Privacy Policy

Update date: December 20, 2025

Effective date: December 20, 2025

In case of any questions, opinions or suggestions about the Policy or personal information protection, please contact us in the following ways. Under normal circumstances, we will give a reply within 7 working days.

Email: [email protected]

Address: 4 LENG KEE ROAD, #03-12, SIS BUILDING, SINGAPORE 159088

Your trust is very important to us. We are well aware of the importance of personal information to you. We will take effective measures to protect the safety and controllability of your personal information in accordance with laws and regulations.

VERAX AI PTE. LTD. (hereinafter referred to as "we" or "VERAX AI", registered address: 4 LENG KEE ROAD, #03-12, SIS BUILDING, SINGAPORE 159088) acts as the personal information processor (i.e., personal information handler/data controller where applicable) and attaches great importance to the protection of users' personal information and privacy. This Privacy Policy sets out the terms between us and you as a user (hereinafter referred to as "you") regarding the processing of personal information (hereinafter also referred to as "information") when you use the SourcingX services.

SourcingX is an AI-powered procurement assistance tool designed for global buyers. It provides services such as procurement needs identification, supplier recommendations, intelligent inquiries, and evaluation reports, with the aim of offering professional and impartial solutions to business buyers and supporting their core decision-making processes.

Please note that this Policy does not apply to services provided to you by any third party. The processing of personal information in connection with services provided by third parties will be governed by the privacy policies separately provided to you by those third parties.

Before using our products or services, please read this Privacy Policy carefully to understand how you can protect your privacy rights. In particular, you should pay special attention to the provisions that are highlighted in italics, bold, or bold and underlined, as they are clauses to which you should give particular consideration. Please ensure that you fully understand and agree to these terms before you start using our services.

We have used prominent markings in this Policy to draw your attention to important terms that are closely (or possibly closely) related to your rights and interests, and we recommend that you review them carefully. If you have any questions about this Privacy Policy, you may suspend your use of our services and contact us through the contact details we make available to you.

By using the services we provide, you acknowledge that you have read, understood, and agreed to this Privacy Policy. We will process your personal information in accordance with applicable laws and for the purposes described in this Privacy Policy. For processing activities that require your consent under applicable laws (for example, the use of non-essential permissions, non-essential cookies or similar technologies, and cross-border transfers in specific scenarios), we will obtain your explicit consent separately through mechanisms such as pop-up windows or check boxes, and you may withdraw your consent at any time.

This Privacy Policy section will help you understand the following:

I. How we collect and use your information

II. How we use cookies and similar technologies

III. How we share, transfer, and publicly disclose your information

IV. How we protect your information

V. How you manage your information

VI. How we handle information on minors

VII. How your information is transferred globally

VIII. How this Privacy Policy is updated

To improve the quality of our services and enhance your user experience, we retain information about your use of our services and your interaction patterns. As different products may involve different features, and the specific data fields collected may vary depending on your system environment, we provide the following explanation regarding the types of information we collect and store when you use the corresponding products.

To deliver the core functions of SourcingX, we need to collect certain personal information from you. The types of personal information you actively provide in the process of using our products and/or services, and which are necessary to enable the basic business functions of SourcingX, are listed in detail below.

If you choose not to provide the personal information required for a specific function, you may not be able to use that function.

Please note: If you provide us with another individual's personal information, you must ensure that you have obtained authorization from the relevant individual.

When you create an account or log in, you must actively provide your email address and name. We collect and use this information to complete account registration, verify your identity during login, ensure account security, and maintain the normal provision of our services. If you refuse to provide such information, you may be unable to complete account creation or login.

If you wish to receive content tailored to your needs, you may voluntarily provide your role, procurement purpose, areas of industry interest, commonly purchased product categories, and target sales markets. We use this information to display more relevant insights—such as exchange rate trends and shipping fees—that correspond to your needs. If you choose not to provide such information, your access to basic functions will not be affected, but the relevance and accuracy of the insights presented to you may be reduced.

When you use our services, in order to detect abnormal account behavior, understand product suitability, and provide you with page displays and search results better aligned with your needs, we may automatically collect information about your usage and store it as network log data, including:

Depending on your installation and/or usage of the software, we may receive and record device-related information, including but not limited to:

device model, operating system version, device settings, unique device identifiers, device environment, mobile application list, IP address, carrier information, and location-related information (including, where authorized, GPS location, WLAN access point data, and Bluetooth information).

When you use our website or client-based products or services, we automatically collect detailed information about your interactions with our services, including but not limited to:

browsing activity, clicks and views, transactions, items followed or shared, posted information, and operational details within business logs (such as timestamps and error/exception records).

Device information and service log information, when considered in isolation, cannot identify a specific natural person. If we combine such non-personal information with other information in a way that identifies a specific individual, or if it is used together with personal information, such combined information will be treated as personal information for as long as the combination persists. Unless we have obtained your authorization or applicable laws permit otherwise, we will anonymize or de-identify such information to protect your privacy.

We may, within the scope of your authorization and consent, collect and use your personal information from third parties (our partners). We undertake to process such personal information strictly in accordance with our contractual arrangements with the relevant third parties and applicable laws and regulations. We also encourage you to carefully review the privacy policies and user agreements of such third parties.

If you refuse to allow a third party to collect, use, or share your personal information in the course of providing its services, you may be unable to use certain corresponding features or services of SourcingX.

When you choose to log in to our services using a Google or Apple account, we will, based on your authorization, obtain certain account information that you have made public or authorized to be shared on the relevant third-party platform. Specifically:

We process the above information for the purpose of completing account registration or login and creating a platform account for you in order to provide our services. The collection of such information is based on your explicit authorization on the third-party platform and constitutes an extension of information you actively provide.

We will not obtain your personal information from Google, Apple, or any other third party without your authorization.

When you use this software, for the purpose of providing you with our services, the website and/or application may request access to certain permissions. You may choose to refuse or disable any of the permissions listed below, or manage such permissions through your browser or device settings. Disabling these permissions will not affect your ability to use other functions of the website or application.

The permissions that may be requested in order to enable specific business functions include, but are not limited to, the following:

To provide you with our services, improve service quality, and optimize your user experience, we may use your personal information in accordance with applicable laws and regulations or based on your authorization.

Specifically:

1. We may use your personal information to verify your identity and to prevent, detect, and investigate potential fraud, security risks, illegal activities, or violations of agreements, policies, or rules of ours or our affiliates, in order to protect the legitimate rights and interests of you, other users, us, or our affiliates.

2. We may invite you to participate in surveys or research related to our products and services, for the purpose of improving user experience and enhancing service quality.

3. We may combine personal information and transaction information obtained from one service with information obtained from other services for aggregated statistics, analysis, or processing, so as to provide you with more personalized services.

4. Other purposes to which you have expressly consented or authorized.

In accordance with applicable laws and regulations, we may collect and use certain necessary personal information without obtaining your authorization or consent under the following circumstances:

A. Where it is related to the performance of our statutory duties or obligations under laws and regulations;

B. Where it is directly related to national security or national defense security;

C. Where it is directly related to public security, public health, or major public interests;

D. Where it is directly related to criminal investigations, prosecutions, trials, or enforcement of judgments;

E. Where it is necessary to protect the life, property, or other significant lawful rights and interests of you or other individuals, and obtaining consent is difficult under the circumstances;

F. Where the personal information involved has been disclosed to the public by you on your own initiative;

G. Where it is necessary for the performance of a contract to which you are a party, including long-term or cumulative contractual arrangements between you and us;

H. Where the personal information is collected from lawfully disclosed public sources, such as legitimate news reports or government information disclosures;

I. Where it is necessary to ensure the secure and stable operation of our products and/or services, such as for detecting or resolving product or service failures;

J. Other circumstances as provided by laws and regulations.

To ensure the proper operation of the App and to provide you with a smoother access experience, we may store cookies, Flash cookies, or other local storage provided by your browser (or associated applications) on your computer or mobile device. Such storage typically contains identifiers, site names, and certain numbers and characters (collectively, "Cookies").

If your browser or browser add-ons permit, you may modify your acceptance of Cookies or refuse our Cookies. For more information, please visit AboutCookies.org. However, if you do so, in certain circumstances this may affect your secure access to our website and may require you to adjust user settings each time you visit our website.

In addition to Cookies, we may also use other similar technologies on our website, such as web beacons and pixel tags.

For example, emails we send to you may contain links to content on our website. If you click on such links, we may track the click to help us understand your preferences for our products or services, so that we can proactively improve our customer service experience.

Web beacons are typically transparent images embedded in websites or emails. Through pixel tags in emails, we can determine whether an email has been opened. If you do not wish your activities to be tracked in this manner, you may unsubscribe from our mailing list at any time.

We do not share your personal information with any company, organization, or individual, except in the following circumstances:

We may share your personal information in accordance with applicable laws and regulations, for the purposes of dispute resolution in litigation, or upon lawful requests by administrative or judicial authorities.

With your explicit consent, we may share your personal information with other parties.

Where information has been publicly disclosed by you on your own initiative, obtained by us through other lawful public channels, or shared by you via SourcingX, we may, based on your choice, share necessary transaction-related information from your order information with relevant product or service providers in order to fulfill your transactions and after-sales service needs.

To enable us to provide products and services based on your account, recommend information that may be of interest to you, identify abnormal account activity, and protect your personal and property safety, your personal information may be shared with our affiliates and/or their designated service providers.

We will only share personal information that is necessary and within the purposes stated in this Privacy Policy. If we share your sensitive personal information or if our affiliates change the purposes of processing, we will obtain your authorization and consent again.

To provide you with more comprehensive and high-quality products and services, certain SourcingX services may be provided by our partners. When we authorize partners to provide services to you or to perform functions on our behalf, we will obtain your consent and, in accordance with the Personal Information Protection Law, conduct a personal information protection impact assessment in advance and record the entrusted processing activities.

We will only share your information for lawful, legitimate, necessary, specific, and explicit purposes stated in this Privacy Policy. Authorized partners may only access information necessary to perform their duties and may not use such information for any other purposes.

Currently, our authorized partners include the following categories:

(1) Advertising Monitoring, Data Statistics, and Data Analysis Service Providers

Unless we obtain your permission, we will not share your personally identifiable information with partners providing advertising or analytics services. We may entrust such partners to process information related to advertising reach and effectiveness, but we will not provide your personally identifiable information, or we will de-identify such information so that it cannot identify you. These partners may combine the above information with other data lawfully obtained by them to perform advertising services or provide decision-making recommendations on our behalf.

(2) Suppliers, Service Providers, and Other Partners

We may share information with suppliers, service providers, and other partners that support our business operations, including those providing technical infrastructure services, software and hardware products or services, system services, analytics services, measurement of advertising and service effectiveness, customer service, payment facilitation, academic research and surveys, or third-party products accessed through login or authorized software and services.

When processing sensitive personal information, we will adopt technical measures to process such information and sever its association with your identity or other specific identifiers so that it cannot identify a particular individual. If you refuse to allow our partners to collect personal information necessary for providing services, you may be unable to use the services provided through such partners on SourcingX.

(3) Logistics and Fulfillment for Promotions

If you participate in a lottery or similar promotional activity, and SourcingX or the supplier of the relevant prize or product needs to deliver prizes or products to you, your information as the recipient (name, telephone number (including mobile number), and contact address) will be provided to courier service providers (such as SF Express or YTO Express, as displayed on the relevant webpage) or the relevant suppliers.

In accordance with applicable laws and reasonable commercial practices, where we plan to merge with or be acquired by another company, or engage in other capital market activities (including IPOs or bond issuances), or where we are required to undergo due diligence by other entities, we may provide your information to necessary parties. We will require such parties to take reasonable confidentiality measures to protect your personal information by entering into confidentiality agreements.

We do not transfer your personal information to any company, organization, or individual, except in the following circumstances:

With your explicit consent, we may transfer your personal information to other parties.

In the event of a merger, acquisition, asset transfer, bankruptcy liquidation, or similar transaction involving the transfer of personal information, we will require the new entity holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require such entity to obtain your authorization and consent again.

Your personal information is an important component of the services we provide to you, and we undertake confidentiality obligations in accordance with the law. We will publicly disclose your personal information only under the following circumstances:

1. With your separate and explicit consent

2. Disclosure Required by Law:Where disclosure is required under laws, legal procedures, litigation, or mandatory requests from competent government authorities.

3. Where we determine that you have violated laws or regulations or seriously breached SourcingX-related agreements or rules, or where disclosure is necessary to protect the personal or property safety of SourcingX users or the public, we may disclose your personal information in accordance with applicable laws or with your separate consent;

4. In accordance with applicable laws and reasonable commercial practices, in connection with mergers, acquisitions, or other capital market activities (including IPOs or bond issuances), or where due diligence by other entities is required, provided that we require such entities to adopt reasonable confidentiality measures through confidentiality agreements.

To enable you to use the above services and features, our applications may embed software development kits ("SDKs") or similar technologies provided by authorized partners. When such third parties provide products or services to you through these SDKs, they may collect and process certain information or request relevant permissions.

We recommend that you carefully review and comply with the user agreements and privacy policies of such third parties.

Some third-party SDKs or similar applications integrated into our services may collect your personal information. If you use services provided by such third parties through our services, you acknowledge and agree that your information may be collected and processed directly by such third parties in accordance with their applicable rules.

The third-party SDKs integrated into each specific service may differ. If you would like to understand the details of third-party SDK integrations for a particular service, please visit the relevant service page and review the specific terms and related disclosures applicable to that service. You may also contact us using the contact methods provided in this Privacy Policy, and we will respond to your inquiry within seven (7) business days.

The above-mentioned third-party social media services and/or other third-party services are operated and maintained by the relevant third parties. Your use of such third-party social media services or other services (including any information you provide to such third parties) is governed by the third parties' own terms of service and privacy notices (and not by this Privacy Policy). You should read those terms carefully.

This Privacy Policy applies only to personal information collected by us and does not apply to any services provided by third parties or their rules for using information. If you become aware of any risks associated with such third-party social media services or other services, we recommend that you discontinue the relevant operations to protect your lawful rights and interests and contact us promptly.

To safeguard your personal information, we endeavor to adopt a variety of physical, technical, and administrative security measures that comply with industry standards, in order to prevent unauthorized access, disclosure, use, alteration, damage, or loss of personal information. We take all reasonably practicable measures to ensure that we do not collect personal information that is unrelated to the purposes necessary for the provision of our services.

The information and materials we collect about you through SourcingX may be stored and processed at our company's locations and/or the locations of our affiliates, and may also be stored and processed by entities that we believe have a legitimate need to access such information.

When you cancel or deactivate your account, we will delete or anonymize your personal information. Unless otherwise required by laws or regulations, we retain your personal information only for the period necessary to achieve the purposes described in this Privacy Policy, and we will delete or anonymize such information after the retention period has expired.

The internet is not an absolutely secure environment. We strongly recommend that you assist us in protecting your account security by using secure methods and setting strong, complex passwords.

When using SourcingX services, you may inevitably need to disclose certain personal information to potential transaction counterparties. Please properly safeguard your personal information and provide it to others only when necessary. If you discover that your personal information has been compromised, especially if your account or password has been leaked, please contact our customer support immediately so that we can take appropriate measures.

"Public information" refers to any information that you voluntarily disclose or share. Such information may be viewed or accessed by any person during or outside your use of SourcingX. Please note that information you voluntarily share while using our services may involve your own personal information or that of others, including sensitive personal information. You should carefully consider whether to share or publicly upload such information when using our services.

Although the internet environment is not 100% secure, we will make every effort to ensure the security of any information you transmit to us. If our physical, technical, or administrative safeguards are compromised, resulting in unauthorized access, disclosure, alteration, or destruction of your information and causing damage to your lawful rights and interests, we will assume the corresponding legal responsibilities in accordance with applicable laws.

In the event of an information security incident, we will, in accordance with applicable laws and regulations, promptly notify you of:

We will notify you of incident-related information in a timely manner through email, written correspondence, telephone calls, or push notifications. Where it is difficult to notify each affected individual separately, we will issue a public announcement in a reasonable and effective manner.

At the same time, we will proactively report the handling and resolution of the information security incident to the relevant regulatory authorities in accordance with their requirements.

We attach great importance to your control over your personal information and make every reasonable effort to protect your rights to access, correct, delete, deactivate your account, and withdraw consent, so that you are fully empowered to safeguard your privacy and security.

You may access and manage your personal information in the following ways:

You have the right to access, correct, or supplement your personal information. You may do so through the following methods:

You may view your personal information by accessing the App → Settings → Account section.

You may correct your personal information by accessing the App → Settings → Account section.

You may delete certain personal information through the methods described in Section (1) Accessing, Correcting, and Supplementing Your Information above.

You may also request that we delete your personal information under any of the following circumstances:

If we decide to comply with your deletion request, we will, to the extent possible, notify any entities that have obtained your personal information from us and require them to delete such information in a timely manner (unless otherwise required by law or such entities have independently obtained your authorization).

After you or we assist in deleting relevant information, due to applicable laws and technical limitations, we may not be able to immediately delete such information from backup systems. In such cases, we will securely store the information and isolate it from any further processing until the backup can be deleted or anonymized.

Each business function requires certain basic personal information in order to operate (see Section I of this Privacy Policy). In addition to such necessary information, you may review the status of your permissions on an item-by-item basis in the SourcingX privacy settings (typically under Business Center → Settings → Notification Settings) and decide at any time whether to enable or disable such permissions (we will guide you to complete the settings within your device system).

You may also withdraw all authorization for our continued collection of your personal information by deactivating your account.

Please note that enabling these permissions indicates that you authorize us to collect and use the corresponding personal information to provide the relevant functions. Disabling such permissions indicates that you withdraw such authorization, in which case we will no longer collect or use the relevant personal information and will be unable to provide the corresponding functions.

Your decision to disable permissions will not affect any personal information processing carried out prior to the withdrawal of your authorization.

You may contact our online customer support or reach us via email at [email protected] for assistance. We will assist you in applying for account deactivation within fifteen business days.

After you voluntarily deactivate your account, we will cease providing products or services to you and, in accordance with applicable laws, delete or anonymize your personal information.

In certain business functions, decisions may be made solely based on automated decision-making mechanisms, including information systems and algorithms, without human intervention. Prior to using personal information for automated decision-making, we will conduct a personal information protection impact assessment to ensure that the purpose and methods of processing comply with the principles of legality, legitimacy, and necessity, and to assess potential impacts on your rights and interests as well as security risks.

If such decisions have a significant impact on your lawful rights and interests, you have the right to request an explanation from us, and we will provide appropriate remedies.

To ensure security, you may be required to submit a written request or otherwise verify your identity. We may request identity verification before processing your request.

Under normal circumstances, we will respond within seven business days. If you are dissatisfied with our response, you may submit a complaint through online customer support or by contacting us via email at [email protected].

We may refuse requests that are not directly related to your identity, are unreasonably repetitive, require excessive technical effort (e.g., developing new systems or fundamentally altering existing practices), pose risks to the lawful rights and interests of others, or are otherwise impracticable.

We will be unable to respond to your request under the following circumstances:

SourcingX services are primarily intended for adults. Accordingly, we do not target minors as users, nor do we intentionally collect personal information from minors. The definition of a "minor" is determined in accordance with the laws of your country or region, as well as applicable cultural practices.

We encourage parents and legal guardians to actively participate in and monitor the online activities, interests, and hobbies of minors. If SourcingX becomes aware that personal information of a minor has been collected without prior consent from a parent or legal guardian, we will promptly delete such information.

When you access the SourcingX platform, your personal information may be transferred to our global data centers. We provide products and services through servers located in multiple countries. In order to ensure service continuity, high system availability, and a consistent user experience, it is necessary for us to process data synchronously across multiple locations.

The personal information subject to cross-border transfer includes: name, email address, and IP address information.

Your personal information may be synchronized among our data centers located in the United States, Germany, and China. This means that your data may be transferred from the United States to servers in Germany and China, where it will be stored and processed.

By registering for and using our services, you acknowledge and consent to the transfer and storage of your personal information in data centers located in the United States, Germany, and China. We will implement strict security measures to protect your data and ensure that it is used solely for the lawful purposes described in this Privacy Policy.

If you do not agree to such transfers, you may choose "Disagree," which may affect our ability to provide certain services to you.

Please be aware that data protection laws in other countries may differ from those in your country or region, which means that the level of protection afforded to your personal information may vary across jurisdictions. Although we implement stringent security measures, certain risks may still exist in connection with cross-border data transfers.

We regularly assess and update our data protection measures to ensure that your personal information receives a high standard of protection even during cross-border transmission.

After collecting your personal information, we store such information in our self-operated data centers, where it is encrypted in accordance with applicable security management requirements. The data is then transmitted overseas through database synchronization mechanisms. During transmission, HTTPS protocols are used to secure communication channels.

Cross-border data transfers are conducted via dedicated communication lines. Through international private lines, data is synchronized bidirectionally and in real time. As synchronization occurs at the database level, data is updated consistently throughout its entire lifecycle—any update at one location is immediately synchronized to other locations.

Only company-authorized operations and maintenance personnel are permitted to remotely access data stored in overseas data centers. All access activities are subject to strict monitoring and auditing.

To provide you with better services, our business may evolve from time to time, and this Privacy Policy may be updated accordingly. Without your explicit consent, we will not restrict or reduce any of your rights that you are entitled to under this Privacy Policy. Any changes to this Privacy Policy will be published on this page.

For material changes, we will also provide more prominent notice, including issuing an updated version through the SourcingX App or otherwise notifying you of the relevant updates. We encourage you to review this Privacy Policy regularly to stay informed of the latest version. Where the foregoing circumstances apply, your continued use of our services constitutes your acknowledgment of, and agreement to be bound by, the revised Privacy Policy.

For the purposes of this Policy, "material changes" include, but are not limited to:

If you do not agree to such changes, you may choose to discontinue using the SourcingX services. If you continue to use the SourcingX services, you are deemed to have fully read, understood, and agreed to be bound by the revised Privacy Policy. We will also archive previous versions of this Policy, and if you wish to review an earlier version, you may contact us using the contact details provided above.

Your satisfaction is always our priority. Finally, we encourage you to review this Privacy Policy each time you use the SourcingX services.