FufillsFufills.
AI
Back to simulator

Privacy Policy

Last updated: May 3, 2026

This privacy policy describes how Fufills ("we", "us") handles data across two products:

  • Fufills COD Profit Simulator — the web application at simulator.fufills.com.
  • Fufills Product Helper — the Chrome extension that captures product details from supplier websites.

1. What we collect

1.1 Web simulator

  • Anonymous usage logs. When you run a simulation we store the country, the simulation outputs (net profit, ROI, verdict), key inputs (selling price, CPL, volume), and a tab-scoped random session ID (10 characters, stored only in your browser's sessionStorage). We do not store your IP address, browser fingerprint, or any user agent string.
  • Account data (optional). If you create an account we store your email, full name (if provided), preferred language, and any custom countries you save. Authentication is handled by Supabase; passwords are never stored in plain text.
  • AI research cache. When you use the AI product research feature we cache the analysis result keyed by the input hash. The cache stores: product name, category, audience, FOB and landed cost estimates, per-country recommendations, marketing angles, and the source URL you provided. If you were signed in when you ran the research, your user ID is recorded as the "first searcher" for that cache entry. Subsequent users who research the same product see the cached result instantly.
  • Generated ad copy cache. Facebook ad copy generated for a product × country pair is cached so the same request doesn't re-bill the LLM provider.

1.2 Chrome extension

  • Captured product data. When you click the extension icon on a supported supplier page (Alibaba, 1688, AliExpress, Temu), the extension reads public product details from the page DOM: title, description, price, weight, dimensions, images, supplier name, and the page URL. This data is stored locally in your browser via chrome.storage.local as a ring buffer of up to 50 entries. We do not transmit captured data to our servers until you explicitly send a capture to the Fufills web app by clicking it in the simulator.
  • Optional Ollama enrichment. If you run Ollama locally on localhost:11434, the extension probes it and (if available) sends the captured product to your local Ollama instance for field cleanup. Data sent to Ollama never leaves your machine.

2. What we don't collect

  • We do not sell or share your data with third parties.
  • We do not use your data to determine creditworthiness or for lending.
  • We do not run advertising trackers, behavioral analytics, or remarketing pixels.
  • The extension does not read pages outside the supported supplier domains and the Fufills web app domain.
  • The extension does not run remote code. All scripts ship in the extension package and are reviewed by the Chrome Web Store.

3. Why we need each permission (Chrome extension)

  • activeTab — to read the product DOM only after you click the extension icon.
  • storage — to remember up to 50 captured products locally in your browser.
  • scripting — to inject the capture script on tabs that were already open when the extension was installed.
  • notifications — to confirm a capture worked when the popup is closed.
  • Host permissions on Alibaba / 1688 / AliExpress / Temu / fufills.com — to read product pages and pass captured data to the Fufills web app.

4. Third-party services we use

  • Supabase (database, auth, storage) — operates under EU GDPR-compliant infrastructure.
  • Vercel (web hosting) — serves simulator.fufills.com.
  • Groq (LLM inference) — receives the product details and prompt when you run AI research or generate ad copy. Groq does not retain prompts or completions for training.
  • ScrapingBee (occasional fallback scraper) — used only when you provide a URL and the page can't be fetched directly.
  • Resend (email delivery) — sends signup confirmation emails containing your one-time verification code.

5. Data retention

  • Simulation logs: deleted automatically after 90 days by a daily cleanup job.
  • AI research cache: entries with two or fewer searches and no activity in 60 days are deleted automatically.
  • Ad copy cache: entries unused for 60 days with two or fewer hits are deleted automatically.
  • Account data: retained until you delete your account. You can delete your account at any time from your Profile sheet.
  • Captured products in the extension: stay only on your device. Uninstalling the extension or clicking "Clear all" in the popup permanently removes them.

6. Your rights

You can request access, correction, export, or deletion of any data we hold about you by emailing privacy@fufills.com. We respond within 30 days.

7. Children

Fufills is a B2B tool for dropshipping operators. We do not knowingly collect data from anyone under 18.

8. Changes to this policy

We'll update this page when our practices change. Material changes will also trigger a notice at the top of the simulator and (for signed-in users) an email.

9. Contact

Questions, complaints, or data-subject requests: privacy@fufills.com. General contact: fufills.com/en/contact.

Fufills is operated by the Fufills team. This policy applies to the Fufills COD Profit Simulator (simulator.fufills.com) and the Fufills Product Helper Chrome extension. For general information about Fufills, visit fufills.com.