Privacy
1.1 Statement and Commitment of the Privacy Policy
Party A ( referred to as "we") fully recognizes the importance of privacy to Party B ( referred to as "you"). We understand that you may share sensitive information when using our platform ( referred to as the "Platform"), and we take this responsibility seriously and with utmost care. Protecting the security and privacy of your personal information is our top priority. We commit to strictly complying with applicable laws and regulations, and to adopting necessary and appropriate technical and managerial measures to safeguard the security of your personal information.
1.2 Scope of Policy Application
This Privacy Policy applies to all activities involving the collection, use, storage, processing, transmission, and disclosure of your personal information by us through the Platform (excluding third-party services). The Platform may contain third-party services (such as payment services, analytics tools, advertising services, etc.). The collection and use of your personal information by such third-party services are governed by their own privacy policies and are unrelated to this Platform. We will prominently indicate the third-party names and provide access links to their privacy policies at the points where such third-party services are integrated, and we recommend that you read and understand them carefully. Your access to or use of this Platform shall be deemed as your acknowledgment, understanding, and acceptance of all contents of this Policy. If you do not agree with any terms of this Policy, please immediately cease accessing or using the Platform.
1.3 Policy Updates and Notification
We reserve the right to update or modify this Policy from time to time. Upon updating this Policy, we will publish the revised Policy text in a prominent location on the Platform and notify you through reasonable means (such as platform announcements, internal messages, etc.). The updated Policy shall take effect from the date of publication. If you continue to access or use the Platform after the Policy has been updated, it shall be deemed that you have accepted the updated Policy. We recommend that you regularly review this Policy to understand our latest measures and practices regarding personal information protection. We will not reduce the rights you are entitled to under this Policy without your explicit consent.
2.1 Definitions of Key Terms
2.1.1 Personal Information: Refers to various information recorded electronically or by other means that can identify a specific natural person either alone or in combination with other information, or reflect the activities of a specific natural person. This includes but is not limited to name, identification number, contact address, contact information, etc. The term "Personal Information" in this policy is consistent with the definitions in relevant laws and regulations such as the "Regulations on Network Data Security Management."
2.1.2 Non-Personal Information: Refers to information that does not identify and cannot identify a specific natural person or reflect the activities of a specific natural person, i.e., information that does not constitute "Personal Information." Such information cannot be directly or indirectly associated with any specific individual.
2.1.3 Platform: Refers to the specific websites, platforms, applications, and related online services provided by Party A for Party B’s access and use. The specific scope shall be subject to the agreement between both parties and the actual services provided by Party A.
2.1.4 Processing: Refers to actions such as collecting, storing, using, processing, transmitting, providing, and disclosing personal information.
2.1.5 Sensitive Personal Information: Refers to personal information that, once disclosed, illegally provided, or misused, may endanger personal or property safety, or cause damage to personal reputation, physical or mental health, or result in discriminatory treatment.
2.1.6 User: Refers to Party B who accesses, browses, or uses this platform.
3.1 Types of Personal Information
During your use of the platform, we may collect the following types of personal information:
3.1.1 Identity Information: Including but not limited to your name, nickname, avatar, and other information used to identify you or display on the platform.
3.1.2 Contact Information: Including but not limited to your mobile phone number, email address, and other information used to contact you and verify your account.
3.1.3 Account Information: Including but not limited to the username and password (stored in encrypted form) you registered on the platform, as well as information related to account security.
3.1.4 Usage Information: After you agree to the User Agreement and Privacy Policy and use the AI conversation feature, we collect and retain the conversation text you enter, the AI-generated responses, and the session identifiers, message identifiers, timestamps, and related processing records necessary to provide the service. We use this information to provide the conversation service, enable access to conversation history, maintain contextual continuity, and conduct necessary security reviews and troubleshooting. These records are associated with your account and are not deleted immediately after an individual conversation ends. For details on how these records are processed, see Section 4.3 of this Policy; for retention periods and handling upon expiry, see Chapter V.
3.1.5 Sensitive Personal Information: For the collection of sensitive personal information, such as information concerning mental health status, we will use a separate pop-up to clearly inform you of the necessity of collection, scope of use, retention period, and impact on your personal rights and interests, and will separately obtain your authorization after you click the “Agree” button. The current version does not provide a direct in-app entry for withdrawing this authorization. You may submit a request to access, correct, or delete personal information, or to withdraw consent, by emailing support@I-Heart.org. We will process the request in accordance with law after verifying your identity. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal; the deletion, retention, and handling upon expiry of existing information are governed by this Policy and applicable law.
3.1.6 Other Information You Voluntarily Provide: Other personal information you voluntarily provide to us during your use of the platform to achieve specific functions or services.
3.2 Types of Non-Personal Information
We may also collect non-personal information, which cannot identify your identity alone or in combination with other information, mainly including:
3.2.1 Device Information: Such as the model of the device you use, operating system type and version, device identifiers (e.g., IMEI, MAC address, etc., but anonymized or de-identified), browser type and version, screen resolution, and other information.
3.2.2 Usage Habit Information: Such as the date and time you visit the platform, pages or functions accessed, time spent on the platform, clicks on links, etc.
3.2.3 Anonymized or Aggregated Information: We may anonymize or aggregate the collected personal information so that it can no longer identify specific individuals. Such processed information is considered non-personal information. For example, data formed after statistical analysis of overall user usage trends and feature preferences.
3.2.4 Other Non-Identifiable Information: Other information that does not fall under the above categories but also cannot identify a specific natural person.
3.3 Methods and Sources of Information Collection
We mainly collect your information through the following methods and sources:
3.3.1 Information You Provide Voluntarily: When you register a platform account, complete your personal profile, or use platform functions (such as initiating conversations, submitting feedback, etc.), you voluntarily provide information to us, including but not limited to your name, contact information, conversation content, etc.
3.3.2 Automatic Collection During Your Use of the Platform: When you visit, browse, or use our platform, our system may automatically collect your device information, usage habit information, etc., usually through the use of cookies, web beacons, or other similar technologies (specific provisions are set forth in Article 13 of this policy).
3.3.3 Other Sources With Your Consent: In compliance with relevant laws and regulations, and after obtaining your explicit consent, we may obtain your personal information from other lawful channels. We will ensure the legality of such sources and clearly inform you of the source, type, and purpose of the information before collection, and obtain your consent.
3.3.4 Other Methods Permitted by Laws and Regulations: According to relevant laws and regulations, in certain circumstances, we may collect necessary personal information without your prior consent, such as information required to fulfill legal obligations.
4.1 Purpose and Scope of Personal Information Use
4.1.1 We will only use your personal information for the purposes stated in this Policy and the relevant service terms, and within the scope of your authorized consent. Without your explicit consent or unless otherwise stipulated by laws and regulations, we will not use your personal information for other purposes.
4.1.2 Specific purposes of use include but are not limited to:
a) Providing you with platform services and related functions, including account registration, identity verification, service delivery, user support, etc.;
b) Maintaining the normal operation of the platform and ensuring the security and stability of the services, such as conducting security checks, identity verification, and fraud prevention;
c) Improving the quality of our products and services, optimizing user experience based on your usage habits and feedback;
d) Sending you notifications, updates, and marketing information related to platform services (if you have agreed to receive such information);
e) Fulfilling our obligations under this Policy or other related agreements;
f) Complying with legal and regulatory requirements or responding to legitimate requests from authorized authorities;
g) Achieving other purposes explicitly informed in this Policy and related service terms.
4.1.3 The manner and types of personal information processing will be consistent with the purposes notified at the time of collection and will not exceed the necessary scope. If we need to use personal information for purposes not stated in this Policy, we will notify you clearly in advance through appropriate means (such as updating this Policy or separate notification) and proceed only after obtaining your separate consent.
4.2 Use of Non-Personal Information
4.2.1 For the non-personal information collected, we may use it for any lawful purpose, including but not limited to:
a) Analyzing user behavior and preferences to understand how users use our platform, thereby improving platform functions, design, and services;
b) Developing new products, services, and features;
c) Conducting statistical analysis and market research to enhance our business operation efficiency;
d) Sharing with partners or publicly disclosing (provided such information does not contain any personal information and will not be used to identify specific individuals);
e) Other lawful commercial purposes.
4.2.2 We may anonymize or de-identify the collected personal information to convert it into non-personal information. The use of such non-personal information is not subject to the restrictions on personal information use set forth in this Policy.
4.3 Special Statement on AI Conversation Records
4.3.1 Collection and Retention: After you agree to the User Agreement and Privacy Policy and use the AI conversation feature, we retain your conversation text, AI responses, and necessary session, message, and processing records. Retaining these records is a component of services such as conversation history, contextual continuity, and necessary security reviews, and does not depend on your separately enabling a “Share Conversation Records” option.
4.3.2 Use and Association: We use the above records for the purposes and within the necessary scope stated in this Policy. Conversation records are associated with your account and may contain personal information that you voluntarily enter. Please avoid entering sensitive personal information unrelated to your use of the service. We do not treat raw conversation records associated with your account as anonymous information.
4.3.3 Third-Party AI Processing: To generate responses and maintain contextual continuity, after your authorization takes effect, we send to third-party AI services the conversation text, selected conversation history, and necessary context required to perform the relevant functions. The categories of data, recipients, processing purposes, and authorization arrangements are described in Chapter VI of this Policy.
4.3.4 Retention Period and Other Uses: Conversation records are not deleted immediately when an individual conversation ends; their retention period and handling upon expiry are governed by Chapter V of this Policy. If we intend to use personal information for another purpose not stated in this Policy, we will separately notify you and obtain the authorization required by law. The retention of necessary service records does not mean that you consent to the use of conversations for any other purpose.
5.1 Location and Duration of Information Storage
5.1.1 Storage Location: The personal information we collect from you will be stored on servers located within the territory of the People’s Republic of China. We commit that, without your explicit authorization and in compliance with relevant laws and regulations, we will not transfer your personal information abroad.
5.1.2 Storage Duration: We will store your personal information for the shortest period necessary to achieve the purposes of personal information collection described in this Policy. The specific storage period will be determined based on the following principles:
a) Meeting the minimum retention requirements prescribed by laws and regulations;
b) Ensuring the continuous provision of services to you;
c) Resolving potential disputes and protecting our legitimate rights and interests;
d) Longer storage periods authorized separately by you.
5.1.3 Expiration Handling: When the storage period of your personal information expires, or we no longer provide services to you and there are no other statutory or agreed storage reasons, we will, in accordance with Article 21 of the Regulations on Cyber Data Security Management, take security measures including but not limited to deletion, anonymization, or isolated storage to ensure that your personal information is no longer used or disclosed in any form (except as otherwise provided by laws and regulations). For non-personal information formed after de-identification processing, its storage and use are not subject to the storage period restrictions in this clause.
5.2 Information Security Protection Measures
We place great importance on the security of your personal information and adopt technical and managerial measures that comply with industry standards, committed to protecting your personal information from unauthorized access, use, disclosure, alteration, or damage. Specific security protection measures include but are not limited to:
5.2.1 Data Encryption: We protect your personal information (including but not limited to your account password, conversation texts, etc.) using strong encryption technologies during transmission and storage (such as SSL/TLS encrypted transmission, AES encrypted storage, etc.).
5.2.2 Access Control: We implement strict permission management mechanisms for accessing personal information, authorizing only those personnel who need access to your personal information to perform their job duties, and such access is recorded and audited.
5.2.3 Security Technologies and Systems: We continuously invest in and adopt advanced network security technologies and protection systems, including but not limited to firewalls, intrusion detection and prevention systems, data backup and recovery mechanisms, to guard against various network attacks and data leakage risks.
5.2.4 Security Management System: We have established sound information security management systems and operating procedures, including but not limited to security training, security audits, and incident response plans. We regularly conduct information security and privacy protection awareness training for employees and evaluate and improve the effectiveness of security measures.
5.2.5 Third-Party Service Security: If some of our services involve third-party service providers, we conduct strict security assessments and due diligence on them and require them to comply with stringent security and confidentiality obligations through contracts or other means to ensure that your personal information is protected at an equivalent level.
5.2.6 Security Vulnerability Response: We regularly perform security vulnerability scans and assessments. In the event of or upon the possibility of a personal information leakage or other security incidents, we will immediately activate emergency response plans, take remedial measures, and report to you and relevant regulatory authorities in a timely manner in accordance with laws and regulations.
5.2.7 Your Account Security: Please properly safeguard your platform account information (especially your password) and avoid disclosing it to any third party. If you discover any security risks related to your account, please notify us immediately. We will assist you in taking appropriate security measures.
Although we have implemented the above security measures, due to the complexity and dynamic nature of information technology, we cannot guarantee absolute security of information. Please understand that by using the platform services, you agree to assume the corresponding risks arising from the use of the services.
When you use the AI functions in this application (such as AI dialogue, health analysis and reports, personalized recommendations), we will, upon your authorization, send the data necessary to realize such functions to third-party AI services and their processing components. We only carry out such processing on the premise that you have agreed to the user terms/privacy authorization and that the consent has taken effect; if you have not agreed or the consent has not taken effect, we will not send your personal data to the third-party AI services.
6.1 Data We Send to Third Parties
To realize AI functions, we may send the following categories of data (to the minimum necessary extent):
• User chat text (the text content you input to the AI)
• Selected conversation history (used to maintain contextual continuity)
• User context information: user_id, nickname, membership level
• AI analysis input: for example, stress/event summaries, assessment data related to analysis
• Structured content required for memory processing (used for context recall and conversation consistency)
Explanation: We do not collect additional categories of data unrelated to the AI processing purposes.
6.2 List of Third-Party Recipients
The current production deployment uses Volcengine Ark (service domain: ark.cn-beijing.volces.com) for AI conversation and analysis, internal language-model text processing, and vector-embedding capabilities. Conversation and memory-summary configurations use Doubao-series models. We send data to it only after authorization takes effect and only to the extent necessary to implement the relevant functions.
We require third-party recipients to provide data protection measures no less stringent than ours and to be contractually or platform-term bound to process data only within the agreed purposes and scope.
6.3 Processing Purposes
We send the above data to third-party AI services solely for the following purposes:
• Providing AI dialogue and content generation capabilities
• Providing health-related analysis and automatic/semi-automatic report generation
• Provide personalized recommendations (such as training/intervention suggestions)
• Enhance the contextual understanding and continuity of the current session (through memory retrieval)
• Ensure service quality and security (such as necessary troubleshooting and risk control)
6.4 User Authorization and Withdrawal
Authorization Prerequisite: Before sending personal data to third-party AI services, we will first obtain your authorization; no data will be sent without authorization.
Authorization Content: We will clearly inform you of the types of data sent, the identity of the recipient, and the purpose of processing.
Withdrawal Mechanism: The current version does not provide an in-app authorization withdrawal entry. Once authorization takes effect, it will remain valid as a prerequisite for AI functionality availability.
• 4. Impact of Withdrawal: Before we provide the capability to withdraw authorization, if you stop using the AI functionality, no new AI request data will be sent; the legality of already completed processing activities will not be affected.
7.1 Limitations and Principles of Information Disclosure
7.1.1 We strictly keep your personal information confidential. Except in the following circumstances, we will not disclose or share your personal information with any third party:
a) With your explicit consent;
b) Sharing the minimum necessary scope of data with third-party AI service providers as required to realize the AI functions described in Chapter 6 of this Policy;
c) In the statutory or agreed circumstances described in Article 7.2 of this chapter.
7.1.2 We commit that, under any circumstances, the disclosure and sharing of information shall follow the principles of legality, legitimacy, and necessity, and shall be limited to the purposes explicitly informed in this Policy or related service terms, or within the scope required by laws and regulations.
7.1.3 Before disclosing or sharing information, we will make reasonable efforts to assess the third party’s ability to protect personal information and require them to take adequate security measures to protect your personal information.
7.2 Possible Third-Party Sharing Scenarios
7.2.1 Legal Requirements and Regulatory Cooperation: Under the following circumstances, we may disclose your personal information within the necessary scope in accordance with laws and regulations, litigation dispute resolution needs, or legitimate requests from administrative or judicial authorities:
a) To comply with applicable laws, regulations, legal procedures, or mandatory government requests;
b) In response to court subpoenas, judgments, rulings, or other judicial procedures;
c) To safeguard our legitimate rights and interests, such as investigating possible fraud, platform abuse, or violations of our service terms;
d) To protect your or other individuals’ personal safety or property security, or to prevent the occurrence of serious illegal or criminal acts.
7.2.2 Service Providers: To provide and optimize platform services to you, we may share your personal information with strictly screened and evaluated third-party service providers (such as cloud storage service providers, data security technology service providers, customer support service providers, etc.). We will only provide these service providers with the minimum scope of personal information necessary for them to perform their duties and strictly bind their conduct through contracts or other means.
7.2.3 Business Transfer or Restructuring: In the event of a merger, acquisition, asset sale, bankruptcy liquidation, or other similar business transfer or restructuring, your personal information may be transferred to relevant third parties as part of the business assets. In such cases, we will make reasonable efforts to ensure that the recipient continues to comply with the commitments and requirements regarding personal information protection in this Policy and will notify you in an appropriate manner (such as advance notice) before the transfer.
7.2.4 Based on Your Explicit Consent: Upon obtaining your explicit, specific, and separate consent, we may share your personal information with third parties designated by you according to your instructions.
7.2.5 Sharing of De-identified/Anonymized Information: We may share or publicly disclose non-personal information formed after de-identification or anonymization with third parties for legitimate purposes such as data analysis, market research, product improvement, and academic research. Such sharing and disclosure of de-identified or anonymized information are not subject to the restrictions on personal information disclosure and sharing in this chapter.
8.1 Rights to Access, Correct, and Delete Personal Information
8.1.1 Right of Access: You have the right to access the personal information we collect and process about you. You may submit an access request to support@I-Heart.org. Within a reasonable period after receiving your request and completing identity verification, we will provide you with a copy of the personal information accessible to you in accordance with law.
8.1.2 Right to Correct and Supplement: If you believe that the personal information we hold about you is inaccurate or incomplete, you have the right to request correction or supplementation. You may submit a correction or supplementation request through the channels described in Section 8.1.1 and provide relevant supporting materials (if necessary). We will verify and correct or supplement any inaccurate or incomplete information and inform you of the processing results.
8.1.3 Right to Delete: Under any of the following circumstances, you have the right to request the deletion of your personal information:
a) The purpose for processing your personal information has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;
b) We have stopped providing platform services, or you have canceled your platform account;
c) You have withdrawn your consent to the processing of personal information (except as otherwise provided by laws and regulations);
d) We have processed your personal information in violation of laws, regulations, or agreements with you;
e) Other circumstances where laws and regulations require personal information to be deleted.
You may submit a deletion request through the channels described in Section 8.1.1. After receiving your request and completing identity verification, we will delete the personal information that meets the above conditions and inform you of the processing results. If it is technically difficult to delete personal information, we will provide you with a written explanation of the specific reasons for the inability to delete and take alternative measures: de-identify such information to ensure that your identity cannot be recognized; at the same time, restrict all personnel’s access to such information and retain it only within the scope required by laws and regulations. You may inquire about the implementation of alternative measures at any time.
8.2 Authorization for AI Features and Conversation Records
Data processing when you use AI features is premised on the User Agreement and privacy authorization having taken effect. The authorization arrangements for third-party AI processing are described in Section 6.4 of this Policy, and the retention and use of conversation records are described in Section 4.3. The current version does not provide a direct in-app entry for withdrawing AI authorization. After you stop using AI features, no new conversation data will be sent as a result of new AI feature requests; this does not mean that existing conversation records have been deleted. You may submit a request to access, correct, or delete personal information, or to withdraw consent, by emailing support@I-Heart.org. We will process the request in accordance with law after verifying your identity.
9.1 Special Protective Measures for Minors’ Personal Information
9.1.1 Rules for the Processing of Minors’ Personal Information: We fully recognize the importance of protecting minors’ personal information. If the services provided by the platform may involve minor users, we will formulate specific rules for the processing of minors’ personal information in accordance with the provisions of Article 21 of the Regulations on Network Data Security Management, and display such rules separately, clearly, and understandably in a prominent position on the platform.
9.1.2 Guardian Consent: Pursuant to Article 22 of the Regulations on Network Data Security Management, if you are a minor under the age of fourteen, you must obtain the explicit consent of your parents or other guardians before using this platform and providing us with any personal information. We will verify the identity of the guardian and the authenticity of the consent through reasonable means.
9.1.3 Limitations on Information Collection: We will only collect minors’ personal information within the minimum scope necessary for providing services, with legal permission and explicit consent from the guardian. We will not proactively collect unnecessary personal information.
9.1.4 Restrictions on Information Use and Sharing: The use of minors’ personal information will be strictly limited to providing services to minors and ensuring service security. It will not be used for any marketing or other activities unrelated to the services. Except as required by laws and regulations or with the explicit consent of the guardian, we will not share minors’ personal information with any third parties.
9.1.5 Secure Storage and Protection: We will adopt stricter security storage and protection measures for the collected minors’ personal information to ensure that the information is not leaked, altered, or lost.
9.1.6 Rights of Guardians: Parents or other guardians of minors have the right to access, copy, correct, supplement, or request deletion of the minors’ personal information we have collected, and may withdraw their consent for the processing of minors’ personal information at any time. We will provide convenient methods and channels for guardians to exercise these rights and verify the identity of the guardians.
9.1.7 Education and Guidance: We will make reasonable efforts to incorporate privacy protection and cybersecurity knowledge suitable for minors into the platform to help minors improve their awareness and ability to protect personal information.
9.1.8 No Active Attraction of Minors: If this platform is primarily targeted at adult users, we will take measures to avoid actively attracting minors. Upon discovering minors using the platform without guardian consent, we will take measures such as restricting usage or notifying guardians according to the actual situation.
10.1 Privacy Statement Regarding Third-Party Links and Services Contained on the Platform
10.1.1 This platform may contain links to third-party websites, applications, or other services (hereinafter collectively referred to as “Third-Party Services”), or integrate functions or services provided by third parties within the platform. These Third-Party Services are operated and controlled independently by third parties.
10.1.2 We provide such links or integrations solely for your convenience and do not imply our endorsement of such Third-Party Services or their operators. We do not assume any responsibility for the content, privacy policies, terms of service, or actions of such Third-Party Services or their providers.
10.1.3 Third-Party Services may collect and use your personal information. Their collection, use, storage, processing, transmission, and disclosure of your personal information shall be governed by their own privacy policies and relevant regulations, and are not subject to this privacy policy. In accordance with Article 21 of the Regulations on Network Data Security Management, the personal information processing rules of Third-Party Services shall be publicly disclosed in a centralized, easily accessible, prominent location, with clear, specific, and understandable content.
10.1.4 Before accessing or using any Third-Party Services, we strongly recommend that you carefully read and fully understand the privacy policies, terms of service, and other relevant statements of such third parties to understand how they collect, use, and protect your personal information, and decide whether to use such Third-Party Services based on your own judgment.
10.1.5 We have no control over and assume no responsibility for the collection and use of your personal information by Third-Party Services. Any personal information leakage, loss, or other consequences resulting from your access to or use of Third-Party Services shall be borne by you.
10.1.6 If you discover any infringement of your personal information rights by any Third-Party Service, please contact that third party directly or file a complaint or report with relevant authorities in accordance with laws and regulations.
XI. Legal Liability
11.1 Our Responsibility for Protecting Personal Information
11.1.1 We commit to strictly fulfilling the personal information protection obligations stipulated in this privacy policy and relevant laws and regulations, and to adopting necessary and reasonable technical and management measures to ensure the security of your personal information. If, due to our failure to fulfill the above obligations, your personal information is leaked, altered, lost, or otherwise compromised, causing you damage, we will bear corresponding compensation liability in accordance with relevant laws and regulations, except for damages caused by your own reasons (such as failure to properly safeguard account passwords or disclosure of personal information to third parties), force majeure, or third-party infringement beyond our fault.
11.1.2 We will provide necessary personal information protection training to our employees to ensure their understanding and compliance with this privacy policy and related confidentiality provisions. For employees who violate this privacy policy or related regulations by unauthorized disclosure, misuse, or illegal processing of your personal information, we will pursue their legal liability in accordance with the law.
11.1.3 In the event of a personal information security incident, we will immediately activate an emergency response plan, take remedial measures to prevent further damage, and report the incident, measures taken, and remedial suggestions to you and relevant regulatory authorities in a timely manner as required by laws and regulations.
11.2 User’s Liability for Violations of the Privacy Policy
11.2.1 You shall ensure that all personal information and other data you provide to us are true, accurate, complete, and lawful, and shall not provide any false, misleading, infringing on the lawful rights of third parties, or illegal information. If the information you provide is untrue, inaccurate, incomplete, or unlawful, causing losses to us or third parties, you shall bear full compensation liability for such losses.
11.2.2 You shall properly safeguard your platform account information (especially passwords) and be responsible for all activities conducted through your account. If you discover any unauthorized use or other security issues with your account, you should immediately notify us. Any losses caused by your failure to properly safeguard your account information or failure to notify us in a timely manner shall be borne by you.
11.2.3 You shall not use our platform or services to engage in any activities that infringe upon our or third parties’ privacy rights, personal information rights, or other lawful rights, nor violate any provisions of this privacy policy. If you violate the above agreements and cause damage to us or third parties, you shall bear corresponding legal liabilities, including but not limited to ceasing infringement, eliminating the impact, and compensating for losses.
XII. Dispute Resolution and Contact Information
