Privacy Policy

1. Information We Collect

We collect information submitted directly by users through our commercial Request a Quote (RFQ) form, Contact form, and trade inquiry interfaces. This includes:

• Contact Details: Contact person name, business email address, phone number, and company name.
• Sourcing Requirements: Target country, destination port, product division, specifications, and estimated order quantities.
• Technical Information: Standard server web logs (IP address, browser type, request timestamps) necessary for security and reliable platform operation.

2. How We Use Submitted Information

Inquiry and RFQ information is used strictly for legitimate commercial trade purposes:

• Evaluating product sourcing feasibility and matching local Pakistani supply sources.
• Preparing formal FOB/CIF commercial export quotations and technical responses.
• Communicating with buyers regarding order specifications, lead times, and shipping terms.

3. Confidentiality & Information Sharing

AA Global Exporters treats all commercial specifications and RFQs as strictly confidential. We do not sell, rent, or lease buyer inquiry data to third-party marketers. Information is disclosed only to relevant supply producers, inspection providers, or freight shipping lines directly required to fulfill your specific commercial quotation or transaction.

4. Cookies & Platform Technologies

Our website uses essential functional cookies and session storage necessary for security, user session management, and navigation performance. We do not deploy intrusive third-party advertising tracking or behavioral profiling cookies.

5. Data Security & Retention

We implement industry-standard technical safeguards to protect commercial records from unauthorized access, alteration, or loss. Information is retained for the duration necessary to satisfy ongoing business inquiries, contractual obligations, and statutory record-keeping.

6. Google User Data and Gmail API

AA Global Exporters integrates with Google OAuth services to enable authorized single-message commercial correspondence via the Gmail API. This section details our privacy practices regarding Google user data.

• OAuth Scopes Requested:

  We request openid, email, and https://www.googleapis.com/auth/gmail.send. We do NOT request inbox reading, searching, or modification scopes.

• Single-Message Authorization & Prohibited Cold Outreach:

  Gmail API access is used exclusively to dispatch single, individual, operator-approved commercial messages (such as RFQ quotations or responses to existing business contacts). The platform does not perform automated background email sending, bulk cold outreach, inbox scanning, or message reading.

• No Selling, Renting, or Data Broker Transfers:

  Google user data is used solely to facilitate user-initiated communication. We never sell, rent, lease, or transfer Google user data to third parties, data brokers, or advertising networks.

• No AI/ML Model Training:

  Google user data—including email content, recipient details, and OAuth tokens—is NEVER used to train, retune, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.

• Data Retention & Encryption:

  Google OAuth refresh tokens are stored encrypted using AES-256-GCM. When an operator disconnects their account, tokens are permanently deleted immediately and Google access is revoked. Non-sensitive audit logs (recipient, timestamp, evidence reference) are retained for 90 days for compliance verification.

• Revocation & Disconnection:

  Operators may revoke access at any time using the in-app Disconnect Gmail button, via Google Account Security Permissions, or by contacting our trade office. Manual data deletion requests are completed within 24 hours.