Rules and compliance

POP Trend Privacy Policy

Yishang Chuangzhan (Shanghai) Technology Co., Ltd. (“we”) understands how important your personal information is. This policy explains how we collect, use, store, share, and protect your personal information while you use the POP Trend platform (the “Platform”), and the rights you have.

Introduction

Yishang Chuangzhan (Shanghai) Technology Co., Ltd. (“we”) understands how important your personal information is. This policy explains how we collect, use, store, share, and protect your personal information while you use the POP Trend platform (the “Platform”), and the rights you have.

Please read this policy carefully before you register or use the Platform, especially the clauses shown in bold. Checking “I have read and agree” means you fully understand and agree to this policy. This policy applies together with the POP Trend Service Agreement and specifically covers the processing of personal information.

1. How we collect and use your personal information

We collect only the personal information necessary to achieve the purposes listed in this policy. The information collected in each scenario is as follows:

1.1 Registration and login

Users in mainland China: mobile number and SMS verification code. Users outside mainland China: email address and verification information. This information is required to create an account and verify identity. You cannot register if you refuse to provide it.

You may choose to complete: name or nickname, avatar, company or team name, and job title. Not providing this information does not affect basic functions.

1.2 Business accounts and organization collaboration

When you create or join an organization, we process: the organization name, your role in the organization (administrator or member), seat status, and the invitation relationship (account identifiers of the inviter and invitee).

An organization administrator can view member information within this scope: the member list (account identifier, role, and status) and the most recent login time. When an administrator invites, removes, disables, or forces a member offline, we record an operation log.

1.3 Security and abuse prevention

To enforce concurrent-account limits, detect abnormal logins, and protect accounts and content, we collect device information (device model, operating system, browser type, and device identifier), IP address, login time, session status, and a rough location based on IP.

If the same account switches devices frequently in a short time, or the login location changes significantly, we may require a second check such as SMS verification. This processing is necessary to perform the POP Trend Service Agreement and to keep the Platform secure.

1.4 Browsing and usage records

While you use the Platform, we record browsing, search, collection, and note activity, and download records (content, time, and account and organization identifiers). Organization, account, and time marks embedded in downloaded files are used for content protection and leak tracing.

Usage records are used to provide collections, notes, and history; for security audits and contract reconciliation; and, where authorized, to improve content recommendations.

1.5 Search by image (images you upload)

When you use search by image, we collect the image you choose to upload, and use it only to generate search features and return results.

Do not upload images that contain sensitive personal information such as another person’s face. If an image contains personal information, you must have the required authorization. Unless you give separate explicit consent, we do not use uploaded images to train models for other customers, and we do not show them to other users. Retention period for uploaded images: [Pending technical confirmation: delete immediately after processing / retain for N days].

1.6 Orders, invoices, and customer service

Organization purchases involve contract and order information, invoice title, taxpayer identification number, and invoicing contact details.

When you contact us at 4008-210-500 or through another channel, we process the contact details and the content of the communication [whether calls are recorded is pending confirmation] in order to respond to your request.

1.7 Marketing contact (separate consent)

Only after you give separate consent will we send product and event information by phone, SMS, WeChat, or email. You may withdraw consent at any time through the SMS unsubscribe instructions, customer service, or account settings. Withdrawal does not affect service notices such as expiry reminders and security notices.

2. Cookies and similar technologies

To keep you signed in, remember preferences, and protect security, we use cookies and similar technologies. You can manage or delete cookies in your browser, but you may then be unable to stay signed in. [Whether a third-party analytics SDK or code is used is pending technical confirmation. If used, its name, collected fields, and purpose must be listed here.]

3. How we entrust processing and share your personal information

3.1 Where necessary to provide functions, we may entrust third-party providers to process personal information, including SMS providers (verification codes and notices) and cloud and storage providers [the specific vendor list is pending technical confirmation]. We sign agreements requiring them to process information only within the entrusted scope.

3.2 Except in the following cases, we do not share your personal information with other companies, organizations, or individuals: (a) we have your separate consent; (b) laws or mandatory requirements of judicial or administrative authorities require it; (c) if the Company merges, splits, or restructures, we will tell you who the successor is, and the successor will continue to perform this policy.

3.3 We do not publicly disclose your personal information unless laws and regulations provide otherwise.

3.4 We do not sell your personal information to any third party.

4. How we store and protect your personal information

4.1 Place of storage: personal information collected and generated within the People’s Republic of China is stored in China. [Whether data of users outside China is transferred back for storage in China, and whether that is a cross-border transfer, is pending confirmation by technical and legal teams. If there is a cross-border transfer, the required duties must be performed and separate consent obtained.]

4.2 Retention period: we keep personal information only for as long as needed for the purposes in this policy. Account information is kept until the account is closed. Login and download logs are kept for [N, pending confirmation; recommended to be no shorter than the statutory network-log period of 6 months]. Contract and invoice information is kept as tax and finance laws require. After the period ends, we delete or anonymize the information.

4.3 Safeguards: we use encrypted transmission, access control, permission levels, log audits, and other technical and organizational measures. If a personal-information security incident occurs, we will inform you and report to the regulator as required by law.

5. Your rights

5.1 Access and copy: you can access and copy your account information and usage records in account settings, or ask customer service.

5.2 Correction and completion: if you find personal information is wrong, you can correct it yourself or ask us to correct it.

5.3 Deletion: you may request deletion when the purpose has been achieved, you withdraw consent, or we have processed information unlawfully or in breach of contract, and in other cases provided by law.

5.4 Withdrawal of consent: for processing based on consent, such as marketing contact, you may withdraw consent at any time. Withdrawal does not affect processing already carried out.

5.5 Account closure: you may close your account in the account center or by calling customer service. After closure we delete or anonymize your personal information, except where laws require retention. Closing your personal account does not affect your organization’s subscription.

5.6 Response time: we will respond within 15 working days after receiving your request. If you are not satisfied, you may complain through the contact details in section 7, or report to the regulator as the law allows.

5.7 Notice to organization members: while you belong to an organization, an administrator can view your information within the scope in section 1.2. After you leave, the administrator can no longer view your account activity.

6. Protection of minors

The Platform is a professional service for businesses and industry practitioners and is not directed at minors under 18. If we find that we have collected a minor’s personal information without a guardian’s consent, we will delete it as soon as possible.

7. Updates to this policy and how to contact us

7.1 We may update this policy from time to time. An updated policy will be posted on the Platform for at least 7 days. For a material change to the purpose, method, or scope of processing, we will notify you by in-site message, SMS, or email, and will seek your consent again when necessary.

7.2 If you have any question, comment, or complaint about this policy or the processing of personal information, contact us at customer service 4008-210-500.