FOREIGN TRADE DESK外贸获客助手 · by 小k

FOREIGN TRADE DESK / LEGAL

Privacy policy

Understand the permissions, the data flows and the choices that remain yours.

Effective & updated: 2026-10-19 · 小k · Xiaok

01 · Who we are and what this covers

外贸获客助手 (Foreign Trade Desk) is a Windows desktop application developed and maintained by 小k (Xiaok), an independent developer. This policy covers this product-information website and the desktop application's handling of data. Contact: sjsksiakavsi@gmail.com.

The desktop app helps textile-trade users organize product knowledge, research publicly available company information, maintain customer records, prepare messages, and send individually reviewed emails after a final batch confirmation. This website does not connect to your Gmail account or accept document uploads.

02 · Google data and Gmail permissions

When you choose to connect Gmail, the desktop app opens your system browser and uses Google OAuth with PKCE and a local loopback callback. You sign in on Google, not in a password form operated by this website or developer.

The requested scopes are openid, email (shown by Google as userinfo.email), and https://www.googleapis.com/auth/gmail.send. The app obtains your authorized account email and an email-verification indicator to identify the sender, plus access and refresh tokens to maintain the connection.

The app does not request permission to read your inbox, contacts, existing messages or Gmail drafts, or to delete Gmail messages. It does not retrieve mailbox conversations for AI analysis. Gmail message IDs and thread IDs returned after sending are used to record the submission result; that result is not a guarantee of delivery or a read receipt.

To send an email, the app transmits the sender, the selected recipient, subject, body and any explicitly confirmed fixed business-card image to Google. Messages are sent separately to each recipient after individual review and final batch confirmation. Only the image you selected as the fixed card is attached, not unrelated knowledge-base files.

03 · What stays on your computer

Product uploads, extracted text, fabric records, customer details, manually imported chat records, knowledge summaries, drafts, sending history, account connection metadata and follow-up tasks are stored in local files and a local SQLite database. The app does not operate a developer-hosted customer or mailbox synchronization service.

Gmail tokens, configured provider API keys and SMTP authorization codes are stored locally using the operating system encryption available through Electron safeStorage. If secure credential storage is unavailable, the app refuses to save credentials. The developer does not receive these credentials through the app. This does not mean all documents or the whole local database are encrypted; protect your computer and backups.

A confirmed business-card image is copied into the local database. Moving the original file does not change that stored copy. Replacing or removing the default card returns unsent messages to review. Previous cards referenced by sending records are retained locally so you can verify what was attached.

04 · Optional AI, search and other providers

Local-first is not offline-only. When you invoke an AI feature, the selected model provider receives the prompt and the relevant customer details, conversation excerpts, product-knowledge passages and company signature needed for that operation. Context is selected rather than automatically sending the entire library, but may still contain personal or commercially sensitive information. Review what you import and which provider you select.

Image OCR is processed locally first. When you explicitly request optional visual analysis, the relevant image and prompt are transmitted to the configured vision service. Search requests go to the selected search provider; public website retrieval contacts the requested websites. If configured and invoked, customs-data requests go to the selected trade-data service.

Gmail access and refresh tokens are not included in AI prompts. This Gmail integration does not read mailbox content and forward it to a model. Optional AI providers have their own processing, retention, training and international-transfer terms; the developer cannot promise that they process data only locally or never retain inputs. Do not submit data you lack permission to share.

SMTP connections send the approved email and confirmed card directly to the configured mail server. Server acceptance does not guarantee inbox delivery and may not create an entry in the provider’s webmail Sent folder.

05 · Limited Use and no sale of Google data

Foreign Trade Desk’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used to identify the authorized sender, maintain the requested connection, send reviewed messages, and keep user-visible submission records. We do not sell Google user data, use it for advertising or credit decisions, or use it to train generalized AI or machine-learning models. The app does not transmit your Gmail tokens to the developer or to AI providers.

If you voluntarily contact support, you choose the information you disclose. Do not send passwords, API keys, access/refresh tokens or unredacted customer databases. Any support material is used for the requested support, security or applicable legal obligations, not for advertising or generalized model training.

06 · Retention, deletion and revoking access

Local records remain on your computer until you remove them using available app controls or delete the relevant local data. Individual knowledge files and customer records can be removed in their respective screens. Removing the default card is not deletion of cards retained in historical sending records. Disconnecting Gmail is not deletion of drafts, sending history, the stored account address or backups.

Use AI Settings → Email connection → Disconnect Gmail to pause pending mail and remove the locally stored personal Gmail access/refresh tokens. This does not itself revoke the Google-side grant. To revoke that grant, remove the app in your Google Account connections. Revocation prevents future access but does not recall messages already submitted.

User-created backups and copied files remain under your control and are not automatically erased when you delete records or uninstall the application. Full local-data cleanup should be done with the app closed and with the correct data and backup locations verified. Ask support for version-specific instructions instead of deleting unrelated folders.

Because the developer does not hold your local workspace, the developer cannot remotely erase it. For information you voluntarily sent to support, contact the address in this policy to request access, correction or deletion, subject to applicable retention obligations.

07 · Website, support and changes

This informational website has no account system, document upload, payment form, advertising SDK or developer-added analytics. Language switching uses the page URL, not a tracking cookie. Hosting and infrastructure providers may process ordinary technical request information, such as an IP address, requested URL and user-agent, to deliver and protect the website. Their own privacy practices also apply. External links and your mail provider are separate services.

The product is intended for adult professional use, not for children. Use of external AI, search, mail and hosting providers may involve processing in other countries. Your provider choices, device security and backups affect your data protection.

This policy is dated 2026-10-19. Material changes in Google-data use require updated disclosure and, where applicable, renewed consent before the changed use. For questions, deletion requests or security reports, email sjsksiakavsi@gmail.com. Do not include secrets in your report.