DATA PATH / 01
Minimal data for a narrow task.
Please do not submit passwords, bank credentials, government IDs, private communications or unrelated personal information.
Browser-only tools
The acquisition brief stays in your browser until you choose to send an email. Choosing the email button opens a draft in your email application; you review and send it yourself.
Factory-screen paste mode reads the supplier name and business-scope wording in your browser. It does not send those fields to Currawong Web or an official registry.
Verification requests
When you press the submit button on the company-check form, the application sends the supplier legal name, optional Unified Social Credit Code, optional supplier website, product, and selected public-record checks to the Currawong Web verification service. The form does not ask for your email address.
The service stores the request and its later status or result so the China-side desk can process it and your private link can retrieve it. A salted, short-window hash derived from the request source is used to enforce submission limits; the application does not write the raw source address into its verification tables.
Private result links
Your access secret stays after the # character in the private result URL. Browsers do not send that fragment as part of the page request. The application sends the secret only in a status API request after the page loads, and the database stores a one-way hash rather than the raw secret.
Keep it private. If you lose it, Currawong Web cannot reconstruct the secret from the stored hash.
Optional live company lookup
Paste mode remains local. If the separately labelled live lookup is configured and you choose to use it, the company keyword is sent to the same-origin Currawong Web API, which may query the configured commercial company-data provider. If no provider account is configured, the lookup fails visibly; it does not fabricate or silently substitute a result.
Retention, access and deletion requests
No fixed deletion period is promised in the current product because an automated retention policy has not yet been implemented. This is a deployment disclosure, not permission to keep data indefinitely. Before submitting, use only the minimum supplier information needed for the check.
To ask what application data is associated with a request, request correction or deletion where applicable, or report a private-link exposure, email [email protected] with the request ID. Do not include the private result secret in ordinary email unless specifically required to verify access.