Privacy Policy

Introduction

Zhengzhou ORedact Information Technology Co., Ltd. (hereinafter referred to as "we", "the company" or "ORedact") provides image and video privacy identification and redaction services to enterprises and institutions; text and document redaction is offered after sample assessment.

We understand that the data you process may involve personal information, sensitive personal information, medical or business confidential data. Therefore, we regard privacy protection and data security as the core principles of product design and operation.

This privacy policy aims to explain how we collect, use, store, protect and process your information, as well as your relevant rights under the law.

By using our services, you acknowledge that you have read and agree to all the contents of this privacy policy.

1. Information We Collect

1.1 Types of Information

We may collect the following categories of information:

1.2 Methods of Information Collection

• Information you actively provide (account registration, data upload, request submission, etc.)
• Information automatically collected by the system (Cookies, log files, etc.)
• Information provided by legitimate third-party services (such as payment, identity verification or security services)

2. Purpose of Information Use and Processing Principles

2.1 Purpose of Use

We only use your information within the following scope:

• Provide, maintain and optimize privacy redaction services
• Execute data processing tasks you explicitly request
• Account management, technical support and service notifications
• Security monitoring, risk control and abuse prevention
• Compliance with laws, regulations and regulatory requirements

2.2 Data Processing Principles

We strictly follow the following principles:

• Principle of minimum necessity: Only process data necessary to achieve service purposes
• Principle of purpose limitation: Do not exceed the scope of explicitly stated purposes
• Principle of data isolation: Different customer data are isolated from each other
• Principle of customer control: Data is customer-led and can be deleted at any time
• Principle of no training: Not used for AI or algorithm model training

3. Data Security and Protection Measures

3.1 Technical and Management Measures

We adopt security measures that meet industry standards, including but not limited to:

• TLS / SSL encrypted transmission
• Data encryption at rest (if applicable)
• Strict access control and permission levels
• Operation audit and security logs
• Regular vulnerability scanning and security assessments
• Automated data backup and disaster recovery mechanisms

3.2 Data Storage and Hosting

• Data is stored in data centers that meet international security standards such as ISO 27001
• Support regional deployment (such as China, Asia-Pacific, Europe and America)
• Regularly clean up data that is no longer needed

4. Data Sharing and Third Parties

We will not sell, rent or otherwise trade your personal information.

We may share necessary information only under the following circumstances:

• With your explicit authorization
• Necessary for service fulfillment (such as payment, cloud infrastructure)
• Required by laws, regulations or regulatory authorities
• To protect the legitimate rights and interests of users, the public or the company

4.1 Third-Party Service Providers

We may use reviewed third-party service providers to assist in providing services. They may only process data within the necessary scope and must comply with strict confidentiality and security obligations.

5. Your Rights

According to applicable laws (including the Personal Information Protection Law and GDPR), you enjoy the following rights:

• Right of access
• Right of rectification
• Right of erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent

If you wish to exercise the above rights, please contact us through the contact methods listed in this policy.

6. Cookies and Similar Technologies

We use Cookies and similar technologies to ensure the normal operation of the website and improve user experience.

6.1 Types of Cookies

• Essential Cookies: Ensure basic website functions
• Functional Cookies: Save preference settings
• Analytical Cookies: Used for anonymous statistical analysis
• Marketing Cookies: Used to provide relevant content (if applicable)

You can manage Cookie preferences through browser settings, but disabling some Cookies may affect website functionality.

7. Data Retention Period

Retention and deletion of files uploaded to Damaya (damaya.cn) and their results are governed by the Damaya privacy policy: damaya.cn/privacy

8. Data Location and Cross-border Transfers

Our services process and store data within mainland China. If a cross-border transfer is involved, we will:

• Carry out the personal information export assessment or other procedures required by law
• Inform you of the recipient, purpose and method of processing, and obtain the necessary consent
• Apply appropriate technical and organizational safeguards

9. Policy Updates

We may update this privacy policy from time to time.

If there are significant changes, we will notify you through website announcements or email.

Continued use of our services indicates your acceptance of the updated privacy policy.

10. Contact Us

If you have any questions about this privacy policy or matters related to personal information protection,

or wish to exercise relevant rights under applicable laws,

please contact us through the following methods:

We will reply within 30 days after receiving your request.