MR
MARTI RIKINAPARTNERS
Sign in

LEGAL · MARTI RIKINA PARTNERS

MARTI RIKINA Partners
Privacy Policy.

Effective: October 13, 2026Version: 2026-10-13-v14Operator: MARTI RIKINA LLC

A plain-language account of what supplier, customer, product, request and technical information we process—and how Supabase, Resend, DocuSign, QuickBooks, OpenAI and our infrastructure support the service.

Who we are and scope

MARTI RIKINA LLC is the operator of MARTI RIKINA Partners and is responsible for the personal information described in this Privacy Policy. This Policy applies to suppliers and factory representatives, customers and brand representatives, administrators and visitors using partners.martirikina.com, including anyone who requests access through the Get access form.

This is a business-to-business service and is not intended for children under 18.

Information we collect

  • Identity and contact data: email address, display name, phone number, role and authentication identifiers.
  • Temporary customer-access security data: when MARTI RIKINA issues a one-time customer access code, we retain only its SHA-256 digest, the customer account, issuer, issue, expiry, revocation and consumption timestamps, plus non-reversible IP and email hashes used for short rate limits. The plaintext code is returned to the operator once and is not stored.
  • Profile photo (optional): an image you choose for your account. We convert it on the server to a small square WebP image and remove every embedded metadata field (camera, location, timestamps) before storing it.
  • Company data: factory or company name, country, website, capabilities, product categories, billing address and profile-confirmation records.
  • Access requests: the company, name, phone, work email, country and message you send through the Get access form, the date, and MARTI RIKINA's review notes and decision.
  • Product and production data: specifications, drawings, models, photos, print zones, dimensions, materials, MOQ, lead times, certificates and controlled source files.
  • Customer requests: the packaging brief (type, volume, material, printing, quantity, box), reference photos, request status, chat messages and attachments, and the catalog products offered or approved for the request.
  • Request and commercial data: requests issued by MARTI RIKINA, factory source quotations, supplier source pricing, currencies, commercial assumptions, statuses, messages and related files; the customer quotation and its approval record.
  • Contract and signature data: the legal company name, entity details, the authorized signer's name, title and email, the supply agreement and its electronic-signature status and audit trail.
  • Billing and accounting data: the customer card synchronized with our accounting system (display name, company, contact email, phone, billing address), invoices and payment status; for factories, the vendor identity and bills.
  • Notification preferences: whether you turned email notifications on or off, and delivery records for the notifications we send, and, for browser and app notifications, the push address of each browser or phone you turn on (for the MARTI RIKINA Partners app: the Firebase Cloud Messaging token, the platform — iOS or Android — and the app version).
  • Automation and review data: extracted facts, standardized artifact candidates, catalog-matching suggestions, validation conflicts, regeneration requests, reviewer decisions and publication history.
  • Technical data: session tokens, IP address, browser/device information, interface language, timestamps, security events and diagnostic logs collected by us or our infrastructure providers.
  • Communications: information you send through workspace chat, support, forms or uploaded files.

How we use information and uploaded content

We use information to authenticate users; create and administer supplier and customer workspaces; answer access requests; confirm factory profiles; prepare private standardized artifacts from authorized product source material; moderate and publish approved products; receive customer requests and match them to catalog products; issue requests from MARTI RIKINA to factories; transform factory commercial inputs into separate MARTI RIKINA client quotations; prepare, sign and store supply agreements; issue invoices and record payments; track orders from receipt to delivery; provide chat, email notifications and support; secure and troubleshoot MARTI RIKINA Partners; keep business and compliance records; enforce our agreements; and comply with law.

Approved, non-confidential product content—including approved product photos, renderings, descriptions and technical listing data—may also be used in MARTI RIKINA catalogs, websites, configurators, quotations, sales materials, presentations, social media, advertising, case studies, demonstrations, training and service improvement under the license accepted by the uploader. Factory source quotations, supplier source pricing or cost, private contact details, chat, customer information, customer requests and reference photos are not public or promotional content.

We may use de-identified workflow measurements, error classifications and reviewer outcomes to evaluate and improve automated preparation. We do not use private source files, factory source quotations, supplier source pricing or customer information to train a general-purpose AI model without separate, express authorization.

Where applicable, our legal bases include performance of a contract, steps requested before entering a contract, legitimate interests in operating and securing a B2B platform, legal obligations and consent.

Customer requests, quotations and orders

A customer request stays private to the customer, the collaborators the customer invites and MARTI RIKINA. When MARTI RIKINA sources a request from a factory, the factory receives the packaging brief, the quantity and the reference photos; it does not receive the customer's identity, contact details or price. Supplier requests originate from MARTI RIKINA and do not disclose the end client's identity or contact information.

Where reference photos are attached to a request, up to four downscaled copies of the first photos are sent automatically, once per upload, to OpenAI to suggest matching catalog products; the MARTI RIKINA operator can repeat the reading. The photos are not used to train the model and are not retained by it. The suggestion is only a proposal; the customer decides which product is approved.

A quotation the customer approves is frozen with the exact product, quantity, price and terms. The supply agreement is generated from that record and signed electronically through DocuSign; the invoice is issued through QuickBooks. Order stages (received, quote sent, quote approved, payment received, product ordered, shipped, delivered) are visible to the customer in the cabinet.

Profile photos

A profile photo is optional. When you upload one, the server re-encodes it to a private 256 × 256 image, discards the original file and every metadata field it carried, and stores only the result in private storage that no public link can reach. The photo appears in your own cabinet and to MARTI RIKINA; it is not published to the catalog or shown to the other side of a transaction. You can replace or remove it at any time from the account menu.

Access requests

The Get access form sends your company, name, phone, work email, country and message to MARTI RIKINA. The submission is stored in the MARTI RIKINA Partners database as an access request together with the date it was received, and a copy is emailed to packaging@martirikina.com. Only MARTI RIKINA's operator can read access requests; the operator records a review note and the decision (granted or declined), and a grant opens a supplier record or a customer account for the email address you gave and sends you one welcome email.

We keep an access request for up to 24 months after the decision, or for as long as the account it opened exists, and then delete it. To limit abuse, the server also keeps a hashed, non-reversible identifier of the connection in memory for up to one hour.

Email notifications

Besides sign-in and security email, MARTI RIKINA Partners can notify you by email about your requests: a new request, a new chat message, a stage change, a quotation, a document to sign, or an order update. Notifications are off until you turn them on at your first sign-in or in the top bar of your cabinet; you can turn them off there at any time, and every notification email carries a one-click unsubscribe link. Notification emails contain a headline, the request reference and a link into the cabinet; they never contain prices, chat text, attachments or the other party's identity. Factory notifications are sent in the interface language the factory chose (English or Chinese).

Product publication and autonomous catalog sync

Supplier drafts, generated candidates and controlled factory files remain restricted to authorized users and MARTI RIKINA reviewers. Publication is not automatic. Once the MARTI RIKINA owner approves a product, selected non-confidential technical listing data and approved product media may be published or replicated to the customer-facing packaging website and configurator at packaging.martirikina.com. The customer website keeps an autonomous catalog snapshot so approved listings remain available if MARTI RIKINA Partners is temporarily unavailable.

We do not publish factory source quotations, supplier source pricing or cost, private factory contact details, chat, customer information, customer requests, internal notes, unapproved drawings or other controlled source files.

Service providers and disclosures

We disclose information only as needed to operate MARTI RIKINA Partners, complete requested workflows, protect rights and security, comply with law, or complete a corporate transaction. Current providers include:

  • Supabase: password and single-use email-link authentication, identity and sessions, the operator's second factor, database records, catalog snapshots, private file storage (product files, request photos, chat attachments, profile photos, signed documents) and protected server functions. Passwords are submitted directly to Supabase Auth and are not stored in the MARTI RIKINA Partners database.
  • Resend: authentication, security, request, notification and transactional email, including access requests sent to MARTI RIKINA. Resend receives the destination address, message content and delivery metadata needed to deliver and diagnose email.
  • DocuSign: electronic signature of the supply agreement. DocuSign receives the agreement documents and each signer's name, email and title, and returns the signed documents, the signature certificate and the envelope status.
  • Intuit QuickBooks: the customer card (display name, company, contact email, phone, billing address), invoices and payment status, and for factories the vendor record and bills. Customer card fields synchronize in both directions; the MARTI RIKINA Partners sign-in email is never sent to QuickBooks.
  • Google Maps Platform (Places API): street-address suggestions while a customer types the contract and legal-notice address in the customer cabinet. Google receives the characters typed into the address field and returns matching United States addresses; the chosen address is filled into the form and recorded only when the customer confirms it. No account, request or payment data is sent to Google, and the suggestions are optional — the address can always be typed in full.
  • Google Firebase Cloud Messaging: delivers app notifications to iPhone (through Apple Push Notification service) and Android. It receives the phone's push token and the notification's headline and link; never prices, chat text or attachments.
  • Vercel: application hosting, edge delivery, security, operational logs, and limited application metadata or public catalog replicas required to serve the sites.
  • Google Drive / Google Workspace: controlled disaster-recovery backups of site releases and selected operational documents. Private customer files are not intentionally placed into public Drive links.
  • OpenAI: optional structured extraction or private artifact generation from a product upload, and optional catalog matching from a request's reference photos, only when the uploader or the operator receives the current file-level notice and affirmatively consents to that specific external processing. Accepting the Supplier Agreement or these policies does not replace that separate consent. OpenAI also provides optional supplier-chat translation only when an authorized reader selects Translate after the notice described below.
  • OpenAI: when you use New request with AI, drafts the request from the photos and words you add; it receives those photos (resized, without location data) and words and returns suggested field values. It is not used to train models. Dictation in the app uses your phone's own dictation service (Apple on iPhone, Google on Android), as the keyboard's microphone does; the recording goes to that service, not to MARTI RIKINA or to OpenAI.

Supabase Privacy · Resend Privacy · DocuSign Privacy · Intuit Privacy · Vercel Privacy · Google Privacy · OpenAI Privacy

We do not sell personal information and do not share it for cross-context behavioral advertising. Supplier requests originate from MARTI RIKINA and do not disclose the end client's identity or contact information.

Optional supplier-chat translation

An authorized supplier or MARTI RIKINA operator can choose Translate after the OpenAI notice to translate one supplier request message into English or Simplified Chinese. We send the selected message text and target language to OpenAI. We do not add conversation history, attachment bytes or attachment URLs, or additional identity fields. Any information already in the selected message is included as part of that text.

We retain the translated text as a private derivative keyed to the exact source message hash and target language, with the model and prompt version. We also retain the requesting account, attempt time and outcome to enforce usage limits and prevent duplicate work. The cache has the same request access restrictions; it is retained under the record-retention rules below. The original message remains unchanged, and this reading aid neither sends a message nor issues, approves or changes a commercial document or term.

Translation requests use OpenAI's store: false option; this does not promise zero provider retention. OpenAI's applicable terms and privacy commitments apply. The original remains available when translation is unavailable. This feature adds no cookie, browser-storage mechanism or advertising use.

Retention

We retain account, factory-confirmation, product, request, quote, agreement, invoice, chat and review records while the account or transaction is active and afterward as reasonably needed for version history, dispute resolution, legal compliance, security and backup cycles. Signed supply agreements, approved quotations and their confirmation records are kept as legal evidence for the life of the transaction and the applicable limitation periods. Authentication logs, notification delivery records and transactional email records may have different operational retention periods. Encrypted backups are kept on a rolling cycle. We delete or de-identify information when it is no longer reasonably necessary, subject to legal and technical limitations.

Security

We use reasonable administrative, technical and organizational safeguards, including customer-created passwords, single-use email sign-in links, SHA-256-only one-time customer access codes with 30-minute expiry and rate limits, closure of other sessions after a password change where available, a mandatory second factor for the operator account, scoped access, authenticated requests, private storage for every uploaded file, server-side re-encoding of images and controlled file access. No online service can guarantee absolute security. Do not upload trade secrets or personal data unless needed for the MARTI RIKINA Partners workflow and authorized for that purpose.

International processing

MARTI RIKINA is based in the United States, and providers may process information in the United States and other countries. Those locations may have different privacy laws. Where required, we use contractual or other recognized safeguards for international transfers.

Your choices and privacy rights

You may request access, correction, deletion or a copy of personal information, object to or restrict certain processing, or withdraw consent where processing relies on consent. Rights vary by location and may be subject to exceptions. We may verify identity and authority before completing a request.

In the cabinet you can change your display name and profile photo, turn email notifications on or off, and, for customers, create or replace a password; factories can choose the interface language. You can delete your account yourself under Password & security → Delete account, or as described on Delete your account; records the law requires are kept as set out in Retention. Send other requests to packaging@martirikina.com. You may also sign out at any time. Blocking essential browser storage may prevent account access.

In the app you can turn the Face ID or fingerprint unlock on or off for that phone; the biometric check happens on the phone and nothing biometric reaches MARTI RIKINA.

The supplier cabinet is available in English and Chinese for convenience. This Policy, the Terms of Use and the Supplier Agreement are written in English, and the English text governs.

Changes and contact

We may update this Policy as MARTI RIKINA Partners, providers or legal requirements change. We will post the new effective date and provide additional notice for material changes. We will not apply a materially broader use of previously collected personal information retroactively without the notice and consent required by law.

Privacy contact: MARTI RIKINA LLC, Sarasota, Florida, United States · packaging@martirikina.com.