Privacy Policy — Crabit Sourcing

Last updated: 2 October 2026

“Crabit Sourcing” is an internal Chrome extension of the Crabit retail chain (crabit.vn). It lets purchasing staff send a product from a supported sourcing website into a product proposal sheet in the Crabit system.

What the extension reads

• The product page on a supported sourcing site (the marketplaces and suppliers Crabit buys from, for example 1688.com, taobao.com / tmall.com, superdelivery.com, jrinter.kr; the current list is shown in the extension popup), only when you click “Gửi vào Crabit” (Send to Crabit) or “Send current page / Send all product tabs” in the extension popup. It takes the product data of the page (name, images, prices, options, attributes, supplier name). It reads no page before you press send.
• Any other page, only on your request: for a supplier website that is not on the list above the extension holds no standing access. Only when you click the extension icon and press “Gửi trang đang mở” (Send current page) does it read that one tab, once, to collect product data (name, images, a price if the page shows one). It does not read form fields, passwords or your account content on that page, and it does not send the whole page.
• Your own Crabit session: while you have the Crabit admin console (admin.crabit.vn) open, the extension reads the session token and the account name/email from that page so it can call Crabit on your behalf. It never asks for or stores your password.

Where the data goes

• Product data and the session token are sent only to Crabit's own system at admin.crabit.vn to create a draft sheet under your account.
• The session token is kept in the extension's local storage on your device (chrome.storage.local) until the session expires or you sign out of Crabit. The result of the last send (page title, status) is also kept locally to show in the popup.
• Nothing is sold or shared with third parties, and nothing is used for advertising, behavioural analytics or any purpose other than creating product proposal sheets.
• The extension uses no remotely hosted code, collects no browsing history and does not track you on other sites.
• The extension never signs in for you and never bypasses a site's sign-in or verification step; it only reads what your own browser is displaying.

Retention and deletion

The product data you send becomes part of a product sheet in Crabit and is kept under Crabit's internal policy; authorised Crabit users can delete a sheet. Uninstalling the extension removes the session token and local data from your device.

Contact

Questions or deletion requests: contact your company's Crabit system administrator.