1. Scope
This policy covers the SUNVL Trade Documents Suite mobile app, its membership service, and the public pages at app.sunvl.com. The desktop product and the sunvl.com marketing site have separate policies.
2. Files stored on your device
Products, customers, company and bank details, documents, drafts, and images you enter are stored by default in the app's private storage on your device. The membership service does not automatically receive those business files. Files you choose to import, export, share, or send to support may be handled by the system, recipient, or support channel you select. Protect copies of your exported backups.
To apply the free PDF allowance, the app stores the usage month, number of free exports used, and most recent export time on your device. This usage record is not automatically sent to the membership service. It is kept when you sign out or delete your membership account, so those actions do not reset the monthly allowance.
Free-plan limits affect access and additions, not storage retention: older history remains on the device and in full backups, and existing products or company templates above a limit are not automatically deleted. See Terms of Use for the current limits.
3. Account and purchase information
To provide email-code or password sign-in and verify membership, we process your email address, random account ID, password hash, accepted terms version, sign-in time, purchase channel, subscription product and transaction identifiers, membership status, and entitlement dates. Verification codes expire after 10 minutes. We do not receive full payment card numbers from app stores.
Requests also involve an IP address for delivery, rate limiting, and security. We use a keyed hash of the address for application rate limits. Operational logs contain error categories and request identifiers, not your email, verification code, or session token.
4. Service providers and data location
Apple and any other enabled app store handle purchases in their stores and provide transaction status needed to verify entitlements. We send verification emails from [email protected] through Google Apps Script and Gmail. Google processes the destination address and message content for delivery; this processing may occur outside the United States.
Membership data is stored on Cloudflare in a database restricted to the United States. Cloudflare Workers may process requests at edge locations outside the United States.
When you select or refresh a reference currency, the app requests a fixed USD exchange-rate table from ExchangeRate.fun. The provider receives your IP address and technical request information. The request does not contain your documents, customer details, amounts, or selected currency pair. You can enter rates manually instead.
The app does not include advertising or marketing analytics.
5. Security and retention
The membership service uses HTTPS. The service stores session hashes and encrypts store-verification references. Sign-in credentials are protected by iOS Keychain or Android Keystore on supported devices. The local business SQLite database does not currently have an additional database-level encryption layer; secure your device and backups.
Expired codes and sessions are removed by the service. Necessary post-deletion transaction records are kept until both the deletion date and the final paid entitlement date are more than 1,095 days in the past. Restricted database recovery history is retained for up to 30 days; deleted information may remain in those recovery copies until it expires. Application operational logs are retained for no more than 30 days.
6. Account deletion
You can start deletion in the app at Membership & Account → Account Security or on the web deletion page. Deletion clears your account email, password hash, and sessions, and removes your membership association. Pseudonymous transaction and ownership records may remain for refunds, fraud prevention, and legal obligations for the period described above; pseudonymous does not mean fully anonymous. Documents and backups on your device are not automatically deleted.
Deleting the account does not cancel an app-store subscription. Manage auto-renewal, including a subscription trial, with the original store separately. Local free-export usage records are not cleared by account deletion.
7. Your choices and contact
Use the support page to ask to access, correct, or delete personal information or to make another privacy request. We may verify your identity to protect the account. Email [email protected] or contact WeChat info2002.
8. Children and changes
The product is intended for people who work with trade documents. If a guardian believes a child submitted information we should not hold, please contact us. We will post policy updates here and provide any additional notice or consent required for material changes.