Privacy Policy

Contact information, real-name information, and order information provided during account registration, login, and subscription payment

Device identifiers, login IP addresses, and operation logs generated during device authentication, ticket support, and security audits

Information related to consultations, feedback, tickets, and test projects that you voluntarily submit

Necessary technical logs and access information that we may collect to ensure the security and stable operation of the Services

Personal information is processed only to the extent necessary for account registration and login, subscription payment, device authentication, ticket support, security audits, and performance and delivery

Used to provide, maintain, and improve the Services, and for necessary security protection and risk monitoring

Without your separate consent, your personal information will not be used for purposes not described in this Policy

We process personal information in accordance with the principles of lawfulness, legitimacy, necessity, and good faith, and in a manner that is directly relevant and minimally invasive

We process personal information only to the extent necessary to achieve the purposes of processing, and adopt de-identification and other security measures to reduce risk

Personal information that must be processed due to legal obligations such as payment, audit, or regulatory requirements will be processed in accordance with applicable laws and regulations

Personal information is stored on business servers and necessary backup environments. Sensitive fields are protected by encryption or hashing and retained for the period required by laws, regulations, and business needs

We adopt reasonable technical and administrative measures, including access control, identity authentication, data encryption, log auditing, security audits, and event monitoring, to prevent unauthorized access, alteration, disclosure, or destruction of personal information

We implement least-privilege and confidentiality constraints on employees and third parties that handle personal information

We conduct personal information protection impact assessments and security self-inspections on a regular basis and continuously improve our protection mechanisms

We retain personal information for the period required by laws, regulations, and business needs. After the retention period expires or the data is no longer needed, we delete or anonymize it in accordance with applicable law

Data that must be retained by law for payment review, dispute resolution, network security, and audit trail purposes will be retained only for the necessary period with restricted processing

We configure data access permissions based on job responsibilities and business needs, following the least-privilege principle

Data access activities will be recorded and audited. Without authorization, no one may access, copy, or export data

Important data is protected by encryption and other measures during transmission to prevent leakage and alteration

If cross-border transfer of personal information is involved, we will comply with legal obligations such as security assessments, personal information protection certification, or standard contracts

In the event of a personal information or data security incident, we will promptly take remedial measures in accordance with the rules, report to the relevant competent authorities as required by laws and regulations, and notify potentially affected parties

We have an emergency response mechanism for data security incidents and will record, analyze, and rectify such incidents

Except as otherwise provided by laws and regulations or separately authorized by you, we do not sell, rent, or share your personal information with third parties

Where entrusted processing by a third party is necessary, we will enter into an agreement with the processor, supervise the security measures it adopts, and the processor may only process within the agreed scope

Personal information that must be provided due to law enforcement, judicial, or regulatory requirements will be provided in accordance with statutory procedures and scope

We will not publicly disclose your personal information unless we obtain your separate consent or are required by laws and regulations