JoyWE Privacy Policy

[Important]

• This Privacy Policy describes how we handle your personal information in different scenarios, including how we collect, use and protect your personal information.

• When you enable the relevant features, use the relevant services, or meet the needs of customer management, we will collect relevant information necessary to implement the features or services or to meet the needs of organizational management. Unless the information is necessary to realize the features of the product or comply with laws and regulations, or to meet the needs of customer management, you may decline to provide such information and this will not affect other features or services.

• Contacts, precise geographic location, camera, microphone, photo albums, and calendar permissions will not be enabled by default and will only be used for specific features or services with your express authorization. You can also withdraw your authorization. In particular, even if we have obtained these sensitive permissions with your authorization, we will not collect this information when it is not required by the relevant feature or service.

This Policy is only applicable to the products and services provided by Beijing JD 360 Degrees E-commerce Co., Ltd and the extended features of such products and services (hereinafter referred to as “JoyWE Services”). JoyWE Services include JoyWE APP, desktop terminal, applet, and new forms of products and services provided to you with the development of technology. If a product we provide has a separate privacy policy or there is a special agreement in the corresponding user service agreement, the privacy policy specific to that product shall prevail. For content that is not covered by the product-specific privacy policy, this Policy shall apply.

Please carefully read JoyWE Privacy Policy (especially the bolded text) and confirm that you have understood our rules for processing your personal information. In the case of any question during reading, you may contact us via the contact information in JoyWE Privacy Policy.

• Version Updated: July 1, 2025

• Version Effective Date: July 1, 2025

• In the case of any question, suggestion or advice, please contact us at:

• Tel.: 950618

• E-mail: onlyme@jd.com

• Registered address: Zone E, F19, Block A, No. 18, Kechuang 11 Road, BDA, Beijing, China

• Office address: No. 18, Kechuang 11 Road, Beijing Economic Technological Development Area, Beijing, China

JoyWE Privacy Policy

Introduction

This Privacy Policy will help you understand in detail how we collect, use, store, transfer (if applicable) and protect your personal information. It will also help you understand how to access, copy, delete, correct, and withdraw authorization for personal information. This Policy is closely related to your use of all our services. Please read carefully and understand all the terms hereof, so that you can make appropriate choices. For the clauses that we consider to be materially related to your rights and interests, we’ve marked them in bold to draw your special attention.

I. How We Collect and Use Your Personal Information

II. How We Use Cookies and Similar Technologies

III. How We Share, Transfer and Publicly Disclose Your Personal Information

IV. How We Protect and Save Your Personal Information

V. How You Manage Your Personal Information

VI. Notice and Modification

VII. How to Contact Us

I. How We Collect and Use Your Personal Information

Personal information refers to all kinds of information related to an identified or identifiable natural person recorded electronically or in other ways, excluding anonymized information.

Personal information covered in this Privacy Policy includes basic information (including personal name, organizational structure, gender, personal phone number, specific identity, email address); personally identifiable information (including ID card and driver’s license); facial features; network identity information (including system account, IP address, email address, and password, passphrase, and passphrase protection answer related to the foregoing); personal property information (welfare coupons, personal salary, employee financial management, financial accounts, wallet balance); address book; personal Internet access history (including software browsing history, usage history, and click history); personal commonly used device information (including hardware model, operating system type, and unique device identifier of software (e.g. IMEI/android ID/IDFA/OPENUDID/GUID, SIM card IMSI information)); personal location information (including precise positioning information, latitude and longitude);

Sensitive Personal Information refers to the personal information that, once disclosed or illegally used, may easily lead to the infringement of the personal dignity of a natural person or endanger the personal and property safety. Sensitive Personal Information covered in this Privacy Policy includes your property information (welfare coupons, personal salary, employee financial management, financial accounts, and wallet balance); facial recognition features; personally identifiable information (including ID card, and driver’s license); network identity information (including system account, IP address, email address, and password, passphrase, and passphrase protection answer related to the foregoing); other information (including address book, personal phone number, cell phone number, software browsing records, usage history, click history, and personal location information).

We will follow the principles of legitimacy, legality and necessity to collect and use the personal information that you provide voluntarily during the use of the products and/or services or that is generated from the use of products and/or services, as well as to obtain your relevant personal information from third parties, for the following purposes as described in this Policy. If we want to use your personal information for other purposes not specified herein, or use any specific information collected for other purposes, we will inform you in a reasonable way and obtain your consent again before use.

(I) You must authorize us to collect and use your personal information.

Our products and/or services consist of a number of core business features and additional features. Such core features include the features that are necessary to enable mobile office services, improve our products and/or services, and guarantee security. We may collect, store, and use the following information about you to achieve these features. If you do not provide such information, our products and/or services might not be available to you. These features include:

1. Features necessary to use the APP

(1) User Login

JoyWE will first determine that you are a user of JD through erp before your use of JoyWE. JoyWE will use your mobile phone number and send an SMS verification code to authenticate whether your identity is valid when you log in. Your account name is your real name. You can modify and supplement your mobile phone number, landline number, signature, duties and other information, which is your “account information”. Your supplementary account information will help improve office efficiency. However, if you do not to provide such supplementary information, it will not affect your use of the basic features of JoyWE.

(2) WE Meeting Privacy Policy

This privacy policy is closely related to the WE Meeting service you use and the various business functions included in this service (hereinafter collectively referred to as "our products and/or services"). We hope you will carefully read and confirm that you have fully understood the contents of this policy before using our products or services, and let you make the appropriate choices according to the guidance of this privacy policy. We try our best to express the relevant terms involved in this privacy policy concisely and concisely, and please refer to: WE Meeting Privacy Policy.You use or continue to use our products or services after we update this privacy policy (we will prompt you about the update in a timely manner), which means that you agree to the content of this privacy policy (including the updated version), and agree that we collect, use, save and share your relevant information in accordance with this privacy policy.

Video Meeting Recording: When you use the recording of the meeting in Jing ME, you need to provide relevant audio and video information for processing. Otherwise, you will not be able to use it. When the meeting is recorded, all participants will see the recording tag. If you do not agree to record your voice or pictures, you can exit the meeting. When you use the cloud recording, the recorded information will be saved as the doc under the creator account, and can be viewed through the link with its reading permission. When you use the AI recording, we will perform algorithmic processing on your meeting-related data to generate Minutes for you, including intelligent summaries and speakers minutes.

(3) Message

In order to facilitate communication between users, JoyWE will obtain users’ personal information such as erp, name, organizational structure, mobile phone number, landline number, and signature, as well as chat information such as chat history and message notification settings.

(4) Information Display and Search

In order to allow you to quickly find the information you need, we may collect information about the device on which you use our products and/or services (including device name, device model, device identifier, operating system, App version, language settings, resolution, service provider network ID (PLMN)), and browser type to provide you with the best way to display your product information. In addition, we will also use your above-mentioned information in order to continuously improve and optimize the above-mentioned features. You can also search to find exactly what you need. We may retain your search content so that you can re-enter it or show you the products associated with your search. Please note that your search keyword information cannot identify you alone and is not your personal information, so we have the right to use it for any purpose. Only when your search keyword information is used in conjunction with other information about you and can identify your identity, we will use your search keyword information as your personal information during the combined use, and we will process and protect it together with your search history in accordance with this Privacy Policy.

(5) Customer Service Feature

Our customer service personnel and system engineers will use your account information and event ticket information.

(6) Computer

When you use the JD Computer function, such as automatically scanning the computer system, discovering risks and repairing them, checking system patches, anti-virus software, firewalls and other key security items, in order to maintain the normal operation of our services, improve and optimize our services To propose and protect the security of your account, we will collect your personal information and/or computer device information. For details, please refer to:JD computer Privacy Agreement.

2. Features necessary to improve our products and/or services

We may collect your personal information and browsing information for data analysis to form a user profile, which is used to present you with information about content or services that may be of interest to you, or to present you with information that you may expect to find when you search for it. We may also obtain other information about you that is reasonably necessary to provide services and to improve the quality of the services, including information you provide when you contact our customer service personnel, information you send us in response to surveys, and information we obtain when you interact with our affiliates and our partners. For information collected from your various devices, we may associate it so that we can provide you with a consistent service on those devices. We may combine information from one service with information from other services to provide you with services, personalized contents and recommendations.

3. Features necessary to secure transactions

In order to ensure the stability and security of the system when you use our products and/or services, to prevent your personal information from being illegally accessed, to more accurately prevent fraud and to protect the security of your account, we need to collect your device information (device model, device Mac address, list of application processes, device ID, device serial number, operating system, software version, device state, and network status), Internet access history, log information, facial information, IP address, location information, browsing information, order information, list of frequently used software, ssid, wifi, IMSI, SIM card information, and battery usage to identify whether you are a real natural person user, whether you are logging in from an unusual location, and to determine the risk of your account, and we may record links (“URL”) that we consider to be risky; we may also collect your device information for the purpose of analyzing problems with the JoyWE system, counting traffic and identifying possible risks when you choose to send us exception message. If you do not provide the above information, we will not be able to protect your services and account security during your use of JoyWE services.

(II) You may choose whether or not to authorize us to collect and use your personal information

1. To enable you to work more conveniently and enhance your experience of using JoyWE, we may collect and use your personal information in our additional features outlined below. If you do not provide such personal information, you can still use JoyWE. These additional features include:

(1) Personalized Recommendation Feature Based on Location Information (LOCATION): We will collect your location information (we only collect your current geographic location, but do not combine your location information from time to time to determine your whereabouts) to determine where you are, and provide you with services such as socializing.

(2) Extension Based on Camera (CAMERA): You can use this extension for video recording, photo taking, QR code scanning, and login by face recognition. When you log in using face recognition, we will collect your facial information and restrict its use to the extent you authorize. In the future, we may apply facial recognition technology in more scenarios, at which time we will check with you again to see if you would like us to use your facial information to implement these extensions.

(3) Extension Based on Picture/Video Upload: You can upload your picture/video in JoyWE to realize feedback on the problem, description of approval information, and information release, and we will use your uploaded picture or video to identify the products and/or services you need, or use the feedback, information release, and approval information containing your uploaded picture or video.

(4) Extension Based on Voice Technology (READ_AUDIO): You can use the microphone directly for voice explanation or to consult and interact with our users. In these features we collect your recordings to identify your communication needs as well as customer service needs.

(5) Extension Based on Contacts Information (READ_CONTACTS): You need to get the permission of mobile phone contacts when you need to view the corporate contacts to save other people’s mobile phone numbers to the local contacts.

(6) Feature Based on Mobile Phone Call Making Permission: When you need to make calls to others by viewing the corporate address book, selecting a mobile phone number in the chat history.

(7) Feature Based on SMS Permission: If you choose to share the sharing features of JoyWE, including APP and H5, via SMS, you need to get the permission to send SMS on your mobile phone.

(8) Extension Based on Face ID/Touch ID Permission: If you use an Apple device that supports face recognition, you can use the Face ID unlocking feature in the JoyWE APP; if you use an Apple device that supports fingerprint recognition, you can use the fingerprint unlocking feature in the JD APP. You need to enroll your face information or fingerprint information on your device in advance and complete information verification on your device when using the services. We need to use your Face ID/Touch ID permission to receive the verification results, but we will not collect your Face ID/Touch ID information. If you do not enable this permission, you will not be able to use the aforementioned services, but it will not affect your choice of other unlocking methods.

(9) Extension Based on Clipboard: Your clipboard feature may be invoked when you copy communication message, header, SMS verification code, share or receive shared information. The clipboard information will only be processed on your device and we will not store your clipboard information for any other purpose.

(10) Local network permissions: Accessing your local network is primarily for the purpose of migrating local chat records and detecting network connectivity.

(11) BSSID Information Collection:To help us understand the usage of public WiFi and optimize services, when you connect to WiFi in public places (such as restaurants, shopping malls, etc.), we will record the BSSID number of the hotspot (similar to a device's ID number). These anonymous data will only be used for market research and analysis.

2. The following features are required to ensure that the App receives information pushed by the client when it is closed or running in the background, and can view files properly:

(1) This application must use the (self-start) capability, and there will be a certain frequency to send a broadcast through the system to wake up the App’s self-start or associated startup behavior, which is necessary to implement features and services. This feature is enabled only with the user’s explicit consent and is only available on Android devices.

(2) When you open a content-based push message and with your explicit consent, it will redirect to open relevant content. No self-startup or associated startup is allowed without your consent. This feature is only available on Android devices.

(3) When you open a file downloaded within the App, and with your explicit consent, a third-party App will be started in association. This feature is only available on Android devices.

3. The above extensions may require you to enable your geolocation (location information), camera, photo album (photo gallery), contacts, phone state, external storage, face ID/touch ID, NFC permissions to us in your device to enable the collection and use of information involved in these features. You can check the state of each of the above permissions in JoyWE APP or the device system, and you can decide to enable or disable these permissions at any time (we will guide you to complete the settings in your device system). Please note that by enabling these permissions, you authorize us to collect and use your personal information to realize the features described above, and by disabling these permissions, you revoke this authorization, and we will no longer collect and use your personal information, nor will we be able to provide you with the above features corresponding to these authorizations. Your decision to disable your permission will not affect the processing of your personal information based on your prior authorization. In addition, we may require you to enable other access rights to your device for related business features, and the details of these permissions and the purposes of their use are as follows.

(1) android.permission.INTERNET (access to the network): Enable the App to be connected to the network.

(2) android.permission.ACCESS_WIFI_STATE (obtain WiFi state): Monitor network changes and alert users of the current network environment.

(3) android.permission.ACCESS_NETWORK_STATE (obtain network state): monitor network changes and alert the users of the current network environment.

(4) android.permission.VIBRATE (enable vibration): Allow mobile phone vibration.

(5) android.permission.WAKE_LOCK (wake lock): Allow the program to keep the screen awake while background processes are still running after the phone screen is turned off.

(6) android.permission.RESTART_PACKAGES (end system task): Restart the App.

(7) android.permission.MODIFY_AUDIO_SETTINGS (modify sound settings): Modify global audio settings, such as adjusting volume and the speaker for output.

(8) android.permission.BLUETOOTH (use Bluetooth): Use applet Bluetooth feature module.

(9) (android.permission.BLUETOOTH_ADMIN) (Bluetooth management): Use applet Bluetooth feature module

(10) android.permission.SYSTEM_ALERT_WINDOW (floating window): Floating window for video conference.

(11) android.permission.ACCESS_BACKGROUND_LOCATION (support background access location): Maintain continuous location capability.

(12) android.permission.WRITESYSTEM (read and write the system): Allow the App to read and write system settings.

(13) android.permission.GET_TASKS (get task information): Allow the App to get the current or recently running Apps.

(14) android.permission.CHANGE_WIFI_STATE (change WiFi state): Allow the App to change WiFi state.

(15) android.permission.READ_CALENDAR (read calendar): Allow the App to read the calendar.

(16) android.permission.WRITE_CALENDAR (write calendar): Allow the App to change the calendar.

(III) You acknowledge that we may collect and use your personal information without your consent in the following circumstances:

1. Your personal information is related to national security and national defense security;

2. Your personal information is related to public security, public health and major public interests;

3. Your personal information is related to criminal investigation, prosecution, trial and execution of judgments;

4. Your personal information is essential for protecting major legitimate rights (including life and property) and interests of the personal information subject or other people, but it is hard to obtain the subject’s consent;

5. Your personal information collected has been disclosed to the public by yourself;

6. Your personal information is collected from the information made public legally, such as legal news coverage and government information disclosure;

7. Your personal information is essential to sign a contract as required by you;

8. Your personal information is necessary to maintain the safe and stable operation of products or services provided, such as the discovery or disposal of products and/or services failure;

9. Your personal information is required for legal news reports;

10. Your personal information is essential to implement human resource management in accordance with legally established labor rules and regulations and legally signed collective contracts;

11. Your personal information is required for academic research institutions to conduct statistical or academic research based on the public interest, and the personal information contained in the results are de-identified when the results of academic research or description are provided externally;

12. Other circumstances stipulated by laws and regulations.

(IV) We obtain your personal information from a third party

We may obtain account information (profile photo, nickname, and current state) that you are authorized to share from a third party and bind your third-party account to your JoyWE account after you agree to this Privacy Policy, so that you can log in and use our products and/or services directly through the third-party account. We will use your personal information in compliance with relevant laws and regulations after confirming the legality of the sources of the personal information in accordance with the agreement with the third party.

(V) Sample of case where JoyWE APP involves embedding third-party codes and plug-in transmission of personal information: details of third-party SDK

(VI) Rules for use of your personal information

1. We will use the personal information we collect in accordance with this Privacy Policy and in order to realize the features of our products and/or services.

2. After collecting your personal information, we will use technical means to de-identify the data, and the de-identified information will not be able to identify the subject. Please understand and agree that in this case, we have the right to use the de-identified information; and without disclosing your personal information, we have the right to analyze and commercialize the user database.

3. Please understand and agree that all personal information you provide to us when using our products and/or services will continue being licensed to us during your use of our products and/or services, unless you delete it or refuse our collection through system settings. When your account is cancelled, we will stop using and delete your personal information.

4. We will collect statistics on the use of our products and/or services and may share such statistics with the public or third parties to demonstrate overall trends in the use of our products and/or services. However, these statistics do not contain your any personally identifiable information.

5. When we display your personal information, we will desensitize your information to protect the security of your information, including content replacement and anonymization.

6. When we want to use your personal information for other purposes not specified herein, or use any specific information collected for other purposes, we will seek your express consent. Please understand that the products and/or services we provide to you are subject to constant update and change. If you choose to use other products and/or services that are not listed in this Privacy Policy, we will explain to you in detail the purpose, method and scope of information collection and seek your consent through agreements or page prompts, before collecting your personal information. If you do not agree to provide the aforementioned information, you may not be able to use such product and/or service, but it will not affect your use of existing products and/or services.

II. How We Use Cookies and Similar Technologies

Use of Cookies

1. In order to personalize your online experience and make it easier for you to access the site, we may send one or more small data files called Cookies to your mobile device. The Cookies assigned to you are unique and can only be read by the Web server in the domain that issued the Cookies to you. We send Cookies to you to simplify the process of repeated login and to store data such as your search information and chat history so as to provide you with preferences, to help determine your login state, and the security of your account or data.

2. We will not use Cookies for any purpose other than those described in this Privacy Policy. You can manage or delete Cookies according to your preferences. You can erase all Cookies stored on your mobile device. However, if you do so, you may need to personally change your user settings each time you visit JoyWE, and all the corresponding information you have previously recorded will also be deleted, and may have a certain impact on the security of the services you use.

III. How We Share, Transfer and Publicly Disclose Your Personal

Information

(I) Share

1. We will not share your personal information with any other company, organization or individual other than JoyWE, except that:

(1) Your express consent or authorization is obtained in advance;

(2) It is necessary to provide your personal information in accordance with the requirements of applicable laws and regulations, legal procedures, and mandatory administrative or judicial requirements;

(3) To the extent permitted by laws and regulations, it is necessary to provide your personal information so as to protect the interest, properties or security of JoyWE, JoyWE’s affiliates or partners, you or other JoyWE users or the public;

(4) Only by sharing your personal information can we realize the core features of our products and / or services or provide the services you need;

(5) It is requested by you to provide your personal information to handle disputes or controversies between you and others;

(6) Your personal information is provided in accordance with relevant agreements signed with you (including electronic agreements signed online and corresponding platform rules) or provisions of other legal documents;

(7) Your personal information is used for academic research purpose;

(8) Your personal information is used for the public interests in accordance with laws and regulations.

2. We may share your personal information with our related parties. However, we will only share necessary personal information, subject to the purposes stated in the Policy. We will again seek your authorization and consent if our related parties want to change the purposes for handling your personal information.

3. We may share your account information, device information, and location information with third-party Apps to ensure the smooth provision of the services to you. However, we will only share your personal information for legal, legitimate, necessary, specific and clear purposes, and will only share the personal information necessary for the provision of services. Our third-party Apps have no right to use the shared personal information for any other purposes.

4. We will enter into strict confidentiality agreements with companies, organizations and individuals with whom we share personal information and require them to process such personal information in accordance with our instructions, the Policy, and any other relevant confidentiality and security measures. In terms of use of personal sensitive data, we require third parties to adopt data desensitization and encryption technologies to better protect the user data. A directory of SDKs of the third parties we access can be found here: Details of Third-Party SDK.

5. In order to comply with laws, enforce or apply our use conditions and other agreements, or in order to protect the rights and properties or security of JoyWE, you, or other customers of JoyWE, such as preventing fraud and other illegal activities and reducing credit risks, we will exchange information with other companies and organizations. However, this does not include the personal information sold, leased, shared or otherwise disclosed for profit in violation of the promises made in the Policy.

(II) Transfer

We will not transfer your personal information to any company, organization or individual, except for:

1. Your express consent or authorization is obtained in advance;

2. It is necessary to provide your personal information in accordance with the requirements of applicable laws and regulations, legal procedures, and mandatory administrative or judicial requirements;

3. Your personal information is provided in accordance with relevant agreements signed with you (including electronic agreements signed online and corresponding platform rules) or provisions of other legal documents;

4. If any transfer of your personal information is involved in a merger, an acquisition, an asset transfer or similar transactions, we will require the new company or organization that holds your personal information to continue to be bound by the Policy. Otherwise, we will ask the company and organization to re-seek authorization from you.

(III) Public disclosure

We will disclose your personal information to the public only in the following cases and on the premise of taking security protection measures in line with industry standards:

1. We will disclose the personal information designated by you in a manner that you expressly agree to in accordance with your needs;

2. If it is necessary to provide your personal information in accordance with the requirements of laws and regulations, mandatory administrative enforcement or judicial requirements, we may disclose your personal information to the public depending on the type and manner of disclosure of your personal information requested. On the premise of compliance with laws and regulations, when we receive the above request for information disclosure, we will require that the corresponding legal documents, such as summons or letter of inquiry, be issued. We firmly believe that the information requested from us shall be as transparent as possible to the extent permitted by law. All requests have been carefully reviewed to ensure that they are based on legitimate evidence and are limited to data that law enforcement authorities have a legitimate right to access for a particular purpose of investigation. The documents we disclose are under the protection of encryption keys, subject to the permission of laws and regulations.

IV. How We Protect and Save Your Personal Information

(I) Our technologies and measures to protect your personal information

We take personal information very seriously, and take all reasonable and practical actions to protect your personal information:

1. Technical measures for data security

We will adopt security protection measures in line with the industry standards, including establishing reasonable systems and regulations and utilizing security technologies to prevent your personal information from unauthorized access, use, modification, and data damage or loss.

In respect of our network service, Transport Layer Security Protocol (TLSP) and other encryption technologies, as well as browser service via https have been used to protect security of the user’s data in the transmission process.

We employ the encryption technology to save the user’s personal information in encrypted way, and uses the isolation technique for isolation of the information.

In the use of personal information, such as presentation of personal information and associated calculation of personal information, we will adopt various data desensitization technologies, including content replacement and SHA256, to enhance the security of personal information in use.

We employ strict data access authority control and multiple authentication technologies to protect the personal information and avoid illegal use of the data.

We employ code security automatic inspection and data access logo analysis technology to audit the personal information security.

2. Other security measures taken to protect personal information

We manage and regulate the saving and use of the personal information by establishing data classification system, data security management rules and data security development rules.

We fully control the security of the data through the nondisclosure agreements, and monitoring and audit mechanism.

JoyWE has established a data security committee and set up a dedicated department for information protection and a data security emergency response organization to promote and ensure the security of personal information.

3. We will only permit the employees and partners of us and our affiliates to access to the personal information on a need-to-know basis, and have set strict access authority control and monitoring mechanism. We also require all persons who may access to your personal information to perform corresponding confidentiality obligations. If they fail to fulfill such obligations, they might be held legally responsible or the cooperation relationship with us might be terminated. We also require all persons who may access to your personal information to perform corresponding confidentiality obligations. If they fail to fulfill such obligations, they might be held legally responsible or the cooperation relationship with us might be terminated.

4. We will take all reasonable and feasible measures to ensure that no irrelevant personal information is collected. We will retain your personal information only for the period required to achieve the purposes stated in the Cost Policy, unless the retention period is extended or it is permitted by law.

5. The Internet is not an absolutely secure environment, and it is impossible to determine whether the communication methods such as email, instant messaging and social networking software with other users are completely encrypted. Therefore, we recommend that you use complex passwords when using such tools and pay attention to protect your personal information.

6. The Internet environment is not completely secure, and we will do our best to ensure or guarantee the security of any information you send to us. In the event that our physical, technical, or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering, or destruction of information, thereby causing damage to your legitimate rights and interests, we will bear the corresponding legal liability.

7. Disposal of security incidents

Please protect your personal information and provide it to others only when necessary.

In case of personal information security incident, we will inform you of the following information in time according to the laws and regulations: basic information and possible impact of the security incident, treatment measures we have taken or will take, suggestions on your risk prevention and mitigation measures, remedial measures for you, etc. In addition, we will inform you of the incident by email, letter, telephone, push notification and other means in a timely manner. When it is difficult to inform the entities of personal information one by one, we will make an announcement in a reasonable and effective manner. In addition, we will actively report the processing of personal information security incidents as required by regulatory authorities.

8. The Internet environment is not completely secure, and we will do our best to ensure or guarantee the security of any information you send to us. In the event that our physical, technical, or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering, or destruction of information, thereby causing damage to your legitimate rights and interests, we will bear the corresponding legal liability.

9. If you have any questions about our personal information protection, you may contact us through the contact information described in this Privacy Policy. If you find any disclosure of your personal information, in particular to your user name and password, please immediately contact us through the contact information stated in [VI. Contact Us] of this Privacy Policy, so that we could take corresponding actions.

(II) Saving of your personal information

1. All of your personal information will be stored in the People's Republic of China. Your personal information may be transferred to other countries outside of your place of employment. To ensure the security of personal information, we will take adequate security measures to protect your personal information. At the same time, we will also comply with the requirements of laws related to the transfer of personal information and data protection between different countries or regions.

2. During your use of our products and/or services, your personal information will be retained for the period necessary to fulfill the purposes set out in this Policy, as well as for the period of time for which there is a mandatory retention requirement by law. We will delete or anonymize your personal information upon expiry of the retention period as required by applicable laws.

3. Please note that we will delete or anonymize your personal information when you leave JD. After you or we assist you in deleting the relevant information, we may not be able to immediately delete the corresponding information from our backup system due to applicable laws and security technology limitations, and we will securely store your personal information and restrict any further processing of it until the backup can be deleted or anonymized.

4. If we terminate services or operation, we will give a notice to you at least 30 days in advance, and will delete or anonymize your personal information after termination of the services or operation.

V. How You Manage Your Personal Information

JoyWE attaches great importance to your concern about the personal information, and will make every effort to protect your rights to access to, correct and delete your personal information, withdraw consent, and cancel account, so that you have full ability to protect your privacy and security. Your rights include:

1. Accessing and correcting your personal information

Except as required by law or regulation, you have the right to access and correct your personal information at any time, including:

(1) Your account information: the specific path of the mobile terminal: personal information: JoyWE - touch “Me” to go to “Profile Picture” on the upper right corner to enter the profile picture settings - click the profile picture to enter the profile picture settings; touch “Me” to go to the upper right corner - click “Profile Picture” - Mobile Phone Number to modify the mobile phone number; touch “Me” to go to the upper right corner - click the profile picture - Landline to modify the landline number. Security information: “Me”-Settings-Security-Change Password, “Me”-Settings-Security-Change Gesture Lock; “Me”-Settings-Security-Change by Face Scanning.

(2) For access or correction of other personal information generated in the course of your use of our products and/or services, please feel free to contact us. We will respond to your request in the manner and within the time limit set forth in this Privacy Policy.

(3) Personal information that you cannot access and correct: In addition to the information listed above, we cannot provide you with access to and correction of some of your personal information, which is mainly your device information collected to improve your user experience and ensure the security of transactions, and personal information generated when you use the extensions. We will use the above information within the scope of your authorization. You cannot access and correct such information, but you can contact us for deletion or anonymization.

2. Deleting your personal information

You can directly clear or delete information on our product and/or service pages, including communication information and comment information.

You can request us to delete your personal information in the following cases:

(1) Our processing of the personal information violates the laws and regulations;

(2) We collect and use your personal information without your express consent;

(3) Our processing of personal information has violated the agreement with you;

(4) We terminate our services and operations. If we decide to respond to your deletion request, we will also request the entities who obtained your personal information from us to timely delete your personal information, unless otherwise required by laws or regulations, or these entities obtain the independent authorization from you. If we respond to your deletion request, we cannot guarantee that the corresponding information will be deleted from the backup system immediately, but we will delete the information when the backup system is updated.

3. Changing the scope of your authorization consent or withdraw your authorization

You may change the scope of your authorization for us to continue collecting personal information or withdraw your authorization by deleting the information, disabling device features, or making privacy settings in JoyWE or software.

Please understand that each business feature requires some basic personal information. After you withdraw your consent or authorization, we cannot continue to provide you with the services corresponding to the withdrawn consent or authorization and we will no longer handle your corresponding personal information. However, your decision to withdraw your consent or authorization will not affect the handling of personal information previously conducted based on your authorization.

4. Getting a copy of your personal information

You have the right to get a copy of your personal information. If you need a copy of your personal information we have collected, please feel free to contact us. We will provide you with a copy of your personal information upon request, subject to compliance with applicable laws and technical feasibility.

5. Cancelling account

When you quit the company or organization served by JoyWE, or you are removed by the company or organization management, or your company or organization dissolves, you can cancel your account. After your account is cancelled, we will stop providing products and/or services to you and delete or anonymize your personal information as required by applicable law.

6. Responding to your request

If you are unable to access, correct or delete your personal information in the manner described above, or you need to access, correct or delete other personal information generated by your use of our products and/or services or to obtain a copy of your personal information, or you believe that JoyWE has violated any laws or regulations or agreements with you regarding the collection or use of your personal information, you may send an e-mail to onlyme@jd.com or contact us by any of the other means in this Privacy Policy. For security purposes, we may require you to provide a written request, or provide your identity document, and we will respond to your request within 15 days of receiving your feedback and verifying your identity. For your reasonable request, we will not charge any fee in principle, but for the repeated requests and the requests out of reasonable limit, we will charge a certain cost according to the situation. We may refuse the requests that are unreasonably repeated, require excessive technical means (e.g., requiring the development of new system or the fundamental change in existing practices), pose a risk to the legitimate rights of others, or are highly impractical (e.g., involving backup of information stored on tape), According to the laws and regulations, we will not respond to your request in the following cases:

(1) Your personal information is related to the personal information controller’s fulfillment of the obligations stipulated by laws and regulations;

(2) Your personal information is related to national security and national defense security;

(3) Your personal information is related to public security, public health and major public interests;

(4) Your personal information is related to criminal investigations, prosecutions, trials, or execution of judgments;

(5) There is sufficient evidence to show your subjective malice or abuse of rights;

(6) Your personal information is essential for protecting major legitimate rights (including life and property) and interests of the personal information subject or other people, but it is hard to obtain the subject’s consent;

(7) Response to your request will result in serious damage to the legitimate rights of you or other individuals and organizations;

(8) Your personal information involves trade secrets.

VI. Notice and Modification

1. With the development of our business, this Privacy Policy will be updated accordingly to provide you with better services. However, we will not reduce your rights under the Policy without your express consent. We will remind you of relevant update by posting an updated version on JoyWE and making a website announcement or otherwise before such updates take effect. You may also visit JoyWE to keep abreast of the latest Privacy Policy.

2. For material changes, we will also provide more remarkable notices (we will explain the specific changes to the Policy by email, text message or special prompts on the browser page).

Major amendments referred in the Privacy Policy include, but are not limited to:

(1) Major changes in our service mode. such as the purpose of processing personal information, the type of personal information processed, the use of personal information;

(2) Major changes in our ownership structure, organizational structure, etc., such as the change of owner caused by business adjustment, bankruptcy, merger and acquisition, etc.;

(3) Changes in main receivers of the shared, transferred or publicly disclosed personal information;

(4) Major changes in your right to participate in the processing of personal information and the way you exercise such right;

(5) Changes in our departments, contact details and complaint channels responsible for personal information security;

(6) In case of high risk indicated by impact assessment report of personal information security.

3. We will also archive the old version of this Policy for your reference.

4. In order for you to receive notifications in a timely manner, it is recommended that you notify us when your contact information is updated. Your continued use of our services after the updated Privacy Policy takes effect means that you have fully read, understood, and accepted the updated Policy and are willing to be bound by the updated Policy. We encourage you to read this Policy each time you use our services. You can view this Policy in JoyWE through “Me-Settings-About JoyWE-Privacy Policy”.

VII. How to Contact Us

1. If you have any questions, comments or suggestions regarding this Privacy Policy or your personal information, or complaints, reports, please contact us in the following manner.

E-mail of personal information protection officer: onlyme@jd.com; contact number: [950618]

Address: No. 18 Kechuang 11th Street, Yizhuang Economic and Technological Development Zone, Daxing District, Beijing

2. Normally, we will reply you within 15 days. If you are not satisfied with our reply, especially if you think our way of processing your personal information harms your legitimate rights and interests, you may also complain the case or report it to the regulatory authorities of network information, telecommunications, public security, industry and commerce, etc.

Attachment: Examples of personal information and sensitive personal information (personal information not collected by JD APP or website, for example only)

Personal information refers to all kinds of information related to an identified or identifiable natural person recorded electronically or in other ways, excluding anonymized information. Sensitive personal information refers to the personal information that, once disclosed or illegally used, may easily lead to the infringement of the personal dignity of a natural person or endanger the personal and property safety, including biometric information, religious beliefs, specific identity, medical and health care, financial accounts, whereabouts and other information, as well as the personal information of minors under the age of 14. (This definition is derived from the Personal Information Protection Law of the People’s Republic of China).

Examples of personal information (from GB/T 35273-2020 Information Security Technology-Personal Information Security Specification)
Basic information	Name, birthday, gender, ethnicity, nationality, family relationship, address, phone number, and e-mail address
Identity information	ID card, certificate of military officer, passport, driver’s license, work permit, pass, social security card, and residence permit
Biometric information	Personal genes, fingerprints, voice prints, palm prints, auricles, iris, and facial recognition features
Network identity information	Account, IP address, personal digital certificate of personal information subject
Health and physiological information	Medical records, such as symptoms, hospitalization records, the doctor’s advice, inspection reports, surgery and anesthesia records, nursing records, medication administration records, drug and food allergy information, birth information, past history, diagnosis and treatment, family history, history of present illness, history of infection, as well as personal health information
Education and work experience	Job, position, employer, education background, degree, education experience, work experience, training record, and transcript
Property information	Bank account number, identification information (passphrase), deposit information (including fund amount, payment and collection records), real estate information, credit history, credit information, transaction and consumption records, flow records, as well as virtual property information such as virtual currency, virtual transactions, and games redemption codes
Communication information	Communication records and content, SMS, MMS, e-mails, and data describing personal communications (usually called metadata)
Contact information	Contacts, friend list, group list, and e-mail address list
Internet access history	Activity history of personal information subject saved by logs, including website browsing history, software usage history, clicking history, and favorites list
Commonly used device information	Basic information about a commonly used device, including the hardware serial number, device MAC address, software list, and unique device identifier (such as IMEI, Android ID, IDFA, Open UDID, GUD, and SIM card IMSI information)
Location information	Whereabouts, precise positioning, accommodation, latitude and longitude
Other information	Marriage history, religious belief, sexual orientation, and undisclosed criminal records

Examples of sensitive personal information (from GB/T 35273-2020 Information Security Technology-Personal Information Security Specification)
Property information	Bank account, identification information (passphrase), deposit information (including fund amount, payment and collection records), real estate information, credit history, credit information, transaction and consumption records, flow records, as well as virtual property information such as virtual currency, virtual transactions, games redemption codes
Health and physiological information	Medical records, such as symptoms, hospitalization records, the doctor’s advice, inspection reports, surgery and anesthesia records, nursing records, medication administration records, drug and food allergy information, birth information, past history, diagnosis and treatment, family history, history of present illness, history of infection
Biometric information	Personal genes, fingerprints, voice prints, palm prints, auricles, iris, and facial recognition features
Identity information	ID card, certificate of military officer, passport, driver’s license, work permit, social security card, and residence permit
Other information	Sexual orientation, marriage history, religious beliefs, undisclosed criminal records, communication records and contents, contacts, friend list, group list, whereabouts, web browsing records, accommodation, and precise positioning