Privacy Policy

Last updated: January 1, 2025

ZhiShuYun ("we", "us", "our") understands the critical importance of personal information protection. This Privacy Policy aims to provide you with a comprehensive and transparent explanation of how we collect, use, store, and protect your personal information. We strictly comply with the Personal Information Protection Law of the People's Republic of China, the Data Security Law, and other relevant laws and regulations, and are committed to protecting the data rights and interests of every user.

1. Information Collection

We collect necessary personal information in accordance with the law when you register an account, use our services, consult with us, or communicate with us, including but not limited to: name, phone number, email address, and company name. The scope of collection strictly follows the principle of minimum necessity, obtaining only the information essential for providing services to you. Business data generated during your use of the platform (such as product information, traceability data, scan records, etc.) will be stored separately within your tenant space and completely isolated from other users' data.

2. Information Use

The information we collect will be used for the following purposes: providing, maintaining, and continuously improving the quality of our products and services; sending you product update notifications, service reminders, and information related to your business; fulfilling obligations under laws and regulations and ensuring platform security. We will not use your personal information for other purposes not specified in this policy, nor will we sell or rent your personal information. Any use beyond the above scope will require your explicit prior consent.

3. Information Storage and Protection

We employ industry-leading technical measures and management systems to protect the security of your personal information: full-chain HTTPS/AES-256 encrypted transmission and storage; strict role-based access control (RBAC); regular third-party security audits and penetration testing; daily automated database backups and offsite disaster recovery solutions; and a comprehensive data security incident emergency response mechanism. Your personal information is stored in data centers located within the People's Republic of China, and we commit not to transfer data overseas.

4. Information Sharing and Disclosure

Except in the following circumstances, we will not share your personal information with any third party: where we have obtained your explicit authorization and consent; where required by laws and regulations or mandatory requirements of government authorities; where necessary to protect our legitimate rights and interests or those of the public. When engaging in necessary business cooperation with third-party partners, we will contractually bind their data protection obligations and ensure they adhere to data security standards of equivalent level.

5. Your Rights

In accordance with relevant laws and regulations, you have the right to access, correct, and delete your personal information, as well as the right to deactivate your account. You may log in to the admin dashboard at any time to view and edit your profile information. To exercise the above rights or if you have any questions about this Privacy Policy, please contact us using the methods below. We will respond and process your request within 15 business days of receipt.

6. Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy, or need to exercise your personal information rights, please send an email to business@zhisuyun.com. We have a dedicated data protection team that will carefully address and properly handle every inquiry.