2、 How do we use cookie and other similar technologies

When you use our service, in order to ensure the normal operation of the website, we will store a small data file named Cookie on your computer or mobile device. Cookie It usually contains identifiers, site names, and some numbers and characters. The main function of cookies is to facilitate your use of the platform's products and/or services, and help the website count the number of independent visitors. Using cookie technology, we can provide you with more considerate personalized services and allow you to set your specific service options. When you use the products and/or services of this platform, cookies will be sent to your device. When you interact with the services we provide to partners, we allow cookies (or other anonymous identifiers) to be sent to our servers.

We will not use cookies for any purpose other than those stated in this policy. You can manage or delete cookies according to your preferences. You can clear all cookies saved on your computer. Most web browsers have the function of blocking cookies. However, if you do so, you need to change the user settings in person every time you visit our website, and you may not be able to log in or use the services or functions provided by Aurora relying on cookies because of such modifications.

For more information about the types of cookies we use, why, and how to control cookies, see AboutCookies.org。

3、 Authorization and consent of end users

As our business partner, you know very well that in order to provide you and/or your end users with the Aurora service you choose, we will collect, store, and process personal information from your application's end users in a de identifiable or anonymous way. Therefore, by accepting this policy and integrating our SDKs, APIs or other statistical analysis tools and developer tools into your products, you confirm and guarantee that:

• • 1. You have informed the end user and obtained the end user's full, necessary and clear authorization, consent and license to allow us to collect and use its information for the purpose of providing services;
  • two Unless otherwise specified by applicable laws, you have informed the end user and obtained the end user's sufficient and necessary authorization, consent and permission to allow us to de identify the collected personal information, and allow us to use the collected and processed information for the service purposes listed in Article 1 of this policy on the premise of complying with relevant laws and regulations;
  • 3. You have complied with and will continue to comply with applicable laws, regulations and regulatory requirements, including but not limited to formulating and publishing relevant policies on personal information protection and privacy protection;
  • four You have provided the end user with an easy to operate user rights implementation mechanism, explaining how and when users can exercise their options, how to access, correct their personal information, exercise the right to delete, change the scope of their authorization and consent, and other operations.

4、 How do we share, transfer and publicly disclose your and/or your end users' personal information

（1） Share

Except as stated in this policy, information about you and/or your end users will not be shared with third parties in an identifiable form. Except for the following cases:

• • 1. Share with explicit consent. After obtaining the explicit consent of you and/or your end-users, we will share your and/or your end-users' information with other parties;
  • 2. We may share information about you and/or your end users according to laws and regulations;
  • three To the extent required or permitted by law, it is necessary to provide your and/or your end user's personal information to a third party (including industry organizations such as consumer protection departments) in order to protect your or the public's interests, property or safety from damage;
  • 4. Personal information disclosed by you and/or your end users or we can obtain from other legal public channels;
  • 5. We may share data with a third party in a way that does not recognize your and/or your end user's personal information (de identification or anonymization).
  • six Share with our affiliated companies: your and/or your end users' information may be shared with the affiliated companies of Aurora. We will only share necessary information and are bound by the purpose stated in this privacy policy. If the affiliated company wants to change the purpose of information processing, it will again ask you and/or your end users for authorization;
  • seven We may employ trusted third-party suppliers, consultants or other service providers (hereinafter referred to as "contract partners") to provide us with necessary maintenance, support and services to provide better customer service and optimize user experience. We will only share information about you and/or your end users for legal, legitimate, necessary, specific and explicit purposes, and only share information necessary for providing services. Our partners are not authorized to use the shared information for any other purpose.
  • If you refuse our partner to collect personal information necessary for providing services when providing services, you may not be able to use the services provided by this platform through the partner.

At present, our partners include the following types:

-Advertising and promotion partners: In order to more accurately target the crowd and launch advertisements, we may provide your end user IMEI number to the advertising and promotion service provider.

- Information service partners: In order to provide offline storage of large files for Aurora IM users, we may provide information service providers with real-time chat content (pictures, videos, files) of your end users.

-Social media partners: In order to realize the cross platform sharing function of Aurora share, we may provide end users' shared content to social media partners.

- Push, authentication and sharing service partners: In order to better realize push, authentication and sharing services, we have integrated the service capabilities of our partners. Some service developer customers can choose whether they need to integrate these services provided by partners according to their own actual conditions, and the final choice of developer customers shall prevail. (Access Partner SDK Catalog)

（2） Assignment

We will not transfer your and/or your end-user information to any company, organization or individual, except for the following circumstances:

• • 1. After obtaining the explicit consent of you and/or your end users;
  • 2. Personal information disclosed by you and/or your end users or we can obtain from other legal public channels.

In case of merger, acquisition or bankruptcy liquidation, it may involve the transfer of personal information. In this case, we will require new companies and organizations holding your personal information to continue to be bound by this statement. If there is any change in the collection and processing of personal information agreed in this statement, the company or organization will ask you for authorization again.

（3） Public disclosure

Under the constraints of applicable laws and regulations, we will not publicly disclose your and/or your end-users' personal information unless expressly agreed by you and/or your end-users.

5、 How we store personal information about you and/or your end users

（1） Storage location

In principle, we only collect personal information generated in the People's Republic of China, and store the collected personal information in the People's Republic of China. This service is not available in any other countries/regions except China. You shall independently choose the scope of use of the service and be responsible for complying with any applicable laws, including but not limited to any local laws.

（2） Storage life

We only store your and/or end user's personal information for the purpose described in this policy and the shortest period specified by laws and regulations. After the storage period expires, we will delete or anonymize your personal information. However, in order to comply with the corresponding laws and regulations, we may extend the storage period of your and/or your end users' personal information for the purpose of litigation defense, maintaining public interests, protecting personal property security or legal rights.

6、 How do we protect your and/or your end users' personal information

one We have used industry standard security measures to protect the information you provide from unauthorized access, disclosure, abuse, tampering, damage or loss. We will take all reasonable and feasible measures to protect the data security of you and/or your end users. For example, when exchanging data between your browser and the Service SSL encryption protection; We also provide https for jiguang.cn website Safe browsing mode; We will use encryption technology to ensure the confidentiality of data; We will use a trusted protection mechanism to prevent data from being attacked maliciously; We will deploy an access control mechanism to ensure that only authorized personnel can access personal information; And we will regularly hold security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal information.

2. We have obtained the following certifications: Information System Level 3 Protection, ISO 27001 Information Security Management System Certification, and SDK Information Security Certificate

3. Our data security capability: build security defense around the data life cycle, covering data acquisition, transmission, storage, use, circulation, archiving, deletion and other data processing stages.

four We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We will only retain your and/or your end-user information for the period necessary to achieve the purposes described in this privacy policy, unless the retention period needs to be extended or permitted by law.

five The Internet is not an absolutely secure environment, and email, instant messaging, and communication with other users are not encrypted. We strongly recommend that you do not send personal information through such methods. Please use complex passwords and change them regularly to help us ensure the security of your account.

6. We will regularly update and disclose the relevant contents of security risks, personal information security impact assessment and other reports. You can also consult support@jiguang.cn To get relevant content.

seven The Internet environment is not 100% secure. We will try our best to ensure or guarantee the security of any information you send us. Although we have made necessary and reasonable efforts, we may still be stolen, illegally owned or abused, which may cause personal, property and reputation losses to you and your users. You have understood the above risks and are willing to take them.

eight In case of an unfortunate personal information security incident, we will timely inform you of the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, the suggestions you can independently prevent and reduce risks, and the remedial measures for you in accordance with the requirements of laws and regulations. We will inform you of the event in a timely manner by email, push notification, etc. When it is difficult to inform the personal information subject one by one, we will take a reasonable and effective way to publish an announcement.

9. At the same time, we will also actively report the disposal of personal information security incidents according to the requirements of the regulatory authorities.

7、 How do we give you the right to manage personal information

We attach great importance to the management of your and/or your end users' personal information, and do our best to protect your rights to query, access, modify, delete, complain and report your personal information, and set privacy functions, so as to protect your and/or your end users' privacy and information security.

（1） For direct users of Aurora

• • 1. Query and change your personal information
    You have the right to access your personal information, except for exceptions stipulated by laws and regulations. If you want to exercise the data access right, for example, you want to access or edit the enterprise/personal information and payment information in your account, change your password, add security information or close your account, you can access Aurora User Center Perform such operations.
    If you cannot access these personal information through the above link, you can send an email to support@jiguang.cn Exercise data access. When accessing relevant information, we may require you to verify your identity to ensure the security of your account.
    Please understand that some of your requests may not be responded to due to technical limitations and legal and regulatory requirements. Some of your information may not be accessible due to legal and regulatory requirements, information security and other legitimate reasons.
  • 2. Delete your personal information
    You can send an email to support@jiguang.cn Contact customer service and request to delete your personal information:
    • (1) We collect and use personal information in violation of laws and regulations;
    • (2) We collect and use personal information in violation of the agreement with you;
    • （3） If we share and transfer personal information to a third party in violation of laws and regulations or the agreement with you, we will immediately stop sharing and transferring, and notify the third party to delete it in a timely manner;
    • （4） If we publicly disclose personal information in violation of laws and regulations or the agreement with you, we will immediately stop the public disclosure and issue a notice requiring the relevant recipient to delete the corresponding information.
    When deleting relevant information, we may require you to verify your identity to ensure the security of your account. Once the above deletion request is responded, your personal information will be deleted, except for the information required to be retained by laws and regulations.
  • 3. Change the scope of your authorization and consent
    Each business function often needs to collect some basic personal information to operate. For the collection and use of your personal information, you can send an email to support@jiguang.cn Contact customer service to request withdrawal of consent. When you withdraw your consent, we will not collect and use your corresponding personal information in the future, but please understand that when you withdraw your consent or authorization, we cannot continue to provide you with specific functions and/or services corresponding to the withdrawal of consent or authorization. Your decision to withdraw your consent will not affect the previous personal information processing based on your authorization.
  • 4. Account cancellation
    You can cancel your previously registered account at any time by sending an email to support@jiguang.cn Contact customer service. You should know that canceling your Aurora account will cause you to permanently lose access to your account and the data in your account. We will provide you with account cancellation service after verifying your identity and negotiating with you to process the assets in your account. In order to provide you with a more convenient way to log out, we will continue to optimize our products and inform you through the page announcement. After the cancellation of the aurora account, we will stop providing you with products or services, and delete your personal information or anonymize it as soon as possible according to your requirements, unless otherwise specified by laws and regulations.
  • 5. Obtain a copy of personal information
    You have the right to obtain a copy of your personal information. You can send an email to support@jiguang.cn Contact customer service. On the premise of technical feasibility, such as data interface matching, we can also directly transfer your copy of personal information to the third party designated by you according to your requirements.
  • 6. Reject directed push
    You can choose not to receive promotional emails from Aurora by following the unsubscribe/exit instructions in these emails. You can also send an email to support@jiguang.cn Contact customer service to opt out. Please note that even if you opt out of the promotional communication, we may still send you non promotional information related to our terms of service or privacy notice updates, security alerts, and other notices related to your access to or use of our products and services.
  • 7. Respond to your above request
    To ensure security, we may require you to verify your identity before processing your request. You may need to provide a written request or prove your identity in other ways. For all your requests under this section, we will, in principle, give feedback within 15 days after receiving your request and verifying your user identity.

（2） If you are an end user of applications using Aurora products or services, rather than a direct customer of Aurora, we recommend that you:

• • According to the privacy policy of the application provider, please send the request related to your personal information directly to the relevant application provider for processing and help. After receiving the relevant request from you and the application provider and verifying the authenticity and legitimacy of the request, Evoque will actively cooperate and respond to the request.

(III) In principle, we do not charge for the above reasonable requests from you and/or your end users. We may reject those requests that are unprovoked and repetitive, require too many technical means (for example, need to develop new systems or fundamentally change the current practices), bring risks to the legitimate rights and interests of others, or are very impractical (for example, involving information stored on backup tapes).

We will not be able to respond to your and/or your end users' requests in the following circumstances:

• • 1. Related to our performance of our obligations under laws and regulations;
  • 2. Directly related to public safety, public health and major public interests;
  • 3. We have sufficient evidence to show that you have subjective malice or abuse of rights;
  • 4. In order to protect your or other personal life, property and other major legitimate rights and interests, but it is difficult to obtain my consent;
  • 5. Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals and organizations;
  • 6. Involving trade secrets.

（4） If you and/or your end users have questions about the realization of the above rights, you can contact us according to the relevant contact information in the ways described in Article 10 of this policy.

8、 How we deal with children's personal information

We have made it clear in the service premise that children are not allowed to register as our users, and in principle, we do not accept your provision of personal information for end-users under the age of 14. Please pay attention and carefully provide it. Although local laws and customs have different definitions of children, we will be dissatisfied Anyone who is 14 years old is regarded as a child. If we unknowingly If a child aged one has collected personal information, we will delete the relevant information in a timely manner, unless we are required by law to retain such information.

If you think we have collected information from children under the age of 14 by mistake or accident, please contact us in time: support@jiguang.cn 。

If your app is designed and developed for children under the age of 14, please make sure that your end user is the guardian, has read and agreed to the privacy policy of the app, and is authorized to agree to provide children's personal information to us to realize the relevant functions of the app.

9、 How do we update and modify this policy

In order to provide you with better services, this platform and related services will be updated and changed from time to time, and we will revise this policy from time to time. These revisions constitute a part of this policy and have the same effect as this policy. Without your explicit consent, we will not reduce the rights that you and/or your end users should enjoy according to this privacy policy.

After the policy is updated, we will issue an updated version on the official website and remind you of the updated content in an appropriate way before the updated terms take effect, so that you can know the latest version of the policy in time.

For major changes, we will also provide more significant notices (including for some services, we will send notices in the form of email or website letters or announcements to explain the specific changes to the privacy policy). Therefore, please check and understand your privacy policy at any time. If you do not agree to accept this privacy policy, please stop accessing and using our services.

Major changes referred to in this policy include but are not limited to:

• 1. Our service model has changed significantly. For example, the purpose of processing personal information, the type of personal information processed, and the use mode of personal information;
• 2. Significant changes have taken place in our ownership structure and organizational structure. Such as business adjustment, bankruptcy M&A, etc;
• 3. The main objects of personal information sharing, transfer or public disclosure have changed;
• 4. Your right to participate in personal information processing and the way you exercise it have changed significantly;
• 5. When the responsible department, contact information and complaint channel for handling personal information security change;
• 6. When the personal information security impact assessment report indicates that there is a high risk.

This policy is an important part of the Aurora service agreement. All rights not expressly granted in this privacy policy are reserved by Aurora.

10、 How to contact us

We hope to be able to resolve any disputes related to our data protection practices. Aurora has set up a dedicated privacy protection team. You can send an email to our privacy team compliance@jiguang.cn Or contact us by letter or other means (recipient: Compliance Group, address: 14F, Zhongjian Building, Keji South 12th Road, Nanshan District, Shenzhen, contact number: 0755-83881462) to raise your questions or ask for help.

If you have questions, suggestions or complaints about your account information, personal information or other document technology or exercise your rights, you can send an email to support@jiguang.cn Or other special ways to contact us. Generally, we will reply within 15 working days.

For individuals in the EEA, you have the right to file a complaint with the competent data protection authority or file a lawsuit in a court of competent jurisdiction in accordance with applicable data protection laws.

11、 Other legal basis for processing personal information (EEA only)

We ask you to pay special attention: when you process personal information, if you meet any of the following conditions, please pay attention to comply with the General Data Protection Regulations of the European Union Protection Regulation (hereinafter referred to as "GDPR"):

• (1) You are in the European Economic Area ("EEA"), whether or not the processing activity is carried out in the EU;
• (2) Providing goods or services (whether paid or not) to individuals in the EEA, or monitoring their actions in the EEA;
• (3) Not within the EEA, but according to public international law, the laws of EU member states apply (such as embassies or consulates of EEA member states).

If you and/or your end users are from the EEA, the legal basis for our collection and use of the above personal information will depend on the relevant personal information and the specific background of the information we collect.

However, we usually do this only when we need personal information to perform the contract with you, or when the processing is in line with our legitimate interests and is not covered by your data protection interests or basic rights and freedoms, or when we obtain your consent. In some cases, we may also have a legal obligation to collect personal information from you and/or your end users, or we may need personal information to protect your or other people's vital interests. For example, for the purpose of maintaining public security, we may provide your personal information at the request of relevant departments, or respond to the requirements of law enforcement departments.

If you have questions about the legal basis for us to collect and use your and/or your end user's personal information or need further information, please contact us using the contact information provided in the introduction of this privacy policy.

Appendix 1: Keyword Definitions

Specific words used in this policy have the following meanings:

• 1. We or Aurora: Shenzhen Hexunhuagu Information Technology Co., Ltd.
• two Associated companies: refer to the subsidiaries or other associated enterprises within the scope of consolidated statements with Shenzhen Hexunhuagu Information Technology Co., Ltd. Any of the above companies is or will be controlled, controlled or under common control with them.
• 3. Control: refers to the ability to directly or indirectly influence the management of the mentioned company, whether through ownership, voting shares, contracts or other legally recognized ways.
• 4. You refer to the registered users who use our products and/or services and the purchasers of charging services.
• 5. Your end user: refers to the end user of the application of the products or services of the Evoque platform.
• 6. Aurora or this platform: refers to the aurora platform.
• seven Personal information: refers to various information recorded electronically or in other ways that can identify the identity of a specific natural person or reflect the activities of a specific natural person, either alone or in combination with other information. Personal information includes personal basic information, personal identity information, personal biometric information, network identity information, personal health physiological information, personal education work information, personal property information, personal communication information, contact information, personal Internet access records, personal common equipment information, personal location information, etc. For the avoidance of doubt, personal information includes but is not limited to personal sensitive information.
• 8. Personal information subject: refers to the natural person identified by personal information.
• nine Personal sensitive information: refers to personal information that, once disclosed, illegally provided or abused, may endanger personal and property safety, and may easily lead to damage to personal reputation, physical and mental health or discriminatory treatment. Personal sensitive information includes personal property information, personal health physiological information, personal biometric information, personal identity information, network identity information, etc.
• 10. De identification: refers to the process of making it impossible to identify the subject of personal information without using additional information through the technical processing of personal information.
• 11. Anonymization: refers to the process of making the subject of personal information unrecognized and the processed information unrecoverable through the technical processing of personal information.
• 12. China: refers to the mainland of the People's Republic of China, which is only for the purpose of this policy, excluding Hong Kong Special Administrative Region, Macao Special Administrative Region and Taiwan.