iCook Freight 隐私政策
Privacy Policy

更新日期 / Updated: 2026-10-30

本政策适用于 iCookCloud 提供的 iCook Freight 手机、平板客户端与 freight.icook.cloud 网站，用于说明箱单、拼柜及仓储物流服务如何处理资料。联系：info@mail.icook.cloud。

我们处理的资料

登录与账号管理需要邮箱、用户标识、显示名称、语言、角色和所属客户、供应商或仓库。密码以单向散列形式存储在服务器；客户端保留登录会话，不保存你的明文密码。

你和获授权的业务人员填写的资料包括箱单及商品明细、收货人姓名、电话、邮箱与地址、货物图片和备注、物流节点、库存与收货记录，以及费用和收款登记。具体资料取决于你使用的功能和角色。请仅提供业务所需、你有权提交的资料。

服务器和基础设施可能记录请求时间、IP 地址、错误及安全日志，以运行和保护服务。本 App 未接入广告 SDK、跨 App 广告追踪或第三方行为分析 SDK，不出售个人资料。

用途与访问范围

资料用于登录和权限管理、准备及导出箱单、安排运输与仓储、核对费用、处理支持请求和防止滥用。与业务相关的获授权客户、供应商、仓库、运营及财务人员可依其权限访问必要资料。Cloudflare 为我们提供托管、数据库与文件存储等基础设施，按服务安排处理资料。

照片与分享链接：当前收货照片使用可公开访问的文件链接存储，持有链接的人可查看照片；请勿上传证件、支付卡或与物流无关的敏感信息。你主动生成或转发的箱单分享链接，以及通过系统分享导出的文件，也会让接收人获得对应内容。撤销业务分享链接并不会收回接收人已保存的副本，也不会自动撤销独立的照片链接。

设备上的资料与权限

App 使用网络连接服务。Android 会话及未提交草稿由 Android Keystore 加密，保存在不参与系统备份的 App 私有目录；iOS 会话使用 Keychain，草稿启用系统文件保护。草稿按账号隔离，退出登录后仍可能保留，以便同一账号恢复未完成工作。

选择上传文件、保存文件、分享与打印由你主动发起，并调用系统提供的选择器或服务；App 不要求读取整个相册、通讯录、精准位置或麦克风。系统分享目标、打印服务和外部链接各自按照其政策处理收到的资料。

保留、更正与删除请求

我们在提供服务及处理物流、财务核对所需期间保留业务记录；依法必须保存或涉及未结事项的记录可能需要继续保留。你可在“我的”修改显示名称、语言或密码，或使用账号邮箱联系上述支持地址，申请访问、更正、关闭账号或删除资料。我们会核实身份、核对业务关系并说明可处理的范围与需要保留的原因。关闭登录权限本身不等于删除所有业务记录。

此服务面向企业及其获授权人员，不面向儿童。我们可能更新本政策；重大变化会通过服务中的适当方式说明。

English

This policy covers the iCook Freight mobile/tablet apps and freight.icook.cloud, provided by iCookCloud. Contact info@mail.icook.cloud.

We process account email, user ID, display name, language, role and business affiliations for authentication and access control. Passwords are stored as one-way hashes on the server. Clients retain a session, not your plaintext password. Depending on your role and chosen features, we also process packing-list and goods details, consignee contact details and addresses, pictures and notes, warehouse and shipping records, charges and payment registrations. Please submit only necessary information that you are authorized to provide.

Authorized participants access information required for their logistics work. Cloudflare provides hosting, database and file-storage infrastructure. Request metadata, IP addresses and error/security logs may be processed to operate and protect the service. The app contains no advertising or third-party behavioral analytics SDK and does not sell personal information.

Receipt photos currently use publicly accessible file URLs: anyone holding a URL can view the photo. Do not upload identity documents, payment cards or unrelated sensitive information. People receiving a share link or exported document can access its contents. Revoking a business share link does not retrieve previously saved copies or revoke separate photo URLs.

Android sessions and drafts use Android Keystore encryption in private storage excluded from system backup; iOS sessions use Keychain and drafts use file protection. Drafts are separated by account and may remain after logout for later recovery. File selection, exports, sharing and printing occur at your request through system services. The app does not request broad photo-library, contacts, precise-location or microphone permissions.

We retain records as needed for the service, logistics and financial reconciliation, and applicable recordkeeping obligations or unresolved matters. Contact support from your account email to request access, correction, account closure or deletion. We verify identity and business relationships and explain the scope of the response and any required retention. Disabling an account does not itself delete all business records. The service is intended for businesses and authorized personnel, not children. Material policy changes will be communicated through an appropriate service channel.