ZCode Privacy Policy

[Introduction]

Welcome to our products and services! We understand the importance of your personal data and are committed to complying with all applicable laws and regulations and implementing appropriate security measures to protect it. Your trust matters to us. As ZCode service providers (also referred to as "we" or "ZCode"), we have prepared this "ZCode Privacy Policy" (hereinafter referred to as "this Policy") to help you understand how we collect, process, and protect your personal data when you use our products and services, so that you can make informed choices.

Before using our products and services, please read this Policy carefully. In particular, please pay close attention to the provisions marked in bold or bold underline to ensure that you fully understand and agree before proceeding. We will endeavor to explain any technical terms used in this Policy in plain and accessible language. If you do not agree with any provision of this Policy, you should immediately cease accessing or using our products. By checking boxes, clicking to confirm, consenting to authorization, or accepting this Policy by any other means, you acknowledge that you agree to be bound by this Policy and consent to our collection, use, and protection of your personal data in accordance with this Policy. If you have any questions, comments, or suggestions regarding this Policy, you may contact us through the contact methods provided by ZCode.

1. Definitions and Scope of Application

(1) Data Controller

The Services are provided and controlled by JINGSHENG HENGXING TECHNOLOGY PTE.LTD, with its registered address at 10 ANSON ROAD, #26-03, INTERNATIONAL PLAZA, SINGAPORE 0759903. JINGSHENG HENGXING TECHNOLOGY PTE.LTD is the controller responsible for the processing of your Personal Data as described in this Privacy Policy. If you have any questions about how we use your personal data, please contact user_feedback@aminer.cn.

(2) Definitions

ZCode: refers to the products or services developed and operated by JINGSHENG HENGXING TECHNOLOGY PTE.LTD under the ZCode brand, including content generation, AI-assisted operations, and any other forms of service that may be provided to you in the future.

Affiliated Company: refers to any affiliate of the ZCode Service Provider. For any entity (including an individual, company, partnership, organization, or any other entity), "affiliate" means any entity that directly or indirectly controls, is controlled by, or is under common control with such entity. "Control" means the power, whether through ownership of voting securities, by contract, or otherwise, to direct or cause the direction of the management and policies of an entity, or any relationship that constitutes de facto control.

Device Information: may include attributes of the terminal device on which you install and run the ZCode application, such as device brand, model, manufacturer, system version, operating system API version, system attributes, CPU information (frequency, model, architecture), disk information, device architecture, device connectivity information (network status, time zone, system country/region, system language), device status information (such as number of running threads, system runtime information), and application information.

User: refers to a registered and active user of the ZCode product, referred to as "you" or "user" in this Policy.

Personal Data: refers to any information recorded in electronic or other form that relates to an identified or identifiable natural person, excluding information that has been anonymized.

Sensitive Data: refers to personal data that, if leaked or unlawfully used, could cause harm to the dignity of a natural person or endanger their personal or property safety, including biometric data, religious beliefs, specific identities, medical and health information, financial accounts, location tracking data, and other similar information, as well as the personal data of minors under the age of 13. (Specific sensitive data items are prominently marked in bold underline throughout this Policy.)

Deletion: refers to the removal of personal data from systems used in daily business operations such that it cannot be retrieved or accessed.

Anonymization: refers to the technical processing of personal data such that the data subject can no longer be identified and the processed data cannot be restored to its original form.

Child: refers to a minor under the age of 13.

Unless otherwise specified, terms used in this Policy shall have the same meanings as those defined in the Terms of Service.

(3) Scope of Application

1. This Policy applies to the ZCode application operated by JINGSHENG HENGXING TECHNOLOGY PTE.LTD and all products and services provided to you, including those arising from future technological developments. If ZCode's products or services are used within other products or services that we develop and operate (such as logging in with a ZCode account), or if products developed and operated by other network operators lawfully integrate such functionality and do not maintain a separate privacy policy, this Policy shall also apply to such products or services. Where we have established a separate privacy policy for specific products or services we provide to you, the relevant privacy policy shall apply.

2. Except for the data collection and use activities described in this Policy, this Policy does not apply to services provided to you by third parties. Such third-party services are governed by their own privacy policies and personal data collection rules as separately communicated to you.

2. How We Collect and Use Your Information

When you use our products and services, the personal data we need or may need to collect and use falls into the following two categories:

1. Necessary information for basic functions: To provide you with the basic functions of our products and/or services, you must authorize us to collect and use certain necessary information. If you decline to provide such information, you will be unable to use our products and/or services.

2. Optional information for additional features: To provide you with additional features of our products and/or services, you may choose whether to authorize us to collect and use certain information. If you decline to provide such information, you will be unable to use the relevant additional features or achieve their intended effects, but this will not affect your use of the basic functions of our products and/or services.

1. We are committed to developing a diverse range of products and services to meet your needs. Given the variety of products and services we offer, and because different users select and use different features, the basic and extended functions—and the corresponding types and scope of personal data collected—will vary. Please refer to the specific product or service documentation for details.

2. To improve our products, services, and related technologies, we may introduce new features or optimize existing ones from time to time. Without your consent, we will not restrict or diminish the rights you enjoy under this Policy. For material changes involving the processing of personal data, we will update this Privacy Policy and notify you in an appropriate manner, or obtain your consent as required by applicable law. If you have any questions, comments, or suggestions during this process, you may contact us using the information provided at the end of this Policy, and we will respond promptly.

3. Your consent to this Policy indicates that you understand the functions provided by the product and the personal data necessary for their operation, and that you have authorized the corresponding collection and use. However, this does not constitute separate consent to the activation of additional features or the processing of sensitive data. We will seek your separate consent based on your actual usage.

4. When you use certain features of ZCode, you may need to grant certain device or system-level permissions. We will clearly inform you and request authorization in an appropriate manner when the relevant feature is triggered. Once granted, you may disable such permissions at any time through your device's system settings. The absence of such permissions will only affect the availability of the corresponding feature and will not affect the provision of ZCode's core services.

(1) Account Login

1. We provide services based on your Z.ai account. We collect information that you provide when you access our Services via an existing account (such as Z.ai), such as your email address.

2. To verify that we are providing services to you personally, we may verify your identity based on the information you have provided.

(2) Intelligent Services

1. Content Generation and AI-Assisted Operations

(1) When you use the ZCode product, we will collect the text, files (including but not limited to uploads and inputs you provide in the form of text, images, audio, video, configuration parameters, shell commands, and similar formats), and code submitted to us through conversation, in order to provide you with content generation and AI-assisted operation services.

(2) Please note that whether and what kind of personal data you provide in a conversation is entirely at your discretion. If you provide us with sensitive data (including but not limited to biometric information), we will implement sufficient security measures. However, there remains a risk that, if such information is leaked or misused, it could cause serious harm to your personal safety, property, or personal rights. We do not recommend that you provide personal data that could adversely affect your legitimate rights and interests.

(3) We will record your conversation content, including input information and generated content. You can delete and manage specific conversations through "History".

2. Device and System Permissions

When you use certain features of ZCode, the following permission requests may be involved. We will only request such permissions via a pop-up prompt when you access the relevant feature. You may enable or disable these permissions at any time through your system settings. If you do not enable these permissions, you will be unable to use the corresponding features, but this will not affect your use of other features.

(3) Service Subscription

To manage your orders, complete payment settlement, provide after-sales and customer service, and safeguard your transaction security, when you choose to subscribe to ZCode services, we will collect your plan/product ID, plan/product name, price, currency, discount amount, amount payable, invitation code, sales channel, risk verification ticket, business serial number, payment method, order number/order ID, payment status, payment creation time, subscription status, renewal status, agreement number, as well as necessary transaction information returned by third-party payment services such as Stripe.

(4) Customer Service and Dispute Resolution

When you contact us or submit a dispute resolution request, we will generally collect the personal data necessary to verify your identity. After verifying your identity, we may collect and use your contact information, usage logs, and other information relevant to the matter at hand in order to provide customer service and resolve disputes.

To facilitate communication with you, help resolve issues promptly, and record the disposition and results of relevant matters, we will retain records of communications and correspondence between you and us.

(5) Product Operation and Security

1. During your use of ZCode, in order to ensure the secure operation of the product and/or service and the quality and efficiency of operations, we need to collect your client time zone, language, screen resolution, application software version, operating system type/version, device identifier, event name, event region, event type, event extension information, user ID, talk_id/message_id (if applicable). In feedback scenarios, we will also collect application software version, build information, Node version, OS platform/version/architecture, anonymous feedback client ID, irreversible digest of the login account, and screenshots/log packages proactively uploaded by you.

(6) Additional Rules for Collecting and Using Personal Data

1. If the information you provide contains the personal data of other users, you must ensure that you have obtained lawful authorization before providing such data to ZCode. You shall not provide others' personal data without authorization.

2. Please note that as our business develops, we may adjust the features and services offered by ZCode. As a general principle, when new features or services are related to existing ones, the personal data collected and used will have a direct or reasonable connection to the original processing purpose. In circumstances where there is no direct or reasonable connection to the original processing purpose, we will separately inform you and obtain your consent in accordance with applicable laws, regulations, and national standards through page prompts, interactive processes, or agreement confirmations.

3. If we obtain your personal data indirectly from a third party, we will require the third party to provide a clear, written explanation of the source of such data and confirm that it has obtained your lawful authorization to collect, process, and share your personal data with us. Except where expressly permitted by law, we will only collect your personal data from a third party after confirming that the third party has obtained your authorized consent. If the scope of the third party's authorization is insufficient to cover our intended processing purposes, we will require the third party to obtain your additional consent before we proceed with further processing. Our professional security team will apply enhanced data protection measures (including sensitive information reporting, encrypted storage, and access controls). We will apply safeguards no less stringent than those we use for our own users' personal data when handling indirectly obtained personal data.

4. Exceptions to Consent Requirements

In accordance with applicable laws and regulations, we may collect and use your personal data without your consent in the following circumstances:

(1) Where necessary for the conclusion or performance of a contract to which you are a party;

(2) Where necessary for compliance with a legal duty or obligation;

(3) Where necessary for responding to a public health emergency or protecting the life, health, or property of a natural person in an emergency;

(4) Where we process personal data that you have made publicly available or that has been otherwise lawfully disclosed, within a reasonable scope and in accordance with applicable law;

(5) Other circumstances prescribed by applicable laws and administrative regulations.

5. If we discontinue the operation of any ZCode product or service, we will promptly cease further collection of your personal data, issue a discontinuation notice by way of announcement, and delete or anonymize the personal data we hold in relation to the discontinued business. In the case of children's personal data, we will also promptly notify the children's guardians of such discontinuation.

(7) How We Use Your Personal Data

3. How We Share, Transfer, and Publicly Disclose Your Information

We may disclose your personal data to the following categories of recipients:

Affiliates: our affiliated companies within our Group and/or their designated service providers, who provide data processing services necessary to deliver our Services;

Vendors and Service Providers: third-party vendors and service providers who provide data processing services to us as necessary to deliver our Services, assist us in delivering our products, services, websites, and platforms, or improve and optimize the same, or who otherwise process personal data for the purposes described in this Privacy Policy. We may use analytics service providers, such as analytics platforms that collect pseudonymized or anonymized technical and interaction data. Such information helps us understand usage patterns, enhance user experience, and improve platform functionality;

Business Transfers: any business partner, investor, assignee, or transferee (actual or prospective) to facilitate business asset transactions (which may include any merger, acquisition, or debt or asset sale) involving any of the Companies;

Government Authorities or Other Third Parties: any competent law enforcement body, regulatory authority, government agency, court, or other third party (including our professional advisers) where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish, or defend our legal rights or to enable a third party to defend theirs, or (iii) to protect your vital interests or those of any other person; and

With Your Consent: any other person, with your consent to the disclosure.

4. How We Protect Your Information

The security of your personal data is a priority for us. We implement commercially reasonable technical, administrative, and physical security measures to protect your personal data from unauthorized access, theft, disclosure, alteration, or loss. We regularly assess our security practices to incorporate new technologies and methods. However, please note that no Internet or email transmission is completely secure or error-free. Specifically, emails sent to or from us may not be fully secure. As a result, we advise you to exercise caution when deciding what information to send to us via the Services or email. Additionally, we are not responsible for any bypassing of privacy settings or security measures on the Service or third-party websites.

5. How We Store Your Information

Depending on your location and the features of our Services that you access or use, your personal data may be transferred and processed outside the jurisdiction in which you reside, including to an affiliated company within Our Group or a third party (as outlined in section 4) located overseas.

We generally provide the Services from Singapore, and our group companies and their designated service providers are typically located in Singapore. As a result, your personal data is generally processed in Singapore.

We implement appropriate safeguards to ensure that your personal data remains protected in line with this Privacy Policy and applicable laws, and we only transfer your data abroad in compliance with applicable laws and legally recognized transfer mechanisms.

We retain personal data for as long as it is needed to provide our Services and for the other purposes outlined in this Privacy Policy. Additionally, we retain personal data when required to fulfill contractual and legal obligations, when we have a legitimate business interest (such as improving and developing our Services and enhancing their safety, security, and stability), and for the exercise or defense of legal claims.

Retention periods vary based on the volume, type, and sensitivity of the personal data, the purposes for which we use it, and any legal requirements, among other factors. For instance, when we process your personal data to provide you with the Services, we retain it as long as you have an account. This includes your account information, input. If you violate any of our terms, policies, or guidelines, we may immediately remove your account information and input from public view, but we will keep the personal data as needed to address the violation.

When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.

6. How You Can Manage Your Information

Depending on where you live, you may have certain rights with respect to your personal data, such as the right to know how we collect and use your personal data. You may also have the right to access, change, oppose, request a copy of your authorization, file complaints before the competent authorities, withdraw your consent, or limit our collection and use of your personal data as well as to request that we delete it, and potentially others. In certain circumstances, you can also ask us to provide additional information about our collection and use of your personal data. Please note that your exercise of certain rights may impact your ability to use some or all of the Services' features and functionalities.

Right to know: the right to know what personal data we process about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.

Access & data portability: the right to request a copy of the personal data we process about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.

Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations, which will be removed immediately from your conversation history and automatically deleted from our back-end.

Upon voluntary cancellation of your account, we will cease providing products or services to you and will delete or anonymize your personal data in accordance with applicable law. If immediate completion is not technically feasible, we will immediately cease all processing activities other than storage and necessary security protection. Where the personal data in your account is subject to a legally mandated minimum retention period, we will delete or anonymize it upon expiration of such retention period.

Correction: the right to request that we correct inaccurate personal data we retain about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request and we will make a reasonable effort to correct this information—but due to the technical complexity of our large language models, it may not always be possible for us to do so.

Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims.

Restriction: the right to restrict our processing of your personal data in certain circumstances.

Withdrawal of consent: Where our processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making: We do not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services).

Please contact us by using the contact information provided in this Privacy Policy if you would like to exercise any of your rights. We will respond to your request consistent with applicable law and subject to proper verification.

You can control and access some of your personal data directly through settings. For example, you can manage your chat history. Should you choose to do so, you may also delete your chat history via your settings. If you choose to delete your account, you will not be able to reactivate your account or retrieve any of the content or information in connection with your account.

7. Protection of Minor Personal Data

Our Services are not directed to, or intended for, the individual under 18. We do not knowingly collect Personal Data from children under 13. If you have reason to believe that a child under 13 has provided Personal Data to us through the Services, please contact us via the contact details set out below. We will investigate any notification and, if appropriate, delete the Personal Data from our systems. Users under 18 must have permission from their parents or guardians to use our Services.

8. How Do We Use Cookies and Similar Technologies

We may use cookies and similar technologies to gather information resulting from access and/or use of our Services. The technologies we use may include:

1. Cookies or Browser Cookies: Cookies are small text files stored in your computing or other electronic devices when you visit our website and platforms for record keeping purposes. Cookies can allow us to provide you with a personalized user experience, such as by allowing us to retrieve information which you previously provided us. Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies may remain on your personal computer or mobile device across browsing sessions, while Session Cookies are generally deleted as soon as you close your web browser.

We may also use cookies and similar tracking technologies to analyze usage trends, administer the website, monitor user interactions within the Services, and gain insights into how users engage with our offerings. To support these purposes, we may automatically collect certain technical information, which helps us understand aggregate usage patterns and optimize our Services. This information may include your Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), referring and exit pages, files accessed on our website (e.g., HTML pages and graphics), operating system, date and time stamps, and clickstream data.

2. Web Beacons: Certain sections of our services may contain small electronic files known as web beacons (also referred to as clear GIFs, pixel tags, and single-pixel GIFs) that permit us, for example, to count users who have visited those pages and understand how our Services are used (for example, to assess the popularity of certain pages and services) and to improve the performance and reliability of our Services.

You can manage your cookie preferences or enable cookie-related features through the settings available in commonly used web browsers. We will respect your choices regarding the use of cookies and similar technologies in accordance with applicable laws and your expressed preferences.

Please note that certain features of our Services rely on the use of cookies. If you choose to disable or delete cookies, or do not consent to their use, some parts of the Services may not function properly or as intended. For guidance on how to manage cookies, please refer to the help documentation provided by your browser. For your convenience, we have included links to cookie management instructions for popular browsers. However, we are not responsible for the accuracy, reliability, or completeness of any third-party content linked therein.

• Microsoft Internet Explorer

• Microsoft Edge

• Mozilla Firefox

• Google Chrome

• Safari for macOS

• Safari for iOS

For more information about cookie and instructions on how to set up your browser to accept, delete or disable cookies, see www.allaboutcookies.org.

9. How This Policy Is Updated

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law. We recommend that you review the Privacy Policy each time you access our Services to stay informed of our privacy practices.

10. How to Contact Us

Questions, comments and requests regarding this policy should be addressed to user_feedback@aminer.cn.