用户隐私政策#
发布日期： 2024.12.13
生效日期： 2024.12.13
一、隐私政策概述#
江苏数信云科技有限公司（以下简称“数信云”“本平台”或“我们”）高度重视用户个人信息与隐私安全，致力于依据《中华人民共和国个人信息保护法》《中华人民共和国网络安全法》《中华人民共和国数据安全法》《网络数据安全管理条例》等相关法律法规，保护用户的合法权益。
本《数信云隐私政策》（以下简称“本政策”）旨在向您说明在注册、访问和使用数信云平台及相关服务过程中，我们如何收集、使用、存储、保护、委托处理及对外提供您的个人信息，以及您依法享有的相关权利和行使方式。
本政策适用于数信云提供的网站、鲁班控制台、云服务器、CPU/GPU计算、数据存储、科研计算及其他相关服务。
请您在使用本平台前认真阅读本政策，特别关注实名认证、敏感个人信息处理、科研数据保护、数据保存与删除、第三方信息共享等条款。
我们将依据不同个人信息处理活动的具体法律基础开展处理。对于依法需要取得您同意或单独同意的情形，我们将依法履行相应告知及同意程序，不以您接受本政策替代依法必需的单独同意。
如您未满18周岁，建议在法定监护人的指导下阅读本政策；涉及不满14周岁未成年人个人信息的处理，我们将依法取得其父母或其他监护人的同意，并采取专门的保护措施。
二、我们如何收集您的个人信息#
我们遵循合法、正当、必要和诚信原则，仅在提供服务、履行合同、履行法定义务、获得有效同意或存在其他法定处理依据的情况下，收集与处理必要的个人信息。
（一）账户注册与登录#
为创建账户、验证身份及保障账户安全，我们可能收集：
账户基本信息： 手机号码、电子邮箱、账户名称及密码验证信息。
实名认证信息： 真实姓名、有效身份证件类型及号码，以及完成身份核验所必需的其他信息。
企业认证信息： 企业或机构名称、统一社会信用代码、授权联系人及必要的授权证明。
第三方登录信息： 如平台实际支持微信等第三方授权登录，我们将在您授权的范围内获取必要的第三方账户标识、昵称等信息，用于建立账户关联。
登录安全信息： 登录时间、IP地址、设备及浏览器信息、身份验证结果和异常登录记录。
根据相关法律法规，使用依法要求实名认证的云服务器及云计算服务，应当完成相应的真实身份信息核验。
为加强账户安全管理，数信云同时实行手机号码绑定管理。未完成必要实名认证的用户可能无法使用相应云服务；未完成平台要求的手机号绑定的用户，相关服务功能可能依据已公示规则受到限制。
身份证件号码等敏感个人信息仅在具有特定目的和充分必要性时处理，并依法采取严格保护措施及履行相应告知、同意等义务。
（二）科研计算与云服务器使用#
为提供云服务器、GPU计算、科研分析及数据存储服务，我们可能处理以下信息：
学术身份信息： 您主动填写的院校或机构名称、院系、研究方向、职称等信息。
计算资源信息： 您购买或使用的CPU、GPU、内存、存储容量、服务器实例及相关资源配置。
科研业务数据： 您主动上传的测序数据、样本资料、分析文件、程序代码、计算任务参数及分析结果。
服务使用记录： 服务器创建、启动、停止、重启、任务提交、资源调用、运行状态及必要的操作记录。
系统安全日志： 登录行为、网络访问、资源异常、安全告警等用于网络安全保障的记录。
您上传的科研数据、程序代码及分析结果，仅在提供约定服务、执行合法授权的操作、保障必要的系统安全或履行法定义务的范围内进行处理。
除获得有效授权、履行法定义务或其他依法允许的情形外，我们不会主动查看、分析或使用您的科研数据内容。
对于可能包含遗传信息、医疗健康信息或其他敏感个人信息的科研数据，上传用户应确保其具有合法的数据来源及必要授权。数信云将根据实际的数据处理角色、合同约定及适用法律履行相应保护义务。
对于命令执行审计等较为敏感的安全监测功能，如实际启用，我们将限定其处理范围和访问权限，并按照法律要求进行必要告知，不以一般性安全监测为由无限制收集用户操作内容。
（三）客户服务与反馈#
当您联系客服、提交技术工单、投诉或建议时，我们可能收集：
您主动提供的手机号码、电子邮箱等联系方式。
问题描述、沟通内容、工单记录及必要的故障信息。
为核实和处理问题而经您授权提供的相关日志或技术资料。
上述信息用于问题定位、技术支持、投诉处理及服务质量改进。
除依法需要继续保存或其他合法必要情形外，客服沟通记录原则上在相关问题处理完毕后保留不超过3个月。
（四）其他合法场景#
在法律允许的范围内，我们还可能：
为履行实名管理、网络安全和反电信网络诈骗等法定义务，处理必要的身份核验及安全记录。
为维护平台及用户合法权益，处理必要的安全事件及争议解决信息。
在合理范围内处理您自行公开或其他已经合法公开的学术成果、机构信息等个人信息，但不得超出合理范围或对个人权益产生重大影响。
如开展非必要的学术合作推荐、活动推广或其他个性化服务，我们将在适用法律要求下取得相应同意，并提供适当的选择或退出方式。
四、我们如何存储和保护您的个人信息#
（一）信息存储地点#
数信云主要使用位于中华人民共和国境内的基础设施存储和处理用户账户信息、科研数据及相关服务信息。
如未来因实际业务需要向境外提供依法受到保护的个人信息，我们将依照适用法律履行必要的告知、个人信息保护影响评估、单独同意及相关数据出境合规程序。
（二）信息保存期限#
我们仅在实现合法处理目的所必要的最短期限及法律法规规定的保存期限内保留个人信息。
具体原则如下：
账户信息： 在账户存续和提供相关服务所必需的期间保存。账户注销后，对不再具有合法保存必要的信息依法删除或匿名化处理。
实名认证信息： 根据实名认证管理、网络安全及其他适用法律法规确定保存期限。依法需要继续保存的，不因账户注销立即删除。
科研数据： 在用户购买或约定的服务期限内，根据用户指令及服务约定进行存储和管理。对于到期未续费的服务，按照购买时已公示的资源保留与清理规则处理；如适用现行到期后一个月内清理的规则，平台将在该期限内按规则进行相应清理。删除后的数据可能无法恢复。
网络安全日志： 按照法律法规规定保存。依法需要留存的相关网络运行及安全日志，保存期限不少于6个月。
普通服务记录： 非依法必须保留的普通操作及使用记录，在实现处理目的后及时删除或匿名化；一般运营记录原则上保存3个月，涉及安全审计或其他法定义务的除外。
客服记录： 原则上在问题处理完毕后保留不超过3个月；如因争议处理或法定义务需要继续保存，按适用法律处理。
对于依法规定的保存期限尚未届满，或者技术上难以立即删除的信息，我们将依法限制处理活动，仅进行必要的存储及安全保护。
（三）安全保护措施#
数信云根据数据类型、敏感程度和安全风险，采取合理的技术与管理措施，包括但不限于：
传输与存储安全： 根据实际系统架构采取必要的安全传输、加密及其他数据保护措施。
访问权限控制： 根据岗位职责实施最小必要权限管理，限制未经授权的数据访问。
账户安全： 采取身份验证、异常登录检测及其他必要的账户保护措施。
安全审计： 对必要的系统运行状态、安全事件及管理操作进行审计。
漏洞与事件处置： 对发现的安全风险及时采取合理的修复和应急响应措施。
未经合法授权，平台工作人员不得擅自查看或向第三方披露用户科研数据。
如发生或可能发生个人信息泄露、篡改、丢失等安全事件，我们将依法采取补救措施，并根据法律法规要求通知有关主管部门及受影响的个人。
五、我们如何使用您的个人信息#
我们仅在合法、正当、必要的范围内，按照已告知的目的使用个人信息。
（一）提供和维护平台服务#
包括账户注册、身份核验、资源开通、服务器管理、任务运行、订单处理、费用结算和技术支持。
（二）保障平台与账户安全#
包括识别异常登录、恶意访问、违规资源使用、网络攻击及其他安全风险。
（三）改进产品与服务#
我们可能使用必要的服务运行指标、汇总统计数据、用户反馈及依法处理的数据，分析平台性能、故障情况和计算资源需求。
对于能够识别个人身份的信息，我们将依据适用法律开展处理。
我们不会仅以删除姓名、手机号码等直接标识符为由，将仍可识别特定个人的数据视为匿名数据。
（四）科研数据的专门保护#
未经用户合法有效的授权或其他适用法律依据，我们不会将用户上传的原始测序数据、样本资料、研究结果或其他科研业务数据，用于训练人工智能模型、开发第三方商业产品、独立科研研究或向其他客户提供服务。
如未来拟开展上述超出原有服务目的的数据利用活动，我们将另行明确告知处理目的、数据范围、处理方式及相关风险，并依法取得必要授权或同意。
对于经过不可逆处理、无法识别特定自然人且不能复原的匿名化统计数据，可以在法律允许的范围内用于分析平台资源使用趋势及改进服务，但仍应遵守科研保密义务和其他适用的数据权益约定。
（五）履行法定义务#
在法律法规要求的情况下，我们可能使用必要的信息完成网络安全管理、身份核验、违法违规行为处置及配合依法开展的监督检查等事项。
六、我们如何对外提供您的个人信息#
数信云不会非法出售、出租或公开披露您的个人信息。
（一）经授权向第三方提供#
在依法需要征得您同意的情况下，我们将在向第三方提供个人信息前，告知接收方的名称或姓名、联系方式、处理目的、处理方式及个人信息种类，并依法取得您的单独同意。
例如，您主动申请学术合作或授权共享特定学术成果信息时，我们仅在有效授权范围内提供相关信息。
（二）委托第三方处理#
为完成部分服务，数信云可能依法委托服务提供商开展支付处理、身份核验、消息通知、客户服务等工作。
我们将按照法律要求与受托方约定处理目的、期限、方式、个人信息种类及安全保护义务，并监督其依照约定处理个人信息。
受托方不得擅自将信息用于其他目的。
实际接入的第三方服务及其信息处理情况，应以平台公示的第三方服务清单及相关说明为准。
（三）依法提供信息#
在收到依法提出的要求或为履行法定义务时，我们可能按照法定权限、程序及必要范围，向有权机关提供相关信息。
（四）公司合并、分立或业务转让#
如涉及公司合并、分立、解散、被宣告破产等情况并需要转移个人信息，我们将按照法律要求告知相关接收方信息，并要求接收方继续履行个人信息保护义务。
如接收方变更原有处理目的或处理方式，应依法重新取得必要的同意。
（五）公开披露与跨境提供#
除依法允许的情形外，我们不会未经必要授权公开披露您的个人信息。
涉及个人信息跨境提供的，我们将依法履行相应数据出境程序及其他法定义务。
七、您如何行使个人信息权利#
根据适用法律法规，您享有与个人信息处理相关的权利。
您可以通过平台实际提供的账户管理功能或联系数信云客服提出请求。
（一）查阅与复制#
您可以依法请求查阅、复制我们处理的您的个人信息。
我们将在核实申请人身份后，按照法律要求提供相应信息或可读副本。
（二）更正与补充#
如您的个人信息存在错误或不完整，可以申请更正或补充。
涉及实名认证信息的更正，我们可能依法要求重新核验身份。
（三）删除个人信息#
在处理目的已实现、保存期限届满、您依法撤回同意或存在其他法定删除情形时，您可以依法请求删除相关个人信息。
对于依法需要继续保存的信息，我们将按照法律规定限制处理范围。
（四）账户注销#
您可以通过平台实际提供的注销功能或联系官方客服申请注销账户。
注销前，请妥善处理未完成订单、费用结算、正在运行的计算任务及重要数据备份。
账户注销后，我们将依法对不再需要保留的个人信息进行删除或匿名化处理。依法应当留存的实名认证、交易及网络安全记录等信息，将按规定保存，并在保存期限届满后依法处理。
账户注销及服务器资源删除可能导致相关业务数据无法恢复，请提前完成必要的数据迁移和备份。
（五）撤回同意#
对于基于您同意开展的个人信息处理活动，您有权依法撤回同意。
撤回同意不影响撤回前基于有效同意开展的个人信息处理活动的合法性。
如相关个人信息属于履行合同或法定义务所必需的信息，撤回针对其他处理活动的同意不会当然导致该等必要处理终止。
（六）其他法定权利#
您可以依法请求我们解释个人信息处理规则，并行使拒绝非必要个性化推荐、限制特定自动化决策影响等适用的法定权利。
（七）请求处理机制#
为保障账户及个人信息安全，我们可能需要核验您的身份。
我们将在法律规定的期限内或合理期限内处理您的申请，并告知处理结果。
对于依法无法满足的请求，我们将说明理由，并告知可适用的救济途径。
八、未成年人个人信息保护#
数信云主要面向具有科研计算、云计算及相关服务需求的用户。
如您未满18周岁，建议在法定监护人的指导下使用本平台，并确保相关注册和购买行为符合适用法律。
对于不满14周岁未成年人的个人信息，我们将按照法律法规要求，取得其父母或者其他监护人的同意，制定并适用必要的专门保护规则。
我们仅在具有合法处理依据且符合未成年人权益保护要求的范围内处理相关信息。
如监护人发现未成年人未经必要授权向我们提供个人信息，可以通过本政策列明的联系方式联系我们。我们将在依法核实后采取相应措施。
九、第三方服务与隐私责任#
数信云可能根据实际业务需要接入第三方支付、身份核验、登录认证、客服或其他必要技术服务，也可能提供第三方网站或科研工具的访问链接。
第三方服务可能具有独立的隐私政策和个人信息处理规则，请您在使用前仔细阅读。
对于数信云主动集成或委托使用的第三方服务，我们将依法履行个人信息保护、委托处理管理及其他适用义务。
对于您主动访问并独立使用的外部第三方网站，其独立收集和处理个人信息的活动通常适用该第三方的隐私规则。
实际使用的第三方SDK、插件及外部服务，应在平台适当位置公示其名称、服务目的、涉及的个人信息种类及其隐私政策等必要信息。
我们不会仅以第三方具有独立隐私政策为由，免除数信云依法应当承担的责任。
十、隐私政策的更新与适用#
（一）适用范围#
本政策适用于数信云网站、鲁班控制台及我们实际提供的相关网页端、客户端和其他服务入口。
对于适用独立隐私政策的特定服务，我们将明确提示相应专项政策及其适用范围。
（二）政策更新#
我们可能根据法律法规变化、业务调整、技术发展及服务功能变化对本政策进行修订。
涉及个人信息处理目的、方式、种类、保存期限或对外提供规则等重要变化的，我们将通过官网公告、平台提示、邮件或其他合理方式依法告知您。
对于可能重大影响用户权益的政策修改，我们原则上提前7日进行提示；法律法规另有规定的，从其规定。
如果变更事项依法需要重新取得您同意或单独同意，我们将履行相应程序，不以您继续使用平台的行为直接替代必要的同意。
（三）政策解释#
本政策与《数信云用户协议》共同构成数信云用户权益及服务规则的重要文件。
如本政策与涉及个人信息保护的法律法规不一致，以适用法律法规的强制性规定为准。
十一、联系方式#
如您对本政策有任何疑问、投诉、建议，或希望行使个人信息相关权利，可以通过以下方式联系我们：
个人信息处理者： 江苏数信云科技有限公司
平台名称： 数信云
官方网站： https://www.sxycloud.com
客服及隐私事务联系邮箱： shouqunren@sxycloud.vip
客服工作时间： 周一至周五 9:00—18:00（北京时间）
我们将在核实相关情况后，按照法律法规要求及时处理您的请求。
隐私政策确认说明
当您点击“我已阅读并同意《数信云用户协议》及《数信云隐私政策》”时，表示您已经阅读并理解本政策。
我们将依据合法的个人信息处理基础开展相关活动。对于依法必须取得单独同意的敏感个人信息处理、第三方提供或其他特定活动，将另行履行必要程序。
江苏数信云科技有限公司
Publication Date: 2024.12.13
Effective Date: 2024.12.13
Overview of This Privacy Policy#
Jiangsu Shuxin Cloud Technology Co., Ltd. (hereinafter referred to as "Shuxin Cloud," the "Platform," "we," "us," or "our") is committed to protecting the personal information, privacy, and lawful rights and interests of its users in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the Regulations on Network Data Security Management, and other applicable laws and regulations.
This Shuxin Cloud Privacy Policy (the "Policy") explains how we collect, use, store, protect, entrust others to process, and disclose your personal information when you register for, access, or use our Platform and related services. It also describes your legal rights regarding personal information and how to exercise them.
This Policy applies to Shuxin Cloud websites, the Luban Console, cloud servers, CPU/GPU computing services, data storage, scientific computing services, and other related services provided by Shuxin Cloud.
Please carefully read this Policy before using our services, particularly the provisions concerning real-name verification, sensitive personal information, research data protection, data retention and deletion, and information sharing with third parties.
We process personal information on the applicable legal basis for each processing activity. Where consent or separate consent is required by law, we will provide the necessary information and obtain the required consent. Acceptance of this Policy alone does not replace any separate consent legally required for specific processing activities.
If you are under 18 years of age, we recommend that you review this Policy under the guidance of your legal guardian. When processing the personal information of children under the age of 14, we will obtain the consent of their parents or other legal guardians as required by law and implement specific protective measures.
Information We Collect#
We follow the principles of lawfulness, legitimacy, necessity, and good faith. We collect and process only the personal information necessary to provide services, fulfill contractual obligations, comply with legal requirements, or perform other processing activities permitted under applicable law.
2.1 Account Registration and Login#
To create accounts, verify identities, and maintain account security, we may collect:
Basic Account Information: Mobile phone number, email address, username, and password verification information.
Real-Name Verification Information: Full legal name, identification document type and number, and other information necessary to complete identity verification.
Enterprise Verification Information: Company or institution name, unified social credit code, authorized contact details, and necessary authorization documents.
Third-Party Login Information: Where supported, we may obtain a third-party account identifier, nickname, or other necessary information from services such as WeChat, within the scope of your authorization.
Login Security Information: Login timestamps, IP addresses, device and browser information, verification results, and suspicious login records.
In accordance with applicable laws and regulations, Users must complete real-name identity verification before accessing cloud server or cloud computing services for which such verification is legally required.
Shuxin Cloud also requires mobile phone number binding as part of its account security management measures. Users who have not completed legally required identity verification may be unable to access the relevant cloud services. Certain functions may also be restricted under published Platform Rules if required mobile number binding has not been completed.
Sensitive personal information, such as identification document numbers, will be processed only for specific and necessary purposes, subject to enhanced security measures and any required notification and consent procedures.
2.2 Scientific Computing and Cloud Server Services#
To provide cloud servers, GPU computing, research analysis, and data storage services, we may process:
Academic Profile Information: Institution, department, research field, professional title, or other information voluntarily provided by you.
Computing Resource Information: Purchased or allocated CPU, GPU, memory, storage capacity, server instances, and related resource configurations.
Research and Business Data: Sequencing data, sample information, analysis files, source code, task parameters, and analysis results uploaded by you.
Service Usage Records: Server creation, startup, shutdown, restart, task submission, resource allocation, operating status, and necessary operational records.
System Security Logs: Login activities, network access records, resource anomalies, security alerts, and other information needed to maintain network security.
Research data, source code, and analysis results uploaded by Users are processed only as necessary to provide the agreed services, carry out lawfully authorized operations, maintain essential system security, or comply with legal obligations.
Unless lawfully authorized or otherwise permitted or required by applicable law, we will not proactively inspect, analyze, or use the contents of your research data.
Where uploaded data contains genetic information, medical or health information, or other sensitive personal information, the uploading User must ensure that the data has been lawfully obtained and that all necessary authorizations are in place.
Shuxin Cloud will fulfill the obligations applicable to its actual data processing role, contractual commitments, and relevant legal requirements.
Where sensitive security auditing functions, including command execution auditing, are enabled, we will limit their scope and access permissions and provide any necessary notices required by law. General security monitoring does not authorize unrestricted collection of User activity.
2.3 Customer Support and Feedback#
When you contact customer support, submit technical requests, complaints, or suggestions, we may collect:
Contact details voluntarily provided by you, including telephone numbers or email addresses.
Issue descriptions, communications, support tickets, and relevant troubleshooting information.
Logs or technical materials provided with your authorization for issue investigation and resolution.
Such information is used for troubleshooting, technical assistance, complaint handling, and service improvement.
Unless a longer retention period is legally required or otherwise justified, customer service communication records are generally retained for no longer than three months after the relevant issue has been resolved.
2.4 Other Lawful Purposes#
To the extent permitted by applicable law, we may also:
Process necessary identity verification and security information to fulfill statutory obligations relating to real-name registration, cybersecurity, and anti-fraud compliance.
Process relevant security incident records or dispute-related information to protect the legitimate interests of the Platform and its Users.
Process academic achievements, institutional affiliations, and other personal information lawfully made public, within reasonable limits and without exceeding the reasonable expectations of the individuals concerned.
Where optional academic collaboration recommendations, promotional activities, or personalized services are provided, we will obtain any consent required by law and provide appropriate options to participate or opt out.
Storage and Protection of Personal Information#
4.1 Storage Location#
Shuxin Cloud primarily uses infrastructure located within the People's Republic of China to store and process User account information, research data, and related service information.
If future business activities require the cross-border provision of personal information protected by applicable Chinese laws, we will complete the necessary notification, personal information protection impact assessments, separate consent procedures, and other applicable cross-border data compliance requirements.
4.2 Data Retention Periods#
We retain personal information only for the shortest period necessary to fulfill legitimate processing purposes and comply with applicable legal requirements.
Our general retention principles are as follows:
Account Information: Retained while the account remains active and for as long as necessary to provide the relevant services. After account cancellation, information no longer required for lawful purposes will be deleted or anonymized.
Identity Verification Information: Retained for periods determined by applicable identity verification, cybersecurity, and other legal requirements. Information subject to mandatory retention will not necessarily be deleted immediately upon account cancellation.
Research Data: Stored and managed according to User instructions and the agreed service term. Upon expiration without renewal, data will be handled under the resource retention and deletion rules disclosed at purchase. Where the existing rule requiring cleanup within one month after expiration applies, the Platform will perform the relevant cleanup in accordance with that rule. Deleted data may be irrecoverable.
Network Security Logs: Retained in accordance with applicable legal requirements. Network operation and security logs subject to statutory retention requirements will be preserved for no less than six months.
General Service Records: Non-mandatory operational and usage records will be deleted or anonymized when no longer necessary. Ordinary operational records are generally retained for three months, except where longer retention is required for security auditing or legal compliance.
Customer Support Records: Generally retained for no longer than three months after an issue is resolved, unless further retention is necessary for dispute resolution or compliance with applicable law.
Where information must be retained under applicable law or cannot immediately be deleted for technical reasons, we will restrict further processing to necessary storage and security protection measures as required by law.
4.3 Information Security Measures#
Shuxin Cloud implements reasonable technical and organizational safeguards appropriate to the type, sensitivity, and risk level of the data being processed.
These measures may include:
Transmission and Storage Security: Appropriate secure transmission, encryption, and other protective measures based on the actual system architecture.
Access Control: Role-based access management and least-privilege principles to prevent unauthorized access.
Account Security: Authentication mechanisms, suspicious login detection, and other necessary account protection measures.
Security Auditing: Necessary auditing of system operation, security events, and administrative activities.
Vulnerability and Incident Management: Reasonable vulnerability remediation and security incident response procedures.
Platform personnel must not access or disclose User research data without lawful authorization.
In the event of an actual or suspected personal information breach, alteration, or loss, we will take remedial measures and notify the competent authorities and affected individuals as required by applicable law.
How We Use Personal Information#
We use personal information only for lawful, legitimate, and necessary purposes, consistent with the information provided to Users.
5.1 Providing and Maintaining Services#
This includes account registration, identity verification, resource provisioning, server management, task execution, order processing, billing, and technical support.
5.2 Platform and Account Security#
This includes detecting suspicious logins, malicious access, improper resource usage, cyberattacks, and other security risks.
5.3 Product and Service Improvement#
We may use necessary operational metrics, aggregated statistics, User feedback, and lawfully processed data to evaluate platform performance, troubleshoot issues, and understand computing resource demand.
Information that can identify individuals will be processed in accordance with applicable law.
We will not treat data as anonymous merely because direct identifiers, such as names or telephone numbers, have been removed, where an individual may still be identifiable.
5.4 Special Protection of Research Data#
Without valid authorization or another applicable legal basis, Shuxin Cloud will not use Users' raw sequencing data, sample information, research results, or other research data to train artificial intelligence models, develop third-party commercial products, conduct independent research projects, or provide services to other customers.
If we intend to conduct any processing beyond the original service purposes, we will separately explain the relevant purposes, data categories, processing methods, and risks, and obtain any authorization or consent required by law.
Irreversibly anonymized statistical data that cannot identify an individual and cannot be restored to an identifiable form may be used, where legally permitted, to analyze platform resource usage trends and improve services. Applicable research confidentiality obligations and other contractual data rights must still be respected.
5.5 Legal Compliance#
Where required by applicable laws and regulations, we may use necessary information for cybersecurity management, identity verification, handling unlawful activities, and cooperating with lawful regulatory inspections or investigations.
How We Disclose Personal Information#
Shuxin Cloud does not unlawfully sell, rent, or publicly disclose your personal information.
6.2 Entrusted Processing#
To provide certain services, Shuxin Cloud may engage service providers for payment processing, identity verification, message delivery, customer support, or other necessary functions.
We will establish arrangements governing the purposes, duration, methods, categories of personal information, and security obligations of entrusted processing, as required by law.
Entrusted service providers are not permitted to independently use such information for unrelated purposes.
The third-party services actually integrated into the Platform and their relevant data processing practices shall be identified in the Platform's published third-party service list and related notices.
6.3 Disclosure Required by Law#
Where required by law or pursuant to a lawful request from a competent authority, we may provide relevant information within the legally authorized scope and through applicable procedures.
6.4 Corporate Transactions#
In the event of a corporate merger, division, dissolution, bankruptcy, or other transaction involving a transfer of personal information, we will provide legally required notifications and require the recipient to continue fulfilling applicable personal information protection obligations.
Where the recipient changes the original processing purposes or methods, any required consent will be obtained again in accordance with applicable law.
6.5 Public Disclosure and Cross-Border Transfers#
Except where permitted by applicable law, we will not publicly disclose personal information without the necessary authorization.
Any cross-border provision of personal information will comply with the applicable data export requirements and other legal obligations.
Your Personal Information Rights#
You are entitled to exercise the rights provided under applicable personal information protection laws.
You may submit requests through account management functions actually provided by the Platform or by contacting our customer support team.
7.1 Access and Copying#
You may request access to and copies of your personal information processed by us.
After verifying your identity, we will provide the relevant information or a readable copy in accordance with applicable law.
7.2 Correction and Supplementation#
You may request correction or supplementation of inaccurate or incomplete personal information.
Changes to real-name verification information may require additional identity verification.
7.3 Deletion#
You may request deletion of personal information where the processing purpose has been fulfilled, the retention period has expired, you have lawfully withdrawn consent, or other statutory deletion conditions apply.
Where information must be retained by law, we will restrict further processing in accordance with applicable legal requirements.
7.4 Account Cancellation#
You may request account cancellation through available Platform functions or official customer support channels.
Before cancellation, please settle outstanding orders and fees, complete any ongoing computing tasks, and back up important data.
Following account cancellation, we will delete or anonymize personal information that is no longer required to be retained.
Identity verification, transaction, and network security records subject to statutory retention requirements will be retained as required by law and subsequently handled upon expiration of the applicable retention period.
Account cancellation and server resource deletion may result in irreversible loss of associated business data. Please complete all necessary backups and data migration beforehand.
7.5 Withdrawal of Consent#
Where personal information processing is based on your consent, you have the right to withdraw that consent in accordance with applicable law.
Withdrawal does not affect the lawfulness of processing performed before the withdrawal on the basis of valid consent.
Where certain processing is necessary for contractual performance or compliance with legal obligations, withdrawal of consent for unrelated activities does not automatically terminate such necessary processing.
7.6 Other Statutory Rights#
You may request explanations of our personal information processing rules and exercise other applicable statutory rights, including rights relating to non-essential personalized recommendations or certain automated decision-making activities.
7.7 Handling of Requests#
To protect account and personal information security, we may need to verify your identity before processing a request.
We will review and respond to requests within the period required by applicable law or within a reasonable timeframe.
If we are legally unable to fulfill a request, we will explain the reasons and inform you of any applicable remedies.
Protection of Minors' Personal Information#
Shuxin Cloud primarily provides cloud computing, scientific computing, and related services to Users with legitimate computing needs.
If you are under 18 years of age, we recommend that you use the Platform under the guidance of your legal guardian and ensure that your registration and purchasing activities comply with applicable law.
When processing personal information relating to children under the age of 14, we will obtain the consent of their parents or other legal guardians as required by law and establish and apply necessary specific protection rules.
We will process such information only where a lawful basis exists and where the processing is consistent with the protection of minors' rights and interests.
If a guardian discovers that a minor has provided personal information without the necessary authorization, the guardian may contact us using the contact information below. We will verify the circumstances and take appropriate action in accordance with applicable law.
Third-Party Services and Privacy Responsibilities#
Depending on actual business requirements, Shuxin Cloud may integrate third-party payment, identity verification, login authentication, customer support, or other necessary technical services. We may also provide links to external websites or scientific research tools.
Third-party services may operate under their own privacy policies and personal information processing rules. We recommend reviewing these policies before using such services.
For third-party services integrated or commissioned by Shuxin Cloud, we will fulfill our applicable obligations regarding personal information protection, entrusted processing management, and other legal requirements.
External websites independently accessed and used by you will generally process personal information under their own applicable privacy policies.
Third-party SDKs, plugins, and external services actually used by the Platform shall be disclosed through appropriate channels, including their names, purposes, categories of personal information involved, privacy policies, and other required information.
Shuxin Cloud will not disclaim responsibilities imposed on it by law merely because an external service provider maintains a separate privacy policy.
Updates and Applicability of This Policy#
10.1 Scope of Application#
This Policy applies to Shuxin Cloud websites, the Luban Console, and related web-based, client-based, and other service interfaces actually provided by Shuxin Cloud.
Where a specific service is governed by a separate privacy policy, we will clearly identify that policy and its applicable scope.
10.2 Policy Updates#
We may revise this Policy in response to changes in applicable laws, business operations, technological developments, or service functions.
Where material changes affect personal information processing purposes, methods, categories, retention periods, or disclosure arrangements, we will provide notice through website announcements, Platform notifications, emails, or other reasonable means as required by law.
For changes that may materially affect Users' rights and interests, we will generally provide at least seven (7) days' advance notice unless otherwise required by applicable law.
Where renewed consent or separate consent is legally required, we will complete the necessary procedures. Continued use of the Platform will not, by itself, replace consent that must be expressly obtained by law.
10.3 Interpretation and Applicable Rules#
This Policy and the Shuxin Cloud User Agreement together form important documents governing User rights and the provision of Platform services.
Where any provision of this Policy conflicts with mandatory provisions of applicable personal information protection laws, the applicable legal requirements shall prevail.
Contact Information#
If you have questions, complaints, suggestions, or requests concerning this Policy or your personal information rights, please contact us through the following channels:
Personal Information Processor: Jiangsu Shuxin Cloud Technology Co., Ltd.
Platform Name: Shuxin Cloud
Official Website: https://www.sxycloud.com
Customer Support and Privacy Contact Email: shouqunren@sxycloud.vip
Customer Support Hours: Monday–Friday, 9:00 AM–6:00 PM (Beijing Time, UTC+8)
We will review and handle your request in accordance with applicable laws and regulations.
Privacy Policy Acknowledgment
By selecting "I have read and agree to the Shuxin Cloud User Agreement and Shuxin Cloud Privacy Policy," you acknowledge that you have read and understood this Policy.
We will process personal information only on an applicable lawful basis. Where separate consent is legally required for processing sensitive personal information, providing information to third parties, or undertaking other specified activities, the necessary procedures will be completed separately.
Jiangsu Shuxin Cloud Technology Co., Ltd.
语言效力说明 / Language Precedence#
本政策以中文和英文两种语言提供。如两种语言版本在理解或解释上存在不一致，以中文版本为准，但适用法律法规另有规定或双方另有合法有效约定的除外。
This Policy is provided in Chinese and English. In the event of any inconsistency in interpretation, the Chinese version shall prevail unless otherwise required by applicable law or validly agreed upon by the parties.