ShelfToPot Privacy Notice
Last updated：22 October 2026 · Version 2026-10-22.1
The 6 things to know first
- We collect your store's business information (store name, produce, prices, quantities, photos, bundles and order counts) and account information (the mobile number or email you register with, and your password, stored only in encrypted form).
- We do not collect your customers' names, phone numbers or addresses, and we do not read your WeChat chats. Your customers place orders in your group chat, outside ShelfToPot.
- The purchase cost you enter is used only for your own calculations. It never appears on posters or in group-chat copy, and it is never sent to the copywriting model.
- Merchants’ produce photos and customers’ ingredient photos are sent to an image-recognition model (customers’ photos are discarded as soon as they are recognised, never stored); bundle details are sent to a language model to polish the copy. Those providers process the data only to do that job for us.
- Our database and web servers are outside mainland China (see sections 6 and 7). We ask for your separate consent to this when you open your store. If you add a notification email, sending those emails also uses a US email provider, and we ask for a further separate consent when you add it.
- You can email shunyitian@163.com at any time to view, export, correct or delete your data, or to withdraw your consent.
ShelfToPot (“ShelfToPot”) helps neighbourhood grocery owners turn hard-to-sell produce into dinner bundles for their group chats. This notice explains what information we collect, why, where it is stored, who handles it, how long we keep it, and how you can view, correct or delete it.
Please read it before you open your store. It is prepared under the Personal Information Protection Law of the People’s Republic of China, the Cybersecurity Law and the Data Security Law. The service is currently designed for merchants operating in mainland China. This English text is provided for convenience; if it differs from the Chinese version, the Chinese version prevails.
1. Who we are and what this notice covers
The personal information handler is the operator of ShelfToPot (“we”). Contact: shunyitian@163.com.
This notice covers information we handle when you use the ShelfToPot website and web app (the merchant side and the customer side: scanning poster QR codes for the method, photographing ingredients to find recipes, saving favourites, and finding nearby stores), and when our operators assist you in the back office. It does not cover WeChat, any other third-party service you use, or your dealings with customers in your group chat.
ShelfToPot is for merchants running a store. It is not for anyone under 18.
2. What we collect and what we use it for
The table lists every category we collect. “Required” means the feature cannot work without it; for “optional” items you can leave them out, and the related feature just works less well.
| Situation | Information | Purpose | Required? |
|---|---|---|---|
| Visiting the website or using the web app | IP address, browser and device type, time of visit, pages requested, error logs | Keep the service stable and secure, diagnose faults, prevent abuse | Required (unavoidable when visiting a website) |
| Registering and signing in | The mobile number or email you register with; your password (stored only as an encrypted result, we cannot read it); a system-generated user ID; a sign-in credential stored in your browser | Create your account, let you sign in, and recognise that this is your store | Required (either a mobile number or an email) |
| Opening your store | Store name, closing time, pickup note, number and rough size of your customer group chats, produce you usually sell | Generate bundles, deadlines and copy that fit your store | Store name and closing time required; group size and usual produce optional |
| Clearing a batch of produce | Produce type, unit price, purchase cost, quantity left, number of bundle portions, and what you usually do with unsold produce | Generate bundles, give pricing hints, estimate results | Produce and unit price required; purchase cost optional (estimates are less reliable without it) |
| Taking or uploading a photo | Photos of the produce | Identify the produce (you can also skip the photo and pick the produce yourself) | Optional |
| Bundles and daily records | Bundle names, contents, prices and copy; the order count you record, quantity left or discarded at closing, issues you report | Show bundles, work out “today / this week” results, improve the service | Required when you use the relevant feature |
| Verifying your number or email, and recovering your password | Your mobile number and a one-time SMS code; or your email and a one-time confirmation or reset link in an email | Prove the account is yours, and let you set a new password if you forget it | Required (when registering and recovering a password) |
| Setting a notification email | The email address you enter and the time you consented; the emails contain your store name, last week’s order count and estimated range, and daily order counts (never purchase cost) | Send last week’s results every Monday, and remind you once if you have not logged the day by closing time | Optional (without it no emails are sent; nothing else is affected) |
| Customers: photograph ingredients to find recipes | The ingredient photo you take (sent only to the image-recognition model and discarded once recognised, never stored); the ingredients recognised; the time, duration and usage of each recognition (not the photo) | Recognise ingredients and recommend recipes; account for cost and prevent abuse | Optional (you can skip photos and search for ingredients yourself) |
| Customers: scan and save | When you open a poster’s QR page and which bundle it was; the dishes you save | Let the merchant see in the weekly report how many times a poster was scanned (the merchant sees counts only, never who); remind you when you scan the same dish again | The scan page is required; saving is optional |
| Customers: find nearby stores | Your phone’s location at the moment you tap “See who nearby has it”, used only to work out distance, not stored or logged | Show nearby stores’ bundles today that include what you are missing, and how far away they are | Optional; your browser asks before every use |
| Merchants: store location | The coordinates when you tap “Use current location” (about 1 m precision) | Show nearby customers how far away you are (customers see distance only, never the coordinates) | Optional, with its own consent; you can clear it any time in store details |
| Merchants: joining a wholesaler | With your consent, the wholesaler can see your store’s recent usage: which days you used it, how many batches you submitted, bundles you published, portions ordered and how many times posters were scanned | Let the wholesaler see how its downstream stores are using the service | Optional, with its own consent; leave any time in “My store”; the wholesaler never sees purchase cost, prices, photos or customer information |
| Customers: buying credit packs | Your credit balance and its history (sign-up bonus, each use, purchases, support adjustments); for each purchase, the pack, amount, time and Stripe order number | Counting uses, crediting purchases, reconciliation and refunds | Required to buy a pack; nothing is collected if you do not buy |
| Contacting us | Your email address and the content of your email | Reply to you and handle your request | Voluntary |
| Asking us to do it for you (pilot stage) | Photos and notes you send us by email or other means; an operator may enter them for you | Help you generate bundles and review content | Only if you ask us to |
We do not collect: your customers’ names, phone numbers or addresses; identity documents; bank cards or payment details; your contacts; your microphone; your WeChat chat history; or precise location (not in this version; if a future “nearby stock” feature needs your store’s location, we will tell you and ask for separate consent).
We do not need to photograph people. Please avoid faces, customer information or unrelated content in produce photos; if someone else unavoidably appears, get their consent first.
Please do not write customers’ names, phone numbers or addresses in free-text notes. If your business genuinely needs to, get the customer’s consent first; we then process that information only on your instructions.
“Estimated extra profit” and “this week’s results” are derived from your data using fixed formulas. Only you can see them; operators see them only when helping you troubleshoot.
4. Our legal bases and how we use your information
We handle your personal information where it is necessary to conclude or perform the terms of use between you and us; where you consent (for example photos and transfers outside mainland China, both of which you can withdraw); and where needed to comply with legal obligations (such as keeping network logs as required).
We use your information only for the purposes in the table above. If we want to use it for a new purpose, we will tell you first and, where required, ask for your consent again.
We do not sell your information, use it to show you third-party ads, or use your content to train models.
5. AI and automated processing
- Recognising produce or ingredients from photos and polishing bundle details into group-chat copy use third-party AI models. Recipe recommendations are ranked by a program from how many of a recipe’s ingredients you already have, not written by AI, and recipes are shown to customers only after human review. Pricing hints and “estimated extra profit” are computed by fixed formulas in code, not guessed by AI.
- The factual parts of the copy (bundle name, price, portions, deadline, pickup) are generated and checked by code; the model only adjusts tone and word order. If the check fails, template copy is used instead.
- AI output can be wrong. Please read it again before you post; prices, portions and times are whatever you confirm.
- This processing does not have a legal or similarly significant effect on you. If you disagree with a result, email us and ask for a human review.
- We have not authorised our service providers to use your content to train their models.
6. Who processes it for us, and whether we share it
To provide the service we engage the providers below. They may process data only within what we ask of them and may not use it for their own other purposes.
| Provider | What for | Information it may receive | Location |
|---|---|---|---|
| Supabase | Database, sign-in and file storage: holds all business data and photos | Account information (mobile number or email, encrypted password result), store and business data, photos | Outside mainland China: Seoul, South Korea (AWS data centre) |
| Vercel | Hosts the website and server code; every request passes through it | Visits and request content (including IP address) | Outside mainland China: service nodes in the United States and elsewhere |
| Alibaba Cloud SMS | Sends one-time codes (mobile registration and password recovery) | Phone number, message content | Mainland China |
| Alibaba Cloud Model Studio (Qwen vision model) | Identifies produce in photos | Merchants’ produce photos (passed via a short-lived temporary link); customers’ ingredient photos (sent directly, never saved to our storage) | Mainland China |
| DeepSeek | Polishes bundle details into group-chat copy | Store name, bundle name, contents per portion, price, portions, deadline, pickup note, cooking highlights; not purchase cost, phone number or account ID | Mainland China |
| Resend (only if you register by email, or add a notification email) | Sends the registration confirmation and password-reset emails, and the weekly report and closing-time reminder emails if you turn them on | Your email; the one-time links in the confirmation and reset emails; the content of report and reminder emails (store name, order count, estimated range, daily order counts; not purchase cost, phone number or account ID) | Outside mainland China: United States |
| Stripe (only when you buy a credit pack) | Processes payment (WeChat Pay, Alipay, card) | Order amount, pack name, your account ID (a random identifier), and your email if you registered with one. The payment details you enter on the payment page go directly from you to Stripe and WeChat Pay/Alipay; we cannot see or store them | Outside mainland China: United States |
| Sentry (only when we switch it on) | Collects program errors for troubleshooting | Address of the failing page, browser type, error message | Outside mainland China: United States |
We do not provide your personal information to any other company, organisation or person except: with your explicit consent; where laws, courts or regulators require it; in an emergency to protect your or others’ life or property; and in a merger, division or transfer, where the recipient remains bound by this notice and must ask for your consent again to change the purpose.
Operators access your data only when you ask us to act for you, to troubleshoot, or to review bundle content. Only allow-listed accounts can sign in to the back office, and their actions are logged.
7. Transfers outside mainland China
The servers of Supabase and Vercel in the table above (and Sentry, when enabled, and Resend, if you register by email or add a notification email) are outside mainland China. This means your mobile number or email, the encrypted result of your password, your store and business data and photos are stored outside mainland China or processed through servers there.
Recipients: Supabase, Vercel (and Sentry when enabled). Purpose: storing data and running the service. Method: storage, transmission and access. Information: as listed in the table above.
About Resend: if you register or recover your password by email, the confirmation and reset emails are sent through Resend, which is covered by the separate consent you give at registration. The notification email is a separate item: only if you add one under “Store details” do we pass that address and the weekly report and reminder content to Resend (United States) for sending. Purpose: sending the weekly report and closing-time reminder. Method: transmission. When you add a notification email we ask for your consent with its own checkbox, and record the time. If you do not agree, leave it blank; nothing else is affected. Clearing the address withdraws this consent, and we stop providing it to Resend.
About Stripe: only when you buy a credit pack do we pass the order details listed above to Stripe (United States) to take the payment. Purpose: taking payment. Method: transmission. Before your first purchase we ask for your consent with its own checkbox and record the time; if you do not agree, do not buy — your free sign-up credits still work.
When you register we ask for your consent to this on its own, with a separate checkbox, and record the time and version. Because our service is hosted outside mainland China, we cannot open a store for you if you do not agree.
You can withdraw this consent at any time by emailing shunyitian@163.com. After you withdraw, we will stop the transfers and delete your data held outside mainland China, and you will no longer be able to use ShelfToPot. If you want to exercise the rights in section 10 against an overseas recipient, contact us and we will pass it on and handle it.
We will complete the compliance steps that the applicable law requires for data leaving mainland China. If we later move our servers inside mainland China, we will update this notice and tell you.
8. How long we keep it
- Account, store data and produce photos: kept while you use the service. We delete or anonymise them once you have stopped using it for 12 months, or after you delete your account. You can delete it yourself under “My store → Delete account”, which asks for your password once more.
- Notification email: kept until you clear it, ask us to delete it, or stop using the service for 12 months. Resend keeps its own sending records for its own retention period.
- SMS codes: used only for that verification and invalid once used or expired; not kept long term.
- Network logs: kept as the law requires.
- Emails: kept for 12 months after we finish handling your request.
- Customers’ ingredient photos: not kept. Each recognition’s record (time, duration, usage, no photo) is kept for 12 months to account for cost, and deleted with your account.
- Scan records and favourites: kept until you delete your account (merchants see counts only). Store location: kept until you clear it or delete the store. Customers’ location: not kept.
- Credit balance and usage records: kept until you delete your account. Purchase records (pack, amount, time, order number) are kept for 3 years as transaction records and are not removed when you delete your account (any remaining credits lapse); where the law requires longer, we follow the law. Stripe keeps its own transaction records under its own retention periods.
- Backup copies: cleared when the backup cycle ends.
- Where the law sets a different period, that period applies.
9. How we protect it
- Encryption in transit between the web page and the server.
- Access control: each store can access only its own data; produce photos sit in private storage and can be viewed only through short-lived temporary links.
- Only allow-listed accounts can sign in to the back office; actions are logged and follow least privilege.
- Keys and credentials are kept separate from code and not put into web pages.
No system is perfectly secure. If personal information is, or may have been, leaked, altered or lost, we will take remedial steps immediately and notify you and the regulators as the law requires.
Please also look after your phone and browser, and do not lend a device that is signed in to ShelfToPot.
10. Your rights and how to exercise them
You have the right to: access and copy your personal information; correct or complete inaccurate or incomplete information; ask for deletion; withdraw consent; ask us to explain our handling rules; where the conditions are met, ask us to transfer your information to a handler you name; and stop using the service and ask for your account to be closed.
How: email shunyitian@163.com with your request. So that we do not hand your data to someone impersonating you, we first verify identity: write from the email you registered with, or give us your store name and the last four digits of the registered mobile number. You can also sign in and delete your data yourself under “My store → Delete account”. We reply within 15 working days; if a case is complex and needs longer, we tell you why.
If we refuse a request we give our reasons. Where a legal retention period has not ended, or deletion is technically infeasible, we stop all handling other than storage and necessary security measures.
Withdrawing consent does not affect handling that was done on the basis of consent before you withdrew it.
If you are not satisfied, please contact us first. You can also complain to or report to the regulators, such as the cyberspace authorities (for example the 12377 reporting hotline).
11. Minors
The merchant side and the customer side of ShelfToPot are not for minors. If you are under 18, please do not use it. If we find we have collected the personal information of a child under 14 without a guardian’s consent, we will delete it promptly.
12. Changes to this notice
We may update this notice; the date and version are at the top of the page. For material changes to purpose, method, categories of information, or transfers abroad or to others, we will tell you in the web app and, where needed, ask for your consent again. Earlier versions are available on request.
13. Contact us
ShelfToPot operator. Email: shunyitian@163.com. We reply within 15 working days.
Contact：shunyitian@163.com · Privacy Notice · Terms of Use