LandedCar · 智行出海隐私政策
我们收集什么
| 数据 | 来源 | 用途 |
|---|---|---|
| 公司名、联系人、邮箱、手机 / 微信 / WhatsApp / Telegram、所在市场 | 你在注册或入驻表单里填写 | 创建账号、身份识别、回复你的申请、发送账号相关通知（验证、改密、出价与订单提醒） |
| 车源信息、照片、出价、订单、站内消息、求购 | 你在平台内的操作 | 提供平台功能：展示车源、站内沟通、生成报告与测算 |
| 公司认证资料：营业执照 / 公司注册文件与证件号、执照上的公司名称；关联收款公司的注册证书、周年申报表（NAR1 / NNC1）、董事身份证件 | 你在「公司认证」里填写和上传 | 核验身份、打认证标识、核对收款户名；关联公司材料和董事证件只有平台方查看 |
| 收款账户（户名、开户行、账号、SWIFT） | 车源方在「公司认证」里填写 | LandedCar 自营出口的车：只用于 LandedCar 向车源方付款，不向买家展示，定金单（形式发票）上印的是 LandedCar 贸易主体的收款账户。车商直接卖给海外买家的车：定金单上印车商自己的收款账户，只在该笔订单的买家付清平台服务费后出具给这位买家；站内聊天里的银行账号会被抹掉。成交时快照进订单 |
| 订单进展记录与单据附件（报关回执、订舱确认等） | 买卖双方在订单里上传 | 订单跟踪与争议处理；只有该订单的买卖双方和平台方查看 |
| 与 AI 助手的对话 | 官网对话框 | 回答你的问题；匿名汇总后用于改进产品 |
| IP 地址、浏览器类型、访问时间 | 自动记录 | 安全（防刷、限频）与故障排查；不用于广告 |
| 页面访问量统计 | Cloudflare Web Analytics | 了解哪些页面有人看；无 cookie、不做指纹、不识别个人，只有汇总数字 |
| 注册步骤统计 | 你同意统计后的页面操作 | 了解访客在打开注册页、填写和提交的哪个步骤未完成；只记录步骤、失败原因类别、语言、入口和来源类别，不记录填写内容、密码、邮箱、手机号或 IP。短期随机会话编号在 30 分钟无操作后更换，步骤记录按 30 天期限定期清理，只向平台运营人员展示汇总 |
怎么使用，不怎么使用
- 商户数据不出售、不出租、不与任何第三方共享用于营销。
- 车源方看不到买家在目的国的具体挂牌价，只看到「有空间 / 微利 / 无空间」分档；买家看不到车源方的成本。
- 车源方的营业执照（或公司注册文件）和证件号用于平台核验。LandedCar 自营出口的车，买家在车详情里看到的是 LandedCar 贸易主体的注册信息；其他车商的车，已通过认证的车商的执照类型、证件号与执照文件会向已登录的买家展示，用于核实卖方身份，不对未登录访客公开。车源方发给自己客户的店铺页不展示执照。
数据存在哪、会传到哪
- 账号与业务数据存储在 Cloudflare 的数据库与对象存储（Cloudflare, Inc.，美国，全球边缘网络），受其安全与合规体系保护。
- 车源文本与照片会提交给 AI 服务商（Google / Anthropic，美国）用于结构化、翻译与车况评估；涉及商户数据时仅使用不用于模型训练的付费接口。
- 邮件通过 Resend（美国）发送。
- 会员费、成交服务费和第三方验车费的在线支付由 Stripe 托管结账。我们向 Stripe 提供商品、金额和内部订单标识；支付资料在 Stripe 页面填写。平台保存支付凭证、金额及到账/开通状态用于开通权益与对账，不接收完整银行卡号。详见 Stripe 隐私说明。
- 因此，你的数据会在中国、欧盟以外的国家处理。对欧盟 / 英国用户，我们依据服务合同履行之必要及标准合同条款进行跨境传输；你有权索取传输保障的副本。
保留多久
- 账号数据：账号存续期间。你注销后 30 天内删除，法律要求留存的除外。
- 有订单记录的账号：为保留交易凭证，订单与协议记录匿名化保留 5 年，其余个人信息删除。
- 入驻申请（未注册）：12 个月后删除。
- AI 助手对话与访问日志：90 天。
你的权利
- 随时在平台内查看、修改资料，删除任何一条车源；在「设置 → 安全」自助注销账号。
- 欧盟 / 英国用户（GDPR / UK GDPR）：访问、更正、删除、限制处理、数据可携、反对处理，以及向所在国监管机构投诉的权利。
- 行使权利或提问：发邮件到 contact@landedcar.com，我们在 30 天内答复。
站内聊天记录
- 聊天内容（含发送的图片、文件）只用于提供服务和处理争议，保留 2 年；账号注销时整条会话连同对方那一半一起删除。
- 平台不会日常查看聊天；只在收到举报或订单争议时按流程调阅。
- 你和 LandedCar 之间可以互加 WhatsApp / 微信 / Telegram；除此之外的用户之间，站内聊天不用于交换即时通讯账号，含此类写法的消息会被系统拒收，以免绕开平台私下交易。
- 聊天内容不用于模型训练。「翻译」按钮是你主动点击时才把该条消息发给付费 AI 接口，不点不发。
群消息结构化（车源方上传）
- 只允许上传你自己发出的报价，上传前须勾选「我有权发布这条信息」。
- 入库时自动去掉手机号、微信号等联系方式，只保留车型 / 配置 / 价格 / 所在地。
- 原始文本不进入车源库；仅在导入日志中保留 7 天用于纠错，之后自动删除。
- 平台不会把群里其他车商的联系方式沉淀成任何名录。
海外车行目录（客户开发会员）
- 来源：海外汽车经销商资料来自 Overture Maps Foundation 公开发布的 Places 开放数据（CDLA-Permissive-2.0 许可），只做过格式检查，未逐家核实。
- 包含的字段：商家名称、国家、城市、地址、经营品牌（如有）、网站、电话、WhatsApp、电子邮箱、联系人（如有），以及数据来源链接、来源编号和数据版本日期。都是商家公开的经营信息，不含个人敏感信息。
- 用途：只展示给开通了客户开发会员的车商，用于业务联系；不出售、不转给第三方。
- 申请删除或更正：被收录的商家可发邮件到 contact@landedcar.com，注明商家名称和地址（或资料编号），申请删除或更正。我们在收到请求后 30 天内处理；删除后不再展示。
Cookie
登录状态通过加密、HttpOnly Cookie 维持；本地存储用于记住语言、主题和统计选择。未经你同意不启用注册步骤统计或广告统计。你点「接受」后，注册步骤统计在当前浏览器标签页使用短期随机会话编号（sessionStorage，30 分钟无操作后更换），不会跨网站追踪，也不与账号资料关联；Meta Pixel 会设置它自己的广告 Cookie（见上文「广告统计」）。拒绝或开启全局隐私控制不影响注册和使用。
未成年人
平台面向企业用户，不面向 18 岁以下人士。
变更
本政策更新会在此页公示并注明日期；重大变更会通过站内或邮件通知。
Privacy Policy
What we collect
| Data | Source | Purpose |
|---|---|---|
| Company name, contact person, email, phone / WeChat / WhatsApp / Telegram, market | Entered by you at sign-up or in the contact form | Create your account, identify you, answer your request, send account notifications (verification, password reset, offer and order alerts) |
| Listings, photos, offers, orders, in-app messages, requests | Your activity on the platform | Provide the service: display listings, enable communication, generate reports and calculations |
| Company verification: business licence / registration document and number, company name on the licence; for an affiliated receiving company its registration certificate, Annual Return (NAR1 / NNC1) and the director's ID | Entered and uploaded by you under “Company verification” | Verify identity, grant the verified badge, check the bank beneficiary name; affiliated-company documents and director IDs are viewed by the platform only |
| Bank account for payments (beneficiary, bank, account number, SWIFT) | Entered by suppliers under “Company verification” | Cars exported by LandedCar itself: used only for LandedCar's payments to the supplier and never shown to buyers; the proforma invoice carries LandedCar's trading entity's account. Cars a dealer sells directly to an overseas buyer: the proforma invoice carries the dealer's own account and is issued only to the buyer of that order, after the platform service fee is paid; bank details are stripped from in-app chat. Snapshotted into the order at that time |
| Order progress notes and document attachments (customs receipts, booking confirmations…) | Uploaded by buyer or seller inside an order | Order tracking and dispute handling; visible only to that order's parties and the platform |
| Conversations with the AI assistant | Website chat | Answer your questions; anonymised aggregates to improve the product |
| IP address, browser type, access times | Collected automatically | Security (abuse and rate limiting) and troubleshooting; never for advertising |
| Page-view statistics | Cloudflare Web Analytics | See which pages are read; no cookies, no fingerprinting, no identification of individuals — aggregate numbers only |
| Registration-step statistics | Your actions on the page, after you consent to measurement | Only after you consent to measurement, we record page visits, registration steps and broad failure categories to understand where registration is not completed. We do not include form values, passwords, email addresses, phone numbers or IP addresses in these records. A short-lived random identifier in sessionStorage is replaced after 30 minutes of inactivity and is not linked to your account or used across websites. Records are periodically cleared under a 30-day retention policy and only aggregate results are shown to platform operators. Declining or sending Global Privacy Control does not affect registration. You can change your choice using the Cookie settings control below. |
How we use it — and don't
- Merchant data is never sold, rented or shared with third parties for marketing.
- Suppliers never see buyers' destination asking prices — only "room / thin / none" bands; buyers never see suppliers' costs.
- A supplier's business licence (or registration document) and number are used for platform verification. On cars exported by LandedCar itself, a signed-in buyer sees the registration of LandedCar's trading entity; on other dealers' cars, a verified dealer's licence type, number and licence document are shown to signed-in buyers so they can check who the seller is, and are not public to visitors who are not signed in. A supplier's own showroom page does not display the licence.
- Sessions use an encrypted cookie, which is necessary for the site to work. Advertising measurement (Meta Pixel) runs only after you click “Accept”: we use Meta's (Facebook's) Pixel to learn which ads bring visitors, and send Meta these events with the destination country code — page opened, landed-cost calculation, registration, buying request posted, seller contacted. We do not send email addresses, phone numbers, listings or prices, and automatic advanced matching is off. If you have not accepted, have declined, or your browser sends Global Privacy Control, the Pixel is never loaded. You can change this at any time: . See Meta's privacy policy for how it handles this data.
Where data is stored and transferred
- Account and business data are stored in Cloudflare databases and object storage (Cloudflare, Inc., USA, global edge network).
- Listing text and photos are processed by AI providers (Google / Anthropic, USA) for structuring, translation and condition assessment; merchant data is processed only through paid APIs not used for model training.
- Email is sent via Resend (USA).
- Online payments — membership fees, deal service fees and third-party inspection fees — use Stripe hosted Checkout. We provide the product, amount and internal order identifiers. Payment details are entered on Stripe’s page. We store payment references, amounts and payment/activation status for fulfillment and reconciliation, not full card numbers. See Stripe’s privacy notice.
- Your data is therefore processed outside China and outside the EU. For EU / UK users, transfers rely on contractual necessity and standard contractual clauses; you may request a copy of the safeguards.
Retention
- Account data: for the life of the account; deleted within 30 days after you close it, unless retention is legally required.
- Accounts with order history: order and agreement records are anonymised and kept 5 years as transaction evidence; other personal data is deleted.
- Contact-form requests (no account): deleted after 12 months.
- AI-assistant conversations and access logs: 90 days.
Your rights
- View and edit your profile and delete any listing at any time; close your account yourself under Settings → Security.
- EU / UK users (GDPR / UK GDPR): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.
- To exercise rights or ask questions: contact@landedcar.com — we reply within 30 days.
In-app chat
- Chat content (including photos and files sent) is used only to provide the service and handle disputes and is kept for 2 years; when an account is closed the whole conversation, including the other party's half, is deleted.
- We do not read chats routinely; we access them only on a report or an order dispute, following a procedure.
- You may exchange WhatsApp / WeChat / Telegram details with LandedCar. Between other users, in-app chat is not for exchanging messenger handles and such messages are rejected, so deals are not taken off the platform.
- Chat content is never used for model training. The “Translate” button sends that single message to a paid AI API only when you click it.
Structuring of group-chat quotes (supplier uploads)
- Only quotes you sent yourself may be uploaded, after ticking “I have the right to publish this”.
- Phone numbers, WeChat IDs and other contact details are stripped on import; only model / trim / price / location are kept.
- Raw text never enters the listings database; it stays in the import log for 7 days for error correction, then is deleted automatically.
- We never compile other dealers' contact details from group chats into any directory.
Overseas dealer directory (prospecting membership)
- Source: overseas car-dealer records come from the Places open data published by the Overture Maps Foundation (CDLA-Permissive-2.0 licence); they passed format checks only and are not individually verified.
- Fields: business name, country, city, address, brands sold (if any), website, phone, WhatsApp, email, contact person (if any), plus the source link, source ID and data release date. These are business details the dealers publish themselves; no sensitive personal data.
- Use: shown only to dealers with a prospecting membership, for business contact; never sold or passed to third parties.
- Deletion or correction: a listed business can email contact@landedcar.com with its name and address (or record number) to ask for deletion or correction. We handle requests within 30 days; deleted records are no longer shown.
Cookies
An encrypted, HttpOnly cookie maintains your login session; local storage remembers language, theme and your measurement choice. Registration-step and advertising measurement are not enabled without your consent. After you accept, registration-step measurement uses a short-lived random identifier in sessionStorage, replaced after 30 minutes of inactivity. It is not linked to your account and is not used for tracking across websites. Meta Pixel sets its own advertising cookies as described above. Declining or sending Global Privacy Control does not affect registration or use of the site.
Minors
The platform is for businesses and not directed at persons under 18.
Changes
Updates are published on this page with a date; material changes are announced in-app or by email.