Privacy Policy

Effective date: 2 September 2026

Who we are

SENZ AutoReach is an outreach tool for China export SOHO operators. You find or import buyers, preview messages, and send from your own email or WhatsApp. There is no shared mailbox. The service is offered at https://braceautoparts.com/sar.

SENZ AutoReach is operated by an individual operator in China (the “Operator”). This Privacy Policy is effective 2 September 2026. The site does not claim to be operated by a registered company or licensed business entity.

Public support email: fzy476598462@gmail.com. You can write to that address, or use the Contact Us entry inside your signed-in workspace, to report a problem or request a feature. The configured work phone is shown only to authenticated users and is not embedded in this document.

Information we collect

We collect only what we need to run the product you asked for:

Account email and the authentication data required to sign in, recover access, and keep a session.
Send ledger records for messages you chose to send: recipient address or number, channel, timestamps, and whether the result is settled sent, skipped, failed, or still unknown.
Mailbox tokens for the mailbox you connect. Those tokens are stored encrypted. They are not placed in LLM prompts, Git, screenshots, or ordinary logs.
Optional WhatsApp connector settings, and the per-contact consent records you supply before WhatsApp may be used.
Hunt and import inputs you type, files you upload, and companies you add to your own list.
Payment orders you create: chosen pack, trusted server-side price, unique order id, processor transaction id, and the processor-confirmed result.
Limited technical logs used for security, rate limits, and reliability. Secrets are not logged.

How we use information

We use this information to operate your account, send only on your instruction and from your own identity, keep tenants isolated, settle credits against settled sends, reconcile unique payment orders once, prevent abuse, and keep the service recoverable after refresh, disconnect, or a closed browser.

We do not sell raw company dumps. We do not offer a bulk download of a public company corpus. Search may add companies to your own list for that session of work; it does not transfer other tenants’ private history to you.

Tenant isolation and contact history

Public company facts may be reused across tenants as search material. A tenant’s private contact history is never shared with other tenants. That private history includes who you contacted, replies, refusals, unsubscribes, notes, and the send ledger.

Tenant identity is taken from a verified session, not from a client-supplied tenant field. Guessing another tenant’s objects is not a supported way to use the product.

Mailboxes, WhatsApp, and sending

You send from your own email or your own WhatsApp connector. SENZ AutoReach does not provide a shared outbound mailbox. Connecting a mailbox gives the product the limited access needed to send the messages you previewed and approved. You can disconnect a mailbox; already settled sends stay in the ledger.

A provider accepting a send is not proof that the recipient received or read the message. Unknown results stay visible until they are reconciled. We do not treat an unknown result as a completed delivery.

Payments, processors, and webhooks

Configured checkout rails use server-created orders. PayPal uses PayPal Business Orders v2. USDC uses a processor-hosted one-time invoice on Ethereum. The processor confirms payment to the server; a browser return, screenshot, or customer claim does not grant service. We do not receive your PayPal password, wallet private key, or card number.

For USDC, the customer must use the USDC asset and Ethereum network shown on the processor checkout. The Operator’s settlement wallet is not a shared manual-payment instruction. A payment is credited only after the processor reports a finished payment and the server verifies the order, currency, amount, and payment id.

Payment callbacks are verified before they can change entitlements. Processor secrets and mailbox tokens are not logged. One verified external payment may create at most one entitlement change.

Sharing

We share data with infrastructure and channel providers only as needed to host the product, authenticate you, send from the mailbox or WhatsApp connector you connected, and (when you choose a processor) complete a payment. We do not sell your account, your send ledger, or raw company dumps.

We may disclose information if required by applicable law, to prevent abuse or fraud, or to protect the service and other users.

Retention and security

While the account is open, we keep the send ledger and encrypted mailbox tokens so sending can resume and unknown results can be reconciled. Encrypted operational backups follow the existing 30-day D1 Time Travel first-restore window. When a mailbox is disconnected, the token is no longer used to send. We use tenant-scoped storage, encryption for mailbox tokens, and least-privilege credentials. No method of transmission or storage is perfectly secure.

Children

SENZ AutoReach is a business product. It is not directed at children. There is no children’s use. Persons under 18 may not create or use an account.

Your requests and changes

Signed-in users can export their own tenant records from the product (CSV/JSON). They can also close the account in the product. Closing deletes the buyer list, hunt runs, and mailbox tokens immediately (0 days). We retain payment orders, credit ledger, and send attempts so a settled message cannot be posted again; those rows are not auto-deleted. Encrypted backups follow the existing 30-day D1 Time Travel first-restore window. We do not claim global privacy-law certification.

If this policy changes, we will update the effective date on this page. Continued use after a posted change means you accept the revised policy.