Tumao Personal Information Protection Policy

Release Date: January 29, 2024

Effective Date: January 29, 2024

This is the content of our "Tumao Personal Information Protection Policy". Please read and fully understand the entire text before using Tumao products or services, and use them only after agreeing to all content.

Introduction

1. Tumao is an online cloud feeding product and service provided by Tianjin Tumao Technology Co., Ltd. (hereinafter also referred to as "we", registered address: Room 413, Harbor Center, at the intersection of Chengde Road and Zhang Zizhong Road, Xiaobailou Street, Heping District, Tianjin). We deeply understand the importance of personal information to you and will do our utmost to protect the security and reliability of your personal information.

2. The "Tumao Personal Information Protection Policy" (hereinafter also referred to as "this policy") applies to Tumao products and services. Tumao products or services (hereinafter also referred to as "our products or services") refer to various products and services provided by client applications with the registered name "Tumao" that we legally own, manage and operate (including but not limited to PC, TV, App (including but not limited to iOS version, Android version), iPad, mini-program and other terminal clients), web pages, software development kits (SDK) and application programming interfaces (API) for third-party client applications and/or official websites.

3. This policy is a general content uniformly applicable to all our products or services. When you use any of our products or services, this "Tumao Personal Information Protection Policy" applies. However, if a product or service (including but not limited to a certain product and/or service, a certain type of terminal client) has separately set privacy rules, the separate privacy rules take priority; for content not mentioned in separate privacy rules, this policy applies. It should be specifically noted that this policy does not apply to products or services directly provided to you by Tumao affiliates or third-party cooperative institutions. When you use third-party products and/or services within the Tumao platform, including but not limited to traffic diversion services provided for third-party e-commerce platforms, fintech platforms, licensed financial institutions and other legal entities (hereinafter referred to as "third-party products or services"), or when using Tumao products or services on third-party platforms, we recommend that you check their personal information protection policies before using such products or services to understand how they handle your information for prudent decision-making.

4. This policy is closely related to the products and/or services you use. When you download, install, launch, browse, register, log in, and use our products and/or services, we will process and protect your personal information according to the provisions of this policy. Therefore, we hope you can carefully read and fully understand the full text of this policy, and make appropriate choices according to the guidance of this policy when necessary. If you do not agree with the content of this policy, you should immediately stop using our products and/or services; your use or continued use of the products and/or services we provide indicates that you fully understand and agree to all content of this policy (including updated versions). To facilitate your reading of this policy, we have specially marked in bold all terms that may have a significant relationship with your legitimate interests and content involving sensitive information. Please pay attention to reading them.

5. In addition to this policy, in specific scenarios, we will inform you in a timely manner (including but not limited to updating this policy, re-signing documents, page prompts, pop-ups, internal messages, emails, website announcements or other convenient ways for you to know) to explain in detail the rules for processing corresponding personal information, including purposes, methods, scope, etc., and process them after obtaining your authorization and consent (if applicable).

This policy will help you understand the following content:

I. How we collect and use user personal information

II. How we store collected user personal information

III. How we use cookies and similar technologies

IV. How we share, transfer, and publicly disclose collected user personal information

V. How we ensure the security of collected user personal information

VI. How users manage their own personal information

VII. Protection of minors

VIII. Policy revision and updates

IX. Contact us

X. Other relevant information

 

I. How we collect and use user personal information

To help you quickly understand the main situation of our collection and use of your personal information, we have provided explanations in the form of a list. You can view the "Personal Information Collection List" below. We will follow the principles of legitimacy, legality, and necessity, and for the purposes described in this policy, collect and use personal information that you actively provide when using Tumao products and/or services and software, personal information generated by using Tumao products and/or services and software, and your personal information obtained from third parties. Please note: If you provide personal information of others, please ensure that you have obtained authorization from the relevant subjects.

 

Personal Information Collection List

We will collect information that you actively provide when using Tumao services, as well as information generated through automated means when you use related functions or receive services. You can query and set the following fields and permissions through [Privacy Settings]:

1. When registering and logging in, the information that may be collected includes:

1.1 Phone number, verification code matching results (sensitive personal information)

1.2 Network identity identification information (avatar, nickname, password)

1.3 Information filled in by users themselves (gender, birthday, personalized signature, etc.) 1.4 Public information registered on third-party platforms (username, nickname, avatar, etc., subject to your authorization content) and identity verification information (sensitive personal information)

2. When conducting real-name identity authentication, the information that may be collected includes:

2.1 Real name (sensitive information)

2.2 ID card number (sensitive information)

3. When using search functions, the information that may be collected includes:

3.1 Search keywords, search log information

3.2 Browsing records and interaction frequency

4. When playing videos and browsing, the information that may be collected includes: 4.1 User operation and usage behavior information: clicks, follows, favorites, browsing, sharing, searching

4.2 Information actively provided by users: feedback, publishing, likes, comments, bullet comments 4.3 Location information: precise location information obtained from GPS information, WLAN access points, base stations and other sensor information, as well as general location information obtained through network location information

5. When publishing information, the personal information that may be collected includes:

5.1 Audio and video, graphics, comments, likes and other information publicly published by users 5.2 With user authorization, collect user's location information to display location when users publish information or interact

5.3 To improve the upload speed of audio and video, temporarily preload audio and video to the server. When users cancel or fail to upload for other reasons, the platform will immediately delete the relevant audio and video

6. When interacting and communicating, the personal information that may be collected includes: 6.1 Operations actively performed by users: following, browsing, commenting, favoriting, liking

(liking) or sharing operations

6.2 Follow lists, fan lists, active status

7. When sending message notifications, the personal information that may be collected includes: contact information actively provided by users (e.g., contact phone number)

8. For operation and security assurance, the personal information that may be collected includes: 8.1 Hardware model, operating system version number, international mobile equipment identity code IMEI, unique device identifier, network device hardware address MAC, IP address, WLAN access point, base station, software version number, network access method type, status, network quality data, operation, usage, service logs 8.2 Installed application information or running process information, overall application operation, usage and frequency, application crash status, overall installation and usage, performance data, application source 8.3 Account information, device information, service log information and information that platform affiliates and partners can share with user authorization or legally, used to determine account status, identity verification, detection and prevention of security incidents

9. In sharing activities, the personal information that may be collected includes: the platform needs to access your clipboard when users share or receive shared information and participate in activities, read the passwords, sharing codes, and links contained therein to achieve functions or services such as jumping, sharing, and activity linkage

10. In statistical analysis, the personal information that may be collected includes: statistical indicators such as application additions, activations, retention, and performance

11. When using check-in, reservation and other functions, the information that may be collected includes: calendar information

12. When using ordering and payment functions, the information that may be collected includes: 12.1 Information required for placing orders and completing transactions, such as: transaction product or service information, recipient name, delivery address and contact phone number (sensitive personal information)

12.2 Order-related information, such as: order number, transaction amount, payment method (sensitive personal information)

 

Generally, we will collect your personal information or apply for relevant permissions in the following scenarios:

1. Account registration/login and membership functions

When users use registration/login and membership functions, they need to complete a series of registration (membership) procedures according to our guidance. After becoming registered/logged-in (membership) users, we will provide products and services exclusively for registered (membership) users. When you use the account registration function, we will collect some information that you actively provide to us, either alone or in combination, to identify your real identity, including: phone number, account and verification code/account password matching results (sensitive personal information), and create account UID and password. For your password transmission and verification, we will not store, transmit, and verify your password in plain text, but in encrypted form. When you keep, input, and use your password, you should carefully evaluate the physical and electronic environment to prevent password leakage. We collect this information to complete the registration/login process, continuously and stably provide you with products and/or services exclusive to registered users, and protect your account security.

It should be noted that some of our platforms support users to log in using third-party platform accounts (such as WeChat/Weibo/QQ accounts). If users log in using third-party platform accounts, we will obtain relevant information under that third-party account based on user authorization (including: username, nickname, avatar, subject to your authorization content) and identity verification information (sensitive personal information). We collect this information to provide users with account login services and ensure user account security, and prevent security risks. If users refuse to authorize such information, users will not be able to use third-party platform accounts to log in to our platform, but this will not affect the normal use of other products and services we provide to users. You acknowledge and agree that for one or more contact methods you provide during the use of products and/or services (such as: email, contact phone number, fax number, contact address).

Account cancellation: You can send the account or phone number you want to cancel to our corporate email (fujiajun@tumao.email) for account cancellation. Account cancellation is an irreversible action. We will review it as soon as possible and reply within fifteen working days after verifying your user identity.

2. Search function

When users use the search function, we need to collect some relevant information, such as: search terms (including voice information), search time, browsing records and time, and the number of interactions with them. In addition, to facilitate your faster searching, jumping from third-party shared links and fields to Tumao and avoiding manual copy-paste operations, we provide you with the convenient function of "displaying recently copied information from the clipboard". Since you may enter the corresponding interface in Tumao through various types of sharing links, this function is enabled by default. We will display the most recently copied information from your clipboard on the search page when you use the search function, so as to quickly provide you with the content you need. Please note that we will only display the most recently copied information from your clipboard, and will not collect your clipboard behavior or upload the aforementioned information to our servers.

3. Content browsing/playback function

When users use video, audio and other content browsing/playback functions, in order to better display content to you, understand the adaptability of our products and/or services to different hardware devices, and ensure user operation environment security, we need to collect your device information and log information. The aforementioned device information includes: device model, device name, device identifier (IMEI, AndroidID, IMSI, device serial number, SIM card serial number), browser type and settings, language settings, operating system and application version, network-related information (IP address, network access method, network status, network quality data, nearby wifi, network operator), product version number. The aforementioned log information includes operation logs and behavior logs (search/browse/click/playback records, favorite/follow/subscription records, like/comment/share/publish/vote records, interaction frequency, playback duration, access date/time/duration, etc.)

4. Service content display and recommendation function

Some of our content will be recommended to you based on your location information (for example: display and recommend local content in your area based on the city and/or district/county corresponding to your general location information; display and recommend user works near you based on your precise location information). If you refuse to authorize us to obtain your location permission, we will not recommend content to you based on the location information obtained through your location permission, but this will not affect the normal use of your other functions

5. Information publishing and interactive communication function

If users choose to upload videos or photos, make bullet comments, comment or post messages in the community, or vote, users may actively provide relevant graphic/audio-video content information. We will collect the graphic/audio-video content you upload, your nickname, avatar, published information content, Tumao account ID and your interaction information, including sharing/comments. To facilitate users to upload videos and pictures, we may request you to authorize mobile phone album/camera permissions. Users can also turn on/cancel this permission at any time through relevant function settings (for example, iPhone: mobile phone system settings - privacy - camera). For users who frequently or batch upload spam advertisements, spam videos, or illegal content, in order to ensure content security, avoid suspicious upload accounts from disturbing our platform users and audiences, and purify cyberspace, our platform may, through product functions, additionally require the aforementioned users to upload ID card numbers, ID cards and photos of themselves in the same frame for additional information collection and authentication. It should be noted that ID card numbers, ID cards and photos of themselves in the same frame are all sensitive personal information. If users refuse to provide them, we have the right to temporarily close the upload requirements of such users.

When users engage in interactive communication, we will collect your interaction records (including comment/share and other interaction records) and interaction content (including comments and other interactive communication information).

According to the regulatory requirements of relevant laws and regulations for internet account management, in order to maintain network security and a good network content ecosystem, we will display your IP location in users' personal homepages, under your published comments and other information publishing pages (domestic IP addresses are displayed to provinces/autonomous regions/municipalities, foreign IP addresses are displayed to countries/regions, specific information is subject to network operator data,

6. Customer service and other user response functions

When users contact our customer service or use other user response functions (including: submitting after-sales applications for our products and/or services, exercising your relevant personal information control rights, other customer complaints and needs), for the security of user accounts and systems, we may need users to first provide account information and match it with the user's previous personal information to verify your user identity. When users use customer service or other user response functions, we may also need to collect the following sensitive personal information from you: contact information (phone number/email address used when users contact us or other contact information actively provided by users to us), communication information between users and us (including text/picture/audio-video/call record forms), and other necessary information related to user needs. We collect this information to investigate facts and help users solve problems. This type of information is necessary for this function. If users refuse to provide it, it may cause users to be unable to use our customer service and other user response mechanisms.

8. Operation and product security assurance function

We need to collect some of your information to ensure the security of your account and system when using our products and/or services, and assist in improving the security and reliability of our products and services to prevent any behavior that harms users, Tumao, and society, including the following personal information: device information (including: device name, device model, hardware serial number, device MAC address, IMEI, MEID, IMSI, AndroidID, IDFA, IDFV, OAID, ICCID, Openudid, GAID and other device identifiers formed by comprehensive device parameters and system information), login IP address, product version number, application list, language mode, browsing records, network operator, network status type, access method), personal internet records (including search/browse/click/follow, like/comment/share/interaction records and other operation records when using our products and/or services), location information, service log information, and sensitive personal information: transaction information, member real-name authentication information. At the same time, we will detect relevant sensors on your device (including accelerometer, gravity sensor, light sensor, gyroscope sensor rotation vector sensor, linear accelerator, magnetic field sensor, pressure sensor) to provide you with high-quality, safe, and reliable products and services. We will use the above information to comprehensively judge your account, account and transaction risks, conduct identity verification, customer service, detect and prevent security incidents, fraud monitoring, archiving and backup purposes, and take necessary recording, auditing, analysis, and disposal measures in accordance with the law. Once we detect that there is or is suspected to be an account security risk, we will use relevant information for security verification and risk elimination to ensure the security of the products and services we provide to you, so as to protect your rights and interests from infringement. At the same time, when account or system security problems occur, we will collect this information to optimize our products and services

In addition, to ensure the security of your device operating environment and provide our products and/or services as necessary, and to prevent malicious programs and anti-cheating, we will obtain information about applications/software installed on your device or running process information (including application/software source, overall operation of applications/software, crash status, overall installation and usage, usage frequency, etc.) after you agree to this policy. Please note that application/software list information alone cannot identify your specific identity.

9. Other additional services provided to you based on system permissions

To provide you with more convenient and high-quality products and/or services, and to improve your experience, we may collect and use your personal information in the following additional services we provide to you. System permissions such as location, camera, album, and microphone are not enabled by default. Only when you trigger related additional service functions will we apply for related permissions from you and obtain corresponding information (if involved). If you do not provide this information, it will not affect your use of basic services such as browsing, searching and watching videos, but you may not be able to get the user experience brought by these additional services. You can click to view the "Permission Application and Usage Instructions". You can cancel authorization at any time through the relevant function settings page [My - Settings - Permission Settings], or you can view the status of these permissions in your device "Settings" and decide whether to turn these permissions on or off (if applicable). Your enabling of such permissions is deemed as your authorization for us to access, obtain, collect, and use such personal information of yours; after you cancel such authorization, we will no longer collect such information and will no longer be able to provide you with the above-mentioned services; however, unless you delete your personal information in accordance with legal provisions, your cancellation will not affect our processing and storage of personal information based on your previous authorization. These additional services include:

(1) Additional business functions based on device calendar permissions

When you use check-in, reservation reminder, online reminder, member activities and member channel reservations and other check-in and reservation functions, we will obtain your device calendar permissions and collect your calendar information. This type of information is necessary for this function. If you refuse to provide it, it will only prevent you from using this function, but will not affect your normal use of other functions of the product and/or service.

10. Other rules for collecting and using personal information

(1) If the information you provide contains personal information of other users, you need to ensure that you have obtained legal authorization before providing such personal information to us.

(2) Since we have many products and services, and the content provided to users is different, the collection of user information will also be different due to the different content of products/services, subject to the actual provision of products or services. In addition, you understand and agree that we hope to provide you with perfect products and services, so we will continuously improve our products and services, including technology, which means we may frequently launch new business functions, may need to collect new personal information or change the purpose or method of using personal information. If a function or product and service that needs to collect users' personal information is not explained in this policy, we will explain the purpose, content, usage method and scope of such information collection separately by updating this policy and through website announcements, pop-up methods, notifications or other convenient ways for you to know, and provide users with independent choice and consent methods, and collect after obtaining users' public consent. Without your explicit consent, we will not limit the rights you enjoy under this policy. In this process, if users have any doubts or related matters, they can contact us through the methods provided at the end of the text, and we will provide corresponding answers.

(3) Personal information you provide to third parties, or personal information about you collected by external third parties, we cannot obtain, and will not use unconventional methods (such as maliciously interfering with the other party's series of APP data) to obtain your personal information through software programs without authorization. If it is necessary for business development to indirectly collect (such as sharing) your personal information from third parties to provide products or services to you directly or jointly, such scenarios include: when you directly log in to our products and/or services through third-party accounts, we obtain your authorized shared account information from third parties (including avatar, nickname); when some of our products/services are provided by business partners or jointly provided by us and business partners, in order to carry out necessary/reasonable business smoothly, we indirectly collect some of your information from some business partners; information about you provided when other parties use our products and services (including published content related to you, including comments, dynamics, pictures, photos, videos, device information, location information, etc.). At the same time, our professional security team conducts security reinforcement on personal information (including sensitive information reporting, sensitive information encrypted storage, access permission control, etc.). We will use protection methods and measures no less than those for our own users' personal information to protect indirectly obtained personal information

II. How we store collected user personal information

1. We will store user information in a secure manner, including local storage (such as using APP for data caching), databases and server logs.

2. Generally, we will only store users' personal information for the time necessary to achieve service purposes or under conditions stipulated by laws and regulations. Users can independently choose to delete viewing history, watch lists, subscriptions and other personal information provided and generated when using "Tumao" services. If users choose to delete the above information, we will also delete the corresponding personal information accordingly.

3. Storage location: We store your personal information within the territory of the People's Republic of China in accordance with the provisions of laws and regulations. Currently, we do not have scenarios of cross-border storage of your personal information or providing personal information to overseas. In the future, if cross-border transmission or storage is needed, we will inform relevant parties of the purpose of information export, recipients, security assurance measures and security risks, and obtain consent from users and regulatory authorities.

4. When our products and/or services cease operations, we will notify users through notifications, announcements and other forms, stop collecting your personal information, and delete users' personal information or anonymize it within a reasonable period, except as otherwise provided by laws and regulations.

5. Data collection: To ensure the normal operation of services, we will collect your device identification information (including but not limited to Android_ID, IMEI, MAC address, etc.). When you use this application, we may obtain your device Android_ID through legal means. This information will be used for device identification, anti-cheating mechanisms, statistical analysis services and other purposes. We promise not to associate Android_ID with personal identity information.


III. How we use cookies and similar technologies

2. If the user's browser allows, users can manage (partially/fully) refuse cookies and/or similar technologies through browser settings; or delete cookies and/or similar technologies already stored in the user's computer, mobile device or other devices, so that we cannot fully or partially track the user's personal information. If users need to know in detail how to change browser settings, please check the relevant settings page of the browser used by the user. You understand and know: Some of our products/services can only be realized by using cookies or similar technologies. If users refuse to use or delete them, users may not be able to normally use our related products and/or services or obtain the best service experience through our products and/or services, and it may also have a certain impact on users' information protection and account security.

IV. How we share, transfer, and publicly disclose collected information

(1) Sharing

We attach great importance to the protection of your personal information. Your personal information is an important basis and component for us to provide you with products or services. For your personal information, we only collect and use it within the purposes and scope described in this "Tumao Personal Information Protection Policy" or according to the requirements of laws and regulations, and strictly keep it confidential. We will not share your personal information with third-party companies, organizations and individuals outside of Tumao, unless one or more of the following circumstances exist:

1. Based on your own request, or with your prior explicit authorization or consent;

2. Related to our fulfillment of obligations stipulated by laws and regulations;

3. Directly related to national security and defense security;

4. Directly related to criminal investigation, prosecution, trial and judgment execution;

5. Your personal information that you have disclosed to the public yourself;

6. Personal information collected from legally public information, such as through legal news reports, government information disclosure and other channels;

7. Within the scope required or permitted by law, it is necessary to provide your personal information to third parties to protect the interests, property or safety of Tumao and its users or the public from damage

9. Necessary sharing with third-party business partners

You understand and agree that for the purposes of smooth development of necessary/reasonable business, meeting your requirements, fulfilling our obligations in relevant service agreements or this policy and exercising our rights or complying with legal provisions, we may need to share your personal information with some business partners (third-party service providers, contractors, agents, advertising partners, application developers, etc., for example, map service providers that provide location services for us). We promise to require third parties to process the above information for us according to our instructions, personal information protection policies and other relevant confidentiality and security measures, and use it for the following purposes:

Our business partners include

(1) Service providers that provide functional support for our products and/or services: including: payment institutions that provide payment services, operators that provide one-click login services, third-party delivery companies and other service providers. The purpose of our information sharing is to realize the functions of our products and/or services, so that you can use them normally:

(2) Third-party merchants on our platform: To meet your needs for purchasing products or services (including enjoying after-sales services), we will share your order information and transaction-related information with third-party merchants on our platform;

(3) Suppliers providing technical and consulting services. We may share your personal information with third parties that support us in providing services. These institutions include institutions that provide us with infrastructure technical services, data processing, credit approval and customer services. However, we require these service providers to use your information only for the purpose of providing services to us, and not for their own interests.

Third-party SDK Directory

To ensure the implementation and secure operation of the IM software functions, we will integrate SDKs provided by third parties. We will carefully evaluate the purpose of using shared information by the above SDKs. We list the relevant third-party SDKs integrated in the following directory. You can click on relevant links to view the relevant data usage and protection rules of third parties.

 

Please note and understand that the functions and services of third-party SDKs will continue to be updated and developed, and the data types they process may change due to functional or policy adjustments. Please refer to the specific content published by third parties.

 

Contact information: Phone: 18513312407 Email: fujiajun@tumao.email