JOLECT

Privacy Policy

Issued: August 15, 2022
Updated:

Welcome to use our products and services!

JOLECT (hereinafter referred to as the "Company"/"We") is a service-first SaaS company dedicated to building multilingual AI customer service operations software designed to improve customer services for e-commerce platforms, and is the provider of the Software Product and Services. The Company is aware of the importance of personal data and privacy to its users (i.e., "you"), and has therefore formulated this Privacy Policy (the "Policy"). The aim of this Policy is to set forth the rules governing the collection, use, sharing, management and protection of your data when you use the Software Product and enjoy other Internet software products and services provided by the Company (hereinafter collectively referred to as the "Services"). We hereby specifically remind you that you are expected to read this document carefully, and thoroughly understand the relevant contents of the Policy (especially the text highlighted in bold and underlined) before you use the Services. You may only use the Services after confirming your full understanding and agreement to the Policy.

You are deemed to have agreed to this Policy when you agree to register. This Policy is an integral part of the Company's Service Agreement.

Scope of Application

This Policy applies to:

This Policy applies to all products and services provided to you by the Company.

Collection and Use of Data

Personal Data as defined in this Policy means the personal data that the Company, as the data processor, processes upon your lawful authorization, where you act as the data controller, including: (1) your Personal Data; and (2) Personal Data involved in the performance of the Service Agreement.

In order to provide you with better services, the Company collects and uses the data set out below for the following purposes:

[User Registration and Login]: You can register as a user of the Company using your mobile phone number and email address. When you register and log in to use the Service, the Company will collect: (a) business information (company name, business registration number, registered address); (b) account administrator information (user name, mobile phone number, email address and other information), and (c) technical information (device attributes, IP address, browser type). The Company processes such data as the data controller for account management, authentication, billing and service administration purposes. You may browse the product pages anonymously, but you are required to register as a user when you purchase the Company's Services.

[Purchase data]:In order to complete such basic functions as processing your payment and refund requests, and when keeping you informed of purchase order status, we will collect your identity and contact information; this includes your name, and phone number, as well as financial information or payment account information. We will also collect location data at an IP address-based level to tailor your experience in terms of displaying the appropriate local website, language, or user experience.

[Issuance of Invoices]: When you apply to the Company to have an invoice issued, the Company will collect your name and other registration information for the purpose of verifying your payment voucher and invoicing information. You shall be responsible for ensuring the authenticity, accuracy and completeness of the invoice information submitted.

[Transaction and After-sales Service]: In order to provide you with transaction and after-sales services, and in order to safeguard and optimize service functions and content, the Company will collect and use the order information (including but not limited to logistics information) of your store, the customer service and after-sales service information necessary for fulfilling the functions of the Software, as well as any product evaluations and other information pertaining to the operation of the store.

In order to contact you more easily, help you solve any inquiries, complaints or suggestions in a timely manner, or to record solutions and results of related issues raised, the Company will retain communication and call records, as well as any relevant content pertaining to you and the Company (including account information, order information, other information provided by you to prove relevant facts, or the contact information provided by you).

[Service Security Guarantee]: In order to ensure the safety and legality of your use of the Services, and to more accurately comply with online management laws and regulations, the Company may use your account information, transaction information, order information and other information to prevent the violation of certain laws and regulations, or the infringement of legal rights and interests of other parties.

You understand and agree that: if the information you provide contains the personal data of third parties, you shall ensure that you have obtained the required legal authorization before providing this information to the Company, and that you shall deal with any disputes arising from the use of such personal data independently.

In order to provide you with higher-quality, satisfactory and personalized services, and to improve your overall user experience, the Company may apply for certain permissions from you in the following scenarios, where your information may be collected and used. If you refuse to provide such information or grant the corresponding permissions, you will still be able to obtain the basic services provided by the Company, but you may not be able to obtain the higher-quality experience brought about by the additional information.

[Camera Lens (Camera) and Photo Album (Picture Library) Information]: If you use your camera to take photos, or upload photos or pictures in your photo albums to ask for positive comments, or if you post comments through the Services, we will apply for permission to access your camera lens (camera) or photo album (picture library) and to store the picture information you have uploaded.

[Microphone (Voice) Information]: In order to better use the Company's Services, when you use your microphone to communicate with the Company or other parties, the Company may apply for permission to access your microphone (voice) and collect your voice information to identify your requirements.

[Calendar Information]: In order to help you keep track of your benefits, or to remind you to claim your benefits, the Company may apply for permission to access your calendar and store your calendar information.

[Storage Permission Information]: In order to provide you with additional functions such as information distribution or local crash log information, the Company may apply for permission to read/write to your device storage, and will read or write pictures, files, crash log information and other necessary information on the storage space of your device.

Exceptions to Consent

In the following circumstances, the Company shall not need to obtain your authorization or consent to collect or use your personal data:

The personal data collected has been voluntarily disclosed by you to the public;

Necessary for signing and performing contracts at your request;

Collecting personal data from legally disclosed information, such as legal news reports, government information disclosure and other channels;

Necessary for maintaining the safe and stable operation of the product or Services provided, such as discovering and disposing of obstacles to the product or service;

Providing such information as required by judicial or administrative authorities based on legal procedures;

The usage, sharing or transfer of the following processed personal data: personal data that cannot be re-identified by the data receivers and cannot be recovered after the Company has taken technical and other necessary measures; or where the collected personal data being de-identified by the Company is used to improve the Company's service content and layout, to provide product or service support for business decisions, or to improve the Company's products and services;

If the Company obtains your data from a third party, the Company will request that third party in writing to state the source of said personal data, and whether the third party has obtained your authorization or consent for the storage, processing and provision of your personal data to the Company (if the purpose of the Company to collect and use your personal data exceeds the scope of authorization obtained by the third party, then the Company will request the third party to obtain your consent);

Other circumstances stipulated by relevant laws and regulations.

Children's Privacy

The Software Product and Services are intended solely for business and commercial use and are not directed to, or intended for use by, individuals under the age of 18 (or such higher age as may be prescribed by the laws of your jurisdiction). The Company does not knowingly collect personal data from children or minors.

If you are a parent or guardian and believe that a minor has provided personal data to us, please contact us at [contact@jolect.com]. If we learn that we have collected personal data from a minor without appropriate consent, we will delete such data promptly in accordance with applicable law.

Use of Cookies

You understand and agree that, in order to make your user experience easier, when you visit the Company or use the Company's Services, the Company may use relevant technology to send one or more Cookies or anonymous identifiers to your device in order to collect and store information when you visit or use the Company's Services. The Company undertakes not to use Cookies for any purposes other than those stated in this Policy. The Company primarily uses Cookies and similar technology for the purpose of fulfilling the following functions or services:

Ensuring the safe and efficient operation of products and services: The Company may set Cookies or anonymous identifiers that authenticate and ensure your security, so that the Company can verify that you have logged in safely to the Services, or identify whether you have been a victim of theft, fraud or other illegal activities. These technologies also help the Company improve the efficiency of the Services, as well as login and response times.

Providing you with an easier access experience: Using such technologies can help you avoid repeatedly filling in personal data and entering search terms.

Clearing Cookies: Most browsers provide the user with the option of clearing the browser cache data. You can clear the data in the settings function of your browser. If you do so, you may not be able to use the Services or corresponding functions provided by the Company that rely on Cookies.

Public Disclosure of Data

The Company attaches great importance to the protection of the personal data. Without your consent, the Company will not disclose such personal data to any unrelated third party, nor will it make such information public, except for under the following circumstances:

With your explicit consent or based on your own explicit choice;

In the event that the personal data has to be provided in accordance with the requirements of laws, regulations, mandatory administrative enforcement, or judicial requirements, the Company may publicly disclose the personal data in accordance with the type of personal data required and the manner of disclosure;

Other circumstances that may be disclosed in accordance with relevant laws and regulations or the agreements between the parties.

Data Sharing

The Company shall not share the personal data with any individuals, companies or organizations other than the Company, except in the following circumstances:

In accordance with this Policy or with your explicit prior consent or authorization;

When necessary, in accordance with applicable laws, regulations, requirements of legal procedures, or mandatory administrative and judicial requirements;

To the extent permitted by laws and regulations, in order to protect the Company, its affiliates or partners, you or other users of the Company, and the interests, property or safety of the public, from damage;

In order to ensure the core functions of the Company's products and Services or provide you with said Services;

To deal with disputes or controversies between you and other parties at your request;

In accordance with the relevant agreements or other legal documents signed by you;

For the purpose of academic research;

In cases where you have acted in breach of this Policy, and the Company is providing information to a third party for the purpose of rights protection.

You fully understand and agree that if the Company needs to share your personal data with any affiliate of the Company in order to provide you with better Services, then the Company will obtain your authorization and consent. The Company does not and shall not permit any affiliate of the Company to use the personal data we share with you for any other purposes than those stated in this Policy, and we shall use reasonable technical measures (e.g., encrypted transmission) to protect the personal data when sharing it with an affiliate. If the Company shares sensitive personal data, or any affiliate of the Company changes the use or processing purpose of the personal data, your authorization and consent will be asked for again.

Data Security

The Company employs industry-standard security measures to protect the personal data you have provided, and to prevent the data becoming subject to any unauthorized access, public disclosure, use, modification, damage or loss. The Company will take all reasonable and practical measures to protect your personal data.

However, you fully understand and agree that, due to the limitations of technology and the possibility of various malicious attacks, in the Internet industry, even if we do our best to strengthen security measures, it is impossible to guarantee that the data is 100% safe all the time.

After the occurrence of any unfortunate personal data security incident, the Company shall, in accordance with the requirements of relevant laws and regulations, inform you of the basic information and possible impact of said security incident, the disposal measures taken or to be taken, and any suggestions on risk prevention and reduction to be taken on your own initiative. We will inform you of the incident by E-mail, letter, telephone or push notice. If it is difficult to inform the affected parties one by one, we will use reasonable and effective ways to make a public announcement. In the meantime, the Company will also report the handling of personal data security incidents in accordance with the relevant requirements of the regulatory authorities.

Place and Period of Storage of Data

Legal Compliance

Personal data collected, stored, used, and/or processed by the Company, as described in this Policy, is collected, stored, used, and/or processed in accordance with:

When you use or access the Software Product or Services, you expressly consent to the collection, use, storage, and processing of the personal data by the Company for the purposes described in this Policy.

Hosting Data Center

The Company hosts service data primarily in Tencent Cloud and AWS data centers that have been certified as ISO 27001, PCI DSS Service Provider, and/or SOC2 compliant. More details on Tencent Cloud and AWS controls can be found at:

https://www.tencentcloud.com/services/compliance;

https://aws.amazon.com/security.

with the following exceptions:

Where otherwise explicitly stipulated by relevant laws and regulations;

With your explicit authorization;

Resulting from your personal and voluntary conduct, such as cross-border transactions via the Internet.

Protection and Retention

In response to the above circumstances, the Company will protect your personal data in accordance with this Policy and all relevant laws and regulations.

The Company will retain the personal data only for the period necessary to achieve the purposes stated in this Policy, unless the retention period is required to be extended based on your own needs, or as permitted or required by relevant laws and regulations. When you withdraw your consent, delete personal data or cancel your account, we will delete or anonymize the personal data as required by relevant laws and regulations.

Rights Pertaining to Personal Data

Changing the Scope of Your Authorization or Withdrawing Your Authorization

You can check the status of each authorization on the client-side of the Company. When you open any authorization, you agree that you have authorized the Company to collect and use such information for its own purposes. Once you close any authorization, you will withdraw that authorization, and the Company will not continue to collect or use any related personal data, and accordingly, shall not achieve the purposes corresponding to the authorization. You may withdraw all authorization to collect the personal data by cancelling your account. However, your decision to close an authorization will not affect any earlier collection, processing and use of the personal data that was based on your previous authorization.

Please understand that each business function requires certain basic personal data to be completed. If you withdraw your consent or authorization, the Company will not be able to continue to provide you with the services for which the consent or authorization has been withdrawn, and will no longer process the personal data. However, your decision to withdraw your consent or authorization will not affect any previous collection, processing or use of the personal data based on your earlier authorization.

Cancelling Account

For instructions on how to cancel your account, and the procedures required, you may enter "Cancel" in the [Contact Us] tab on the client-side of the Company. After you successfully apply to cancel your account with the Company, the Company will complete a review within [7] business days of receiving your application. After the review, the Company will delete or anonymize your personal data in accordance with this Policy, unless otherwise stipulated by relevant laws and regulations.

Other Requests Regarding personal data

Subject to the limitations set out in the data protection laws applicable, you have certain rights in relation to your personal data. For example, you have the right to request access to your personal data, and to rectification and data portability. You may also have the right to review automated decision making. You can contact us via the method specified below if you want to exercise these rights, or if you wish to make a complaint regarding your personal data. The Company will complete a review within [7] business days of receiving your application. After this review has been completed, the Company will respond to your requests regarding personal data in accordance with this Policy, unless otherwise stipulated by relevant laws and regulations.

Data Subject Rights Assistance

If the Company receives a request from a data subject to exercise rights under applicable data protection laws, the Company will respond in accordance with such laws and will provide you with reasonable assistance.

Cross-border Data Transfer

Storage and Transfer of the Personal Data. When you access or use our Services, the personal data will be stored and transferred in accordance with the platform's rules and the applicable laws and regulations of the country or region where the platform is located. This country may have data protection laws that are different in certain respects, or that provide less protection than the laws of the jurisdiction in which you reside. If you do not want your information to be transferred or processed in the manner described above, you should immediately stop accessing or using the Services.

Amendments to this Privacy Policy

You understand and agree that the Company has the right to amend, supplement or update this Policy from time to time, and to publish such amendments, supplements or updates related to the Services. If you choose to continue to use our Services, you are required to agree once more to the amended Policy. Please pay attention to any amendments to this Policy. If you do not agree to the amended version, you shall immediately stop using the Services provided by the Company.

Contact Us

If you need to exercise your rights as described above, or if you have any questions, comments, suggestions or complaints about this Policy, or if you have other concerns for which the answers cannot be found here, you may choose one of the following methods to contact us:

E-mail Address: contact@jolect.com

Miscellaneous

Notification of Operation Cessation

If the Company terminates our Services or operations, the Company will notify you at least 30 days in advance, and delete or anonymize your personal data in accordance with this Policy after termination of the Services or operations.

If any provision or any part of any provision of this Policy is deemed to be invalid, illegal or unenforceable under any applicable law, then the validity of any other provision of this Policy or any other part of such provision shall not be affected.

This Policy is an enforceable supplement to the Service Agreement. If there is any inconsistency between the Service Agreement and this Policy on similar terms, this Privacy Policy shall prevail. Matters not covered herein shall be subject to the Service Agreement.