FinDocx Personal Information and Privacy Protection Policy

Introduction

Yuanli Jinzhi (Beijing) Technology Co., Ltd. and its affiliates (hereinafter referred to as "We", "Our", "Us" or "Yuanli Jinzhi") respect and are committed to protecting Personal Information and privacy. FinDocx AI Open Platform (hereinafter referred to as "this Platform") and/or FinDocx AI Open Platform Service (hereinafter referred to as "this Service") is a visual intelligence open platform and service of Yuanli Jinzhi for developers, which processes relevant Personal Information in strict compliance with the uniform requirements and standards in the Personal Information and Privacy Protection Policy of Yuanli Jinzhi (hereinafter referred to as "Yuanli Jinzhi Policy"); in order to further clarify the Personal Information processing practices that may be involved in this Platform and this Service, the FinDocx Personal Information and Privacy Protection Policy (hereinafter referred to as the "FinDocx Policy") is hereby formulated by Us to describe the specific processing of Personal Information collected, used and retained in this Platform and this Service.

Please note that not all the measures and efforts of Yuanli Jinzhi in protecting Personal Information and privacy are included in the FinDocx Policy. We undertake to strictly abide by applicable laws, regulations and regulatory requirements, and highly respect the legal rights in connection with Your Personal Information. To fully understand the basic information about Us, Our Personal Information and privacy protection principles and other relevant contents, please also read the Yuanli Jinzhi Policy.

In addition, Our customer (hereinafter referred to as "Customer") or We may otherwise provide the individual end user (hereinafter referred to as "User", "You"" or "Your") with specific privacy policies or equivalent legal texts, in the specific business scenarios further developed and provided based on this Platform and/or this Service. Please also read through these privacy policies or equivalent legal texts under such business scenarios to ensure that You are fully aware of the complete practices regarding the processing of Personal Information. The FinDocx Policy applies only to this Platform and this Service provided by Yuanli Jinzhi and is completely independent of the privacy policies or equivalent legal texts that Our Customer or any third party may or is required to display or provide to You.

The FinDocx Policy is designed to help the Customer and the User understand:

I. How We Collect and Use Personal Information

II. How We Retain and Disclose Your Personal Information

III. How We Protect Your Personal Information

IV. Transfer of Personal Information Globally

V. Your Rights Regarding Your Personal Information

VI. How We Handle Personal Information about Children

VII. How to Contact Us

VIII. How to Update the FinDocx Policy

For the purpose of the FinDocx Policy, "Personal Information" means various information recorded electronically or otherwise about identified or identifiable natural persons, excluding anonymized information. Unless otherwise stated, other relevant definitions and terms under the FinDocx Policy shall have the same meanings as those given in the laws, regulations, normative documents and national standards including the Cybersecurity Law, the Personal Information Protection Law and the Information Security Technology - Personal Information Security Specification.

I. How We Collect and Use Personal Information

Yuanli Jinzhi will cooperate with the Customer in diversified businesses under different business scenarios. We will work with Our Customers and suppliers to ensure that We have collected and processed Your Personal Information with Your full and valid authorization, except that the information is:

1) Related to the performance of the obligations prescribed by the laws and regulations;

2) Directly related to national security and national defense security;

3) Directly related to public safety, public health and major public interests;

4) Directly related to criminal investigation, prosecution, trial and execution of judgment;

5) Collected and processed to protect Your life, property and other major legitimate rights and interests and those of other individuals, but it is difficult to obtain the authorization and consent from yourself and themselves;

6) Disclosed to the public by You on Your own initiative;

7) Necessary for executing and fulfilling a contract at Your request;

8) Collected from lawfully and publicly disclosed information, such as lawful news reports, government information disclosure and lawful public datasets;

9) Necessary to maintain the safe and stable operation of the products or services provided, such as when product or service failures are discovered and disposed of;

10) Necessary for news media to proceed with legitimate news reporting;

11) Necessary for academic research institutions to conduct statistical or academic researches for public good and when the results of the academic research or description are made public, the Personal Information contained therein shall be de-identified.

1. What Personal Information We collect and for what purpose We use it

In connection with this Platform and this Service, We will jointly collect and use Your Personal Information with Our Customers, mainly including:

1) FinDocx account registration and login

To complete the FinDocx account registration and login process, We will collect the username, mobile phone number (provided during registration or filled in later by You), email address (provided during registration or filled in later by You) and WeChat account information (provided during registration) used for registration; please note that such registration and login process is one of the prerequisites to use this Platform and/or this Service. If You refuse to provide such information, You will be unable to register, log in to and/or use this Platform and/or this Service normally.。

In addition, if You choose to use any other Yuanli Jinzhi account such as finauth to log in to this Platform, We will also collect the information including Your account and password for identity verification in the login process.

2) Application of image, audio, video and document recognition technology

To provide the technical capabilities related to image, audio, video and document recognition, We will further identify and extract the certificate information (such as photos and text information on ID cards, driver's licenses, vehicle registration certificates and other certificates), ticket information and other text and non-text information from the original pictures, audios and videos, PDF and other document data provided by the Customer of its own accord to realize the specific functions such as certificate recognition, audio and video recognition, and ticket recognition. Such functions may involve processing sensitive information such as certificate information and ticket information. Please understand that this Platform and this Service form a part of the open AI capabilities of Yuanli Jinzhi, and if You refuse to provide the data including original images, the aforementioned functions will be unavailable.

2. Special statement about cookies

Cookies are small files that a website, application or service transfers to and stores on Your device. Like most websites on the Internet, We send You cookies primarily to simplify Your repeated login steps, store Your preferences, help You monitor account or data security, or automatically record certain information (such as Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), page views, referral pages, date/time stamp and clickstream data) to analyze and manage Our websiteFor more details about Our use of cookies, please refer to the Yuanli Jinzhi Policy.

II. How We Retain and Disclose Your Personal Information

Unless expressly required by applicable laws, regulations or regulatory requirements, We will retain Your Personal Information only for so long as necessary to achieve the purpose of processing.

Under this Platform and this Service, We mainly enable specific applications of technical capabilities. Therefore, after the specific functions are implemented, We will delete or anonymize the original pictures, videos and other data provided by the Customer and the service results generated from such original data as soon as possible.

We may provide the Customer with storage functions under relevant functions such as image, audio, video and document recognition. Under such functions, the Customer will determine whether to store the data and for how long to store the data, at its sole discretion. Upon deletion by the Customer, request by the Customer for deletion or expiry of the period of service, We will promptly and completely delete or anonymize Your Personal Information unless expressly required by applicable laws and regulations.

In addition, We will retain the network logs for no less than six months as required by mandatory laws and regulations such as the Cybersecurity Law.

To this end, We will not share or disclose the Personal Information involved in this Platform/Service to any external third party other than Our Customer in any form or for any purpose, unless expressly required by applicable laws, regulations or regulatory requirements, or other disclosure scenarios stated in the Yuanli Jinzhi Policy exist.

III. How We Protect Your Personal Information

We have taken reasonable and feasible administrative and technical measures to protect the Personal Information We process and respond to the Personal Information security incidents. Please refer to the Yuanli Jinzhi Policy for more information about these measures.

Specifically, under this Platform and this Service, the main security measures We use to protect the Personal Information You provide include the following, without limitation:

1) We will de-identify Your Personal Information in a timely manner when feasible to reduce the risk of other organizations or individuals to re-identify You;

2) We will regularly review how We handle Personal Information (including physical security measures) and continuously strengthen the security of technical tools such as APIs and SDKs;

3) We will make ongoing efforts to protect the security of Your Personal Information and implement the security measures such as security encryption throughout the transmission to prevent Your Personal Information from unauthorized access, use or disclosure.

V. Your Rights Regarding Your Personal Information

We highly respect Your legal rights regarding Your Personal Information. Below We set out Your rights and how We will protect these rights. Please note that for a specific request, We may need to verify Your identity before processing Your request for the sake of security.

1) Right to be informed: We are committed to improving the transparency of Personal Information processing and will inform You how We process Your Personal Information through the FinDocx Policy and other relevant legal texts.

2) Right of access: You have the right to access Your Personal Information.

3) Right of rectification: If You discover an error in the Personal Information We process about You, You have the right to require Us to make rectifications thereto.

4) Right to erasure: If We have no legal grounds to further hold and process Your information, You may request Us to delete Your Personal Information, and We will delete it promptly upon Your request.

5) Account cancellation: If You use relevant products or services by obtaining an account provided by Us through registration or any available means, You can submit a request for cancellation through the account cancellation channel provided to You in the specific product or service scenario, and We will verify and process such request in a timely manner.

6) Right to object to automated decision-making: You have the right not to be subject to the decision made on an automated basis, including profiling. If these decisions significantly affect Your legal rights, You have the right to ask for an explanation.

7) Right to explanation: You have the right to require Us to explain Our rules for processing Your Personal Information.

8) Right to portability: You may request that Your Personal Information be transferred to a designated processor, provided that the conditions specified by the national cyberspace administration are met and it is technically feasible. If it is really necessary to transfer the Personal Information, please contact Us in advance to confirm whether the aforementioned conditions are met and how the Personal Information will be transferred.

9) Right to inquiry: You have the right to inquire about Your Personal Information. If You do need Your Personal Information, You can also contact Us for a copy thereof, provided that the specified conditions are met.

10) Right to withdrawal: Each functional module may require certain essential personal information to operate properly. Once You withdraw Your consent or authorization, We will no longer be able to provide You with the service in respect of which the consent or authorization has been withdrawn, and will no longer process Your appropriate Personal Information. Your decision to withdraw Your consent or authorization, however, will not affect the previous processing of Personal Information based on Your consent or authorization.

The authorization for information will be withdrawn by: Emailing Your request for withdrawal to Our contact email address at business@yljz.com.

If We fail to respond to Your request in a timely manner, or You have any objection to Our response, You may complain to Us or file a complaint with the competent regulatory authority via the contact information in this Policy.

VI. How We Handle Personal Information about Children

Please note that all Our products, websites and services are mainly designed for corporate customers, and We will not actively collect or process the Personal Information about children without permission.Any Customer or User who wishes or intends to provide Us with or request Us to process the Personal Information about a child is required to ensure that it has obtained the prior consent and authorization from the guardian of the child as strictly required by the Personal Information Protection Law, the Regulations on the Protection of Children’s Personal Information Online and other relevant laws and regulations.

If We discover that any Customer or User has provided any raw data containing Personal Information about children without the consent of their parents or guardians, We will immediately delete such raw data and will not provide any services in relation to such data.For the avoidance of doubt, We consider anyone under the age of 14 to be a child.

In addition, We pay special attention to the security and controllability of the Personal Information about children. We have explicitly classified the Personal Information about children as the data type with the highest security level, and have adopted technical and administrative measures such as encrypted storage and strict access control to render additional security protection.

VII. How to Contact Us

If You have any questions, appeals/complaints regarding this Policy and Your Personal Information, or You need any assistance in connection with Your rights regarding Your Personal Information, We recommend that You submit Your request directly to the Personal Information processor (which usually means Our Customer) in the specific business scenario, who will forward the request to Us as appropriate, so that Your request will be promptly met. We will respond to the requests as soon as possible upon the receipt of them.

If necessary, You may contact Us by sending an email to business@yljz.com, and to ensure that Your request is clear and definite, please include in the foregoing email:

1) Your name and contact details;

2) Your detailed request, comments and/or corresponding links.

In principle, We will not charge a fee for Your reasonable request, but We will charge cost-based fees, as appropriate, for repeated requests or those exceeding reasonable limits. We may reject the requests that are unreasonably repetitive, require disproportionate technical efforts (for example, requiring the development of a new system or fundamentally changing the existing practices), pose a risk to the legitimate rights and interests of others, or are extremely impractical (for example, involving the information stored on backup tapes)

Generally, We will give Our response as soon as possible within 15 working days or within the period prescribed by laws and regulations, except that:

1) The request is related to the performance of the obligations prescribed by the laws and regulations;

2) The request is directly related to national security and national defense security;

3) The request is directly related to public safety, public health and major public interests;

4) The request is directly related to criminal investigation, prosecution, trial and execution of judgment;

5) There is sufficient evidence to demonstrate Your subjective malice or abuse of rights;

6) The request is made to protect Your life, property and other major legitimate rights and interests and those of other individuals, but it is difficult to obtain the authorization and consent from yourself and themselves;

7) The response to Your request will cause serious damage to Your legitimate rights and interests or those of other individuals or organizations;

8) Trade secrets are involved.

VIII. How to Update the FinDocx Policy

We reserve the right to update or modify the FinDocx Policy from time to time. We will not, however, reduce Your rights under the FinDocx Policy without Your explicit consent. You can view the latest version of the FinDocx Policy on this page.

We will provide more prominent notices about major changes (including for certain services, We will send notices via email or otherwise to state the specific changes).

Major changes for the purpose of the FinDocx Policy include, without limitation:

1) Major changes in Our service model, such as the purpose of processing the Personal Information, the type of Personal Information processed, and how the Personal Information is used;

2) Major changes in Our ownership structure, organizational structure and other aspects, such as changes in ownership caused by business adjustments, bankruptcy, mergers and acquisitions, etc.;

3) Changes in the main persons or entities with or to whom the Personal Information is shared, transferred or publicly disclosed;

4) Major changes in Your rights to participate in the Personal Information processing and how You exercise these rights;

5) Changes in Our department which is responsible for handling the Personal Information security, the contact information and the complaint channels;

6) When the Personal Information security impact assessment report indicates a high risk.