Browser Extension Privacy Policy

辉光ERP is a multi-store management system for sellers on Takealot, South Africa's largest e-commerce platform. The 辉光ERP Sourcing Helper is the companion browser extension that helps registered sellers collect public product information from Takealot and Amazon ZA product pages and feed it back into their own ERP backend for piggyback and sourcing decisions.

The extension cannot be used standalone — you must first register a seller account at hg-erp.com and bind a Takealot store.

When you actively trigger collection: only when you click the 'Collect' button on the extension panel does it extract the following public information from the current product page and send it via HTTPS to your bound 辉光ERP account: product identifier (PLID / ASIN / URL), title, brand, price, Barcode, main and additional image URLs (images are not downloaded), category breadcrumb, attribute table (color / material / dimensions / weight etc.), bullet points, and the visible product description text.

Local storage: the extension uses chrome.storage.local to store your 辉光ERP auth token, username (only for displaying 'Connected: xxx' in the panel), token expiration, and the most recent profit-calculator inputs (exchange rate, freight rate etc., for convenience).

Third-party requests: fetches CNY/ZAR exchange rate from api.exchangerate-api.com (public API, no identity info); proxies internal Takealot API calls through app.hg-erp.com backend; calls no analytics, advertising, or tracking services.

Procurement logistics sync (Pinduoduo / Taobao): after you click 'Go purchase' and place an order with your own account on the platform, the extension reads the session cookies of your own logged-in account to call the platform's APIs as you, retrieve the order number, status and tracking number of your own purchase order, and fill them back into 辉光ERP. Cookies are read locally only to make these requests; their contents are never collected, stored, or transmitted.

Browsing history, tab list, or URL access records.

Other than the session cookies of your own Pinduoduo / Taobao accounts (read locally only to query your own purchase orders; contents never uploaded), we do not collect cookies or localStorage data from other sites.

Search keywords, form inputs, or keystroke logging.

Personally identifiable information (name, address, email, phone — none of these are on product pages).

Payment information.

Any silent background scraping — all collection is triggered only by your explicit click on the 'Collect' button.

Display in your 辉光ERP backend's 'Sourcing Pool' as piggyback / new-listing drafts.

When you trigger 'Bulk List', use it as input for AI category matching and field filling.

List products to your Takealot store via Takealot's official Loadsheet API (using your authorized store API Key).

Data will not be sold to third parties, used for advertising or targeted promotion, shared with other 辉光ERP users, or used to train general-purpose AI models — LLM inference is one-shot consumption with no training retention.

Query and fill back the status and tracking numbers of your own Pinduoduo / Taobao purchase orders into the 辉光ERP procurement center, to help you track procurement deliveries.

Collected results are stored in 辉光ERP's own database (PostgreSQL), hosted on Alibaba Cloud.

You can delete any collection record at any time via the 辉光ERP backend 'New Listing → Sourcing Pool'.

Closing your ERP account cascades deletion of all related collected data.

Uninstalling the browser extension automatically clears the local token and cache.

This extension extracts information from public product pages on the following platforms: takealot.com (only on pages users browse normally as consumers or sellers; does not bypass anti-scraping, does not bulk-crawl, does not simulate logins); amazon.co.za (same).

We are not official partners of these platforms. Using this extension to scrape data may be subject to the target platform's terms of service. Users should evaluate compliance themselves.

Pinduoduo (mobile.yangkeduo.com), Taobao (buyertrade.taobao.com, etc.): only after you place an order, we query the status and shipping of your own purchase orders using your own logged-in account; we do not scrape other users’ data or product-page content.

storage: stores the ERP auth token and profit-calculator inputs.

cookies: reads the session cookies of your own logged-in Pinduoduo / Taobao accounts to query the status and tracking of your own purchase orders as you and fill them back into the ERP; read locally only to make requests, cookie contents are never collected, stored, or transmitted.

tabs: opens the supplier product page (Pinduoduo / Taobao) in a new tab when you click 'Go purchase', and watches that tab's navigation to automatically detect and fill back the order number after you place the order. Contents of tabs unrelated to procurement are not read.

alarms: periodically (every 10 minutes) checks the shipping status of your own purchase orders in the background and syncs them to the ERP, so you do not need to keep a page open.

Access to takealot.com / Amazon English-locale sites: inject collection buttons and read public product info on product pages.

Access to Pinduoduo / Taobao (yangkeduo.com / pinduoduo.com / taobao.com / tmall.com): query the status and shipping of your own purchase orders.

Access to app.hg-erp.com: sync data with your own 辉光ERP account.

Access to api.exchangerate-api.com: public exchange-rate API for CNY/ZAR conversion in the profit calculator.

The extension does not request more sensitive permissions such as webRequest / webNavigation, and does not read payment-page contents.

Access: view all collection records in the 辉光ERP backend.

Deletion: delete individually or bulk-clear.

Withdraw authorization: click 'Disconnect' on the extension panel — the token expires immediately.

Export: contact support to export collection data as JSON.

Account closure: closing your ERP account cascades deletion of all data.

This service is intended for cross-border e-commerce sellers (adult professionals) and does not collect data from minors.

If this policy is materially changed, updates will be synchronized between the extension panel and hg-erp.com/privacy/extension. Continued use constitutes acceptance of the new policy.