NapNap Privacy Policy

Effective date: October 16, 2026

1. Who we are

NapNap ("NapNap", "we") is a customer-service workspace for e-commerce sellers, operated by Moyu Corporation. This policy explains what data we handle when merchants use NapNap and the napnap.shop services. Questions: admin@daydaymoyu.com.

2. Data we collect

• Account data: name, email address and login identifiers you use to sign in to NapNap.
• Connected-channel data: when you connect a sales channel or mailbox (e.g. TikTok Shop, eBay, Instagram, Facebook, WhatsApp, Telegram, or an email account including Gmail), we receive the customer conversations, message content, sender metadata and related order context needed to display and answer those conversations in your workspace.
• Usage data: basic logs (timestamps, feature usage, error diagnostics) needed to operate and secure the service.

3. How we use data

• To display customer conversations in your workspace and let your team reply.
• To generate AI-assisted reply drafts for your store only. Drafts are produced from the individual merchant's own conversations and context. We do not use your data — including any data obtained from Google APIs — to develop, improve or train generalized AI or machine-learning models across customers.
• To operate, secure and support the service.

We do not sell personal data, and we do not use it for advertising.

4. Google user data

When you connect a Gmail account, NapNap requests access via Google OAuth so your customer emails can appear and be answered in your workspace. We access only the mailbox you explicitly connect; tokens are stored encrypted on our servers and are used solely to read and send mail for that mailbox as part of the customer-service features you operate. You can disconnect at any time from NapNap or revoke access at https://myaccount.google.com/permissions, after which we stop accessing the account.

NapNap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Sharing

We share data only with the infrastructure subprocessors needed to run the service (cloud hosting, storage and content delivery), under contracts that restrict them to processing on our instructions. We disclose data if required by law. We never sell it.

6. Storage, security and retention

Data is stored on access-controlled servers; credentials and OAuth tokens are encrypted at rest. We retain conversation data while your account is active. When you disconnect a channel or delete your account, associated data is deleted from active systems within 30 days, with backup copies expiring on their rotation schedule.

7. Your rights

You may access, correct, export or delete your data, or disconnect any channel, at any time via the workspace or by contacting admin@daydaymoyu.com. We respond within 30 days.

8. Changes

We will post any changes to this policy on this page with an updated effective date.