Subject to compliance with relevant legal provisions and technical feasibility, we will provide a copy of your personal information according to your request.

Right to Data Portability

You may contact us via the methods set forth in the “Contact Us” section of this policy to exercise your right to personal information portability as legally entitled. Under the conditions stipulated by relevant national laws and regulations, if you request the transfer of your personal information to a personal information processor designated by you, we will provide the means for transfer in accordance with relevant regulations.

Responding to Your Above Requests

For the above requests, we will respond within 5-7 business days. Contact details can be found in Section 10 of this Privacy Policy.

We may not be able to respond to your request in the following circumstances:

• Requests related to the personal information controller’s fulfillment of obligations stipulated by laws and regulations;
• Requests directly related to national security and national defense security;
• Requests directly related to public safety, public health, or major public interests;
• Requests directly related to criminal investigations, prosecutions, trials, and enforcement of judgments;
• Where the personal information controller has sufficient evidence to prove that the personal information subject has subjective malice or is abusing their rights;
• Where responding to the request would harm the vital legitimate rights and interests, such as life and property, of the personal information subject or other individuals, and it is difficult to obtain consent;
• Where responding to the request would cause serious harm to the legitimate rights and interests of the personal information subject or other individuals or organizations;
• Requests involving trade secrets.

6. How We Handle Minors’ Personal Information

Our products and services are intended for adults only. Children under the age of 18 may not use our products or services without the consent of a parent or guardian. In the case where we collect personal information from children with parental consent, we will only use or disclose this information as permitted by law, with the explicit consent of the parent or guardian, or as necessary to protect the child. If we discover that we have collected a child’s personal information without verifiable parental consent, we will take steps to delete that information as soon as possible. If, at any time, a guardian has reason to believe that we have collected a minor’s personal information, please contact us using the contact information provided in this Privacy Policy.

7. How Your Personal Information is Transferred Globally

We are committed to upholding the highest privacy protection standards for the processing and transfer of personal information globally. When you use our services, your personal information may be stored on servers located in the United States. If you are a user in China, to provide services to you, we may transfer your personal information outside of China. The overseas recipient is our overseas affiliated company, VASTAR SINGAPORE TECHNOLOGY PTE. LTD. (Address: 60 PAYA LEBAR ROAD, #11-53 PAYA LEBAR SQUARE, SINGAPORE 409051, Contact: dpo@vastartech.com). We may transfer personal information to this overseas recipient, including the scope detailed in Section 1 of this Privacy Policy (excluding transaction management-related information for subscription purchases by users in China). Such international transfers will comply with strict data protection and privacy security measures, ensuring a level of privacy protection equivalent to that provided locally. You may contact us or the overseas recipient to exercise your personal information rights.

We comply with relevant privacy and data protection laws, including but not limited to, ensuring appropriate security measures, such as encryption and access controls, are in place to safeguard data security and privacy. Additionally, we monitor relevant legal changes to ensure our practices can adapt promptly to protect users’ privacy rights.

For personal information of EU users, we will transfer data in accordance with the requirements of the General Data Protection Regulation (GDPR). This means that when personal information is transferred outside the European Economic Area, we will do so by adopting standard contractual clauses approved by the European Commission or when the recipient country has an adequate level of data protection. We are committed to regularly assessing the data protection level of the recipient country and ensuring the effective implementation of protective measures.

If you have questions or need assistance regarding the cross-border transfer of your personal information, please contact us.

8. How We Use Cookies and Similar Technologies

We use cookies and other similar technologies to enhance your experience when using this service. When you use this service, we may use relevant technologies to send one or more cookies or anonymous identifiers to your device to collect and store information about your access to and use of this service. We are committed to not using cookies for any purposes other than those described in this Privacy Policy. We use cookies and similar technologies primarily to achieve the following functions or services:

• Accelerating navigation
• Tracking website usage
• Identifying user identity, access permissions, and preferences
• Conducting research and diagnostics to improve our content, products, and services

You may manage cookies or data statistics tools through your browser settings. However, please note that if you disable cookies or data statistics tools, you may not be able to enjoy the best service experience, and some services may not function properly.

9. Changes to This Privacy Policy

To ensure you are always aware of what information we collect, how we use it, and under what circumstances we disclose it, we will post any changes or updates to this Privacy Policy on this website. We encourage you to review this Privacy Policy periodically. If we change this Privacy Policy, we will notify you by modifying the date at the top of this Privacy Policy.

10. Contact Us

If you have any questions about this Privacy Policy, please feel free to contact us.

Email: Privacy@4seller.com

Appendix I: EU Appendix

The additional disclosures in this section apply only if you are located in the European Economic Area (EEA). This document supplements our 4Seller Privacy Policy and describes how we process your personal data (as used in this Appendix, synonymous with “personal information”) when you use our products and/or services. In the event of any inconsistency between the 4Seller Privacy Policy and this Appendix, this Appendix shall prevail.

When processing your personal data, we comply with the EU General Data Protection Regulation (GDPR) and local data protection laws (as applicable).

EEA Representative

Our representative in the EEA is iuro Rechtsanwälte GmbH t/a Prighter, with a contact address at Schellinggasse 3, 1010 Vienna, Austria.

For What Purposes Do We Process Personal Data?

Please refer to Section 1 of the 4Seller Privacy Policy.

What Are the Legal Bases for Our Data Processing?

The legal basis for collecting and using the personal data described in this policy will depend on the type of personal data we collect and the specific context in which we collect it, including but not limited to the following circumstances:

• Necessary for the performance of a contract concluded between you and us (GDPR Article 6(1)(b));
• Where you have provided explicit consent for us to process your personal data (GDPR Article 6(1)(a));
• In certain jurisdictions, where processing is necessary for our legitimate interests, including but not limited to (GDPR Article 6(1)(f)):
  • Providing, maintaining, and promoting our services;
  • Detecting, preventing, and addressing violations of our terms of use or service agreements, including service abuse, fraud, misconduct, and other trust and safety-related risks;
  • Protecting our legitimate rights and interests and those of others;
  • Striving to provide you with a positive user experience;
  • Complying with laws or regulations outside the EEA;
  • Maintaining the security and integrity of our products and/or services and related platforms and systems;
  • Improving our products and/or services and developing new services;
  • Managing our relationship with users;
• Where processing is necessary for compliance with a legal obligation to which we are subject under applicable law (GDPR Article 6(1)(c)).

Subject to applicable law, the specific purposes and corresponding legal bases for processing personal data are as follows:

Which Categories of Recipients Receive Personal Data from Us?

Please refer to Section 2 of the 4Seller Privacy Policy.

Where is Your Personal Data Processed, and on What Basis Do We Transfer Personal Data Cross-Border?

Your personal data will be processed in the United States. We may disclose personal data to third parties located in Singapore. We take steps to ensure that our processors provide an adequate level of data protection by ensuring appropriate safeguards are in place and data transfer arrangements are properly implemented. If you have any questions or need more information, you may contact us.

How Long Do We Process Personal Data?

We retain your personal data only for as long as necessary for the purposes for which it was processed or as required by law. The retention period depends on the purpose for which we collected and used it, as well as the need to retain personal data to comply with applicable laws (including meeting any legal, regulatory, tax, accounting, or reporting requirements). If we retain personal data solely to comply with legal requirements, we will take steps to prevent its processing. Once personal data is no longer necessary for the purposes for which we collected it, we will delete it.

What Data Protection Rights Do You Have?

In the EU, you have the following rights, subject to the conditions of the GDPR and/or local data protection laws:

• Right to Object: To the extent permitted by applicable law, where we process your personal information based on legitimate interests, you have the right to object based on grounds relating to your particular situation by contacting us. Please note that in certain circumstances, we may still have compelling legitimate grounds to continue processing your personal information that override your rights; we will inform you if this is the case.
• Right to Access: You have the right to obtain confirmation as to whether or not we process personal information concerning you, and to access such personal information, including but not limited to: the categories of personal information we collect, the business or commercial purpose for collection, the categories of third parties with whom we share personal information, and other relevant information required by applicable law. To the extent required by applicable law, you have the right to access and obtain a copy of your personal information.
• Right to Rectification: To request the correction of inaccurate personal data concerning you.
• Right to Erasure (Right to be Forgotten): To request the deletion of your personal data, provided that such data is not necessary for purposes required by law or for security and integrity purposes.
• Right to Restriction of Processing: To request the restriction of processing of your personal data. In this case, it will be marked and only processed by us for specific purposes.
• Right to Data Portability: To receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another entity without hindrance from us.
• Right to Withdraw Consent: To withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint with a Supervisory Authority: You have the right to lodge a complaint with a supervisory authority. You may view EEA supervisory authorities and their contact details at: https://edpb.europa.eu/about-edpb/about-edpb/members_en .

To submit a request to exercise your privacy rights, you may contact us by sending an email to Privacy@4seller.com. When submitting a rights request, please specify the scope and basis of your request and provide us with the necessary information to verify your identity. To process your request, we may contact you to confirm your identity and may ask for more information to clarify the scope of the request and expedite our response. Typically, we will respond to your request within one month of receipt and complete processing within the timeframe stipulated by applicable law.

Do You Need to Provide Us with Your Personal Data?

You have no legal obligation to provide us with personal data. However, if we do not receive certain personal data from you, we will be unable to provide our products and/or services.

Appendix II: US Appendix

The additional disclosures in this section apply if you are located in the state of California, USA. If you are located in another US state, we will refer to this Appendix and process your personal data in accordance with applicable laws. This document supplements our 4Seller Privacy Policy and describes how we process your personal data when you use our products and/or services. In the event of any inconsistency between the 4Seller Privacy Policy and this Appendix, this Appendix shall prevail.

When processing your personal data, we comply with the California Privacy Rights Act (“CPRA”) and local data protection laws (as applicable).

Collection and Use of Your Personal Data. We have collected and used your personal data in the past 12 months as described in Section 1 of the 4Seller Privacy Policy.

Disclosure of Personal Data. We have disclosed personal data to third parties for business purposes in the past 12 months as described in Section 2 of the 4Seller Privacy Policy.

Your Rights. As a US resident, you may exercise the following rights:

• Right to Know: After verifying your identity, you have the right to know the following information about our collection and disclosure in the past 12 months: the categories of personal data we have collected about you; the categories of sources from which the personal data is collected; the categories of personal data disclosed to third parties for a business purpose, and the categories of recipients; the categories of personal data sold and the categories of third parties involved; the business or commercial purpose for collecting or selling personal data.
• Right to Correct: You have the right to correct inaccurate personal data we hold about you.
• Right to Delete: You may request the deletion of personal data we have collected, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale and/or sharing of your personal data and sensitive personal data to third parties, now or in the future.

You also have the right not to be discriminated against for exercising these rights. However, please note that exercising these rights may limit our ability to process personal data. For example, if you submit a deletion request, we may be unable to continue providing our products and services or interact with you in the same manner.

Limiting Use of Sensitive Personal Data. You also have the right to request limitation of the use and disclosure of sensitive personal data, subject to certain exceptions. If you wish to restrict the use of your sensitive personal data, please contact us using the methods described in this Privacy Policy. Currently, we use and disclose this data to third-party cloud service providers to provide you with account creation, login, and related services.

Opt-Out of Sale or Sharing of Your Personal Data. Based on the definitions of “sale” and “share” under the CPRA, we do not believe we engage in such activities and have not done so in the 12 months preceding the effective date of this Privacy Policy.

Submitting Consumer Rights Requests. You may submit a request to exercise your consumer rights by contacting us through the methods set forth in the “Contact Us” section of this Privacy Policy. We need to verify your identity before processing your request, which may require requesting additional personal data from you or asking you to log in to your account. In some cases, we may deny or limit your request, particularly if we cannot verify your identity or locate your information in our systems, or as permitted by law. You may designate an authorized agent to exercise your rights, provided we receive written authorization from you granting the agent permission to make the request. We reserve the right to deny an agent’s request if we cannot reasonably confirm the authorization or verify your identity.

Appeal. If we decline to act on your request, you may contact us to file an appeal using the contact information provided in the “Contact Us” section below.

If your appeal is denied and you are a California resident, you may file a complaint with the California Attorney General by clicking the following link: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company .

Contact Us. If you have any questions about this Appendix or wish to exercise your privacy rights, you may contact VASTAR SINGAPORE TECHNOLOGY PTE. LTD. by calling +1 350 600 8221 or sending an email to Privacy@4seller.com.