Privacy Policy for Cydiance Software

This Privacy Policy applies to the Cydiance App (Android, iOS, WeChat) and related Cydiance online services that link to this document.

Controller and owner

Shanghai Cydiance Technology Co., Ltd

Rm A219–220, Bldg 6, No. 407 Rongxing Rd, Shanghai, China

Owner contact email: info@cydiance.com

Types of data collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are: email address, first name, last name, company name, Camera permission, Approximate location permission (non-continuous), Bluetooth sharing permission, Cookies, and Usage Data.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to data collection.

Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.

Unless this Application specifically states that certain Data is not mandatory, Data requested is required to provide the service. Failure to provide mandatory Data may make it impossible for this Application to provide its services.

Users who are uncertain about which Personal Data is mandatory may contact the Owner.

Any use of Cookies — or of other tracking tools — by this Application or by the owners of third-party services used by this Application serves the purpose of providing the service required by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published, or shared through this Application and confirm that they have the third party's consent to provide the Data to the Owner.

Mode and place of processing

Methods of processing

The Data Controller processes User Data in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

Processing is carried out using computers and/or IT-enabled tools, following organizational procedures strictly related to the purposes indicated. In addition to the Data Controller, Data may be accessible to persons involved in operation of the service (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.

Place

Data is processed at the Data Controller's operating offices and in any other places where the parties involved with processing are located. For further information, contact the Data Controller.

Retention time

Data is kept for the time necessary to provide the service requested by the User, or as stated by the purposes outlined in this document. The User may request that the Data Controller suspend or remove the data.

Use of collected data

Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes:

• Contacting the User
• Device permissions for Personal Data access
• Displaying content from external platforms

The Personal Data used for each purpose is outlined in the specific sections of this document.

Device permissions for Personal Data access

Depending on the User's device, this Application may request certain permissions that allow it to access device Data as described below.

By default, these permissions must be granted by the User before the respective information can be accessed. Once granted, permissions may be revoked at any time through device settings or by contacting the Owner.

Revoking permissions may impact the proper functioning of this Application.

If the User grants any of the permissions listed below, the respective Personal Data may be processed (i.e. accessed, modified, or removed) by this Application.

Approximate location permission (non-continuous)

Used for accessing the User's approximate device location to provide location-based services. Location is determined in a non-continuous manner; this Application cannot derive the User's approximate position on a continuous basis.

Bluetooth sharing permission

Used for Bluetooth-related functions such as scanning for devices, connecting with devices, and allowing data transfer between devices.

Camera permission

Used for accessing the camera or capturing images and video from the device.

Detailed information on processing

Personal Data is collected for the following purposes and using the following services:

• Contacting the User
• Device permissions for Personal Data access
• Displaying content from external platforms

Further information about Personal Data

• Push notifications

Additional information about data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Data Controller in court or in stages leading to possible legal action arising from improper use of this Application or related services.

The User acknowledges that the Data Controller may be required to reveal personal data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (system logs) or use other Personal Data (such as IP address) for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. See the contact information at the beginning of this document.

Rights of Users

Users have the right, at any time, to know whether their Personal Data has been stored and to consult the Data Controller to learn about contents and origin, verify accuracy, or request supplementation, cancellation, update, correction, transformation into anonymous format, or blocking of data held in violation of the law, as well as to oppose processing for legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.

This Application does not support “Do Not Track” requests. To determine whether third-party services honor “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Users are advised to review this page periodically. If a User objects to any change, the User must cease using this Application and may request removal of Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Data Controller holds about Users.