Privacy policy

Effective October 9, 2026. MIAOZHIAI PTE. LTD. operates the RFQMind catalog plugin and api.rfqmind.com. This notice covers this catalog service; other RFQMind services may have separate notices.

Information processed

• Account identifiers, username, display name, password verifier, authorization scopes, token verifiers, and login/security events. Passwords are used only on the RFQMind sign-in page; never provide them in chat or inquiry fields.
• Search terms, requested product/company identifiers and filters, and the resulting catalog records.
• Company name, company email, optional WhatsApp, quantity, destination, requirements, confirmation/request identifiers, and files you choose to upload.
• Submitted inquiries, recipient-verification status, operational assignment, delivery evidence and quotes recorded by operations.
• Technical request metadata such as timestamps, request identifiers, user-agent/referrer information, response timings, errors and hashed request/session identifiers for diagnostics and abuse prevention.

Purposes and recipients

We use this information to authenticate accounts, search the catalog, handle your confirmed requests, preserve attachments, prevent duplicate submissions and abuse, and provide inquiry history and support. RFQMind personnel and infrastructure providers process the data for these purposes. ChatGPT receives the tool inputs/results needed for your request under its own policies. Public product images are loaded from their image hosts, which receive normal browser request information.

This service does not automatically contact suppliers. Submission alone does not transmit an inquiry to a supplier. Any subsequent operational delivery uses verified recipient details and records its status. We do not use catalog-account data for advertising profiling or sell it.

Storage and retention

Catalog accounts, inquiries and uploaded file bytes are stored in RFQMind-operated databases, with restricted operational access and backups.

• Unsubmitted attachments expire after 24 hours and are removed by cleanup, normally within the following hour. You can remove an attachment from the form before submission.
• Submitted inquiries, their attachments and account profiles have no automatic expiry. They remain for account history and follow-up until removal through a verified data-deletion request, subject to any applicable record-preservation requirement.
• Authorization flows expire after 10 minutes; authorization codes after 5 minutes; access tokens after at most 1 hour; authorization grants and refresh tokens after at most 30 days. Expired flow/grant records are cleaned hourly.
• Application logs use size-based rotation: up to three files of 10 MB each. They have no fixed time-based expiry and are replaced as logs rotate. Restricted backup or incident copies may outlast active records; a deletion request must include review of those copies and any required preservation.

Your controls

You can decline authorization, disconnect RFQMind in ChatGPT, omit optional WhatsApp/files, and inspect your submitted inquiries. Disconnecting stops the connection; it does not delete stored inquiry history. Submission is not editable or cancellable through the plugin, but this does not remove your ability to request access, correction or deletion of your personal data.

Use support to make a data request. We verify account ownership before processing it and explain any data that must be retained. Do not send passwords, access tokens, payment-card details, government identifiers or unrelated sensitive information.