What is collected
PO Draft Pack is operated as an independent managed service. We receive the contact and transaction information that you choose to provide by email and that PayPal makes available to a seller, such as payer name, email, transaction ID, amount, currency, and status. We do not receive your full card number.
For service delivery, we process only the PO PDFs, Item CSV, optional Customer CSV, ERPNext template/settings information, clarifications, and generated output needed for the published pilot.
The website records first-party, cookie-free conversion events: page path, event type, time, and allowlisted UTM attribution. It does not store IP address, user agent, email address, file name, PO content, or ERP data in analytics.
How pilot files are handled
Customer files are not uploaded to this website. After payment, the buyer creates a password-protected Tresorit Send transfer and shares the password through a separate PayPal transaction message. We download accepted inputs for local processing and human review. PO Draft Pack does not use inputs or outputs to train models.
Service providers
Cloudflare hosts this public site and the limited first-party event database. PayPal processes the US$149 Goods & Services payment and refunds under its own privacy and account terms. Tresorit Send provides the end-to-end encrypted transfer used for inputs and delivery. Email is handled through Google Gmail.
Each provider may process technical or account information under its own policy. Tresorit Send encrypts content client-side; the decryption key is in the transfer link, which is why a separate password is also required.
Retention and deletion
- Working inputs, temporary processing files, and delivered output are deleted locally within 7 calendar days after delivery, or within 24 hours after a verified earlier deletion request.
- Tresorit Send links expire after 7 days by default; the sender can revoke an input link sooner.
- PayPal and email transaction records are retained as required for refunds, disputes, fraud prevention, tax/accounting, and legal obligations.
- Non-sensitive website events may be retained for launch measurement and aggregated reporting.
- A deletion log may retain transaction ID, timestamps, and deletion status, but not PO contents.
Questions and deletion requests
To ask a privacy question or request early deletion, email sunquanzou@gmail.com from the payer email and include the PayPal transaction ID. Identity is verified before deletion to prevent unauthorized requests.
Deletion does not require erasing records that must be retained for an active refund, dispute, fraud investigation, or legal duty. We will explain any necessary exception.