360 SmartBrain API Platform Privacy Policy

Update Date: July 11, 2023

Effective Date: July 11, 2023

Introduction

360 SmartBrain API Platform (website: https://ai.360.com/open, hereinafter referred to as "the Platform") is an information service platform developed and operated by Beijing Qihu Technology Co., Ltd. (hereinafter referred to as "360" or "we"). 360 has formulated this Privacy Policy in accordance with national laws, regulations, and relevant provisions to protect the privacy security of Platform users (hereinafter referred to as "you").

This Privacy Policy applies to all products and services provided on the Platform pages and other products that use this Privacy Policy. When you access the Platform or sign this Privacy Policy by checking or other means, this Privacy Policy becomes legally binding on you. 360 collects, transmits, uses, shares, discloses, and publicizes your information in accordance with this Privacy Policy. 360特别提示：Please carefully read and fully understand all content of this Privacy Policy, especially the content highlighted in bold or other formats. If you cannot fully read, understand, or agree to all or any part of this Privacy Policy, please stop accessing the Platform and stop using Platform services.

This Privacy Policy will help you understand the following:

How we collect and use your information How we use Cookies and similar technologies How we share, transfer, and publicly disclose your information How we store your personal information Your rights to manage personal information How this Privacy Policy is updated and its scope of application How to contact us

I. How We Collect and Use Your Information

360 only collects and uses your personal information for the following purposes described in this Privacy Policy:

  1. Information needed to register for the Platform

The prerequisite for using the Platform services is that you have a 360 account. Registering a new 360 account requires collecting your mobile phone number and account name to create the account and send you SMS verification codes.

  1. Information needed when applying to use the Platform

If you wish to use Platform-related services, you need to fill in and provide 360 with the following information: your name, contact phone number, contact email, company name, company type, company industry, and your company's business scenario. This information will be used to review whether to grant you Platform access permissions and to contact you by phone or email to confirm whether your company is willing to become a 360 partner.

  1. Customer service and dispute handling

When you submit pre-sale or post-sale dispute resolution requests to us, we need you to provide necessary personal information to verify your user identity to protect your account and system security. To facilitate contacting you, helping you resolve issues as quickly as possible, or recording the resolution plans and results of related issues, we may retain your communication/call records and related content (including account information, order information, other information you provide to prove relevant facts, or the contact information you leave). If you consult, complain, or provide suggestions regarding a specific order, we will use your account information and order information. We may also use other information you provide when contacting customer service for the reasonable needs of providing services and improving service quality.

II. How We Use Cookies and Similar Technologies

To ensure the normal operation of the Platform, we may store small data files called Cookies on your computer or mobile device. Cookies typically contain identifiers, site names, and some numbers and characters. The main function of Cookies is to facilitate your use of Platform products and services and to help the Platform count unique visitors, etc. Using Cookie technology, we can provide you with more personalized services and allow you to set your specific service options.

When you browse the Platform pages, the Platform will send Cookies to your device. We will not use Cookies for any purpose other than those described in this Privacy Policy. You can manage or delete Cookies according to your preferences, but such modifications may prevent you from logging in or using services or functions that rely on Cookies.

III. How We Share, Transfer, and Publicly Disclose Your Information

  1. 360 will not share your information with any company, organization, or individual other than 360 affiliates, except in the following circumstances:

(1) After obtaining your explicit consent, 360 may share your personal information with other parties.

(2) Sharing with authorized partners: To achieve the core functions of the Platform or provide you with needed services, 360 may share certain information with partners. 360's current authorized partners include:

Basic cloud services: The Platform uses public cloud services as underlying resource support, and your personal information will be stored and processed using public cloud services.

360 will only process your information for specific, clear, and legitimate purposes and will only share information necessary for providing services with authorized partners. At the same time, 360 will sign strict confidentiality agreements with them, requiring partners to process related information in accordance with this Privacy Policy and any other relevant confidentiality and security measures.

(3) Sharing under statutory circumstances: 360 may share your information externally in accordance with legal and regulatory requirements, litigation dispute resolution needs, or in response to requirements from administrative or judicial authorities.

  1. 360 will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

(1) After obtaining your separate consent, 360 may transfer your personal information to other parties;

(2) In the case of mergers, acquisitions, or bankruptcy liquidation, if personal information transfer is involved, 360 will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, 360 will require that company or organization to seek your authorization and consent again.

  1. We will only publicly disclose your personal information under the following circumstances:

(1) With your separate consent and under the premise of adopting security protection measures that comply with legal and industry standards, disclose to third parties;

(2) In accordance with relevant legal provisions or mandatory requirements of administrative or judicial authorities, disclose to third parties or administrative/judicial authorities;

  1. Exceptions to prior authorization for sharing, transferring, and publicly disclosing personal information

Sharing, transferring, and publicly disclosing your personal information in the following circumstances does not require prior authorization:

Related to national security or national defense; Related to public security, public health, or major public interests; Related to criminal investigation, prosecution, trial, and execution of judgments or other judicial or administrative law enforcement matters; To protect your or others' significant legitimate rights and interests such as life or property, where it is difficult to obtain your consent; Personal information you have made public; Personal information collected from legally publicly disclosed information, such as legal news reports, government information disclosure, etc.; Signing contracts as required or agreed by you; Other circumstances stipulated by laws and regulations. Please note that, in accordance with applicable law, if we process personal information by adopting technical measures and other necessary measures so that the data recipient cannot re-identify specific individuals and cannot restore the data, the sharing, transfer, and public disclosure of such processed data does not require further notification or consent.

IV. How We Store Your Personal Information

(A) Storage Period

We will only retain your personal information for the period necessary to achieve the purposes described in this Policy, unless the law requires mandatory retention. After the retention period expires, we will delete or anonymize your user information in accordance with applicable legal requirements.

(B) Storage Location

Personal information generated or collected within the territory of the People's Republic of China is stored on servers within China. Unless we obtain your separate consent, or to fulfill a contract with you, or to comply with legal and regulatory obligations, we will not provide any of your personal information abroad.

(C) Storage Security

  1. Data Protection Technical Measures

We have adopted industry-standard, reasonably feasible security protection measures to protect your information from unauthorized access, public disclosure, use, modification, damage, or loss.

  1. Data Protection Management Organizational Measures

We have established an industry-leading data security management system centered on data and surrounding the data lifecycle, enhancing personal information security from the dimensions of organizational construction, system design, personnel management, and technology. Our security technical safeguards include three levels: "firewall level," "database resource level," and "business interaction level," and we continuously strengthen employee awareness of the importance of protecting personal information.

  1. Response to Personal Information Security Incidents

If our physical, technical, or management safeguards are compromised, resulting in unauthorized access, public disclosure, alteration, or destruction of information, causing damage to your legitimate rights and interests, we will promptly initiate emergency response plans and take reasonable and necessary measures to minimize the impact on you. In the event of a personal information security incident, we will also inform you in accordance with legal and regulatory requirements of the basic situation and possible impact of the security incident, the measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will inform you through SMS, phone, push notifications, and other reasonable channels. If it is difficult to inform individuals one by one, we will take reasonable and effective measures to publish announcements. At the same time, we will report the handling of personal information security incidents to regulatory authorities as required.

  1. Prevention of Account Security Risks

Please properly protect your personal information and do not disclose personal information through testing. If you are concerned that your personal information, especially your account or password, has been leaked, please contact kefu@360.cn immediately so that we can take corresponding measures based on your application.

V. Your Rights to Manage Personal Information

  1. Access, Edit, and Download Your Personal Information

You can contact us via email to access, edit, and download the information you filled in during the application, close your account, etc. For specific contact information, see "How to Contact Us."

  1. Delete Your Personal Information

You can delete information by logging into your 360 account. You have the right to request 360 to delete your personal information and withdraw your authorization to 360 in the following circumstances:

360 collected your personal information without your explicit consent. 360 processed your personal information in violation of legal and regulatory requirements. 360 violated the agreement with you in using and processing your personal information. You have canceled your 360 product (or service). 360 has stopped providing services to you. After you or 360 assists you in deleting relevant information, due to applicable laws and security technology, 360 may not be able to immediately delete the corresponding information from backup systems. 360 will securely store your personal information and isolate it from any further processing until the backup can be cleared or anonymized.

  1. Correct Your Personal Information or Authorization

When you find errors in the collected and stored personal information, you have the right to request 360 to correct it. Some features of this Platform may require basic personal information to complete. You can correct erroneous information or withdraw your authorization at any time.

  1. Response to Your Requests

If you have any questions about the above rights, or if the information you need to access or download is not provided within the Platform, or if you need to refuse certain specific data processing, you can contact our customer service. See "How to Contact Us" for customer service contact information. For security purposes, we may require you to provide a written request or otherwise prove your identity. We may first ask you to verify your identity before processing your request. We will respond within 30 days.

We generally do not charge fees for reasonable requests, but we may charge appropriate fees for repeated requests beyond reasonable limits. We may reject requests that are not directly related to your identity, are unreasonably repetitive, require excessive technical means (e.g., developing new systems), pose risks to the legitimate rights and interests of others, or are impractical.

In the following circumstances, in accordance with legal and regulatory requirements, we will not be able to respond to your requests:

  • Related to national security or national defense;
  • Related to public security, public health, or major public interests;
  • Related to criminal investigation, prosecution, trial, and execution of judgments;
  • There is sufficient evidence that the personal information subject has subjective malice or abuses rights;
  • Responding to your request will cause serious damage to your or other individuals' or organizations' legitimate rights and interests;
  • Involving trade secrets.

VI. How This Privacy Policy Is Updated and Scope of Application

  1. The formation, effectiveness, interpretation, execution, jurisdiction, and dispute resolution of this Privacy Policy are governed by the laws of the People's Republic of China. Any disputes arising from this Policy and our handling of your personal information may be brought to the Beijing Chaoyang District People's Court.

  2. 360 reserves the right to revise this Privacy Policy. If revisions result in a substantial reduction of your rights under this Privacy Policy, 360 will send change notifications through various channels, including but not limited to Platform announcements and email notifications. If you do not agree to the revised Privacy Policy, you have the right to and should immediately notify 360 to delete your information. Otherwise, you will be deemed to have accepted 360's modifications to the relevant terms of this Privacy Policy.

VII. How to Contact Us

If you still have any questions about this Privacy Policy, you can email (kefu@360.cn). We will review your questions as soon as possible and respond within thirty days.