Privacy Policy

1. Introduction

This Privacy Policy describes how Prome Engine collects, uses, stores, shares, and protects personal information and business data when you visit our website or use our services. It also explains the choices and rights available to you.

2. Who We Are

Prome Engine is an AI-powered advertising and global trade growth management platform developed and operated by 杭州意动智生科技有限公司 (English translation for reference: Hangzhou Yidong Zhisheng Technology Co., Ltd.), operating under the Revopanda brand. Its registered address is Room 805-1, Building 2, No. 1866 Binxing Road, Changhe Subdistrict, Binjiang District, Hangzhou, Zhejiang Province, China.

3. Scope of This Privacy Policy

This policy applies to the Revopanda website, Prome Engine, related customer support, and authorized integrations with advertising platforms and customer relationship management systems. It does not govern third-party services that publish their own privacy notices.

4. Information We Collect

We may collect account and contact information, business details, support communications, service settings, device and log information, and information you submit through our website. When you connect an authorized service, we also process the data needed to provide that integration.

We collect information from you, authorized account administrators, connected platforms, and ordinary use of the service. We do not connect an advertising account on a customer's behalf unless the customer owns that account or is lawfully authorized to manage it.

5. Advertising Platform Data

Prome Engine accesses third-party advertising platform data only after an advertiser or lawful account administrator gives explicit authorization. Depending on the connected service and enabled features, we may process:

• advertising account names, identifiers, and basic configuration;
• campaign, ad group, and ad settings, content, status, and delivery information;
• creative assets and related metadata;
• spend, impressions, clicks, conversions, and performance reports;
• lead information submitted through advertising forms; and
• authorization credentials and technical connection data needed to maintain the integration.

We use this data only within the customer's authorization to provide advertising management, reporting, creative management, lead synchronization, CRM, security, and related product services. We do not sell advertising platform data.

6. Lead and CRM Data

Advertising form leads may include a person's name, phone number, email address, country or region, company information, and any other information the person chooses to enter in the form. Prome Engine may display, organize, qualify, and synchronize authorized leads to a customer's CRM.

Customers decide which forms to publish, what information to request, and how to follow up. Customers must provide any notices and obtain any consent required by law. We do not sell customer leads.

6A. WhatsApp Business Platform Data

When a business customer connects WhatsApp Business Platform to Prome Engine through Meta's authorization and onboarding tools, we process WhatsApp data only within the permissions granted by that customer and only to provide the requested business messaging services. Depending on the features enabled, this data may include:

• Meta business portfolio, WhatsApp Business Account, business phone number, business profile, and related identifiers and configuration;
• message templates, template content, languages, categories, quality information, and approval or rejection status;
• business contacts and conversation participants, including names, phone numbers, business-scoped identifiers, profile information, and customer relationship records;
• inbound and outbound message content, timestamps, attachments and media, conversation context, replies, and customer-provided information;
• message, conversation, template, account, and phone-number events received through webhooks, including sent, delivered, read, failed, and other operational status information; and
• authorization codes, customer-scoped business tokens, permissions, webhook subscriptions, and other technical connection data needed to establish, secure, maintain, or disconnect the integration.

We use this data to onboard and connect a business customer's WhatsApp assets; register and manage business phone numbers; create and manage templates; send, receive, route, translate, organize, and display authorized messages; provide AI-assisted reception, suggested or automated replies, conversation summaries, lead qualification, follow-up, human handoff, CRM, reporting, security, support, and troubleshooting; and comply with customer instructions, Meta and WhatsApp requirements, and applicable law.

Where AI-assisted features are enabled by the business customer, relevant message content and conversation context may be processed by Prome Engine and contracted infrastructure or AI service providers solely to generate the requested service output. Prome Engine does not sell WhatsApp data or use it for unrelated advertising, and service providers are not authorized to use customer data for their own unrelated purposes.

The business customer determines which WhatsApp accounts and phone numbers to connect, which messages to send, which AI or automation features to enable, and how to follow up with message recipients. The business customer is responsible for providing required notices, obtaining required consent or other lawful basis, honoring opt-out requests, and complying with the WhatsApp Business Messaging Policy and applicable law.

WhatsApp data is retained only for as long as reasonably needed to provide the authorized service, maintain security and service continuity, comply with customer instructions, resolve disputes, or meet legal obligations. A business customer may disconnect the integration through Prome Engine or Meta, which stops new collection through that authorization. Eligible WhatsApp data can be requested for deletion as described in Section 15. We protect access credentials and tokens with access controls and do not expose them in public pages, client-side source code, or public logs.

7. How We Use Information

We use information to provide authorized advertising management; create, edit, pause, and optimize campaigns; manage creative assets; display performance reports; synchronize and manage leads; send authorized leads to CRM systems; provide AI-assisted analysis and operational suggestions; maintain account security; prevent misuse; support customers; and diagnose technical problems.

We do not use connected platform data for purposes outside the customer's authorization.

8. Authorization and Legal Basis

Our processing is based on the customer's instructions and authorization, performance of our agreement, consent where required, compliance with legal obligations, and legitimate interests such as security and service reliability where permitted by applicable law. Customers are responsible for confirming that they have a lawful basis to provide personal information and advertising data to Prome Engine.

9. How We Share Information

We may share information with service providers that help us operate Prome Engine, with connected platforms and CRMs at the customer's direction, within the customer's authorized organization, or when required by law. We may also disclose information to protect rights, safety, and service integrity, or in connection with a lawful corporate transaction.

We do not sell advertising platform data or customer leads, and we do not authorize service providers to use customer data for their own unrelated purposes.

10. Service Providers and Subprocessors

We may use hosting, infrastructure, communications, analytics, security, customer support, and data processing providers. These providers may process information only to deliver contracted services and under appropriate confidentiality and security obligations.

Our principal cloud service provider is Alibaba Cloud, which provides cloud hosting, infrastructure, and storage services used to operate Prome Engine. We will update this policy if our use of material subprocessors changes.

11. International Data Transfers

Prome Engine supports global trade operations, so information may be processed in countries or regions other than where it was collected. Where required, we use contractual or other lawful safeguards for international transfers and consider the requirements of the relevant jurisdiction.

12. Data Security

We use reasonable administrative, technical, and organizational controls designed to protect sensitive information. These controls include access restrictions, encryption in transit, and safeguards for stored data. Authorization credentials must not be exposed on public pages, in client-side source code, or in public logs. No security method is completely effective, and we cannot guarantee absolute security.

13. Data Retention

We retain account and business information for as long as needed to provide the service and maintain the customer relationship. Connected advertising platform data and lead data are normally deleted or de-identified within 90 days after the relevant service ends, the applicable authorization is revoked, or a verified deletion request is completed. A shorter period will apply where required by customer instructions, platform rules, or applicable law. Limited records may be retained longer where reasonably necessary for legal compliance, security, fraud prevention, accounting, or dispute resolution. Residual backup copies are protected from active use and expire through our ordinary backup rotation within the same 90-day period.

14. Authorization Revocation

You may revoke a platform connection through Prome Engine or the relevant third-party platform. After revocation, we stop obtaining new data through that authorization. Revocation does not automatically remove information lawfully processed before access ended. You may request deletion as described below.

15. Data Deletion Requests

Customers and individuals may request deletion of eligible information by contacting hello@revopanda.com. Please identify the relevant account, organization, or lead so we can verify the request. We will delete or return data as required by customer instructions, platform rules, and applicable law, subject to lawful retention obligations.

16. Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, to receive a portable copy, or to withdraw consent. You may also have the right to complain to a data protection authority. We may need to verify your identity and authority before acting on a request.

17. Cookies and Website Analytics

Our website may use cookies or similar technologies for essential functions, language preferences, security, and audience measurement. Where required, we will request consent before using nonessential cookies. You can control cookies through your browser, although disabling them may affect some features.

18. Third-Party Services

Prome Engine may link to or integrate with advertising platforms, CRM systems, and other services. Each third party controls its own service and privacy practices. Customers should review the applicable third-party terms and privacy notices. Prome Engine is not an official product of TikTok, Meta, or any other advertising platform. Their names and trademarks belong to their respective owners.

19. Children's Privacy

Prome Engine is a business service and is not directed to children. We do not knowingly collect personal information from children through the service. If you believe a child has provided information to us, contact us so we can review and delete it where required.

20. Changes to This Policy

We may update this policy to reflect service, legal, or operational changes. We will post the revised policy on this page and change the Last Updated date. If required by law, we will provide additional notice or obtain consent.

1. 简介

本隐私政策说明您访问官网或使用 Prome Engine 服务时，我们如何收集、使用、保存、共享和保护个人信息及业务数据，并说明您可以行使的选择和权利。

2. 我们是谁

Prome Engine 是由杭州意动智生科技有限公司在 Revopanda 品牌下开发和运营的 AI 广告与全球贸易增长管理平台。该公司的注册地址为浙江省杭州市滨江区长河街道滨兴路1866号2号楼805-1室。

3. 本政策的适用范围

本政策适用于 Revopanda 官网、Prome Engine、相关客户支持，以及经授权接入的广告平台和客户关系管理系统。第三方服务另行发布的隐私声明不受本政策约束。

4. 我们收集的信息

我们可能收集账户和联系信息、企业资料、支持沟通记录、服务设置、设备和日志信息，以及您通过官网提交的信息。您连接授权服务时，我们还会处理提供该连接功能所需的数据。

信息可能来自您本人、授权账户管理员、已连接平台或您对服务的正常使用。除非客户拥有相关广告账户或已获合法管理授权，我们不会代其连接该账户。

5. 广告平台数据

只有在广告主或合法账户管理员明确授权后，Prome Engine 才会访问第三方广告平台数据。根据所连接的服务和启用的功能，我们可能处理：

• 广告账户名称、标识符和基础配置；
• 广告系列、广告组和广告的设置、内容、状态及投放信息；
• 广告素材及相关元数据；
• 花费、曝光、点击、转化和效果报表；
• 用户通过广告表单主动提交的线索信息；
• 维持平台连接所需的授权凭据和技术信息。

我们仅在客户授权范围内使用这些数据，用于提供广告管理、报表、素材管理、线索同步、CRM、安全及相关产品服务。我们不出售广告平台数据。

6. 线索和 CRM 数据

广告表单线索可能包括姓名、电话、邮箱、国家或地区、公司信息，以及用户主动填写的其他内容。Prome Engine 可以根据客户授权展示、整理、判断和同步线索至客户的 CRM。

客户负责决定发布哪些表单、收集哪些信息以及如何跟进，并应依法提供通知和取得同意。我们不出售客户线索。

6A. WhatsApp Business Platform 数据

企业客户通过 Meta 的授权和接入工具将 WhatsApp Business Platform 连接至 Prome Engine 时，我们仅在该客户授予的权限范围内处理 WhatsApp 数据，并仅用于提供其所请求的企业消息服务。根据客户启用的功能，相关数据可能包括：

• Meta 企业资产组合、WhatsApp Business Account、企业电话号码、企业资料及相关标识符和配置；
• 消息模板、模板内容、语言、类别、质量信息以及批准或拒绝状态；
• 企业联系人和对话参与者的信息，包括姓名、电话号码、企业范围用户标识符、资料信息和客户关系记录；
• 收发消息内容、时间戳、附件和媒体、对话上下文、回复及消息接收者主动提供的信息；
• 通过 Webhook 接收的消息、对话、模板、账户和电话号码事件，包括已发送、已送达、已读、失败及其他运行状态信息；
• 建立、安全维护或断开连接所需的授权码、客户范围 Business Token、权限、Webhook 订阅及其他技术连接信息。

我们使用这些数据为企业客户接入并连接 WhatsApp 资产，注册和管理企业电话号码，创建和管理模板，发送、接收、路由、翻译、整理和展示经授权的消息，提供 AI 辅助接待、建议或自动回复、对话摘要、线索识别、跟进、人工接管、CRM、报表、安全、客户支持和故障排查，并遵守客户指示、Meta 和 WhatsApp 要求及适用法律。

企业客户启用 AI 辅助功能时，相关消息内容和对话上下文可能由 Prome Engine 及受合同约束的基础设施或 AI 服务商处理，仅用于生成客户所请求的服务结果。Prome Engine 不出售 WhatsApp 数据，不将其用于无关广告，也不允许服务商将客户数据用于其自身无关目的。

企业客户自行决定连接哪些 WhatsApp 账户和电话号码、发送哪些消息、启用哪些 AI 或自动化功能以及如何跟进消息接收者。企业客户负责依法提供所需通知，取得必要同意或其他合法处理依据，响应退订请求，并遵守 WhatsApp Business Messaging Policy 及适用法律。

WhatsApp 数据仅在提供授权服务、保障安全和服务连续性、遵守客户指示、解决争议或履行法律义务所合理必要的期限内保存。企业客户可以通过 Prome Engine 或 Meta 断开连接，断开后我们将停止通过该授权继续收集新数据。符合条件的 WhatsApp 数据可按照第 15 节申请删除。我们通过访问控制保护授权凭据和 Token，不会将其暴露在公开页面、前端源代码或公开日志中。

7. 我们如何使用信息

我们使用信息来提供授权的广告管理服务，创建、编辑、暂停和优化广告活动，管理广告素材，展示效果报表，同步和管理线索，将授权线索发送至 CRM，提供 AI 辅助分析和操作建议，维护账户安全，防止滥用，提供客户支持并排查技术问题。

我们不会把所连接平台的数据用于客户授权范围之外的目的。

8. 授权和法律依据

我们根据客户指示和授权、履行双方协议、依法取得的同意、法定义务，以及适用法律允许的安全和服务可靠性等合法利益处理信息。客户应确认其有合法依据向 Prome Engine 提供个人信息和广告数据。

9. 我们如何共享信息

我们可能向协助运营 Prome Engine 的服务商共享信息，按照客户指示向已连接的平台和 CRM 传输信息，在客户授权组织内部提供信息，或依法进行披露。为保护权利、安全和服务完整性，或发生合法企业交易时，我们也可能披露必要信息。

我们不出售广告平台数据或客户线索，也不允许服务商将客户数据用于其自身无关目的。

10. 服务商和分处理商

我们可能使用托管、基础设施、通信、分析、安全、客户支持和数据处理服务商。这些服务商只能为履行约定服务处理信息，并受适当的保密和安全义务约束。

我们的主要云服务商为阿里云，其为 Prome Engine 的运营提供云托管、基础设施和存储服务。如果主要分处理商的使用情况发生变化，我们将更新本政策。

11. 跨境数据传输

Prome Engine 支持全球贸易业务，因此信息可能在收集地以外的国家或地区处理。适用法律要求时，我们会采用合同或其他合法保障措施，并考虑相关司法辖区的要求。

12. 数据安全

我们采用合理的管理、技术和组织措施保护敏感信息，包括访问控制、传输加密和存储保护。授权凭据不得暴露在公开页面、前端源代码或公开日志中。任何安全措施都无法保证绝对安全。

13. 数据保存

我们在提供服务及维持客户关系所必需的期限内保存账户和业务信息。已连接的广告平台数据和线索数据通常会在相关服务终止、适用授权撤销或经核验的数据删除请求处理完成后 90 天内删除或去标识化。客户指示、平台规则或适用法律要求更短期限的，从其规定。为履行法律义务、保障安全、防止欺诈、进行财务处理或解决争议而合理必要时，我们可能更长时间保留有限记录。备份中的残留副本不会用于日常业务处理，并将在同一 90 天期限内随常规备份轮换清除。

14. 撤销授权

您可以通过 Prome Engine 或相关第三方平台撤销连接。授权撤销后，我们将停止通过该授权继续获取新数据。撤销不会自动删除在访问终止前已合法处理的信息，您可以按照下一节申请删除。

15. 数据删除申请

客户和个人可以通过 hello@revopanda.com 申请删除符合条件的信息。请提供相关账户、组织或线索信息，以便我们核实申请。我们会根据客户指示、平台规则和适用法律删除或返还数据，但法定保存义务除外。

16. 隐私权利

根据您所在地区，您可能有权访问、更正、删除、限制或反对特定处理，获取可移植副本或撤回同意，也可能有权向数据保护机构投诉。处理申请前，我们可能需要核实您的身份和权限。

17. Cookie 和网站分析

官网可能使用 Cookie 或类似技术实现必要功能、保存语言偏好、维护安全和统计访问情况。适用法律要求时，我们会在使用非必要 Cookie 前取得同意。您可以在浏览器中控制 Cookie，但禁用后部分功能可能受影响。

18. 第三方服务

Prome Engine 可能链接或接入广告平台、CRM 和其他服务。各第三方独立控制其服务和隐私做法，客户应查看相应条款及隐私声明。Prome Engine 不是 TikTok、Meta 或其他广告平台的官方产品，其名称和商标归各自权利人所有。

19. 儿童隐私

Prome Engine 是面向企业的服务，并非面向儿童。我们不会有意通过服务收集儿童个人信息。如果您认为儿童向我们提供了信息，请联系我们，我们将进行核查并依法删除。

20. 政策变更

我们可能因服务、法律或运营变化更新本政策。修订版将在本页面发布，并更新“最后更新”日期。法律要求时，我们会另行通知或取得同意。