隐私政策

• Identity Information: Name, nationality, ID card/passport information, contact details, etc.
• Contract Data: Contract text, approval processes, signing trails, timestamps, blockchain hash values.
• Account Data: Account status, login methods, binding methods, usage logs.
• System Information: Device ID, operating system, network type, security policy information.
• Behavioral Data: Feature usage, click behavior, operation paths, usage preferences.
• Location Information based on authorization: Used for risk control or legal compliance purposes.
• Third-party Authentication Data (e.g., facial recognition results, payment verification results).
• Biometric Data: Including what is required for user real-name authentication
  - Face Image
  - Face Embedding
  We do not collect unnecessary information such as expressions, emotions, eye movements, or health data.

• To provide core features such as contract creation, signing, verification, and downloading.
• To meet the requirements of various national laws and regulations regarding electronic signatures, identity verification, and data preservation.
• To ensure transaction security and identify risky transactions through risk control analysis.
• To provide customer service support and dispute resolution.
• To optimize products, improve service quality, and enhance technical performance based on statistical data.
• To send you service notifications, product updates, activity change reminders, and other information.
• Facial recognition data is specifically used for:
  • Real-name authentication (KYC) to verify user identity;
  • Identity confirmation during contract signing actions;
  • Preventing malicious registration, account theft, identity forgery, and other fraudulent behaviors;
  The data will not be used for non-essential purposes such as AI model training, marketing, advertising, or surveillance.

• Share necessary contract information with the contract signing parties.
• Provide materials to judicial authorities and regulatory bodies (in compliance with legal requirements).
• Share necessary data with identity verification agencies and blockchain preservation nodes.
• Provide necessary information to technical service partners (SMS, push notifications, AI verification, etc.).
• We only share the minimum scope of information required to provide the service.
• Facial recognition data is only shared with
  certified facial recognition service providers for comparison and processing during the real-name authentication stage.
  We will not sell, rent, or provide facial data to unrelated third parties.

If your information is transferred to overseas servers or partners, we will comply with local legal requirements and adopt measures such as encryption, de-identification, and access control to ensure data security.

If information transfer is required, we will obtain your authorization in advance.

• Sensitive data is stored encrypted using methods such as AES and RSA.
• Contract preservation utilizes blockchain technology to ensure it is tamper-proof.
• Hierarchical permission management and multi-factor authentication are adopted to ensure data security.
• Stored in accordance with the law for no less than 5 years (or as otherwise required by law).
• In the event of a data security incident, we will notify you and relevant authorities according to law.
• Retention Period for Facial Recognition Data:
  - Face Image: Deleted within 30 days after being used for comparison
  - Face Embedding: Retained for a maximum of 1 year according to compliance requirements
  - If you delete your account or request deletion, it will be completely cleared within 7 days

• Inquire, correct, or delete your personal information.
• Withdraw authorization or turn off partial permissions.
• Apply to terminate your account.
• Apply to export or obtain a copy of your data.
• Exercise the right to data portability (where applicable by law).
• Refuse the use of data for marketing recommendations.
• You may request the deletion of your facial recognition data at any time, and we will complete this and provide confirmation results within 7 days.

The Platform is primarily intended for adults. If you are a minor, you must use the service under the guidance of your guardian and obtain their authorization.

We may integrate the following types of third-party SDKs:

• Identity Authentication SDKs (e.g., public security, facial recognition services).
• Payment SDKs (Alipay, WeChat Pay, Stripe, etc.).
• Message Push SDKs (Firebase, APNs).
• Data Analytics SDKs (e.g., Firebase Analytics).

Some Identity Authentication SDKs may process your face images or comparison results solely for identity verification purposes and will not use them for any other reasons.

We may adjust this policy due to business changes or legal updates, and we will notify you via announcements or message notifications. The new privacy policy will take effect from the date of release.

If you have any questions regarding this policy, you can contact us via the following methods:

• 📧 Email: support@abroadsign.com
• 📞 Phone: +86 17336937310
• 🌐 Official Website: abroadsign.com

• We will not sell your personal information.
• Your data will not be disclosed without authorization.
• If you do not agree to this policy, please immediately stop using the services of the Platform.