Privacy Policy

Introduction

TongId (the "we") is an identity infrastructure platform that provides hosted login, order payment, entitlement activation, and open API/SDK services to integrated applications (the "App Providers") and their end users (collectively, the "Services"). This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use the Services, and the rights you may exercise.

Important note: We process personal information in two roles.With respect to platform users (App Providers) — information necessary for registering for and using the Services and for communicating with us — we act as a data controller. With respect to end-user information controlled by App Providers when they use the Services (such as identity and order information created through login or purchase on the Platform), we act as a data processor on behalf of the App Providers and process such information in accordance with the agreements between the Platform and the App Providers. For how an App collects and uses end-user information, please refer to that App's privacy policy, and you may direct your requests to the App directly.

1. Information We Collect

We collect personal information only to the extent necessary to provide the Services:

• Information you provide: account information (email, display name, password hash, third-party login identifiers, etc.), transaction information (order numbers, products, amounts, discounts, payment status, contact information, etc.), and information you provide when contacting support or providing feedback.
• Information collected automatically: device and technical information (device type, browser type, IP address, access time, session identifiers, security verification logs, etc.), and your usage of the Services (such as login, purchase, and redemption records).
• Information from third parties: when you log in with a third-party account (such as Google) or use third-party payment services, we may obtain necessary identity or payment information based on your authorization or the applicable third-party rules.

2. How We Use Information

• create and maintain accounts, and complete login, session management, and cross-site handover;
• process orders, payments, invoice contacts, and entitlement activation;
• safeguard the security of the Services and prevent abuse, fraud, and security risks;
• send you service-related notifications (such as verification emails and order status updates);
• improve our products and services using aggregated or de-identified information;
• fulfill obligations under applicable laws and regulations.

We do not sell your personal information, nor do we use it for personalized advertising.

3. Cookies and Similar Technologies

We use cookies or similar technologies to maintain login sessions, isolate authentication states across different applications, and complete necessary security checks. On public marketing pages, we also use Google Analytics to understand aggregate page visits and navigation. Google Analytics may set analytics cookies; you may restrict or clear cookies in your browser, but doing so may prevent you from logging in or completing purchases.

4. Sharing, Delegated Processing, and Disclosure

Except for the following circumstances, we do not provide your personal information to third parties:

• Payment processors: necessary order and payment information will be provided to payment processors such as Alipay to complete payment;
• App Providers: when you log in to or purchase from an application, the App Provider may obtain identity and entitlement information related to its business through authorized interfaces;
• Service providers: we may engage constrained service providers to process relevant information for necessary services such as hosting, operations, and email delivery;
• as required by applicable law, or as necessary to protect the material lawful rights and interests of you, the Platform, or the public.

Where information is processed on our behalf, we will require the processor, through agreements or similar means, to process your personal information in accordance with this Privacy Policy and applicable law. Where information is provided to third parties, we will fulfill our notification obligations and obtain your separate consent where required by applicable law (unless otherwise provided by law).

5. Storage and Security

We generally store your personal information within the jurisdiction in which our services are operated. If personal information needs to be transferred across borders for business purposes, we will fulfill the corresponding obligations under applicable law and take necessary protective measures.

We take organizational and technical measures that comply with applicable laws and regulations to protect your information, including, without limitation, encrypted transmission (HTTPS), access control, and security audits. Please note, however, that no security measure can guarantee absolute security.

6. Retention Period

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, and may extend retention where required by applicable law or for dispute resolution. After the retention period, we will delete or anonymize the relevant information.

7. Your Rights

Under applicable data protection laws, you have the right to:

• access and obtain a copy of your personal information;
• correct inaccurate or incomplete personal information;
• delete your personal information;
• withdraw your consent (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal);
• close your account;
• exercise other rights provided by applicable laws and regulations.

You may submit a request through the contact channels published on the Platform, and we will verify and process it within a reasonable period. Please note that some requests may affect the normal use of your account, orders, or related features. If you are an End User of an App Provider, please contact the App Provider directly with respect to information controlled by the App Provider.

8. Children's Privacy

The Services are intended for users with full legal capacity under applicable law. If you are a minor, please use the Services with the consent and guidance of your guardian and avoid providing us with personal information. If we become aware that we have collected personal information from a minor without guardian consent, we will take measures such as deletion in accordance with applicable law.

9. Policy Updates

We may update this Privacy Policy from time to time. The updated version will be published on this page with the updated date. For material changes, we will provide reasonable notice. Your continued use of the Services after such update constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, comments, or suggestions regarding this Privacy Policy, or if you need to exercise the rights above, please contact us through the contact channels published on the Platform. We will respond within a reasonable period.