AitoEarn Platform Privacy Policy

Article 1 Introduction and Scope

1.1 Airongrong (Beijing) Technology Co., Ltd. ("we" or "us") is the operator of the AitoEarn platform. This Policy explains how we collect, use, store, share, transfer and publicly disclose your personal information, and how you can manage your personal information. This Policy applies to the services provided to you by the AitoEarn platform (including the aitoearn.cn website, clients, mini programs, browser plugins and related supporting services, collectively the "Platform").

1.2 Before using the Platform's services, please read and fully understand the entire contents of this Policy, in particular the clauses concerning the processing of sensitive personal information and the clauses that exempt or limit our liability. This Policy, together with the AitoEarn Platform Terms of Service, constitutes the basis of the rules between you and us regarding the use of the Platform's services; the provisions of this Policy on personal information processing prevail over the Terms of Service.

1.3 We process your personal information only within the purposes and scope described in this Policy. Our international site (aitoearn.ai) is governed by its separately published policy and is not subject to this Policy.

1.4 Date of latest publication or update of this Policy: November 6, 2026.

Article 2 How We Collect and Use Your Personal Information

2.1 Registration and login: when you register an account, we collect your mobile phone number and send an SMS verification code to that number for verification. Your mobile phone number is used to create your account, verify logins and protect account security, and is necessary for the registration and login services; if you do not provide it, you will not be able to complete registration or use account features.

2.2 Real-name verification: pursuant to legal and regulatory requirements on real identity verification, and for the purposes of task commission settlement and statutory tax withholding, we need to collect your real identity information (such as your name and ID document number), which constitutes sensitive personal information. We will inform you, through a separate pop-up or similar means, of the purposes, methods, scope and necessity of processing such sensitive personal information, and will process it only after obtaining your separate consent. If you refuse to provide it, features such as real-name verification and commission withdrawal will be unavailable, but your use of other Platform features will not be affected.

2.3 Top-up and withdrawal: when you purchase credits or paid services, you may currently top up via Alipay. Payment is completed on Alipay's pages, and Alipay processes payment information in accordance with its own user agreement and privacy policy. We receive and record only the necessary order information (order number, transaction amount, transaction time and payment status) and do not collect sensitive payment information such as your payment password. When you apply for a withdrawal, we collect the receiving account information you provide in order to pay out commissions. You may submit a withdrawal request only when the withdrawable commission balance in your account has reached RMB 10.

2.4 Third-party platform account binding: when you use the account binding feature to bind your third-party platform accounts (such as Douyin, Xiaohongshu, Kuaishou, Bilibili, WeChat Channels, WeChat Official Accounts, TikTok, YouTube, Facebook, Instagram, Threads, X (Twitter), Pinterest, LinkedIn, etc.) with the Platform, we collect, within the scope of the permissions you grant on the authorization page of the relevant third-party platform, the account identification information of that platform (avatar, nickname, account or page ID, access tokens), the content you publish through the Platform, and the interaction data of such content and accounts (such as reads, plays, likes, comments, favorites and shares). You may unbind at any time on the Platform; after unbinding, we stop collecting the corresponding data and delete the authorization data generated by that binding.

2.5 Customer service and communications: when you contact us through channels such as WeCom customer service, we collect your Platform account information, the contact details you voluntarily provide and the content of the communications, in order to handle your inquiries, appeals, complaints and related requests.

2.6 Logs and device information: to ensure service operation and account security, we automatically record log information such as your device information, IP address, browser type, access and operation times, and feature usage records, for troubleshooting, service optimization, security risk control, and anti-fraud and anti-click-farming verification.

2.7 We may process personal information without obtaining your separate consent where permitted by laws and regulations (for example, where necessary for the conclusion or performance of a contract, or for the performance of statutory obligations); in all other cases, we process personal information only after obtaining your consent, and will inform you again and obtain your consent when the purposes, methods or scope of processing change.

2.8 We adhere to the principles of lawfulness, legitimacy, necessity and good faith. We do not collect personal information unrelated to the Platform's services, do not collect personal information beyond the necessary extent, and do not sell or illegally provide your personal information to others.

Article 3 Cookies and Similar Technologies

3.1 To maintain login status, service operation and security protection, we use necessary cookies and similar technologies on the Platform. You can manage or delete cookies through your browser settings; doing so may affect the normal use of certain features.

3.2 We do not use cookies or similar technologies for purposes other than those described in this Policy.

Article 4 Sharing, Entrusted Processing and Public Disclosure of Personal Information

4.1 Entrusted processing: to implement service features, we may entrust service providers with data security capabilities to process your personal information within the necessary scope, including SMS verification code providers, cloud service and infrastructure providers, and security and risk control providers. We sign data security and confidentiality agreements with the entrusted providers, requiring them to process personal information only within the scope of the entrustment and to take necessary security measures, and we supervise their data processing activities.

4.2 Payment and settlement: top-up payments are processed by Alipay in accordance with its own rules, and we transmit to it the order information necessary to complete the payment.

4.3 Provision to third parties: except as otherwise agreed in this Policy or provided by laws and regulations, before providing your personal information to other third parties, we will obtain your separate consent and require the recipients to adopt protection measures no less stringent than those required by this Policy.

4.4 Disclosure required by law: we may disclose your personal information within the necessary scope to authorities or institutions with jurisdiction over you, pursuant to laws and regulations, regulatory requirements or lawful orders of competent authorities.

4.5 We do not sell your personal information; except where required by laws and regulations or where you have given separate consent, we do not publicly disclose your personal information.

4.6 In the event of a merger, acquisition, asset restructuring or similar transaction, we will require the successor to continue to be bound by this Policy and will notify you by announcement or other means in accordance with the law; you have the right to assert your relevant rights in accordance with the law.

Article 5 Storage of Personal Information

5.1 Storage location: your personal information is stored on servers within the territory of the People's Republic of China. We currently do not provide your personal information to overseas parties; if business needs require overseas provision in the future, we will obtain your separate consent in accordance with the law and complete statutory procedures such as a personal information protection impact assessment.

5.2 Storage period: your personal information is retained for the shortest period necessary to achieve the purposes of processing. After you delete your account or withdraw consent, we will delete your personal information or anonymize it, except where retention is required by laws and regulations. Pursuant to Article 31 of the E-Commerce Law of the People's Republic of China, product and service information and transaction information published on the platform shall be retained for no less than three years from the completion of the transaction.

5.3 Personal information that exceeds its retention period will be promptly deleted or anonymized.

Article 6 How We Protect Your Personal Information

6.1 We have established management systems and technical measures such as data classification and grading, access control, encrypted storage and transmission, log auditing and emergency response, to prevent personal information from being leaked, tampered with, damaged or lost. We assign personal information protection responsibilities to specific positions and implement confidentiality management and training for staff.

6.2 When a security incident such as leakage, tampering or loss of personal information occurs or may occur, we will immediately activate our emergency response plan and take remedial measures. Where harm may be caused, we will promptly inform you, in accordance with the law, of the basic circumstances of the incident, the possible harm, the remedial measures we have taken and the measures you can take to mitigate the harm, and will report to the competent authorities as required by law.

6.3 We understand that the Internet environment is not one hundred percent secure, but we are committed to continuously strengthening personal information protection with currently reasonable technical standards.

Article 7 Your Rights

7.1 In accordance with laws and regulations, you have the following rights with respect to your personal information: to access and copy; to correct and supplement; to delete; to withdraw consent; to delete your account; and to request an explanation of our processing rules. You may exercise these rights through the features indicated on the Platform's pages or through the contact methods agreed in Article 10 of this Policy.

7.2 We will accept your request after verifying your identity and will respond within fifteen working days; if we cannot fulfill your request, we will explain the reasons. Where laws and regulations provide otherwise, such provisions shall prevail.

7.3 After account deletion, we will delete your personal information in accordance with the law, except where retention is required by laws and regulations. Before deleting your account, please properly settle any unfinished tasks and unwithdrawn commissions.

7.4 You may lodge complaints with us regarding personal information protection; you also have the right to complain or report to competent authorities such as the cyberspace administration.

7.5 For instructions on deleting related data, please refer to the Data Deletion Instructions published on this website (https://aitoearn.cn/websit/data-deletion).

Article 8 Protection of Minors' Personal Information

8.1 Minors under the age of fourteen may not register for or use the Platform. Minors aged fourteen or above but under eighteen may use the Platform under the guidance of their guardians after their guardians have read and agreed to this Policy.

8.2 We protect minors' personal information according to the strictest standards. If we discover that we have collected a minor's personal information without guardian consent, we will delete the relevant information as soon as possible.

8.3 Guardians have the right to exercise the rights under Article 7 of this Policy on behalf of minors.

Article 9 Updates to This Privacy Policy

9.1 This Policy may be updated from time to time. In the event of material changes, we will notify you through one or more prominent means such as website announcements, pop-ups, in-site notifications or SMS; where separate consent is required, we will obtain your consent separately.

9.2 We retain historical versions of this Policy for reference in accordance with the law; versions with material changes apply from the effective date stated in the announcement or notice.

Article 10 Contact Us

10.1 Personal information processor: Airongrong (Beijing) Technology Co., Ltd.; ICP Filing No.: Jing ICP Bei No. 19059131-15; Public Security Filing No.: Jing Gong Wang An Bei No. 11010502060417.

10.2 If you have any questions, comments or suggestions about this Policy or personal information protection matters, or need to exercise your rights under Article 7 of this Policy, you can contact us through the Platform's WeCom customer service channel (see the customer service page of this website for the entry).

10.3 We will accept your request after verifying your identity and respond within the time limit agreed in Article 7 of this Policy.

10.4 This Policy applies from November 6, 2026.