Updated Date: December 15, 2024
Effective Date: December 20, 2024
Notice
Before using the various products or services of [XORIGIN AI], please be sure to read and thoroughly understand this policy, especially the terms marked in bold/bold underline, which you should focus on reading. Only after you fully understand and agree to it should you start using it. If you have any questions, opinions, or suggestions about the content of this policy, you can contact us through the various contact methods provided by [XORIGIN AI].
Your trust is very important to us. We deeply understand the importance of personal information to you, and we will take corresponding security protection measures as required by laws and regulations to try our best to protect your personal information from being safe and controllable. In view of this, the service provider of [XORIGIN AI] (or referred to as "we" or "[XORIGIN AI]") has formulated this "Privacy Policy" (hereinafter referred to as "this policy/this privacy policy") and reminds you: This policy applies to all products and services provided by [XORIGIN AI] and the products or services of our affiliated companies (such as [XORIGIN AI] mini-programs). You can use the [XORIGIN AI] platform account to log in to the above products or services. If the above products or services do not have a separate privacy policy, this policy also applies to those products or services.
It needs to be specially explained that this policy does not apply to services provided to you by other third parties, nor does it apply to products or services in [XORIGIN AI] that have a separate privacy policy.
Part I Definitions
[XORIGIN AI] Service Provider: [Shenzhen Xuanyuan Technology Co., Ltd / X-ORIGIN-AI.]
Personal Information: Refers to various information recorded electronically or otherwise that can identify a specific natural person alone or in combination with other information or reflect the activities of a specific natural person.
Personal Information Deletion: Refers to the act of removing personal information from the system involved in the realization of daily business functions, making it unsearchable and inaccessible.
Children: Refers to minors under the age of fourteen.
Unless otherwise agreed, the definitions used in this policy have the same meanings as those in the [XORIGIN AI] platform user agreement.
Part II Privacy Policy
This part of the privacy policy will help you understand the following:
I. How we collect and use your information
When you use our products and/or services, we need/may need to collect and use your personal information including the following two types:
1. To realize the basic functions of providing you with our products and/or services, we will collect your personal information and device information (IMEI, IMSI, device MAC address, application installation list, contacts, clipboard, call records, camera, SMS, device serial number, android ID, gyroscope sensor, accelerometer sensor, gravity sensor behavior) in accordance with the provisions of the "Cybersecurity Law". If you refuse to provide the corresponding information, you will not be able to use our products and/or services normally, but it will not affect your browsing of our web pages and client pages;
2. To realize the additional functions of providing you with our products and/or services, you can choose to authorize us to collect and use your personal sensitive information. If you refuse to provide it, you will not be able to use the relevant additional functions normally or achieve the intended functional effect, but it will not affect your normal use of the basic functions of our products and/or services.
You understand and agree:
1. We are committed to creating diverse products and services to meet your needs. Due to the wide variety of products and services we provide, and the differences in the specific product/service scope chosen by different users, the basic/additional functions and the types and scope of personal information collected and used will vary. Please refer to the specific product/service functions;
2. To provide you with a better product and service experience, we are continuously improving our technology, and we may launch new or optimized functions from time to time, which may require the collection and use of your personal information or change the purpose or method of using personal information. In this regard, we will explain the purpose, scope, and method of collecting and using the corresponding information through updates to this policy, pop-ups, or page prompts, and seek your explicit consent. During this process, if you have any questions, opinions, or suggestions, you can contact us through the various contact methods provided by [XORIGIN AI], and we will respond to you as soon as possible.
We will collect and use your personal information to achieve the functions described in this policy:
(1) Help you become our member
1. Basic membership services
To register as a member and use our membership services, you need to provide a mobile phone number, the desired member name, and a password to create a [XORIGIN AI] platform account. If you only need to use browsing and search services, you do not need to register as our member or provide the above information.
When you log in to your account, we may verify your membership identity based on the information you provide to ensure that we are providing services to you personally. If there is a scenario where your membership identity needs to be determined according to the law (including legally withholding taxes for you, administrative law enforcement, or judicial litigation), you authorize us to obtain the relevant authentication information of your corresponding payment account for the above purposes.
We will provide you with the corresponding basic rights of the member based on your membership account usage.
2. Additional membership services
If you choose to provide your real name, gender, date of birth, and residence information, we can provide you with membership services. To ensure transaction identification, your account nickname and avatar will be publicly displayed.
Authorized login: With your consent, we will share your account information (such as WeChat, we may share your avatar and nickname) with third parties, allowing you to conveniently register or log in to third-party platforms using your [XORIGIN AI] platform account. Additionally, we may obtain your third-party account information from third parties based on your authorization and bind it to your [XORIGIN AI] platform account, allowing you to log in and use our products and/or services directly through the third-party account. We will use your relevant information within the scope of your authorized consent.
Withdrawal function: With your consent, we will obtain your real name and mobile phone number information and perform real-name matching verification with your existing Alipay account. After verification, you can withdraw the fees in [XORIGIN AI] to your Alipay account.
Other membership roles: If you apply to register as a seller, service provider, or other membership roles that require additional identity verification, you should provide identity information and/or enterprise-related information, or authorize us to obtain the relevant authentication information of your corresponding account from other sources for the purpose of verifying, registering, publicizing, and other purposes we explicitly inform you of.
3. Account information display: If you already have a [XORIGIN AI] platform account, we may display your above personal information (real-name authentication only displays the result of whether the authentication is passed) in the [XORIGIN AI] platform services, as well as the operations you perform in the [XORIGIN AI] platform or products and services associated with the [XORIGIN AI] platform account (you can use the products or services provided by us and/or affiliated companies through the mobile [XORIGIN AI] entry or other product/service entries provided by the [XORIGIN AI] platform account), including centrally displaying your personal profile, preferential rights, and transaction orders through the [XORIGIN AI] platform account. We will respect your choices regarding the [XORIGIN AI] platform services and [XORIGIN AI] platform account settings.
1. Additional services based on the camera: You can use this function after enabling the camera (camera) permission. Even if you have agreed to enable the camera (camera) permission, we will only obtain photo information through the camera when you actively click the corresponding icon or record a video.
2. Additional services based on reading and writing external storage cards: You can upload your photos/pictures/videos after enabling the storage permission to achieve functions such as commenting/sharing or providing proof when communicating with customer service.
3. Additional services based on reading phone status and identity information: After you enable the permission, we will collect your IMEI, MSI, device MAC address, software list, device serial number, and android ID to confirm your account security based on your device and achieve security risk control.
4. Additional functions based on viewing WLAN connections: View the WiFi connection status to ensure network reliability and prompt users about data usage in high-traffic scenarios.
5. Additional functions based on retrieving running applications: This function allows you to jump to the specified page of a third-party app when browsing [XORIGIN AI] products and services.
6. Additional services for accessing and uploading pictures/videos based on albums (photo library/video library), external storage, caching, and publishing audio and video: You can upload your photos/pictures/videos after enabling the album permission to achieve functions such as commenting/sharing, photo shopping, or providing proof when communicating with customer service. We may identify the products or services you need to purchase through the photos/pictures you upload or use the comment information containing the photos or pictures you upload. If you refuse to authorize the provision, you will not be able to use this function, but it will not affect your normal use of other functions of [XORIGIN AI].
7. Additional services related to voice technology based on the microphone: You can use the microphone to achieve voice shopping functions, contact customer service, or interact with customer service robots after enabling the microphone permission. In these functions, we will collect your recording content to identify your shopping needs or respond to your customer service and dispute resolution needs. Please be aware that even if you have agreed to enable the microphone permission, we will only obtain voice information through the microphone when you actively click the microphone icon in the client or record a video.
8. Additional services based on installing applications: The platform will regularly update the client of the application. You can directly update and install the new version of the application when updating by opening the app.
9. Additional services based on obtaining information about the current running tasks of the application: When the platform counts app data, it will judge the pages of the app.
10. Additional services based on keeping the app in an awake state: When you watch videos in this application, you need to keep the application in an awake state.
You understand and agree that the above additional services may require you to enable your location information (geographic location), camera (camera), album (photo library), microphone (voice), and/or calendar, external storage access permissions on your device to achieve the collection and use of the information involved in these permissions. Please note that enabling any permission means that you authorize us to collect and use relevant personal information to provide you with corresponding services. Once you disable any permission, it means that you cancel the authorization, and we will no longer collect and use relevant personal information based on the corresponding permission and cannot provide you with the services corresponding to the permission. However, your decision to disable the permission will not affect the information collection and use based on your authorization before the cancellation.
(X) Others
1. If the information you provide contains personal information of other users, you must ensure that you have obtained legal authorization before providing such personal information to [XORIGIN AI]. If it involves children's personal information, you must obtain the consent of the corresponding child's guardian before publishing it. In the aforementioned situations, the guardian has the right to contact us through the means provided in Article 10 of this policy to request correction or deletion of the content involving children's personal information.
2. If we use the information for purposes not specified in this policy, or use the information collected for a specific purpose for other purposes, or actively obtain your personal information from third parties, we will obtain your consent in advance.
If we indirectly obtain your information from third parties, we will clearly require the third party in writing to obtain your consent before collecting personal information, inform you of the shared information content, and obtain your explicit confirmation before providing sensitive information to us. We will require the third party to ensure the legality and compliance of the personal information source. If the third party violates the regulations, we will clearly require the third party to bear corresponding legal responsibilities. Meanwhile, we will strengthen the security of personal information (including sensitive information reporting, sensitive information encrypted storage, and access control). We will protect the indirectly obtained personal information with measures and means no less than those we use to protect our users' personal information.
3. Exceptions to obtaining authorized consent
You fully understand and agree that we may collect and use your personal information without your authorized consent in the following situations, and we may not respond to your requests for correction/modification, deletion, deregistration, withdrawal of consent, or information requests:
(1) Related to national security and national defense security;
(2) Related to public safety, public health, and significant public interests;
(3) Related to criminal investigation, prosecution, trial, and execution of judgments, etc.;
(4) For the protection of your or others' life, property, and other significant legal rights and interests but it is difficult to obtain your consent;
(5) Personal information that you disclose to the public by yourself;
(6) Collecting personal information from legally publicly disclosed information, such as legal news reports, government information disclosure, etc.;
(7) Necessary for signing and fulfilling relevant agreements or other written documents with you;
(8) Necessary for maintaining the safe and stable operation of the products and/or services provided, such as discovering and handling product and/or service failures;
(9) Necessary for legitimate news reporting;
(10) Necessary for academic research institutions to conduct statistical or academic research based on public interests, and when providing academic research or descriptive results to the public, the results contain de-identified personal information;
(11) Other situations stipulated by laws and regulations.
Please be aware that, according to applicable laws, if we take technical measures and other necessary measures to process personal information so that the data recipient cannot re-identify a specific individual and cannot restore it, or we may conduct de-identified research, statistical analysis, and prediction on the collected information to improve the content and layout of [XORIGIN AI], provide product or service support for business decisions, and improve our products and services (including using anonymized data for machine learning or model algorithm training), such processed data can be used without further notice to you and without obtaining your consent.
4. If we stop operating [XORIGIN AI] products or services, we will promptly stop the activities of continuing to collect your personal information, notify you of the cessation of operation in the form of individual delivery or announcement, and delete or anonymize the personal information related to the closed business that we hold. For children's personal information, we will promptly notify the children's guardians of the cessation of operation.
II. How we use Cookies
To provide you with an easier access experience and possible content, we will store small data files named Cookies on your mobile device. Cookies usually contain identifiers, site names, and some numbers and characters. With the help of Cookies, we can store your account information, product records, order records, and product data.
If you do not agree to our storage of Cookies on your mobile device, you can stop using [XORIGIN AI].
III. How we share, transfer, and disclose your information
(1) Sharing
We will not share your personal information with companies, organizations, and individuals outside of the [XORIGIN AI] service provider, except in the following situations:
1. Sharing in legal situations: We may share your personal information externally according to laws and regulations, litigation, dispute resolution needs, or as required by administrative and judicial authorities.
2. Sharing with explicit consent: We will share your personal information with other parties after obtaining your explicit consent.
3. Sharing at your initiative: When you purchase goods or services through the [XORIGIN AI] platform, we will share the necessary information related to the transaction in your order information with the relevant goods or service providers according to your choice to fulfill your transaction and after-sales service needs.
4. Sharing with affiliated companies: To facilitate us to provide you with products and services based on the [XORIGIN AI] platform account, identify abnormal member accounts, protect the personal and property safety of [XORIGIN AI] affiliated companies or other users or the public from infringement, your personal information may be shared with our affiliated companies and/or their designated service providers. We will only share necessary personal information, which is subject to the purposes stated in this privacy policy. If we share your personal sensitive information or if the affiliated company changes the purpose of using and processing personal information, we will obtain your authorization and consent again.
5. Sharing with authorized partners: We may entrust authorized partners to provide certain services or perform functions on our behalf. We will only share your information for the legal, legitimate, necessary, specific, and explicit purposes stated in this privacy policy. Authorized partners can only access the information necessary for them to perform their duties and cannot use this information for any other purpose. For children's personal information, we do not allow partners to subcontract.
Currently, our authorized partners include the following types:
(1) Authorized partners for advertising and analysis services. We will entrust these partners to process information related to advertising coverage and effectiveness, but we will not provide your personal identity information, or we will de-identify this information so that it does not identify you personally. These partners may combine the above information with other data they legally obtain to perform the advertising services or decision-making recommendations we entrust to them, helping them improve the effective reach rate of advertisements without identifying your personal identity.
(2) Suppliers, service providers, and other partners. We will send information to suppliers, service providers, and other partners who support our business, including providing technical infrastructure services entrusted by us, analyzing the usage of our services, measuring the effectiveness of advertisements and services, providing customer service, facilitating payments, or conducting academic research and surveys. This information is difficult to associate with your identity information and will help us analyze and measure the effectiveness of advertisements and related services.
To ensure the stable operation and functionality of our client, and to allow you to use and enjoy more services and functions, our application will embed the SDK of authorized partners. We will strictly conduct security checks on the application programming interfaces (APIs) and software development kits (SDKs) of authorized partners and agree on strict data protection measures with authorized partners to ensure that they handle personal information according to this policy and other relevant confidentiality and security measures. Implement the basic functions of the Smart Block Encryption User Center.
1. Information collected through account registration. When you register an APP account with a mobile phone number, the APP will only collect the mobile phone number you provide and will not obtain the information in your address book. This information is collected to help you complete the registration of the Smart Block Encryption account and the corresponding key allocation. If you refuse to provide this information, you will not be able to successfully register the Smart Block Encryption account and obtain key allocation.
2. Indirectly collected information. To facilitate your login to the Smart Block Encryption account, you can log in to this product and other products and services of the APP through third-party accounts such as WeChat. To achieve the aforementioned purposes, we may need to obtain your device identifier, such as IMSI, to correspond to the key allocated to your account's current device, and collect your third-party account information, such as nickname and avatar, from third parties to facilitate the correspondence between the account, device, and key. If the personal information processing activities required for the business of Smart Block Encryption exceed the scope of processing authorized by you to the third party, we will obtain your explicit consent before processing your personal information. We will also strictly comply with relevant legal regulations and require third parties to ensure the legality of the information they provide.
3. Account security. To ensure the security of your Smart Block Encryption account, we will record the time you register, log in, and use the Smart Block Encryption account in all products of Smart Block Encryption, the names of the Smart Block Encryption products you log in to, and other information. Account security checks through SMS dynamic verification codes or other one-click login authentication functions are for the convenience of users to log in and obtain user encryption keys, only for user identity verification and key allocation, and do not involve user privacy information.
4. Album, camera, and storage permissions. This app is a tool for encrypting files, photos, and videos, so it needs album and mobile SD card storage permissions to query, create, modify, and delete encrypted files when encrypting files or photos. If SD card read and write permissions are not obtained, the files in the phone cannot be encrypted. The photo encryption function requires camera permission; if permission is not granted, photo encryption cannot be performed.
Collecting Tencent TBS browsing service to obtain SD card data, com.insthub.BeeFramework to obtain SD card data, to provide you with advertising recommendation services and our user usage management analysis and statistics, to better improve our App.
Details are as follows:
Tencent Bugly SDK
Third-party company name: Shenzhen Tencent Computer System Co., Ltd.
Sharing Type: Embedded SDK
Shared Information: Device MAC address, Device Identifier (Android such as IMEI, Android ID, Device Serial Number, IMSI, OPENUDID, GUID, iOS such as IDFV, IDFA), IP address, application list, log information (including: third-party developer custom logs, Logcat logs, and APP crash stack information), network information, system name, system version, and country code
Purpose: Issue tracking service
Usage Scenario: Used when the user uses the App
Sharing Method: SDK local collection
Privacy Link: https://privacy.qq.com/policy/tencent-privacypolicy
SDK Name: WeChat openSDK
Partner: Tencent Technology (Shenzhen) Co., Ltd.
Purpose: Provide WeChat APP third-party login sharing service and third-party payment service
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information
Personal Information Collection Scope: Device MAC address, unique device identifier, location information, application list
Privacy Policy: https://open.weixin.qq.com/cgi-bin/frame?t=news/protocol_developer_tmpl
SDK Name: Alipay SDK
Partner: Ant Financial Services Group
Purpose: Use Alipay authorization for in-app payment
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information and device information
Personal Information Collection Scope: System operation information, network status information, iOS advertising identifier (IDFA), MAC address, International Mobile Equipment Identity (IMEI), anonymous device identifier (OAID), International Mobile Subscriber Identity (IMSI), application list information, base station information, social platform OpenID, geographic location
Privacy Policy: https://render.alipay.com/p/c/k2cx0tg8
SDK Name: Unified SDK
Partner: Mobile Security Alliance
Purpose: Obtain unique device identifier
Personal Information Collection Method: Embedded third-party SDK
Personal Information Collection Scope: UDID, OAID, VAID, AAID
Privacy Agreement: http://msa-alliance.cn/col.jsp?id=120
SDK Name: Alibaba Cloud Log Service
Partner: Alibaba Cloud Computing Co., Ltd.
Personal Information Collection Method: APP initializes SDK, SDK calls system APIs through its logic
Personal Information Collection Scope: Obtain running process information
Privacy Policy: https://help.aliyun.com/document_detail/29056.html
SDK Name: Xiaomi Push Channel SDK
Partner: Xiaomi Technology Co., Ltd.
Partner Type: Message push service partner
Purpose: Provide Xiaomi device message push service
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information
Personal Information Collection Scope: Device MAC address, unique device identifier, location information, application list
Privacy Policy: https://dev.mi.com/console/doc/detail?pId=1698
SDK Name: Meizu Push Channel SDK
Partner: Zhuhai Meizu Technology Co., Ltd.
Partner Type: Message push service partner
Purpose: Provide Meizu device message push service
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information
Personal Information Collection Scope: Device MAC address, unique device identifier, location information, application list
Privacy Policy: http://open-wiki.flyme.cn/index.php
SDK Name: OPPO Push Channel SDK
Partner: Guangdong BBK Electronics Co., Ltd.
Partner Type: Message push service partner
Purpose: Provide OPPO device message push service
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information
Personal Information Collection Scope: Device MAC address, unique device identifier, location information, application list
Privacy Policy: https://open.oppomobile.com/wiki/doc#id=10194
SDK Name: vivo Push Channel SDK
Partner: Vivo Mobile Communication Co., Ltd.
Partner Type: Message push service partner
Purpose: Provide vivo device message push service
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information
Personal Information Collection Scope: Device MAC address, unique device identifier, location information, application list
Privacy Policy: https://dev.vivo.com.cn/documentCenter/doc/366#w1-08512613
SDK Name: Huawei, Honor Push Channel SDK
Partner: Huawei Technologies Co., Ltd.
Partner Type: Message push service partner
Purpose: Provide Huawei, Honor device message push service
Personal Information Collection Method: Embedded third-party SDK, SDK collects and transmits personal information
Personal Information Collection Scope: Device MAC address, unique device identifier, location information, application list
Privacy Policy: https://consumer.huawei.com/cn/privacy/privacy-policy
SDK Name: OkHttp Network Request SDK
Partner: Open Source
Purpose: Provide network request service
Personal Information Collection Method: Embedded third-party SDK
Personal Information Collection Scope: IP
Privacy Policy: None
SDK Name: com.commonlib.util
Personal Information Collection Scope: Write SDCard data, get clipboard content, AndroidID
Privacy Policy: None
SDK Name: com.commonlib.BaseActivity
Personal Information Collection Scope: Read system settings, get network status, get clipboard content
Privacy Policy: None
SDK Name: com.commonlib.model
Personal Information Collection Scope: Write SDCard data, read system settings, get device IMEI, get network status, get clipboard content, get WIFI name
Privacy Policy: None
SDK Name: AndroidSupportLibraryFragment (androidx.fragment)
Personal Information Collection Scope: Write SDCard data, get clipboard content
SDK Name: Alibaba Cloud Mobile Data Analysis
Service Provider: Alibaba Cloud Computing Co., Ltd.
Purpose: Used for crash log reporting and analysis
Usage Scenario: Used when the user uses the App
Sharing Method: APP initializes SDK, SDK calls system APIs through its logic
Personal Information Type: Network information, device information including IMEI, Android system device identifier (IMSI, IMEI, SIM card serial number, Android ID, MAC address), IP address
Partner Privacy Policy Link/Official Website Link: https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112071754_83380.html
Personal Information Field Definitions and Enumeration
Device MAC Address: The MAC address of the device, confirming the address of the mobile device location
Unique Device Identifier: For iOS devices, it is IDFA; for Android devices, it is IMEI, OAID, Android ID, UUID (Android may collect multiple identifiers)
Device IP Address: Mobile internet link protocol, confirming the network connection service provider
Device Information: Device brand, device model, operating system, operating system version
Network Information: Current network environment (such as WIFI, 5G, 4G, 3G, 2G)
Carrier Information: Segment belonging to mobile, Unicom, Telecom type
Application List: Determine whether a cooperative third-party APP (such as WeChat, QQ, Sina Weibo, Taobao, Alipay, Tmall, Meituan, Ele.me) is installed
(2) Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following cases:
1. Transfer with explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;
2. In the case of mergers, acquisitions, or bankruptcy liquidation of the [XORIGIN AI] service provider, or other situations involving mergers, acquisitions, or bankruptcy liquidation, if personal information transfer is involved, we will require the new company, organization, or individual holding your personal information to continue to be bound by this policy, otherwise, we will require the company, organization, and individual to seek your authorization and consent again.
(3) Public Disclosure
We will only publicly disclose your personal information in the following situations:
1. With your explicit consent or based on your active choice, we may publicly disclose your personal information;
2. If we determine that you have violated laws and regulations or seriously violated the relevant agreements and rules of the [XORIGIN AI] platform, or to protect the personal and property safety of [XORIGIN AI] platform users or the public from infringement, we may disclose your personal information, including related violations and the measures [XORIGIN AI] platform has taken against you, in accordance with laws and regulations or with your consent.
(4) Exceptions to obtaining authorized consent for sharing, transferring, and publicly disclosing personal information
In the following situations, sharing, transferring, and publicly disclosing your personal information does not require your prior authorized consent:
1. Related to national security and national defense security;
2. Related to public safety, public health, and significant public interests;
3. Related to criminal investigation, prosecution, trial, and execution of judgments;
4. For the protection of your or others' life, property, and other significant legal rights and interests but it is difficult to obtain your consent;
5. Personal information that you disclose to the public by yourself;
6. Collecting personal information from legally publicly disclosed information, such as legal news reports, government information disclosure.
Please be aware that, according to applicable laws, if we take technical measures and other necessary measures to process personal information so that the data recipient cannot re-identify a specific individual and cannot restore it, such processed data can be shared, transferred, and publicly disclosed without further notice to you and without obtaining your consent.
IV. How we store your information
(1) Storage Location
Personal information collected and generated during our operations in the People's Republic of China will be stored in China. In the following situations, we will provide your personal information to overseas entities after fulfilling legal obligations:
1. There are clear provisions in applicable laws;
2. Obtain your explicit authorization;
3. Your personal initiative in conducting cross-border transactions through the internet.
For the above situations, we will ensure that your personal information is protected to a level not lower than that stipulated in this policy through contracts and other forms.
(2) Storage Period
We will take reasonable and feasible measures to avoid collecting and processing irrelevant personal information. We will only retain your personal information for the period necessary to achieve the purposes described in this policy unless there are mandatory retention requirements by law, such as the "E-commerce Law of the People's Republic of China" which requires that product and service information and transaction information be kept for no less than three years from the date of transaction completion. We determine the storage period of personal information mainly by referring to the following standards and taking the longer period:
1. Complete the transaction purpose related to you, maintain the corresponding transaction and business records, to respond to your possible inquiries or complaints;
2. Ensure the safety and quality of the services we provide to you;
3. Whether you agree to a longer retention period;
4. Whether there are other special agreements on the retention period.
After the retention period is exceeded, we will delete your personal information within 15 days according to applicable laws or anonymize it. In addition, after account cancellation, we will stop providing you with products and services within 15 days and delete your personal information or anonymize it according to your request, except as otherwise provided by laws and regulations.
V. How we protect your information
(1) We have taken industry-standard, reasonable, and feasible security measures to protect your information from unauthorized access, public disclosure, use, modification, damage, or loss. For example, data exchange between your browser and the server is protected by SSL encryption; we also provide HTTPS secure browsing for the [XORIGIN AI] website; we use encryption technology to improve the security of personal information; we use trusted protection mechanisms to prevent personal information from being maliciously attacked; we deploy access control mechanisms to ensure that only authorized personnel can access personal information; and we conduct security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.
We have designated personnel responsible for the protection of children's personal information, strictly set information access permissions, apply the principle of minimum sufficient authorization to staff who may come into contact with children's personal information, and take technical measures to record and control the behavior of staff processing children's personal information to prevent illegal copying and downloading of children's personal information.
(2) We will take reasonable and feasible measures to avoid collecting irrelevant personal information. We will only retain your personal information for the period necessary to achieve the purposes described in this policy unless there are mandatory retention requirements by law, such as the "E-commerce Law of the People's Republic of China" which requires that product and service information and transaction information be kept for no less than three years from the date of transaction completion. We determine the storage period of personal information mainly by referring to the following standards:
1. Complete the transaction purpose related to you, maintain the corresponding transaction and business records, to respond to your possible inquiries or complaints;
2. Ensure the safety and quality of the services we provide to you;
3. Whether you agree to a longer retention period;
4. Whether there are other special agreements on the retention period.
After the retention period is exceeded, we will delete your personal information according to applicable laws or anonymize it.
(3) The internet is not an absolutely secure environment. When using the [XORIGIN AI] platform services, we strongly recommend that you do not use communication methods other than the [XORIGIN AI] platform to send your information. You can establish contact and share with each other through our services. When you create communication, transactions, or sharing through our services, you can choose the communication, transaction, or sharing objects independently, as third parties who can see your transaction content, contact information, communication information, or sharing content.
When conducting online transactions using the [XORIGIN AI] services, you inevitably need to disclose your personal information, such as contact information or contact address, to the transaction counterparty or potential transaction counterparty. Please protect your personal information properly and only provide it to others when necessary. If you find that your personal information, especially your account or password, has been leaked, please contact [XORIGIN AI] customer service immediately so that we can take corresponding measures according to your application.
Please note that the information you voluntarily share or even publicly share when using our services may involve your or others' personal information or even personal sensitive information. Please consider more carefully whether to share or even publicly share relevant information when using our services.
Please use a complex password to help us ensure the security of your account. We will do our best to ensure the security of any information you send to us. If our physical, technical, or management protection facilities are damaged, leading to unauthorized access, public disclosure, tampering, or destruction of information, resulting in damage to your legitimate rights and interests, we will bear corresponding legal responsibilities.
(4) We will periodically update and publicly disclose security risks and personal information security impact content. You can obtain it through the [XORIGIN AI] announcement method.
(5) In the unfortunate event of a personal information security incident, we will inform you of the basic situation and possible impact of the security incident, the measures we have taken or will take, suggestions for you to prevent and reduce risks independently, and remedial measures for you in accordance with laws and regulations. We will inform you of the relevant situation of the incident by email, letter, phone, push notification, etc. If it is difficult to inform the personal information subject one by one, we will take reasonable and effective ways to publish announcements.
In the unfortunate event of a children's personal information security incident, we will inform the children and their guardians of the basic situation and possible impact of the security incident, the measures we have taken or will take, suggestions for children and their guardians to prevent and reduce risks independently, and remedial measures for children and their guardians in accordance with laws and regulations. We will inform the children and their guardians of the relevant situation of the incident by APP push notification, sending emails/SMS. If it is difficult to inform one by one, we will take reasonable and effective ways to publish relevant warning information. At the same time, we will also report the handling of personal information security incidents to the regulatory authorities as required.
VI. How you manage your information
(1) Query, correct, and supplement your information
You have the right to query, correct, or supplement your information. You can do this by:
1. Logging into the 【XORIGIN AI】 mobile client, entering the "My" page, and clicking the avatar icon at the top to query, correct personal data, and related personal account information;
(2) Delete your information
You can delete part of your information through the methods listed in "(1) Query, correct, and supplement your information".
In the following situations, you can request us to delete your personal information:
1. If our processing of personal information violates laws and regulations;
2. If we collect and use your personal information without obtaining your explicit consent;
3. If our processing of personal information seriously violates our agreement with you;
4. If you no longer use our products or services, or you voluntarily cancel your account;
5. If we permanently no longer provide products or services to you.
If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us and require them to delete it promptly (unless otherwise provided by laws and regulations, or these entities have independently obtained your authorization).
After you or we assist you in deleting relevant information, due to applicable laws and security technologies, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and isolate it from any further processing until the backup can be cleared or anonymized.
(3) Change the scope of your authorized consent
If you no longer choose to provide your personal information to us or refuse to use some of the services we provide, you can turn off some of the permissions you have authorized to 【XORIGIN AI】 by setting your smart mobile device. For example, on Huawei phones: go to "Settings--Privacy--Permission Management" in the phone, and choose to turn off some or all of the permissions you have authorized to us.
After you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect the processing of personal information previously carried out based on your authorization.
(4) Cancel your account
You can apply to cancel your account by:
1. Entering the 【XORIGIN AI】 mobile client, selecting "My--Settings---Account and Security", and choosing to cancel the account (delete user), you can cancel your account.
After you voluntarily cancel your account, we will stop providing you with products or services and delete your personal information or anonymize it according to applicable laws.
(5) Restrict automated decision-making by information systems
In certain business functions, we may make decisions solely based on non-human automatic decision-making mechanisms such as information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to request an explanation from us, and we will provide appeal methods without infringing on 【XORIGIN AI】's trade secrets or other users' rights and interests, or public interest.
(6) Respond to your above requests
To ensure security, you may need to provide a written request or otherwise prove your identity. We may first require you to verify your identity before processing your request.
We will respond within 15 days. If you are not satisfied, you can contact 【XORIGIN AI】 customer service to file a complaint.
For reasonable requests, we do not charge fees in principle, but for repeated requests that exceed reasonable limits, we will charge a certain fee at our discretion. For information that is not directly related to your identity, unprovoked repetitive information, or requests that require excessive technical means (for example, the need to develop new systems or fundamentally change current practices), pose risks to others' legitimate rights and interests, or are impractical, we may refuse.
In the following situations, according to legal and regulatory requirements, we will not be able to respond to your request:
1. Related to national security and national defense security;
2. Related to public safety, public health, and significant public interests;
3. Related to criminal investigation, prosecution, trial, and execution of judgments;
4. There is sufficient evidence that the personal information subject has subjective malice or abuse of rights;
5. Responding to your request will cause serious damage to your or other individuals' or organizations' legitimate rights and interests;
6. Involving trade secrets.
VII. How your information is transferred globally
Personal information collected and generated during our operations in the People's Republic of China is stored in China, except in the following situations:
1. There are clear provisions in applicable laws;
2. Obtain your explicit authorization;
3. Your personal initiative in conducting cross-border transactions through the internet.
For the above situations, we will ensure that your personal information is protected to a level not lower than that stipulated in this policy.
VIII. How this privacy policy is updated
Our privacy policy may change.
We will not restrict your rights under this privacy policy without your explicit consent. We will post updates to the privacy policy on the App.
For significant changes, we will also provide more prominent notifications (including notifications through 【XORIGIN AI】 announcements or even providing pop-up prompts to you).
Significant changes referred to in this policy include but are not limited to:
1. Our service model has undergone major changes, such as the purpose of processing personal information, the type of personal information processed, and the way personal information is used;
2. Significant changes in our control rights, such as changes in information controllers caused by mergers and reorganizations;
3. Changes in the main objects of personal information sharing, transfer, or public disclosure;
4. Significant changes in your rights to participate in personal information processing and how they are exercised;
5. Changes in the department responsible for handling personal information security, contact methods, and complaint channels;
6. The personal information security impact assessment report indicates a high risk.
IX. How to contact us
You can contact us in the following ways, and we will reply to your request within 15 days:
Email: wangzhuojun@xorigin.ai