Privacy Policy

Extension: Ultimate customer service: CJ, Shopify, email, AI
Last updated: 24 March 2026
Contact: renyshiny@gmail.com

Who we are

Cambridge International Ecommerce (“we”, “us”) offers the browser extension Ultimate customer service: CJ, Shopify, email, AI (Chrome Web Store / side panel). This extension is not affiliated with Shopify Inc., CJ, Google, Microsoft, Zoho, or DeepSeek.

What the extension does

The extension runs only inside your Chrome browser. It helps merchants look up orders by connecting your CJ and Shopify accounts (using your API keys and tokens) and, if you enable it, an AI service you configure.

Data stored on your device

The extension stores locally in Chrome (chrome.storage.local), on your computer:

• CJ API key and derived CJ access tokens (if the CJ API returns them)
• Shopify store hostname(s), display names, Admin API access token(s), and optional CJ order-number prefix settings
• Optional mail “internal domain” fragments for auto-search behaviour
• Optional AI settings: API key, API URL, model name, prompt text, brand/sign-off fields, and toggles

We do not operate a server that receives these secrets as part of the extension’s normal operation. We cannot access your Chrome storage.

Data sent to third parties (you choose the providers)

When you use features that call external APIs, data is sent directly from your browser to:

1. CJ (developers.cjdropshipping.com) — order and tracking requests authenticated with your CJ credentials.
2. Shopify (*.myshopify.com) — Admin API requests authenticated with your Shopify token(s), to find orders and customer-related data you already store in Shopify.
3. Optional AI provider (e.g. DeepSeek, OpenAI, or another URL you enter) — if you turn AI reply on and run a generation, the extension sends the model instructions and content you supply (including structured order/tracking text and, where available, mail thread text from the page) to that provider’s API under their terms and privacy policy.

You are responsible for complying with your customers’ privacy obligations when sending personal data to those services.

Mail websites (content scripts)

On Zoho Mail, Gmail, and Outlook (web), the extension can read page content that is already visible in the browser to detect a customer email address for optional auto-search and, on Zoho, to pass conversation text into the optional AI feature. That processing happens locally in the extension except when you trigger an AI request, which then goes to your configured AI provider.

Purchases, billing, and licence verification

If you buy a licence or subscription from us (outside the Chrome Web Store’s deprecated in-app payments), the following applies in addition to the sections above.

• Payment processor. We use Stripe, Inc. to take payment. They collect and process payment card and billing details on their own terms and privacy policy. We do not receive your full card number.
• What we receive and store. We may receive and retain: your email address, name (if provided), transaction id, amount, currency, product or plan, subscription status (if applicable), and timestamps. We may store this on servers we control or on the processor’s customer records, depending on setup.
• Licence key. We may issue a licence key or token. If you enter it in the extension, it is stored in chrome.storage.local on your device. The extension may send the key to our server at https://cj-shopify-cs.vercel.app (licence verification API only) to verify that it is valid and not expired — not to CJ, Shopify, or AI providers.
• Legal basis (UK/EU). Processing is necessary to perform the contract with you and for our legitimate interests in preventing fraud and misuse. Where required, we will ask for consent (e.g. marketing emails — we do not describe marketing here unless you add it).
• Retention. We keep purchase and licence records for up to seven years after the end of the financial year in which the transaction occurred, or longer if required for tax, accounting, or dispute resolution, unless a shorter period is required by law.

Our Terms of Sale & License describe refunds, termination, and use of paid features.

Children

The extension is not directed at children under 16.

Changes

We may update this policy when the extension changes. The “Last updated” date will change; continued use after updates means you accept the revised policy.

Your rights

Depending on your region (e.g. UK GDPR / EU GDPR), you may have rights to access, correct, or delete personal data we hold about you — including billing and licence records if you purchased from us. This extension does not send your end-customers’ data to us. For data held by Shopify, CJ, or your AI vendor, contact those providers.