INTRODUCTION

Welcome to Ailit, a SaaS-based cloud purchase-sales-inventory product (the "Product"). Your Personal Information matters to Ailit Technology Limited and/or its Affiliates (collectively, "we," "us," or "our"). We provide this Privacy Policy (this “Policy”) to explain how we collect, use, disclose, process and protect your Personal Information when you use our Products and/or Services.

If you are a member of an Enterprise User using the Products and/or Services on behalf of and for the purpose of the Enterprise User, please note that the Enterprise User controls all the Personal Information collected, use, disclose and process for its own enterprise management purposes, and we are acting as a processor on behalf of the Enterprise User. For more information, you can refer to the Data Processing Agreement For Ailit Cloud Services entered into between the Enterprise User and us. Your rights as a data subject shall be subject to such Data Processing Agreement.

This Policy does not apply to products and/or services provided by third parties. If you are redirected to a third party while using our products and/or services, the third party's products and/or services shall be governed by its own privacy policy.

By accessing or using our Products and/or Services, by indicating your acceptance to this Privacy Policy by clicking on “I agree”, “I accept” or any other similar mechanism, or by providing your Personal Information to us, you acknowledge that you have read (or had the chance to read) and understood this Privacy Policy, and have agreed to and expressly consented to the collecting, processing, using and disclosing of your Personal Information by us as described in this Privacy Policy. If you do not agree with this Privacy Policy, you shall not use our Products and/ Services.

PART I: DEFINITIONS

Enterprise User: An individual or organization that registers, logs in to, and uses our Products and/or Services and obtains management authority, including but not limited to legal persons and entities, such as government agencies, partnerships, and individual businesses. An Enterprise User may create a work team through the Ailit platform and invite and authorize Individual Users to join its work team to be its end users.

Individual User: A natural person invited by an Enterprise User to join an enterprise work team and registered to use our Products and/or Services, as well as a natural person who independently registers a Ailit Cloud account and logs in to use our Products and/or Services.

Ailit Technology Limited: A company incorporated under the laws of Hongkong, China, with its registrered address at Unit 2101, 21/F, NEO Building, 123 Hoi Bun Road, Kwun Tong, Kowloon, Hongkong, China.

Affiliates: Refers to the Affiliates of Ailit Technology Limited, including Shenzhen Kingdee Wisdom Technology Co., Ltd.

Ailit Platform: The websites, mobile applications, and other channels (including any new forms arising from future technological developments) through which Ailit Technology Limited operates and provides you with products and/or services.

Products and/or Services: The various products and/or services provided by Ailit Technology Limited and/or its Affiliates through the Ailit Platform, including but not limited to the Ailit website (https://www.ailitsoft.com/en), mobile applications, and the services provided through such products.

Platform Rules: All service rules, announcements, process descriptions, usage instructions, and rule introductions for products and/or services that have been published on the Ailit Platform and that may be updated from time to time or newly published in the future.

Personal Information: refers to all kinds of data, information or opinion relates to an identified individual or to an individual who is reasonably identifiable (i) from such data, information or opinion, or (ii) from such data, information or opinion, and other information to which a party has or is likely to have access, regardless of (A) whether the data, information or opinion is true or not, and (B) whether the data, information or opinion is recorded in a material form or not.

Sensitive Personal Information: Sensitive personal information includes ID card numbers, personal biometric information, bank account numbers, communication records and content, property information, credit information, location tracks, accommodation information, health and physiological information, transaction information, and personal information of children under 14 years of age (inclusive). Sensitive personal information referred to in this Policy is marked in bold and with an asterisk (*).

Enterprise Information: Information generated by an enterprise, individual business, or other organization or group in the course of production and business activities, as well as information reflecting the status of an enterprise that is generated by Ailit Technology Limited and/or its Affiliates in the course of providing Products and/or Services to enterprises.

Unless otherwise agreed, the definitions used in this Policy shall have the same meaning as those defined in our Terms of Service.

PART II: PRIVACY POLICY

This Privacy Policy will help you understand the following:

1. How we collect your personal information
2. How We Use Cookies and Similar Technologies
3. How We Process Your Personal Information
4. How We Protect Your Personal Information
5. International Transfers
6. Your Rights & Choices
7. Children’s Privacy
8. Governing Law & Dispute Resolution
9. Changes to This Policy
10. How to Contact Us
11. Miscellaneous
12. Addendum for Users in Singapore, Malaysia, Thailand, Vietnam and Indonesia
13. Addendum for Users in China Mainland

Section 1: How We Collect Your Personal Information

We may collect your Personal Information only for specific, transparent, and legitimate purposes. We will collect and use Personal Information about you in the following situations:

1.1 User Services

1.1.1 Basic User Services

Individual Users: To register and create an Ailit Cloud account for personal use of the Products and/or Services, you must provide either: (i) your mobile phone number; or (ii) your email address and password*. You may choose either registration method based on your preference. We will send a verification code or verification email to verify the validity of your registration information. If you do not provide the above information, you will not be able to register or log in to the Products and/or Services.

If you only browse our website or product pages, or use trial features that do not require account registration, you are not required to create an Ailit Cloud account or provide the above information.

Enterprise Users: To become an Enterprise User and achieve digital transformation of your enterprise organization, you must provide your enterprise/organization name to create an Enterprise User account; otherwise, you will not be able to use our Products and/or Services in an enterprise capacity.

1.1.2 Additional User Services

Merchant and Store Information: To help you use store management and operational features within the Products and/or Services, you may be required to provide certain business-related information, including:merchant/store name; industry type; headquarters telephone number; headquarters address; store name; store address; store telephone number; and store type. Such information is used solely for enabling store management, transaction management, operational analytics, and related SaaS service functions.

We do not currently require mandatory enterprise certification, business license submission, or individual identity verification as a prerequisite for general use of the Products and/or Services, unless otherwise required by applicable laws, regulations, payment partners, or specific regulated service scenarios.

Profile Completion: You may access the "My" interface in the Ailit app, click the Settings function, and enter the Account and Security page to manage and complete your personal information. At that time, we will collect your personal name, mobile phone number, personal avatar* (which requires authorization to access the camera or photo album* to upload an avatar*), bound WeChat avatar*, nickname, and WeChat/Google account that you fill in or modify.

Third-Party Platform Accounts: If you log in to and use our Products and/or Services through a third-party platform, you will need to authorize us to obtain your third-party platform account, avatar, nickname, and mobile phone number information from that third-party platform. If you refuse to authorize, you will not be able to bind the third-party account.

1.2 Enterprise User Controlled Data

When you use the Products and/or Services for store operation, inventory management, transaction management, customer management, supplier management, employee collaboration, or other business-related purposes, we may collect and process certain business and operational data that you voluntarily submit, upload, generate, or manage through the Products and/or Services (“Enterprise User Controlled Data”). We will collect and process Enterprise User Controlled Data during the use of the following functions:

Store Management: When you use the "Store Management" function to maintain your store information, you may supplement your store contact phone number, and store address.

Customers: When you use the "Customers" function to add customers, you must provide the customer’s name, contact name, mobile phone number, telephone number, and delivery address* information. Contact information may be filled in directly by authorizing access to your device's address book. If you use this function, you must authorize us to access your device address book permission. You must ensure that you have obtained the consent of the customer and their contacts to authorize us to collect their personal information.

Shop assistant: When you use the "Employee Management" function to add users, you must provide the user's name, phone number or email address, and store * information. We will send verification information to the user through their mobile phone number or email address. Contact information  may be filled in directly by authorizing access to your device's address book. If you use this function, you must authorize us to access your device address book permission. You must ensure that you have obtained the consent of the users and their contacts to authorize us to collect their personal information.

Suppliers: When you use the "Suppliers" function to add, modify, or delete supplier information, you must fill in the supplier’s name, contact person, mobile phone number, telephone number, and business address. You must ensure that you have obtained the consent of the supplier and their contacts to authorize us to collect their personal information.

Products/Inventory: When you use the "Products" function to add, edit, or inventory products, you must authorize the camera function to scan and add products, and authorize access to the photo album* to add product images. If you refuse to authorize the camera or photo album*, you will not be able to use the scan-to-add or image upload functions.

Order Entry: When you use the "Order Entry" function to enter sales, purchase, other income, or other expense documents, you must authorize us to access your camera or photo album* to enable scanning to add products and uploading transaction document images.

Accounts: When you use the "Accounts" function to add, delete, or modify WeChat, bank card, Alipay, or cash account information, you must authorize us to collect your account name*, bank account number*, and balance* information.

Enterprise User Controlled Data may also include:

The position, department/store affiliation, office email, and work phone number assigned to you by your enterprise/organization, as well as information provided or generated by you or the enterprise to complete enterprise/organization management, including: sales associate name, mobile phone number, landline number, affiliated store, store address, personal WeChat ID, and personal avatar (which may be your actual facial photograph*).

Your order transaction information as an Enterprise User administrator/founder when using our Products and/or Services, purchasing third-party Products and/or Services, or selling products and services, in order to display and facilitate your management of orders.

Enterprise address book information, customer address book, supplier address book, and transaction information submitted and generated by the Enterprise User during use of our Products and/or Services (including employment information, contact phone numbers, QQ numbers, and personal identity information* of subordinate employees of the Enterprise User; personal names, contact phone numbers, WeChat IDs, contact address* information, and order information of end customers; and contact person names, contact phone numbers, and contact address* information of suppliers).

Enterprise User Controlled Data also includes data uploaded, entered, published, transmitted, stored, or otherwise generated by you using a dedicated account configured by the enterprise administrator for collaborative office work and enterprise/store management purposes. Such dedicated accounts are owned by the Enterprise User.

Other data over which the Individual User has expressly authorized the enterprise/organization to exercise control.

The above Enterprise User Controlled Data is managed and controlled by the Enterprise User. When providing such personal information, the Enterprise User must ensure that it has obtained the explicit prior consent of the relevant natural persons, and that the collection and processing is limited to the purposes of enterprise operation and management. The Enterprise User must fully inform such natural persons of the purposes, scope, and manner of collection of their personal information.

You agree and understand that the Enterprise User is the controller of the Enterprise User Controlled Data described above. We only process Enterprise User Controlled Data or your personal information upon the instructions of the Enterprise User administrator for the purpose of enabling, managing, and using the relevant Products and/or Services. As an end user, you understand and agree that the Enterprise User has the right to process your personal information as an individual personal information processor for the performance of the contract entered into with you or for human resources management as implemented through labor rules and regulations and collective contracts entered into in accordance with law, including entrusting us to process your personal information within the purposes and scope of enabling, managing, and using our Products and/or Services, based on reasonable necessity.

1.4 To Provide Services For You

In the following additional functions, you may choose whether to authorize us to collect and use your personal information. If you refuse to provide the information required for certain functions or services, you will not be able to use such functions or services, but it will not affect your normal use of other functions or services. You may check the status of the following permissions in your device settings or on the Ailit Platform and decide whether to enable or disable such permissions at any time. However, your decision to disable permissions will not affect the information collection and use previously carried out based on your authorization.

1.4.1 Address Book-Based Services: If you need more convenient dialing of contact phone numbers, you must authorize us to collect your address book information in order to directly access your contacts and make calls. Customer contact information may also be quickly filled in by authorizing access to your mobile phone address book. If you use this function, you must authorize us to access your device address book permission.

1.4.2 Camera-Based Services: When you use product barcode recognition, order entry recognition, document recognition and addition, facial recognition payment, avatar upload, or scan-to-search functions in the Ailit app, you must enable system camera permission and authorize us to use your camera to complete photography and scanning. If you refuse to authorize us to use your camera, you will not be able to use the photography or scanning functions.

1.4.3 Photo Album Uploads: When you use the add/replace document, add/replace avatar, or add/replace product with image functions in the Ailit app, you must enable system photo album permission and authorize us to access your photo album to upload your document, product, or avatar images and videos. If you refuse to authorize, you will not be able to upload your images or videos through the photo album, but it will not affect your enjoyment of our basic functions.

1.4.4 Bluetooth-Based Services: When you use a Bluetooth printer, you must enable Bluetooth permission and authorize us to use the Bluetooth function for order printing. You may disable this function in system permissions, but after disabling it, you will not be able to use the Bluetooth printing function, although it will not affect your enjoyment of our basic functions.

1.4.5 Microphone-Based Voice Technology: When you use the microphone function to search for relevant products, customers, or supplier information, you must authorize us to invoke your device's microphone and record your voice information to complete voice search. You may disable this function in system permissions, but after disabling it, you will not be able to use the voice activation and voice search functions, although it will not affect your enjoyment of our basic functions.

1.4.6 Payment Functions: Some of our products and/or services require payment for use. When you need to use such paid products and/or services, you must provide your bank card information and/or complete payment through cooperative third-party payment institutions (Alipay, etc.). When using third-party payment services, please read the Privacy Policy of the relevant third-party payment institution. If you do not agree with such arrangements, please cease using the third-party payment service in a timely manner.

You may order products and/or services for other persons, in which case you must provide the aforementioned user information of the actual orderer. Before providing us with such information, you must ensure that you have obtained their authorized consent.

To confirm transaction status and provide you with transaction dispute resolution services, we will collect your transaction, payment, and logistics information related to transaction progress through your selected transaction counterparty, transaction method, third-party payment institution, and logistics company, or share your transaction information with the above service providers.

1.4.7 Safe Operation and Service Assurance: To ensure the safe operation of the software and services, improve and optimize our service experience, and ensure the security of your account, we will collect your device information (including: device/hardware model, device name, SIM card serial number (such as ICCID), hardware/device serial number (SN), device unique identifiers (including: IMEI, IMSI, Android ID, IDFA, IDFV, OAID (Harmony OS), OAID (Android), MEID)), running processes, service failure information of this application, performance data, network access method, type and status (such as SSID and BSSID), IP address, network quality data, device sensor data (such as accelerometer, linear accelerometer, gravity sensor, gyroscope), and software version number, and upload such information to the server for processing. If you do not agree to our collection of the foregoing information, risk control verification may not be completed.

1.4.8 Customer Service and Dispute Resolution: When you contact us or submit a request for problem handling or dispute resolution, to ensure the security of your account and system, we will require you to provide necessary user information to verify your user identity. To facilitate contact with you, assist you in resolving issues as soon as possible, or record the handling plan and results of relevant issues, we may save your communication/call records and related content with us (including account information, order information, other information you provide to prove relevant facts, or contact information you leave). For the reasonable purpose of providing services and improving service quality, we may also use your other information, including relevant information you provide when contacting customer service, and questionnaire response information you send us when participating in surveys, including your age group, gender, region, and mobile phone number.

Section 2: How We Use Cookies and Similar Technologies

We use cookies and other similar technologies (e.g. web beacons, Flash cookies, etc.) ("Cookies") to enhance your experience using the Services. Cookies are small files which, when placed on your device, enable us to provide certain features and functionality.

You have the option to permit installation of such Cookies or subsequently disable them. You may accept all Cookies, or instruct the web browser to provide notice at the time of installation of Cookies, or refuse to accept all Cookies by adjusting the relevant function in the web browser of your computer. However, in the event of your refusal to install Cookies, we may be prevented from providing some of its Services available to you.

For more information about the Cookies we use, please see our Cookies Policy.

Section 3: How We Process Your Personal Information

We process your Personal Information only when a legal basis exists, such as for contract performance or legitimate interests, or when we have obtained your consent. We will process the Personal Information we collect from you for the following purposes:

3.1 Providing Products and/or Services to You

3.1.1 To better provide you with Ailit cloud purchase-sales-inventory Products and/or Services, you authorize us to process, handle, and analyze the relevant information about your enterprise (including commodities, the same below) within the Products and/or Services offered on the Ailit Platform. Additionally, you authorize us to display your enterprise management-related information and the results of such processing, handling, and analysis within the Products and/or Services offered on the Ailit Platform (if the functional modules of the products or services you use support this), in order to provide Products and/or Services to other users and to you. Unless otherwise agreed by both parties, your aforementioned authorization is free, continued until the date of termination of the Products and/or Services, irrevocable, and will not be suspended, terminated, or rendered invalid by the suspension, termination, or invalidity of this agreement.

3.1.2 For Identity Verification, Customer Service, Security, Fraud Detection, Archiving, and Backup Purposes: We use your Personal Information to ensure the security of the Products and/or Services we provide to you.

3.1.3 We may also process your Personal Information to analyze, develop, improve and optimize the use, function and performance of our Products and/or Services.

3.1.4 Security Assurance: To enhance the security of your use of our and our partners' products and/or services, protect the personal and property safety of you or other users or the public from infringement, better prevent phishing websites, fraud, network vulnerabilities, computer viruses, network attacks, network intrusions, and other security risks, and more accurately identify violations of laws, regulations, this Policy, or Platform Rules, we may use or integrate your user information, subscription information, login/usage information, device information, relevant network logs, and information obtained from our partners with your authorization or in accordance with law, to comprehensively assess the security of your account and business risks, conduct real-name verification, detect and prevent security incidents, and take necessary recording, auditing, analysis, and disposal measures in accordance with law.

3.2 Disclosure

We will not sell your Personal Information. We may disclose your Personal Information only in the following circumstances:

3.2.1 Third Service Providers

Certain specific modules or functions of the Ailit Platform and our products and/or services are provided by external partners. For companies, organizations, and individuals that we entrust to process user information, we will enter into strict confidentiality agreements with them, requiring them to process your information in accordance with our requirements, this Policy, and any other relevant confidentiality and security measures.

To ensure the stable operation of the client application or to realize relevant functions, we may access software development kits (SDKs) provided by third parties for the aforementioned purposes. We will exercise due diligence and conduct strict security monitoring of the SDKs used by partners to obtain information, in order to protect data security.

The third-party SDKs we access primarily serve your and other users' needs. Therefore, as new service requirements and business function changes arise, we may adjust the third-party SDKs we access. We will promptly disclose the latest status of third-party SDK access to you in this Policy. For details, please refer to the Third-Party Information Sharing List.

3.2.2 Business Partners

14. To achieve the purposes stated in this Policy, certain of our products and/or services will be jointly provided by us and authorized partners. We may share certain of your information with partners to provide better customer service and user experience. We will share your information only for lawful, legitimate, necessary, specific, and explicit purposes, and only share the information necessary to provide the Products and/or Services. Our partners are not authorized to use the shared user information for any purpose unrelated to the Products and/or Services. For companies, organizations, and individuals with whom we share your information, we will enter into strict data protection agreements with them, requiring them to process your information in accordance with our instructions, this Policy, and any other relevant confidentiality and security measures.
15. For the purpose of recommending products and services to you and conducting market research and information data analysis, if we or our Affiliates share your information with any of the above Affiliates, partners, and/or third parties, we will only share the information necessary for the recipient to provide its services, and will employ encryption or anonymization and other means to protect the security of your information.
16. We will de-identify the Personal Information by technical means, and the de-identified information will not identify the subject. Please understand and agree that we have the right to use de-identified information in this context; and without disclosing your personal information, we may use de-identified information collected in the course of our business to help us improve our existing Products and/or Services, and to develop new features to provide you with better Products and/or Service. After the anonymization of your Personal Information, we may carry out market research and information data research and analysis.
17. Do Not Call Registry

If you are a Singapore user, we will not send marketing messages to your Singapore telephone number if that number is registered with the Do Not Call (DNC) Registry, unless you have provided us with clear and unambiguous consent to such marketing messages, or unless an applicable exception under the PDPA applies. You may withdraw your consent to marketing communications at any time by contacting us using the methods specified in Section 10.

3.2.3 Corporate Group

We may share data among our affiliates for unified account management, customer support, and product improvement. All our affiliates follow this Privacy Policy.

3.2.4 Legal & Compliance

We disclose information if we are legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:

18. comply with a legal obligation, process or request;
19. enforce our terms of service and other agreements, policies, and standards, including investigation of any potential violation thereof;
20. detect, prevent or otherwise address security, fraud or technical issues; or
21. protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).

3.2.5 Business Transfers

In the event of a merger, acquisition, or asset sale, your Personal Information may be transferred to the buyers, successors, etc. after such merger, acquisition or asst sale, which will be subject to standard safeguards.

3.3 Retention

22. We retain Personal Information only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws. When such retention no longer serves the purpose for which the Personal Information was collected, and is no longer necessary for legal or business purposes, we will cease to retain your Personal Information, or remove the means by which the data can be associated with you, as soon as it is reasonable .
23. Cloud Sync Service: The terms of this Privacy Policy will also apply to your use of our Products and/or Services with cloud synchronization (“Cloud Sync”) feature. Our Cloud Sync feature allows you to use certain Internet services, including storing and accessing your cloud-synchronized content on your compatible devices and computers. Once you have enabled Cloud Sync, the content of your Cloud Sync will be automatically sent to us and retained by us, and you will then be able to access that Personal Information or wirelessly push it to your other Cloud Sync-enabled devices or computers. Under the premise of ensuring the security of your Personal Information, you understand and agree that we collect, use, retain, disclose and process your Personal Information through the Cloud Synce feature of our Products and/or Services in accordance with the conditions of this Privacy Policy.

Section 4: How We Protect Your Personal Information

4.1 We apply industry-standard administrative, technical, and physical safeguards to protect your Personal Information against misuse, interference, accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access, as well as all other forms of unlawful processing, such as:

24. TLS encryption in transit and AES-256 at rest
25. Role-based access controls and least-privilege principles
26. Regular penetration testing and vulnerability scans
27. Incident-response plan and 24/7 monitoring
28. Staff training and confidentiality agreements

4.2 In the event of a data breach that results in, or is likely to result in, significant harm to you, or that is of a significant scale, we will assess the breach and, where required by the PDPA, notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the prescribed timelines and requirements. Our data breach response procedures are described as follows:

29. Immediately take remedial measures, report the handling of information security incidents to regulatory authorities in accordance with laws, regulations, and regulatory requirements, and promptly notify users;
30. Immediately activate the network security incident emergency response plan, investigate and assess the network security incident, take technical measures and other necessary measures to eliminate security risks, and prevent the expansion of harm;
31. Promptly notify affected data subjects of the incident by email, letter, telephone, push notification, or other means. Where it is difficult to notify data subjects individually, we will issue warning information to the public in a reasonable and effective manner. At the same time, we will also report the handling of user information security incidents to regulatory authorities as required.

4.3 You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your Personal Information, and are constantly reviewing and enhancing our security measures.

Section 5: International Transfers

Your Personal Information is stored on servers located in Singapore. If you access the Products and/or Services from outside Singapore, you consent to the transfer and processing of your Personal Information to Singapore. We implement appropriate safeguards (e.g., Standard Contractual Clauses) as required under the Singapore Personal Data Protection Act 2012 (“Singapore PDPA”) to protect your Personal Information. If your Personal Information is transferred outside Singapore to our affiliate or any third party in a country that does not provide an adequate level of protection for Personal Information, we will take adequate measures designed to protect your Personal Information, such as ensuring that such transfers are subject to legally enforceable obligations to provide the transferred Personal Information with a standard of protection that is comparable to that under the Singapore PDPA.

We transfer Personal Information to third parties overseas as follows:

Section 6: Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

6.1 Access – obtain a copy of your Personal Information

6.2 Rectify – correct your Personal Information held by us that is inaccurate, incomplete, irrelevant or out-of-date

6.3 Delete – request erasure of your Personal Information (subject to legal retention obligations)

6.4 Restrict – limit processing of your Personal Information in certain contexts

6.5 Portability – transfer your Personal Information held by us to another organization in a structured, machine-readable format

6.6 Object – request us to stop using all or some of your Personal Information for any or certain purposes

6.7 Withdraw consent – withdraw your consent given to us at any time for processing your Personal Information based on such consent

You can exercise most rights by contacting us at ailitsoft@outlook.com. We will respond within 15 working days.

Enterprise users must first remove themselves from the organization via the admin panel. Deletion requests may be subject to verification.

Marketing emails sent by us include an unsubscribe link; you may also adjust preferences by contacting us.

Section 7: Children’s Privacy

Our Products and/or Service is not intended for children. Children must not use the Products and/or Service for any purpose. We will not knowingly allow anyone under 14 to register for our Products and/or Services, and/or provide any personal identification information. If you are under 14, please do not sign up to use our Products and/or Services or provide any information about yourself through the Products and/or Service.

Section 8: Governing Law & Dispute Resolution

This Policy is governed by the laws of Singapore without regard to conflict-of-law rules. Disputes will be submitted to the Singapore International Arbitration Centre unless local law mandates otherwise.

Section 9: Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced via the Products and/or Services (pop-up or prominent notice) or emails at least 7 days before they take effect. Continued use of our Products and/or Services or provision of Personal Information to us after the effective date constitutes acceptance of the updated Privacy Policy.

Section 10: How to Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy or our data processing, you may contact us through the various contact methods we provide. Our contact information is as follows:

Ailit Technology Limited

Address: Unit 2101, 21/F, NEO Building, 123 Hoi Bun Road, Kwun Tong, Kowloon, HONG KONG, China.

Email: Ailitsoft@outlook.com

Customer Service Hotline: 400-830-8060

Personal Information Protection Officer Contact: Ronald_li@kingdee.com

In general, we will verify and respond to your inquiry within 15 working days of receiving your relevant contact information.

Section 11: Miscellaneous

This Privacy Policy is an integral part of the Terms of Services and other related agreements we publish when providing you with products and/or services, and together with them constitutes a unified whole.

If any provision of this Privacy Policy is determined to be wholly or partially invalid or unenforceable for any reason, the remaining provisions of this Privacy Policy shall remain valid and enforceable.

If any provision of this Privacy Policy is inconsistent with or conflicts with any provision of the published Terms of Services, the provisions of this Privacy Policy shall prevail.

Section 12: Addendum for Users in Singapore, Malaysia, Thailand, Vietnam and Indonesia

32. Singapore

We may store your personal information in Singapore and in other jurisdictions, subject to the data protection laws of those regions. If you do not agree to this privacy policy, we will not be able to provide you with our services. You can access and correct your data in the account portal at any time. If you believe we are processing any additional personal information about you or cannot correct inaccurate information, please contact us at Ronald_li@kingdee.com to request changes. Under Singapore law, you do not have a legal right to request deletion of your data, but we can delete your data upon request.

Within the scope of Singapore's data privacy laws, you may withdraw your consent for certain processing activities that you previously authorized by contacting us at Ronald_li@kingdee.com. If processing is based on consent and you do not consent or withdraw consent, we may not be able to provide the expected services. Please note that the right to withdraw consent only applies when consent is the legal basis for processing.

We may use, disclose, and/or retain personal information to comply with applicable laws/regulations, enforceable government requests, court orders, and to enforce or defend legal claims.

33. Malaysia

To use our services, you will need to provide your personal data. If you do not wish to provide your personal data, you should cease using our services.

Language of This Privacy Policy

The English version of this privacy policy will prevail over any discrepancies or inconsistencies with the Malay version.

Parental and Guardian Consent

If you are under 18 years old, please do not use our services.

By agreeing to this privacy policy to allow a minor to access and use our services, you hereby agree to provide the personal information of the minor and consent to its processing in accordance with this privacy policy. You also personally accept and agree to be bound by the terms of this privacy policy. Furthermore, you agree to take responsibility for the minor's actions and compliance with this privacy policy.

Data Subject Rights

Right of Access: You have the right to request access to and obtain a copy of your personal information that we collect and process either directly or on our behalf. We reserve the right to charge a fee for providing access to your personal information, as permitted by law.

When processing data access requests, we may require certain information to verify the identity of the requester to ensure they are legally entitled to make the data access request.

Right to Rectification: You have the right to request the correction of your personal information. When processing data rectification requests, we may require certain information to verify the identity of the requester to ensure they are legally entitled to make the data rectification request.

Right to Restrict Processing: You have the right to request the restriction of processing your personal information by using the contact details provided above. However, this may affect our ability to provide services to you.

34. Thailand

You acknowledge that you have read, understood, and agree to this privacy policy. If you do not agree to this privacy policy, you must not use our services.

You may request that we stop or restrict the use or provision of, and/or request the portability of, any and all personal information that we store, but only to the extent applicable under Thailand's data privacy laws and regulations, including the Personal Data Protection Act of Thailand. If you wish to make such a request, please contact us at Ronald_li@kingdee.com. We will notify you of any changes to this privacy policy via email and give you the opportunity to opt out of such changes; otherwise, these changes will become effective as stated in the notice.

35. Vietnam

By accepting this privacy policy, you explicitly consent to and authorize us to collect, use, store, and process your personal information, including lawful disclosure and transfer to third parties as described in this privacy policy. We maintain international standards of data protection and security practices. When your personal information is transferred within or outside your jurisdiction, the receiving entities will adhere to the same or higher levels of security measures and data protection. If we allow any third party to collect and use your personal information, we will take reasonable steps to ensure that the third party does not further disclose your personal information. If your personal information needs to be disclosed to law enforcement, public authorities, or other judicial bodies and organizations, it will be disclosed upon receiving a written request from such organizations.

Your Rights

You have the right to access, correct, and delete the personal information we hold about you. You also have the right to withdraw your previously given consent for the collection, storage, processing, use, and disclosure of your personal information and to request that we cease providing your personal information to third parties.

36. Indonesia

Our services are not intended for children. Children are not permitted to use the service for any purpose. We do not intentionally permit anyone under the age of 21 to register for our services and/or provide any personally identifiable information. If you are under 21, please do not register for or use our services or provide any information about yourself through the services.

We will retain your personal information as outlined in this privacy policy and will keep it for at least five years, unless otherwise required by applicable law.

Section 13: Addendum for Users in China Mainland

The terms of “Zhihuiji Privacy and Personal Information Protection” apply to the processing of your personal information if you select China Mainland (excluding Hong Kong SAR, Macau SAR and Taiwan, the same below) as a Service Region when using the Services. Please refer to the “Zhihuiji Privacy and Personal Information Protection” for more details on the general conditions of using the Services in China Mainland. Shenzhen Kingdee Wisdom Technology co., Ltd., for the purposes of this Addendum, provides the Services in the China Mainland region. We will process your personal information in accordance with the laws and regulations of China Mainland and relevant requirements of government authorities.