Purecycle Application Privacy Policy

This privacy policy is formulated by Hangzhou Chence Consulting Services Co., Ltd. (hereinafter referred to as "we" or "the company", registered address: Room 1802, Unit 1, Building 1, Zuoyou Business Center, Ningwei Street, Xiaoshan District, Hangzhou City, Zhejiang Province) to explain to you (Purecycle application user, hereinafter referred to as "you") how we collect, use, store, and protect your personal information and business-related data, as well as the rights you have regarding your information. This policy, together with the "Purecycle Application User Agreement", constitutes the complete legal basis for your use of this application service. By using this application, you are deemed to have fully understood and agreed to all contents of this policy.

1. Policy Scope of Application

1. This privacy policy applies to all services you use through the Purecycle application (including but not limited to mobile APP, web version, etc.), including information processing activities related to functional modules such as customer management, quotation management, procurement management, sales management, etc.

2. This policy does not apply to services provided by third parties through this application (such as third-party payments, third-party data analysis tools, etc.). The privacy policies of third-party services are formulated by themselves, and we do not assume related responsibilities. It is recommended that you carefully read third-party privacy policies.

2. Definition Explanation

1. Personal Information: Refers to various information recorded electronically or by other means that can identify a specific natural person's identity or reflect the activities of a specific natural person, either alone or in combination with other information, including name, ID card number, contact information, address, bank account information, etc.

2. Sensitive Personal Information: Refers to personal information that, once leaked or illegally used, can easily lead to infringement of the natural person's human dignity or harm to personal or property safety, including ID card numbers, bank account information, biometric information, location tracks, etc. The sensitive personal information involved in this application mainly includes your and your customers' ID card numbers, bank account information, etc.

3. Business Data: Refers to business-related data entered by you during the use of this application, including customer information, supplier information, purchase order data, sales data, inventory data, financial data, etc. (which may contain personal information; the processing of such data must also comply with the provisions of this policy regarding personal information).

3. Types and Methods of Information We Collect

(1) Information Necessary for Providing Services

1. Account Registration and Identity Verification Information When you register for this application account, you need to provide a mobile phone number/email address (for receiving verification codes to verify identity) and set an account password.

2. Business Function Related Data When you use various functional modules of this application, you need to enter relevant data according to business needs, specifically including:

• Customer Management Module: Customer name, contact person name, contact information (phone, email), address, customer demand records, etc.;

• Quotation Management Module: Quotation number, customer information, product/service name, price, quantity, quotation validity period, etc.;

• Procurement Management Module: Supplier name, contact information, purchased product name/specification/quantity/price, purchase order date, delivery address, etc.;

• Sales Management Module: Sales order number, customer information, product/service delivery information, payment records, etc.;

3. Device and Log Information To ensure normal operation of the application and service security, we automatically collect your device information and log information when using this application, including:

• Device Information: Device model, operating system version, unique device identifier (such as IMEI, Android ID, IDFA), network type (WiFi/mobile network), IP address;

• Log Information: Your login time, login location, functional modules used, operation records (such as time of creating orders, modifying data), error logs (such as application crash records).

(2) Information Collected Based on Your Consent

If you wish to use certain additional functions (such as viewing customer/supplier addresses through the in-app map), we may need to obtain your device location information. The collection of such information requires your active authorization. You can withdraw the authorization in device settings at any time. After withdrawal, the additional function may not work properly, but core services will not be affected.

(3) Information Not Collected

We do not actively collect information unrelated to this application service. For example, if you do not use the fund settlement function of the financial management module, we will not require you to provide bank account information; we also will not steal private files stored on your device that are unrelated to this application (such as photos, contacts) through technical means, unless you actively upload them to this application as business evidence materials.

4. Purpose and Method of Information Use

We only use your information within the following legitimate purposes, and the usage methods comply with laws and regulations and the principle of minimum necessity:

1. Provide and Optimize Services: Use your account information to complete login verification, use business data to provide you with core services such as customer management and financial accounting; analyze application usage through device and log information to optimize functional experience (such as fixing crash vulnerabilities, simplifying operation processes).

2. Ensure Service Security: Identify abnormal login behaviors (such as login from unfamiliar devices in different locations) through device information, IP addresses, and operation logs to prevent security risks such as account theft and data tampering; encrypt financial data and bank account information to ensure fund settlement security.

3. Compliance and Risk Control: Use your identity verification information and financial data to complete compliance reviews according to financial supervision, tax management and other laws and regulations; use relevant evidence materials and business records to assist in dispute resolution when you are involved in claims and disputes.

4. Other Purposes with Your Consent: If you agree to receive business-related notifications (such as quotations being viewed, payment receipt reminders), we will use your contact information to send such notifications; if you participate in our user research, we will use the information you feedback to improve services.

We will not use your information for scenarios unrelated to the above purposes. If it is indeed necessary to expand the scope of use, we need to obtain your written consent again.

5. Information Sharing, Transfer and Public Disclosure

(1) Information Sharing

We will not sell or rent your personal information and business data to any third party, but under the following circumstances, we may share information in compliance with laws and regulations:

1. Sharing with Third-Party Service Providers: To achieve service functions (such as server hosting, payment settlement, data backup), we may share necessary information with cooperative third-party service providers (such as Alibaba Cloud servers, third-party payment institutions), but we will require third parties to comply with this policy and confidentiality agreements, and only use it for specified service purposes, and shall not use or disclose information without authorization.

2. Sharing Based on Legal Requirements: If required by legal documents issued by judicial organs and administrative regulatory departments (such as court subpoenas, investigation letters), or to fulfill legal obligations such as anti-money laundering and anti-fraud, we need to provide your information to relevant departments. Such sharing will be strictly implemented in accordance with the scope and procedures stipulated by law.

3. Sharing with Your Consent: If you need to share business data (such as quotations) with your customers or suppliers, you can actively initiate sharing through the "Data Sharing" function in this application. Such sharing is controlled by you, and we only provide technical support.

(2) Information Transfer

If the company undergoes changes such as mergers, divisions, acquisitions, asset transfers, etc., your information may be transferred as part of the assets. We will notify you before the transfer (through in-app announcements or SMS/email) and require the transferee to continue to comply with this privacy policy to protect your information rights; if the transferee changes the purpose of information processing, they need to obtain your consent again.

(3) Public Disclosure

We will not publicly disclose your personal information and business data, unless:

1. Upon your active application and written consent (such as your consent to use part of non-sensitive business data in successful cases for our service promotion);

2. To protect public interests, others' legitimate rights and interests or our own legitimate rights and interests (such as disclosing suspected fraudulent user account information to prevent risks, but sensitive personal information will be hidden).

6. Information Storage and Protection

(1) Storage Method and Period

1. Storage Location: Your information is mainly stored on cloud servers within Mainland China (such as Alibaba Cloud), complying with relevant regulations on data出境 management; if it is necessary to transfer information overseas due to business needs (such as your customers located overseas), we will complete data出境 security assessments or filings in accordance with the requirements of the "Personal Information Protection Law", and take measures such as encrypted transmission and signing cross-border data transfer agreements to ensure information security.

2. Storage Period:

• Account Information: Continuously stored during the existence of your account. If you actively cancel your account, we will delete or anonymize account information within 15 working days after cancellation (except where required to be retained by laws and regulations, such as financial data that needs to be retained for at least 10 years according to tax regulations);

• Business Data: Retained during your use of the corresponding service and after service termination, according to business needs and legal provisions (such as purchase order data needs to be retained for 3 years after contract performance is completed, financial data is retained according to tax requirements);

• Device and Log Information: The retention period does not exceed 6 months, after which it will be automatically deleted or anonymized.

(2) Security Protection Measures

We adopt both technical and management measures to protect your information security, specifically including:

1. Technical Measures: Use AES-256 encryption to store sensitive information (such as bank accounts, passwords); use SSL/TLS protocols to ensure security during data transmission; set up firewalls and intrusion detection systems to prevent network attacks; regularly conduct security vulnerability scanning and repair of servers.

2. Management Measures: Establish information security management systems, clarify employees' access rights to information (such as only financial department personnel can view financial data); conduct information security training and background checks for employees; formulate data breach emergency plans. If an information breach occurs, we will immediately take remedial measures and notify you and regulatory authorities within 72 hours (unless otherwise required by laws and regulations).

Although we have taken sufficient protection measures, we still cannot completely exclude information security risks caused by force majeure such as network attacks and equipment failures. If you discover an information leak, you can immediately notify us through the contact method in Article 10 of this policy, and we will fully assist you in handling it.

7. Your Information Rights

According to laws and regulations such as the "Personal Information Protection Law", you have the following rights regarding your information, and we will provide necessary support for you to exercise these rights:

1. Right to Correction: If you find errors in account information (such as mobile phone number) or business data (such as customer contact information), you can directly modify them in the corresponding functional module.

2. Right to Withdraw Consent: You can withdraw authorization for permissions such as location information and camera (used for uploading evidence materials) in device settings; you can also apply to withdraw consent for information sharing and notification push through customer service. After withdrawal, related functions may not be available, but core services will not be affected.

8. Children's Privacy Protection

This application is mainly oriented towards enterprise users and business scenarios and does not provide services to children under 14 years old. We do not actively collect children's personal information. If you find that children's information has been mistakenly entered into this application, you should immediately delete the information or contact us to assist in deletion; if children use this application without the consent of their guardians, guardians can contact us to cancel the account and delete relevant information.

9. Policy Updates and Notifications

1. We may modify this privacy policy according to changes in laws and regulations, adjustments in business functions (such as adding new data processing scenarios). The modified policy will be notified to you through the following methods:

• In-app pop-up prompts (mandatory viewing upon first login);

• Update on the "Settings - Privacy Policy" page in the application;

• SMS/email notification (if involving changes to core terms, such as expansion of information sharing scope).

2. Your continued use of this application service is deemed as acceptance of the modified privacy policy; if you do not agree with the modifications, you should immediately stop using this application and can apply to cancel your account.

10. Contact Information and Dispute Resolution

1. If you have questions about this privacy policy, need to exercise information rights, or have complaints, you can contact us through the following methods:

• Mailing Address: Room 1802, Unit 1, Building 1, Zuoyou Business Center, Ningwei Street, Xiaoshan District, Hangzhou City, Zhejiang Province (Attn: Hangzhou Chence Consulting Services Co., Ltd.).

2. If you have a dispute with us regarding information processing matters, it should first be resolved through friendly negotiation; if negotiation fails, either party has the right to file a lawsuit with the competent people's court in the location of Party A (Hangzhou Chence Consulting Services Co., Ltd.).