Taiyi IoT Platform Privacy Policy

Taiyi IoT PlatformPrivacy Policy

Effective Date:January 1, 2026

Dear user, Shanghai Taiyi Testing Technology Co., Ltd. and its affiliates (hereinafter referred to as "Taiyi" or "we") attach great importance to protecting your personal privacy. While you use our operated Taiyi IoT Platform series of products, including but not limited to the "Taiyi IoT Platform" website with domain name iot.techik.cn, the "Taiyi IoT Platform" WeChat Mini Program, and the "Taiyi IoT Platform" mobile App (hereinafter referred to as "the Product"), we will protect your personal information in accordance with the privacy policy published by this Product (hereinafter referred to as "this Policy").

Summary

This policy aims to help you understand what personal information we collect, why we collect this personal information, and how we protect this personal information. We will collect and process your personal information and provide services to you in accordance with the "Cybersecurity Law of the People's Republic of China," the "Personal Information Protection Law of the People's Republic of China," the "Data Security Law of the People's Republic of China," and other relevant laws and regulations.

Under normal circumstances, we will only collect and process your personal information when necessary to fulfill contracts or provide services, or with your consent, unless otherwise stated in specific services we provide. At that time, the collection and processing of personal information may be explained and described in other privacy policies specifically published by us for that product or service. Please refer to the specific privacy policy. In addition, we may also inform you of the rules for processing your personal information through page notifications, pop-up prompts, information pushes, and other methods. The personal information processing rules corresponding to the business functions of specific products or services shall be subject to the content we notify you.

This product may contain links to third-party websites, third-party plugins, and other services (collectively referred to as "third-party services"). This policy does not apply to third-party services connected to our services. Your use of the aforementioned third-party services (including any personal information you provide to third parties) will be governed by the third parties' terms of service and privacy policies (not this policy). Please carefully read the relevant terms of the third parties. Please properly protect your personal information and only provide it to third parties when necessary.

Before you interact with us, please carefully and completely read and understand this policy, especially the bolded sections. Your agreement to this policy only represents that you have understood the functions provided by this product and the necessary personal information required for the functions to operate, and does not mean that you have agreed that we can collect non-essential personal information. Non-essential personal information will be separately requested for your consent based on authorization during your usage. Corresponding device permissions will not be enabled by default. When important or sensitive device permissions are involved, we will prompt you again through a pop-up window to obtain your consent before enabling them when you use the corresponding business functions. If you do not agree to this policy, please do not use this product or provide us with your personal information.

This policy will help you understand the following content:

1. How we collect and use your personal information

2. How we use Cookie and similar technologies

3. How we share, transfer, publicly disclose, and entrust the processing of your personal information

4. How we store and protect your personal information

5. Your rights

6. How we handle minors' personal information

7. Updates to this policy

8. Contact us

9. Other

1. How we collect and use your personal information

For your convenience in understanding, we list the business functions provided, processing purposes, and the collection and use of personal information required as follows:

1.1 Account registration and login

1.1.1 Since all functions and services of this product require you to register and log in to your account before use, you cannot use the product if you have not registered and logged in. When you use the services of this product, we will require you to have a Taiyi IoT Platform account.

1.1.2 We implement unified management of user accounts. Account information you have activated when using Taiyi (including the operating entity of this product and all affiliates) products or services will be automatically synchronized to this product. If you have previously activated a Taiyi account through other channels, you can directly enter your existing account information at Taiyi to complete the login.

1.1.3 If you do not yet have a Taiyi IoT Platform account, you can contact our technical support to apply for an account activation before logging in. When you apply for an account, you need to provide us with your personal information as follows:

Purpose of Collection and Use

Required Personal Information

Non-Essential Personal Information

Complete system account registration and login

1) Your region/country

2) Mobile area code of your country

3) Your mobile phone number

4) Your name

5) Full and abbreviated name of your company

6) Hardware products and models of our company you are currently using

1.1.5 After completing login, you can choose to supplement the following personal information according to your personal preference: industry, avatar, nickname.

1.2 Member Value-Added Services

1.2.1 In principle, when upgrading membership or purchasing our member value-added services, we only collect order information, including product name, order number, order time, order status, payment serial number, payment time, and payment amount, without additionally collecting your other personal information.

1.2.2 When you purchase member value-added services and request us to provide invoices based on the payment amount, you need to provide us with your personal information as follows:

Purpose of Collection and Use	Required Personal Information	Non-Essential Personal Information
Issuing invoices	Name (only for invoicing to individuals), email address	/

1.3 Purpose of ensuring service security, optimization and improvement

To ensure the security and continuity of this product, identify abnormal account status, more accurately resolve issues you encounter when using our services, improve and optimize our service experience, prevent, detect, and investigate fraud, security threats, illegal activities or violations of our agreements, policies or rules, in order to protect the legitimate rights and interests of you, us, our partners and the public, we may automatically receive and record:

(a) Device and network information: Information from your browser and computer, which we use for internal analysis and to enhance service quality and relevance for you.

(b) Log information: We need to retain necessary logs to record the operational status of our service website entry points to comply with applicable data protection laws.

1.4 Collecting your personal information through third parties

You acknowledge and agree that, in order to provide you with better quality services or to jointly provide services to you, under the premise of complying with legal regulations or your agreement or obtaining your consent, we collect other personal information about you through third parties. We will use protection measures and methods no less stringent than those we employ for processing user personal information to protect personal information indirectly obtained from third parties.

1.5 Device permission invocation

1.5.1 In the course of providing services, to ensure you can use service functions normally, we will apply for system device permissions of your device. You can cancel authorization at any time in your device. Canceling authorization will prevent you from using related business functions, but will not prevent you from using other business functions.

1.5.2 The current invocation of system privacy permissions by this product is as follows:

Device Permission	Purpose of Use
Wireless Network	Network connection for various business functions
Access user local images and videos	Images and videos describing device failure for repair service users
Get location	Get current device location

1.10 Personal Information Usage Rules

1.10.1 We will use your personal information in accordance with the purposes and methods disclosed in this Policy. If we need to change the above purposes and information types, or if we use the information for other purposes not stated in this Policy, or if we use information collected for specific purposes for other purposes, we will obtain your prior consent as required by data protection laws.

1.10.2 After collecting your personal information, we will promptly process the data through technical means such as anonymization when necessary to ensure your information security. Please be aware that we have the right to mine, analyze and utilize (including commercial use) databases that have been anonymized, and we have the right to statistically analyze service usage and share statistical information that cannot identify or associate with your identity with the public/third parties.

2. How we useCookie and similar technologies

2.1 When you use this website, we will store small data files calledCookie on your computer or mobile device.Cookie typically contains identifiers, site names, and some numbers and characters. We use this information to determine whether you have logged in, and to improve service quality and optimize user experience. If you do not wish personal information to be saved inCookie, you can configure your browser to disable theCookie function.

2.2 In addition toCookie, we may also useCookie similar technologies to improve your user experience when using this website.

2.3 We will not useCookie for any purposes outside those described in this Policy. The mainCookie types currently running on this website and their purposes are as follows:

CookieName	CookieOwner	Purpose	Duration	Function
TECHIK_TOKEN	Shanghai Taiyi Testing Technology Co., Ltd.	User Login Status	2hours	Obtain user token
TECHIK_LANG	Shanghai Taiyi Testing Technology Co., Ltd.	Session Language	2hours	Obtain user's current language

You may manage or deleteCookie according to your preferences. For details, please visitaboutcookies.org.

3. How we share, transfer, publicly disclose, and entrust the processing of your personal information.

3.1 Sharing

3.1.1 Unless with your prior separate consent or as otherwise required by applicable laws and regulations, we will not share your personal information with any third party other than Taiyi, except for information that has been processed to the extent that specific individuals cannot be identified and cannot be restored.

3.1.2 Some of our services may share certain personal information with partners to provide better customer service and user experience. We will only share your personal information for legitimate, proper, necessary, specific and clear purposes, and will only share the personal information necessary to provide the services. Except as otherwise authorized by you or as otherwise required by laws and regulations, our partners have no right to use the shared personal information for any other purposes.

3.1.3 For companies, organizations and individuals with whom we share personal information, we will investigate their data security environment and require them to adopt confidentiality and security measures in accordance with the law to process personal information.

3.2 Transfer

3.2.1 We will not transfer your personal information to any company, organization or individual other than Taiyi, except in the following circumstances:

(a) With your prior explicit authorization or consent;

(b) To meet the requirements of laws and regulations, legal procedures, mandatory government requirements or judicial rulings;

(c) If we are involved in transactions such as mergers, divisions, liquidations, acquisitions or sales of assets or businesses, your personal information may be transferred as part of such transactions. We will ensure the confidentiality of such information during the transfer, inform you of the name or title and contact information of the recipient, and do our best to ensure that the company or organization that newly holds your personal information continues to be bound by this Privacy Policy. Otherwise, we will require the company or organization to seek your authorization and consent again.

3.3 Public Disclosure

We will only publicly disclose your personal information under the following circumstances:

(a) With your separate consent;

(b) Based on laws and regulations, legal procedures, litigation or mandatory requirements of government authorities;

(c) When announcing penalties for violation accounts and violation behaviors, we will disclose information about the relevant accounts. This information inevitably includes account-related authentication information and violation situations.

3.4 Entrusted Processing

3.4.1 To better provide services to you, we may entrust third-party partners to process your personal information. We will only entrust third-party partners to process your information for legitimate, proper, necessary, specific and clear purposes. We will strictly limit the information processing purposes of the entrusted parties and require them to adopt sufficient data security safeguards. If third-party partners use your information for purposes we have not entrusted, they will separately obtain your consent.

3.4.2 Third-partySDKInformation

To provide our services to you, ensure the normal provision of services and other necessary purposes, we will embed SDKs or other similar applications from authorized partners, as follows:

Third-partySDKName	SDKApplication Scenario	Personal Information Collection and Use Type	Third-party Company Name	Third-party Personal Information Processing Rules
WeChatOpenSDK JS-SDK	WeChat Pay	Order Information	Shenzhen Tencent Computer Systems Co., Ltd.	https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8
Alibaba CloudSDK 2.0	Sending SMS, file upload	Device information, operation behavior information	Alibaba Cloud Computing Co., Ltd.	https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202107091605_49213.html?spm=5176.8195934.J_9220772140.29.23534378pDzn5k
WeChatSDK	WeChat Login	User Information	Shenzhen Tencent Computer Systems Co., Ltd.	https://weixin.qq.com/cgi-bin/readtemplate?lang=zh_CN&t=weixin_agreement&s=privacy

3.4.3 Without your valid authorization, we will not entrust third-party partners to process information that can directly identify your personal identity. If you actively leave your contact information, address information and other personal information for specific third-party partners to contact you, they will directly process your personal information.

3.5 Exceptions to prior authorization for sharing, transferring, and publicly disclosing personal information

In the following circumstances, sharing, transferring, and publicly disclosing personal information does not require prior authorization and consent from the personal information subject:

(a) Directly related to national security and national defense security;

(b) Necessary for concluding and performing contracts in which individuals are parties;

(d) Directly related to public safety, public health, and major public interests. For example: necessary to respond to sudden public health emergencies, or to protect the life, health and property safety of natural persons in emergency situations;

(e) Directly related to criminal investigation, prosecution, trial and judgment enforcement;

(f) To maintain the significant legitimate rights and interests of the personal information subject or other individuals in terms of life and property, but it is difficult to obtain the consent of the person concerned;

(g) Processing personal information that has been publicly disclosed by individuals themselves or legally disclosed by other means within a reasonable scope in accordance with the provisions of laws and regulations, for example: legitimate news reporting, government information disclosure and other channels;

(h) Other circumstances stipulated by laws and administrative regulations.

4. How we store and protect your personal information

4.1 Storage location and duration

4.1.1 In principle, personal information collected and generated by us within the People's Republic of China will be stored within the People's Republic of China. If your personal information may be transferred to overseas jurisdictions where you use the service, or accessed from these jurisdictions, we will strictly fulfill the obligations stipulated by laws and regulations and obtain your separate consent in advance in accordance with the law.

4.1.2 We will retain your personal information for the duration required to provide services, but in cases where laws and regulations have other provisions on retention periods, you agree to retain for a longer period, guarantee the security and quality of services, achieve dispute resolution purposes, or technical difficulties in implementation, after the expiration of the aforementioned retention period, we will extend the retention period in accordance with the law, contract or within a reasonable scope (for example, the E-Commerce Law stipulates: commodity and service information, transaction information retention time shall be no less than three years from the date of completion of the transaction). After exceeding the retention period, we will delete your personal information or anonymize it in accordance with the law.

4.1.3 If the service provided to you by this product terminates prematurely, within 30 calendar days from the date of early termination of the service, we will continue to store your data. After this period, we will no longer retain your data, and you will bear all consequences arising from the destruction of your data.

4.2 Data security measures and capabilities

4.2.1 To protect your information security, we endeavor to adopt various reasonable physical, electronic and managerial security technical measures to protect your information, preventing your information from unauthorized access, use, modification, public disclosure, damage or loss. We have adopted all reasonable and feasible measures to protect your personal information. For example:

(a) Ensuring personal information security from many aspects such as security management, strategies, processes, and network architecture;

(b) Our network services adopt security protection technologies such as https transport layer security protocols, and ensure the confidentiality of electronic data transmission and the security of your personal information during transmission through SM4 encryption technology, formulating encryption strategies to encrypt user sensitive information;

(c) We have deployed access control mechanisms, established a data classification and grading system, and adopted hard-coded restrictions to limit user access, ensuring that only authorized personnel can access personal information.

4.2.2 We will build a complete data security protection system for the services of this product, including:

(a) Classify and manage data assets, and construct information systems according to the overall security protection strategy of "partitioning, grading, and domain separation";

(b) Established internal network security work and data security management systems and operating procedures. To ensure data security, we implement security management measures such as encrypted storage, access permission control, log auditing, and data backup management. We have strict process requirements for collection, use, transmission, or anonymization, which can effectively prevent personal information from being illegally used;

(c) Implement permission management for employees, establish specialized positions responsible for user permission management, as well as the construction, operation, and maintenance of authorization and access control systems;

(d) Implement access review for information systems, and adopt measures such as intrusion prevention and virus protection, use professional vulnerability scanning and assessment technologies to conduct regular security assessments of network devices, and repair systems based on the results;

(e) Regularly assess the security skills of personnel in positions involving information security management, inspection, and execution, as well as assess the security awareness of personnel in various positions.

4.2.3 You understand that the Internet environment and electronic data transmission methods are not 100% secure, and we cannot guarantee that these measures will be able to completely prevent any attempts to access, use or disclose your information without authorization.

>4.2.4 We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We will only retain your personal information for the period necessary to achieve the purposes described in this policy, unless there are reasonable and necessary grounds or legal permission.

4.3 Security Incident Handling and Notification

4.3.1 In the unfortunate event of an information security incident (such as personal information leakage, damage, loss, etc.), we will promptly inform you of the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, remedial measures for you, etc., in accordance with the requirements of laws and regulations.

4.3.2 We will promptly notify you of the relevant circumstances of the incident through in-site notifications, email and other methods. When it is difficult to inform the data subjects individually, we will adopt reasonable and effective methods to issue announcements.

4.3.3 Please understand that according to the provisions of laws and regulations, if the measures we have taken can effectively prevent harm caused by information leakage, tampering, or loss, unless regulatory authorities require us to notify you, we may choose not to notify you of the personal information security incident.

5. Your rights

In accordance with the common practices of relevant Chinese laws, regulations and standards, we will endeavor to protect your rights in our personal information processing activities, including but not limited to:

5.1 Access, copy, and correct your personal information

5.1.1 You can access, copy and correct your name, password, and avatar through the "Taiyi IoT Platform" website's "Personal Information" section.

5.1.3 You can access, copy and correct your avatar and nickname through the "Taiyi IoT Platform" mini-program's "My" section.

5.2 Delete your personal information

5.2.1 You can contact us through the contact information described in this policy to delete your personal information that you actively submitted after registration.

5.2.2 In the following circumstances, if we have not actively deleted your personal information, you can submit a request to delete personal information to us through the contact information described in this policy:

(a) If we collect or use your personal information in violation of laws and regulations;

(b) If our processing of personal information violates our agreement with you;

(d) Other circumstances prescribed by laws and administrative regulations.

5.2.3 We will respond within 15 business days after receiving your application to delete personal information.

5.2.4 If the retention period prescribed by laws and administrative regulations has not expired, or if it is technically difficult to delete personal information, we will cease processing except for storage and taking necessary security protection measures.

5.3 Account cancellation

5.3.1 If you need to cancel your user account, you can contact us through the contact information described in this policy to proceed with account cancellation.

5.3.2 After account cancellation, we will cease providing services to you and delete your personal information upon your request, except as otherwise provided by laws and regulations.

5.3.3 You should understand and be aware that Taiyi accounts are managed uniformly. Your account is directly related to the personal information stored at login ports across all websites, applications, and mini-programs under Taiyi, and your account cannot be recovered after cancellation.

5.4 Responding to your above requests

5.4.1 We will try our best to respond to your requests within 15 business days. If you are not satisfied with our response, you can also file a complaint with us through the contact information described in this policy.

5.4.2 In the following circumstances, as required by laws and regulations, we will be unable to respond to your requests:

(a) Related to the fulfillment of obligations prescribed by laws and regulations by personal information processors;

(b) Directly related to national security and defense security;

(d) Directly related to criminal investigation, prosecution, trial, and judgment enforcement;

(e) The personal information processor has sufficient evidence that the personal information subject has subjective malice or abuses rights;

(f) Maintaining the major legitimate rights and interests of personal information subjects or other individuals' lives and property, but it is difficult to obtain consent from the individual;

(g) Responding to your request will cause serious damage to the legitimate rights and interests of personal information subjects or other individuals and organizations;

(h) Involves trade secrets.

6. How we handle minors' personal information

6.1 Taiyi places great importance on protecting minors' information. Please be aware that our websites, products and services are only directed to adults with full civil capacity.

6.2 If we discover that we have collected personal information of minors under the age of 18 without parental or guardian authorization, we will take reasonable measures to delete it as soon as possible. If you discover that we have collected personal information of minors under your guardianship without your consent, you can contact us through the contact information described in this policy, and we will delete such information.

7. Updates to this policy

We reserve the right to update or modify this policy from time to time. If our privacy policy changes, we will promptly update the latest version of the privacy policy on the homepage of this product. If we make significant changes to the privacy policy, we may also send change notifications to you through different channels. If you do not agree with the revised content that has taken effect, you can notify us through the contact information in this policy. If you continue to use this product, it means you have agreed to accept the revised policy content.

8. Contact us

8.1 If you wish to exercise your data subject rights, or have any questions, complaints, or suggestions regarding this policy or any of the above content, please contact us through the following methods:

Company Name: Shanghai Taiyi Testing Technology Co., Ltd.

Registered Address:

Contact Information:

Contact Address:

You can also contact us by calling our publicly disclosed contact number 400-620-6818.

8.2 In general, we will verify and respond to your inquiry within 15 business days after receiving your contact information.

8.3 We may reject requests for information that is not directly associated with your identity, groundless repetitive information, or requests that require excessive technical means (such as developing new systems or fundamentally changing current practices), pose risks to the legitimate rights and interests of others, or are impractical.

9. 其他

9.1 There may be multiple language versions of this policy. In the event of inconsistencies or conflicts between the terms of the various language versions, the Simplified Chinese version of this Privacy Policy shall prevail.

9.2 The headings in this policy are for convenience and reference only and do not affect the meaning or interpretation of any provision of this policy.

9.3 名词解释

9.3.1 Personal Information:

Refers to various information recorded electronically or by other means relating to an identified or identifiable natural person, such as name, personal telephone number, citizen identity number, etc.

9.3.2 Sensitive Personal Information:

Refers to personal information that, once leaked or illegally used, can easily cause harm to the dignity of a natural person or endanger the personal or property safety of a natural person, including biometric identification, religious beliefs, medical health, financial accounts, and personal information of minors under the age of fourteen.

9.3.3 Personal Information Processor:

Refers to organizations and individuals who independently decide the purpose and method of processing in personal information processing activities.

9.3.4 Processing:

Includes collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information.

9.3.5 Collection:

Refers to obtaining control of personal information and being able to independently decide the purpose and method of processing personal information, including "automatic collection" methods whereby personal information subjects actively provide information to us, or through our interaction with personal information subjects or recording the behaviors of personal information subjects, as well as "indirect acquisition" methods whereby we receive other personal information and/or collect publicly available information.

9.3.6 Use:

Refers to our processing of data to achieve data storage, access and display, aggregation and integration, statistical analysis and other methods of use and utilization.

9.3.7 Storage:

Refers to the act of recording personal information in electronic or non-electronic form on media that we can access and retrieve.

9.3.8 Providing to Third Parties:

Refers to activities whereby personal information processors provide personal information to other personal information processors, and the recipient processes personal information within the category of personal information, processing purposes and processing methods informed to the personal information subject.

9.3.9 Entrusted Processing:

Refers to activities whereby personal information processors entrust trustees to process personal information and supervise the personal information processing activities of the trustees. Trustees may only process personal information within the scope of the entrustment. Without the consent of the personal information processor, trustees may not re-entrust others to process personal information.

9.3.10 Sharing

Refers to the process whereby personal information processors provide personal information to other processors, and both parties have independent control over the personal information.

9.3.11 Anonymization:

Refers to the process whereby personal information is processed such that specific natural persons cannot be identified and cannot be restored. Information processed through anonymization does not constitute personal information.

9.3.12 Affiliates:

Refers to companies and institutions that currently or in the future control Shanghai Taiyi Testing Technology Co., Ltd., are controlled by Shanghai Taiyi Testing Technology Co., Ltd., or are under common control with Shanghai Taiyi Testing Technology Co., Ltd. Control refers to directly or indirectly having the ability to influence the management/operation of the controlled entity through ownership, voting shares, contracts, actual operational associations, or other legally recognized means.