Qiniuyun Privacy Policy
summary
Shanghai Qiniu Information Technology Co., Ltd. (hereinafter referred to as "Qiniu Cloud" or "us") attaches great importance to the privacy and information security of users (hereinafter referred to as "you"), whether you are an individual user or an enterprise user. Your use of our services means that you trust the way we process your information. Therefore, we know that Qiniu Cloud has a great responsibility and will do our best to protect the security and reliability of your personal information.
This Privacy Policy of Qiniu Cloud (hereinafter referred to as "the Policy") aims to help you understand what information we collect, why we collect it, how to use, store, share and protect this information, and the methods we provide for you to access, update, control and protect this information in a simple and understandable way.
Special tips: Before you register, browse or use the Qiniu Cloud service, you must carefully read and fully understand this policy, especially the clauses with lines and bold fonts. You should focus on reading, and start using the Qiniu Cloud service after confirming that you fully understand and agree. If you confirm to accept this policy or continue to use Qiniuyun services by checking the pop-up window or any other active choice, it is deemed that you have carefully read, fully understood and accepted the restrictions of the terms of this policy (minors should read it with their legal guardians), and this policy will have legal effect between you and Qiniuyun 。
Please pay special attention to the scope of application of this policy:
1. This policy is applicable to all services provided by Qiniuyun. If we and our affiliated companies use the services provided by Qiniu Cloud but do not set up an independent privacy policy, this part of the service is also applicable to this policy. If independent privacy policies have been set up for our services and those of related companies, the independent privacy policies shall prevail. If there are contents not mentioned in the independent privacy policies but agreed in this policy, this policy shall apply.
2. This policy does not apply to the information/services (including any third-party applications and websites) contained in or linked to the Qiniu Cloud service provided by a third party. The information/services are operated by a third party and must comply with the personal information protection policy or similar provisions of the third party. This policy also does not apply to the products and services provided to you by other third parties. If there are products or services provided to you by a third party, you and the service provider need to separately determine the use policy, service agreement, etc. of relevant information, data, etc.
3. Customer data refers to all kinds of data that you upload, transmit, store or analyze, distribute in any way during your use of Qiniu Cloud service, including but not limited to personal information of users collected and generated in your daily business activities.
3.1 You should ensure that customer data is collected and used according to law (including but not limited to entrusted processing), and you will not and have not violated the legal rights of any individual or entity in any way.
3.2 You guarantee that you have the right to use the Qiniu Cloud service to store, transmit, analyze and distribute customer data, and we will process your customer data according to your instructions and entrustment. You should independently perform relevant obligations and assume corresponding responsibilities to your customers/users with respect to the customer data entrusted to us for processing, including but not limited to ensuring that the data/personal information subject has been fully informed and has obtained its explicit consent in accordance with the requirements of applicable laws and regulations.
3.3 You understand and agree that China and other countries and regions may have relevant regulations on data storage, exit, etc. Before you use the Qiniu Cloud service to store, transmit or otherwise process customer data, you should conduct full and necessary evaluation and approval in accordance with the applicable laws and regulations of relevant regions, Ensure compliance with any applicable regulations on data network security and personal information protection.
If you have any doubts, opinions or suggestions, we are very happy to hear and welcome you to contact us through the contact information specified in this policy, and we will answer them for you.
This policy will help you understand the following:
1. Keyword definition
2. How we collect and use your personal information
3. How we use cookies and similar technologies
4. How do we entrust to handle, share, transfer and disclose your personal information
5. How we protect and store your personal information
6. Your rights
7. How do we deal with minors' personal information
8. How to update this policy
9. Contact information
1. Keyword definition
one point one "Seven Cow Cloud" or "We" : Unless otherwise specified, Shanghai Qiniu Information Technology Co., Ltd. is referred to in this policy.
one point two "Qiniu Cloud Service" or "Service": It means that Qiniu Cloud provides you with Qiniu Cloud services such as object storage, integrated CDN, live cloud, data processing, etc. as shown on relevant pages of Qiniu Cloud's official website, as well as relevant technical support services and network support services that Qiniu Cloud adjusts from time to time according to the actual situation.
one point three "Affiliate" : refers to the subordinate companies or other associated enterprises within the scope of Qiniuyun's consolidated statements.
one point four User or You : refers to individuals or enterprises that access or use Qiniu Cloud services.
one point five Personal Information : refers to all kinds of information related to identified or identifiable natural persons recorded electronically or in other ways.
one point six "Sensitive personal information" : Refers to personal information that, once disclosed, illegally provided or abused, may endanger personal and property safety, and is likely to cause damage to personal reputation, physical and mental health or discriminatory treatment, including: ID card number, personal biometric information, bank account, property information, whereabouts, transaction information, personal information of children under 14 years old (including 14 years old) (In this policy, we will bold Marked conspicuously).
one point seven "Non personal information" : refers to information that cannot identify or associate individuals. It includes anonymous information (irrecoverable), as well as all non personal information (including enterprise contact address, contact information, service life, enterprise scale, industry, main business, main products, website domain name) that has been publicly disclosed by relevant competent authorities as enterprise users.
one point eight "De identification" : Refers to the process of making personal information unable to identify or relate to you without the help of additional information through technical processing of personal information.
one point nine "Delete personal information" : Refers to the act of removing personal information from the system involved in the realization of daily business functions, so that it can not be retrieved or accessed.
one point one zero Anonymization : Refers to the process in which personal information is technically processed so that you cannot be identified or associated, and the processed information cannot be recovered.
2. How we collect and use your personal information
We will only collect and use your personal information for the following purposes described in this policy:
2.1 In order to better serve you, Qiniu Cloud will collect your personal information, mainly including:
2.1.1 Information you provide
(1) Registration Information
In the process of registering your account, you will directly provide us with the user's name, e-mail address, mobile phone number and you Created account password (encryption) , the email address and mobile phone number provided by you will be used as your login account to log on to our service platform after successful registration, and we will use your email address, mobile phone number and other personal information to send verification code information for you to submit whether your identity is valid and retrieve your password, At the same time, it will also serve as one of the contact methods designated by you and us to receive activity reminders, service messages, account messages, announcement messages, and business notifications (hereinafter referred to as "registered user services") 。
During the registration process, we may collect your IP address to obtain your region, so that we can provide you with more high-quality localized and exclusive services; If you have logged in to your Qiniu Cloud account, you can provide and improve your nickname Contact address QQ number and personal website information. You can choose to refuse to provide the above information, which will not affect your registration process and normal use of the Qiniu Cloud registered user service. If you choose to provide, we will protect it as personal information that can be linked. We also kindly remind you that even if you do not provide us with any personal information, you can fully browse all the public information on our official website, However, you cannot further obtain the registered user services of Qiniu Cloud 。
The above information provided by you will continue to authorize us to use during your use of the service. When you cancel your account, we will no longer use your personal information commercially, and after the expiration of the minimum retention period required by laws and regulations, delete your personal information or make it anonymous 。
(2) Real name authentication
In order to provide you with our basic core technical services (including object storage, virtual machine, cloud database, CDN, content audit, etc., see the service content displayed in real time on the official website of Qiniu Cloud for details), you need to complete real name authentication before purchasing and using Qiniu Cloud services. We provide you with the following real name authentication forms:
If you are an individual user, you can choose to authenticate by face recognition. At this time, we will collect your Facial recognition information Compare with the verification data provided by the trusted identity certification authority to verify your identity, and we will not store any of your facial recognition information; When you choose to use bank card authentication, you need to provide us with your real name ID card number, bank card number , mobile phone number and Verification code, face image Information; When you choose to use bank transfer authentication, you need to provide us with your real name ID card number, account number and account name of the deposit bank , financial information of the deposit bank, the location of the bank and the branch, and ID card photo . Personal website information (optional), so that we can verify your true information by transferring some change to the account of the opening bank. The above information provided by you is only used for information verification when Qiniu Cloud completes your real name authentication.
In addition, when you complete personal user real name authentication, you can also choose to continue to complete enterprise authentication. For enterprise authentication, when you choose to use the corporate/authorized person face scanning authentication method, you need to provide the enterprise name, unified social credit code or organization code you represent, the enterprise subject information of the scanned copy of the company's business license or organizational enterprise license, product information, industry, website information, and the business information of the authenticator Identity information, personal information of facial recognition If the authenticator is the authorized person, the name of the legal representative and ID number Personal information of the authorized person and information related to the letter of authorization of the authorized person; When you choose to verify and authenticate by bank transfer, except for the above-mentioned enterprise subject information, business information Facial identification information and ID card of legal representative or authorized person And/or the power of attorney information, you should also submit to us Account name, account number of opening bank The above information provided by you is only used for information verification when Qiniu Cloud completes your real name authentication.
You should know that all kinds of technical services of Qiniu Cloud belong to our basic core business functions. We collect the above information to meet the requirements of relevant laws and regulations on the network real name system. If you do not provide the personal information listed above and pass the real name certification, you will not be able to enjoy the basic core technical services we provide 。
(3) Payment information
We support Alipay, WeChat and online banking payment, and we need to obtain your Bank account information , to meet your demand for recharge, withdrawal and product ordering payment, we will display your recharge and withdrawal records on the management page of the financial center for you to view your relevant expense records. We will collect your Bank card number or account, invoice information, tax information and invoice receiving address (including the recipient's name Detailed address , zip code, mobile phone number, email address). We can send you the invoice through the above information.
(4) Other information
When you participate in special service promotions of Qiniu Cloud, we may need to collect authentication information of a specific identity from you to facilitate your participation in relevant activities. Of course, before collecting and using these specific identity authentication information for specific promotional activities, we will clearly explain to you the type, scope and purpose of the information collected and obtain your consent separately.
2.1.2 Information we collect during your use of the service
When you use our services, in order to provide you with corresponding services or meet your specific needs, we may collect and use your following information:
(1) Equipment information: including equipment name Equipment model , device settings Identifier , regional and language settings, usage habits, operating system version, device settings for accessing services, and device exception information;
(2) Log information: When you use the services provided by our website or related clients, we will automatically collect Your detailed use of our services , saved as relevant network logs. Include your Search query content, IP address , browser type, telecom operator, language used, access date and time, and service log when you use our relevant system;
(3) Other information: information that you must collect to enable specific services when you use them. You use our services User's consultation record , fault reporting record and troubleshooting process for user faults, we will record and analyze this information to respond to your request for help in a more timely manner and improve service.
Please note that separate equipment information, log information, etc. are information that cannot identify a specific natural person. However, if we combine this kind of non personal information with other information to identify the identity of a specific natural person, or use it in combination with personal information, for example, when the above information is associated with your account number, this kind of non personal information will be considered as personal information during the combined use period, unless it is authorized by you or otherwise provided by laws and regulations, We will anonymize and de identify such personal information.
2.1.3 Information about you shared by third parties
In order to provide you with services, we may obtain your relevant information from related third-party sources such as affiliated companies and partners through legal channels. When you use the services provided by a third party, the reservation information you provide may be transferred to us, and you authorize us to obtain the reservation information from a third party indirectly so that we can process your order. If we obtain your personal information from a third party, we will require the third party to explain the source of personal information and confirm the legitimacy of the source of personal information according to the agreement with the third party or relevant laws and regulations, We will also use your personal information on the premise of confirming whether the scope of authorization and consent for processing personal information obtained by a third party includes consent to our use and confirmation of compliance with relevant laws and regulations.
2.2 In order to better serve you, Qiniu Cloud will use your personal information for the following purposes in accordance with the current effective national laws and regulations and your consent:
2.2.1 Provide you with interactive functions and send business notices
When you communicate, feedback, share and other interactions with us or other users through Qiniu Cloud, we will collect and use the contact information of your submitted name (nickname), mobile phone number, e-mail address. When you use our technical guidance or technical support services, you need to submit work order information to us for feedback and interaction; You can comment and interact through our "Q&A Community" column; We provide you with a friend invitation service. You provide your friend's email address and choose to send an email invitation activity or share related activities to your other account platforms for sharing interaction. You promise that you have obtained the explicit authorized consent (including written consent and separate consent required by laws and regulations) on the basis of full knowledge in advance when you provide us with any other person's personal information.
We will notify you in time after the user agreement or privacy policy is updated to protect your rights and interests. In addition, we will inform you of the results of the interaction between you and other users through your contact information, inform you of the feedback of the real name authentication results of your account, the notice of complaints and reports from the obligee or users, and solve the problems you feedback.
2.2.2 Improve our products or services
In order to improve our products and services and develop better services for you, we will use your personal information. However, you should be aware that generally, we only use comprehensive and statistical information after anonymization for this purpose, and will not identify you personally. We will use this information for data analysis, research and audit.
We comprehensively judge the necessity of setting a product, solution or function of Qiniu Cloud through such information, and may invite users to participate in various feedback and interactions in order to launch new products and services (for example, communicate with the company's business contacts through mobile phones, e-mail, etc.). In order to improve our products or services, with your consent, We may match your personal information with the third-party data to form an indirect user profile, so that we can carry out product research and development or provide you with targeted service information (by mail, e-mail, telephone). Of course, even if you agree to our use of such information, you can also tell us to withdraw your consent at any time through the contact information publicized in this policy. We will no longer collect your information for the above scenarios, which will not affect your normal use of the basic core technical services of Qiniu Cloud.
2.2.3 Carry out marketing and promotion activities
The personal information we collect will be used to promote and introduce products and services to you. You hereby authorize us to use the email address and mobile phone number provided by you , to send you business information about products and services. Of course, even if you agree to our use of such information, However, you have the right to choose not to receive the promotion and introduction information of such products and services at any time according to the functions we set on the page or through the unsubscription method we provide with notice 。
2.2.4 Provide security for you
The personal information we collect will be used to ensure the security and reliability of our products and services, prevent network fraud, network attacks and intrusions, and more accurately identify violations of laws and regulations or relevant agreement rules of Qiniu Cloud. We may use or integrate your account information, equipment information, software use information and information that our affiliated companies and partners obtain your authorization or share according to law , which is used for identity verification, detection and prevention of security incidents, and to take necessary recording, auditing, analysis and disposal measures according to law.
2.3 If a function or product/service that needs to collect your personal information is not described in this policy, or we go beyond the purpose claimed when collecting your personal information and have a direct or reasonable connection, or otherwise need to obtain your consent according to this policy or laws and regulations, we will, before collecting and using your personal information, It will be explained to you separately by updating this policy, page prompts, pop-up windows, message notices, website announcements or other ways that are convenient for you to know, and it will provide you with a way to choose your own consent, and it will be collected and used after obtaining your express consent.
2.4 Exceptions with your authorization
According to relevant laws and regulations and personal information protection norms, we do not need your authorization to collect and use personal information in the following circumstances:
2.4.1 Related to national security and national defense security;
2.4.2 Related to public safety, public health and major public interests;
2.4.3 Related to criminal investigation, prosecution, trial and judgment execution;
2.4.4 It is difficult to obtain your consent in order to protect the life, property and other major legal rights and interests of the personal information subject or other individuals;
2.4.5 The personal information collected is disclosed to the public by you;
2.4.6 Collect personal information from legally disclosed information, such as legal news reports, government information disclosure and other channels;
2.4.7 Necessary for signing and performing the contract according to your requirements;
2.4.8 It is necessary to maintain the safe and stable operation of our products or services, such as finding and handling product or service failures;
2.4.9 When your personal information is technically processed so that your subject cannot be identified and the processed information cannot be recovered (not personal information), or your personal information is de identified and secure;
2.4.10 Other circumstances specified by laws, regulations or relevant specifications.
3. How do we use cookies and similar technologies
3.1 Cookie
In order to ensure the normal operation of Qiniu Cloud, provide you with a more easy access experience, recommend you the content or advertising you may be interested in, etc., when you log on to the website or browse the network content, we will store a small data file named Cookie on your computer or mobile device. Cookies usually contain identifiers, site names, and some numbers and characters. For example, with the help of cookies, our website and clients may store your registered account, email, password (encryption), preferences and other data. Cookies can also help us to count traffic information, analyze the effectiveness of page design and advertising, constantly optimize the user friendliness of the website, and adjust the website according to your needs.
The purpose of Qiniu Cloud to enable cookies is the same as that of most websites or Internet service providers, that is, to improve the user experience. We will not use cookies for any purpose other than those stated in this policy. You can manage or delete cookies according to your preferences. Many web browsers are equipped with the "Do Not Track" function, which can issue "Do Not Track" requests to websites. You can refuse to use or clear all cookies saved on the device through the functions provided by different browsers, but if you do, you need to change the user settings personally every time you use Qiniu Cloud. In addition, we may not be able to provide you with a better use experience, and some services may not work properly.
Most browsers also allow you to choose whether to disable all cookies or only third-party cookies. By default, most Internet browsers accept cookies, but this can be changed. The following link provides instructions on how to control cookies in all major browsers:
Google Chrome
IE
Safari (desktop)
Safari (Mobile)
Firefox
Opera
If you use another browser, refer to the documentation provided by the browser manufacturer.
3.2 Website beacon and pixel tag
In addition to cookies, we may also use other similar technologies such as website beacons and pixel tags. For example, the email we send to you may contain a click URL linked to us. If you click the link, we will track this click to help us understand your preference for products or services and improve customer service. A website beacon is usually a transparent image embedded in a website or an e-mail. With the help of pixel tags in the e-mail, we can know whether the e-mail has been opened, and help us judge the number of e-mails sent to users or whether to send e-mail to users. If you don't want your activities tracked in this way, you can unsubscribe from our mailing list at any time.
4. How do we entrust to handle, share, transfer and disclose your personal information
4.1 Entrusted processing
Limited by some of our data processing capabilities and service resources, some functions may be entrusted by our suppliers (including technical service providers) (hereinafter referred to as "the entrusted party"). For the entrusted party entrusted by us to process your personal information, we will select the entrusted party that can provide sufficient guarantee in terms of professional knowledge, reliability and resources, and sign a strict entrustment processing agreement and confidentiality agreement with it to clarify the data processing matters, processing period, processing quality, processing purpose and responsibilities of both parties, and supervise its personal information processing behavior, The trustee is required to process your personal information only in accordance with our requirements, the provisions of this policy and any other relevant confidentiality and security measures, and is required to return or delete the personal information entrusted to us after the termination of the entrustment (including the invalidity, invalidity, revocation or termination of the entrustment contract).
4.2 Sharing
Unless otherwise specified by laws and regulations and regulatory authorities, we will not disclose or share your personal information to a third party without your separate consent. In case of the following circumstances that require sharing your personal information, we will inform you of the recipient's name, contact information, processing purpose, processing method and type of personal information in the form of confirmation agreement, copy confirmation in specific scenarios, pop-up prompt, etc. according to the requirements of laws, regulations and national standards, And provide your personal information to a third party after obtaining your separate consent for us to share personal information with a third party ：
4.2.1 Your personal information may be shared with the affiliated companies of Qiniu Cloud 。 We will only share necessary personal information and are bound by the purpose stated in this policy. If the affiliated company wants to change the purpose of processing personal information, it will ask for your authorization again.
4.2.2 Sharing with authorized partners: only for the purpose stated in this policy, Some of our services will be provided by authorized partners (including but not limited to third-party software tool development kits (SDKs), suppliers, service providers, etc.). We may share some of your personal information with partners to provide better customer service and user experience 。 We will only share your personal information for legal, legitimate, necessary, specific and clear purposes, and only share the personal information necessary for providing services. Our partners have no right to use the shared personal information for any other purpose. If partners want to change the purpose and method of personal information processing, they will ask for your authorization again.
Our authorized partners mainly serve the needs of you and other users, so when meeting new service needs and business function changes, we may adjust our partners, and we will timely disclose to you the latest information (if any) of the partners we cooperate with and access. We will conduct strict security inspection on the application program interface (API) and software tool development kit (SDK) for authorized partners to obtain relevant information, and agree with authorized partners on strict data protection measures, so that they can handle personal information in accordance with this policy and any other relevant confidentiality and security measures.
(1) To realize advertisement push, share with advertising and statistical analysis partners. Qiniu Cloud will only provide these partners with user profile tags that cannot identify your personal identity information and statistical information after de identification or anonymization to help them improve the effective reach rate of advertising without identifying your personal identity 。 Unless we get your permission, we will not share your personally identifiable information (information that can identify you, such as name or mobile phone number, through which you can be contacted or identified) with partners who provide advertising and analysis services.
(2) Sharing with suppliers, service providers and other partners. We may send information to service providers, intelligent device suppliers, system service providers and other partners (such as hardware manufacturers, telecom operators, cloud service providers) that support our business These supports include providing technical infrastructure services, analyzing the use of our services, providing customer services, investigating violations, facilitating payment or conducting academic research and investigation. We will sign a strict data protection agreement with the shared objects, requiring them to handle personal information according to our instructions, this privacy policy and any other relevant confidentiality and security measures. If we share your personal sensitive information or authorize partners to change the use and processing purpose of personal information, we will ask for your authorization again.
4.2.3 Sharing under legal circumstances: We may share and disclose your personal information according to laws and regulations, litigation dispute resolution needs, or the requirements of administrative and judicial authorities 。 For example, if we determine that you have violated laws and regulations or seriously violated the relevant agreement rules of Qiniu Cloud, or to protect the personal and property safety of users or the public of Qiniu Cloud and its affiliated companies from infringement, we may disclose personal information about you in accordance with laws and regulations or relevant agreement rules of the platform, Including relevant violations and the measures taken by the Qiniu Cloud platform against you. For example, if the account you use or upload any content such as illegal videos and illegal videos to your users seriously violates our platform rules, laws and regulations and/or public order and good customs, causing significant social impact and reputation loss to our platform, we may publicly disclose your information and punishment.
4.3 Assignment
We will not transfer your personal information to any company, organization or individual, except for the following circumstances:
4.3.1 Obtain your explicit consent in advance;
4.3.2 According to laws and regulations or mandatory administrative or judicial requirements;
4.3.3 In the case of merger, acquisition or bankruptcy liquidation, if personal information transfer is involved, we will inform you of the name and contact information of the company and organization receiving the information before the formal information transfer, and require the new company and organization holding your personal information to continue to be bound by this privacy policy, otherwise we will require the company The organization asks you again for authorization.
4.4 Public disclosure
We will publicly disclose your personal information only under the following circumstances and on the premise of taking security measures that comply with industry standards:
4.4.1 According to your needs, disclose your designated personal information under the disclosure method that you separately agree to.
4.4.2 If your personal information must be provided according to the requirements of laws and regulations, mandatory administrative law enforcement or judicial requirements, we may publicly disclose your personal information according to the required type and disclosure method of personal information. On the premise of compliance with laws and regulations, when we receive the above request for information disclosure, we will require to issue corresponding legal documents, such as subpoenas or investigation letters. We firmly believe that the information we are required to provide should be as transparent as possible within the scope of the law. We will carefully review all requests to ensure that they have legal basis and are only limited to the data that law enforcement authorities have the legal right to obtain for specific investigation purposes.
four point five Exceptions to obtaining prior authorization for sharing, transferring and publicly disclosing user information
In the following cases, sharing, transferring, and publicly disclosing your user information does not require your prior authorization and consent:
4.5.1 Related to national security and national defense security;
4.5.2 Related to public safety, public health and major public interests;
4.5.3 Related to criminal investigation, prosecution, trial and judgment execution;
4.5.4 In order to protect your or other personal life, property and other major legitimate rights and interests, but it is difficult to obtain my consent;
4.5.5 Your personal information disclosed to the public or provided to the counterparty;
4.5.6 Collect personal information from legally disclosed information, such as news reports, government information disclosure and other channels;
4.5.7 Evaluation information or information required to be disclosed by laws and regulations. For example, in order to build an honest trading environment in the cloud market, your credit evaluation information (star rating, customer evaluation) needs to be publicly shared. If you are a service provider, you should publicly share relevant information of enterprises or natural person operators according to the requirements of applicable laws, regulations and market rules;
4.5.8 Other laws and regulations.
5. How we protect and store your personal information
5.1 Security exceptions
We have taken reasonable practical and technical measures to protect the collected information related to services. But please note that, Although we have taken reasonable measures to protect your information, no website, Internet transmission, computer system or wireless connection is absolutely secure. Please properly protect your personal information and only provide it to others when necessary. If you find your personal information leaked, especially your account and password, please contact online customer service immediately so that we can take corresponding measures 。
5.2 Safety measures we take
We have used security measures that comply with industry standards to protect your personal information from unauthorized access, public disclosure, use, modification, damage or loss. We will take all reasonable and feasible measures to protect your personal information. In particular, we have taken the following measures:
5.2.1 We will de identify your personal information collected, so as to reduce the risk of other organizations or individuals identifying you through personal information. We use SSL to encrypt the service. We will review information collection, storage and processing practices (including physical security measures) to avoid unauthorized access to various systems.
5.2.2 We have obtained ISO/IEC 27001 information security management system certification, ISO/IEC 27701 Privacy information management system certification , as well as the trusted cloud service inspection of China Academy of Information and Communications , can effectively protect your information system security, intellectual property rights, trade secrets, etc.
5.2.3 We only allow those Qiniu Cloud employees who need to know about personal information in order to help us process it, and the personnel of service companies authorized to process it on our behalf, to access personal information, and they need to perform strict contractual confidentiality obligations, and carry out relevant security training in a timely manner. If they fail to perform these obligations, They may be investigated for legal responsibility or terminated their relationship with Qiniuyun.
For us, the security of your information is very important. Therefore, we will continue to work hard to ensure the security of your personal information, and implement security encryption and other security means for storage and transmission throughout the process, so as to prevent your information from being accessed, used or disclosed without authorization. At the same time, other people have no access to the specific contents of some encrypted data except the user himself. When we transmit and store your personal sensitive information, we will use encryption and other security measures; If personal biometric information needs to be stored, it will be processed by technical measures before being stored, for example, only the summary of personal biometric information will be stored.
5.3 Emergency disposal of safety incidents
In the event of a personal information security incident, we will, in accordance with the requirements of laws and regulations, promptly inform you of the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions that you can independently prevent and reduce risks, and remedial measures for you. We will inform you of the event in a timely manner by mail, letter, telephone, push notification, etc. When it is difficult to inform the personal information subject one by one, we will take a reasonable and effective way to publish the announcement. At the same time, we will actively report the disposal of personal information security incidents according to the requirements of the regulatory authorities.
5.4 Storage period and region
During your use of Qiniu Cloud, we will continue to save your personal information for you, but the relevant information will be saved for the minimum time necessary to achieve the purpose. Unless you agree to extend the storage period or receive legal permission, we will delete or anonymize the source data and backup data of your personal information. If you cancel your account or delete the above information, Qiniu Cloud will retain your existing personal information for the shortest period specified by laws and regulations, within the shortest retention period required by law (such as the personal information you provide will be kept for at least 3 years in order to achieve dispute resolution and meet the needs of litigation prescription and proof, or to fulfill the obligation of online transactions/Internet services to preserve identity and transaction information), We will no longer use your personal information commercially. When your personal information exceeds the above retention period, we will delete or anonymize its source data and backup data 。
In accordance with the provisions of laws and regulations, Store personal information collected and generated during domestic operations in the People's Republic of China, and will not transmit such information overseas. If Qiniu Cloud needs to transmit relevant personal information collected in China to overseas institutions due to its cross-border business, we will comply with laws and regulations and the provisions of relevant regulatory authorities , explain to you the name, contact information, processing method of the overseas recipient, the purpose of personal information disclosure, the type of personal information involved, and the method and procedure for you to exercise the rights of the subject of personal information to the overseas recipient, and obtain your consent. At the same time, we will also require overseas institutions to keep your personal information confidential by signing agreements, on-site verification and other effective measures.
6. Your Rights
For your need to exercise the following rights, we will（ Generally, within 15 working days after receiving your exercise demand ）We will respond and deal with it. If we cannot respond and deal with your needs in a timely manner, we will also explain the time nodes for response and processing within this period, as well as the reasons why we cannot respond and deal with them in a short time.
For your reasonable request, In principle, we do not charge fees, but we will charge a certain amount of costs as appropriate for repeated requests that exceed reasonable limits. We may reject those requests that are unreasonable and repetitive, require too many technical means (for example, need to develop new systems or fundamentally change existing practices), bring risks to the legitimate rights and interests of others, or are very impractical. In addition, if your request directly involves the following situations, we may not be able to respond to your request ：
(1) Related to our performance of our obligations under laws and regulations;
(2) Directly related to national security and national defense security;
(3) Directly related to public safety, public health and major public interests;
(4) Directly related to criminal investigation, prosecution, trial and judgment execution;
(5) There is sufficient evidence to show that the personal information subject has subjective malice or abuse of power;
(6) It is difficult to obtain your own consent while maintaining the major legitimate rights and interests of the personal information subject or other personal statements, properties, etc;
(7) Responding to the request of the personal information subject will cause serious damage to the legitimate rights and interests of the personal information subject or other individuals and organizations;
(8) Involving trade secrets.
6.1 Access to personal information
You have the right to access your personal information, except for exceptions stipulated by laws and regulations. If you want to exercise your data access right, you can log in your account on the website of Qiniu Cloud, enter "Personal Panel - Personal Information" to access and edit your personal data information, account information, service information and other content under your account.
6.2 Right to correct personal information
When you find that the personal information we processed about you is wrong, you have the right to submit a correction application to us through the contact information publicized in this policy to ask us to make corrections or make corrections through the login account on your own, and change your personal information through "Personal Panel - Personal Information/Security Settings" of Qiniu Cloud. When updating your personal information, we may require you to verify your identity (such as sending verification information to your email address or mobile phone number) before processing your request.
6.3 Right to delete personal information
In the following cases, you can request us to delete personal information:
6.3.1 If we deal with personal information in violation of laws and regulations;
6.3.2 If we collect and use your personal information without your consent;
6.3.3 If our handling of personal information violates the agreement with you;
6.3.4 If you no longer use our products or services, or you cancel your account;
6.3.5 If we no longer provide you with products or services.
If we decide to respond to your request for deletion, we will also notify the subjects who have obtained your personal information from us and require them to delete it in a timely manner, unless otherwise stipulated by laws and regulations or these subjects have obtained your independent authorization.
When you delete information from our service, we may not delete the corresponding information from the backup system immediately, but will delete the information when the backup is updated. If the storage period specified by laws and administrative regulations has not expired, or it is technically difficult to delete personal information, we will stop processing except for storing and taking necessary security protection measures.
6.4 Change the scope of your authorization and consent
Each business function requires some basic personal information or device permissions to complete. For the additional collection and use of your personal information, as well as the equipment permissions you considered unnecessary at that time, you can give or withdraw your authorization consent at any time through online customer service or in the form of an in station letter, and we will reply in a timely manner. When you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw your consent will not affect the previous personal information processing based on your authorization 。
6.5 Account cancellation of personal information subject
If there are no resources, unpaid fees or disputes in your account, you can Submit work order To cancel the account, we will respond within 3 working days after receiving your application. Please note that your act of canceling your account is irreversible. After you cancel your account, you will not be able to obtain products or services provided by Qiniu Cloud through the cancelled account. We will delete or anonymize all information about your account and ensure that such information will not be disclosed, except for the data required to be saved by laws and regulations.
6.6 Personal information subject obtains personal information copy
Within the scope permitted by laws and regulations, you have the right to obtain a copy of your personal information, which you can handle by contacting online customer service. On the premise that the technology is feasible and the cost is reasonable, we can also directly transfer the copy of your personal information to the third party designated by you according to your specific requirements.
6.7 Automatic decision of constraint information system
In some business functions, we may only make decisions based on non manual automatic decision-making mechanisms such as information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to ask us for an explanation, and we will also provide options that are not specific to your personal characteristics or convenient rejection methods.
6.8 Complaint Reporting and Response
When you have other complaints, suggestions or related questions, please contact Qiniu Cloud through the contact information publicized in this policy. We will review the problems involved as soon as possible and reply in a timely manner after verifying your user identity. Generally, we will reply within 15 working days after verifying your identity. Of course, if you are not satisfied with our reply, especially if you think that our personal information processing has damaged your legitimate rights and interests, and after you feedback to us, we cannot provide you with a satisfactory reply and refuse to improve, you can also make a complaint or report to the relevant regulatory authorities.
6.9 Have the right to be informed of the suspension of operation
If Qiniu Cloud terminates its service or operation, we will stop collecting your personal information in a timely manner, and will notify you of the termination of operation in the form of delivery or announcement at least 30 days in advance, and delete or anonymize your personal information held after the termination of service or operation.
7. How do we deal with minors' personal information
seven point one Qiniu Cloud products and services are mainly for adults, but we also attach great importance to the protection of minors' personal information. If you are a minor, we require you and your parents or guardians to read this policy carefully, and use our services or provide information to us with the consent of your parents or guardians 。
7.2 In the case of collecting personal information of minors by using our products or services with the consent of parents or guardians, we will only share, transfer or publicly disclose this information when it is permitted by law, explicitly agreed by parents or guardians, or necessary to protect minors.
7.3 If we find that we have collected personal information of minors without the prior consent of verifiable parents or guardians, we will try to delete or anonymize the minors' information as soon as possible.
seven point four For the personal information of children under the age of 14 that may be involved, we further take the following measures to guarantee it:
7.4.1 For the collected personal information of children, in addition to complying with the agreement on user's personal information in this policy, we will also adhere to the principles of justice and necessity, informed consent, clear purpose, security guarantee, and legal use, and strictly follow the requirements of laws and regulations such as the Regulations on Network Protection of Children's Personal Information to store, use, and disclose it, and will not exceed the realization of collection We will delete or anonymize children's personal information after the expiration of the period necessary for the purpose of use. If we collect children's personal information, we will designate a special person to be responsible for the protection of children's personal information, and we will also develop an internal special system for the protection of children's personal information.
7.4.2 When you, as the guardian, choose to use the relevant services of Qiniuyun for the monitored children, we may need to collect the personal information of the monitored children from you for the purpose of performing the relevant services to you. If we need to collect children's personal information from you in specific services, we will obtain your separate consent in advance and inform you of the purpose and purpose of the collection. If you do not provide the above information, you will not be able to enjoy the relevant services we provide. As a guardian, you should correctly perform your guardianship duties and protect the safety of children's personal information. If children themselves need to register or use our products and/or services, you should correctly guide and monitor them.
7.4.3 Children or their guardians have the right to access and correct children's personal information at any time, and can also request us to correct and delete it. If you have any opinions, suggestions, complaints or reports on matters related to children's personal information, please contact us. We are always ready to help you.
7.4.4 If we find that we have collected children's personal information without the prior consent of the verifiable guardian, we will try to delete the relevant data as soon as possible.
8. How to update this policy
8.1 Based on the ever-changing nature of the Internet, we reserve the right to update or modify this policy from time to time. Such revisions form part of this policy. In principle, we will not reduce your rights under this policy.
eight point two When the current revision may cause substantial reduction of your rights under this policy, or expand the scope of our collection and use of information and other important rules, we will publish the latest version of the privacy policy on a prominent location on our website before such revision takes effect, or notify and remind you of the revision of the privacy policy by email or other means, We will also provide more significant notices (including some services, we will notify you through website publicity, or even provide you with pop-up reminders to explain the specific changes to the privacy policy).
8.3 Major changes referred to in this policy include but are not limited to:
8.3.1 Significant changes have taken place in our service model. For example, the purpose of processing personal information, the type of personal information processed, and the use mode of personal information;
8.3.2 Significant changes have taken place in our ownership structure, organizational structure, etc. Such as business adjustment, bankruptcy M&A, etc;
8.3.3 The main objects of personal information sharing, transfer or public disclosure have changed;
8.3.4 Your right to participate in personal information processing and the way you exercise it have changed significantly;
8.3.5 When the responsible department, contact information and complaint channel for handling personal information security change;
8.3.6 When the personal information security impact assessment report indicates that there is a high risk.
8.4 We will also archive the old version of this policy for your reference.
8.5 Under the above circumstances, if you continue to use our services, you agree to accept the revised content.
9. Contact Information
9.1 If you have any doubts, opinions, suggestions or complaints about Qiniuyun and this policy, you can contact us through the following ways:
9.1.1 Submit work order ；
9.1.2 Call our customer service hotline (400-808-9176 to 1);
9.1.3 Send mail to bd@qiniu.com ；
9.1.4 Mail the letter to: Customer Service Center, Block Q, Shanghai Pudong Software Park, No. 66, Boxia Road, Pudong New Area, Shanghai (received).
9.2 In order to ensure that we can deal with your problems efficiently and feedback to you in a timely manner, you are required to submit your identity certificate, valid contact information, written request and relevant evidence. We will process your request after verifying your identity.
Updated and effective on September 1, 2023.
Historical version of Qiniuyun's privacy policy:
Qiniuyun Privacy Policy (March 8, 2019)
Qiniuyun Privacy Policy (November 1, 2021)
