Privacy Policy

Effective Date and Updates: June 12, 2025

Welcome to our products and services. We fully recognize the importance of personal data to you. We are committed to complying with applicable laws and regulations and implementing appropriate security measures to protect your personal data. Accordingly, ZiBird (hereinafter referred to as "we" or "us") has established this Privacy Policy (hereinafter referred to as "this Policy") to help you understand how we collect, use, and safeguard your personal data during your use of our products and services.

By accessing or using any ZiBird product, you acknowledge and agree to the data collection, processing, and handling practices described in this Policy. This Policy forms an integral part of the ZiBird Service Agreement entered into between you and us (whether in electronic or non-electronic form).

Important Notice: Please read this Privacy Policy carefully before using any of our services, and ensure that you fully understand its contents and make an informed choice. By choosing to use or continue using our services, you signify your agreement to the collection and processing of your information as described herein. If you provide us with personal data of third parties, you represent and warrant that you have obtained sufficient and lawful authorization from those individuals. If, during your use of ZiBird, you collect personal data of third-party subjects, you must inform them of the type, purpose, method, and duration of data processing and obtain their consent, or otherwise establish a valid legal basis. Failure to do so will result in all related risks and liabilities being borne solely by you. You are required to respect all personal data that you may access or come into contact with through ZiBird and its related services, including but not limited to information pertaining to other users. Unless you have obtained explicit authorization or are otherwise permitted by law, you must not collect, duplicate, store, disseminate, or otherwise use the personal data of other users. Any consequences arising from a violation of this obligation shall be solely your responsibility.

If you have any questions about this Policy or our practices, or if you wish to raise a concern, lodge a complaint, or request the withdrawal, correction, or deletion of your personal data, please contact us at support@zibird.com. We will respond within fifteen (15) business days upon receipt of your request and verification of your identity, or within the period required by applicable laws and regulations. If you are not satisfied with our response—particularly if you believe your legitimate rights and interests have been infringed by our data processing practices—and amicable resolution cannot be achieved, you may file a lawsuit with a competent court at the defendant's place of domicile.

Data Controller

For the purposes of this Policy, your data controller is [HONGKONG ZIXUN INTERNATIONAL CO., LIMITED] (Address: [RM 21-F7 UNIT A 11/F TIN WUI IND BLDG NO 3 HING WONG ST TUEN MUN NT HONG KONG]).

Information Collection

"Personal data" refers to any information relating to an identified or identifiable natural person (a "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to that natural person's physical, physiological, genetic, mental, economic, cultural, or social identity.

We collect and process your personal data in accordance with the principles of lawfulness, fairness, and necessity, and only for the purposes of fulfilling the relevant functionalities. We strive to provide full, accurate, and timely disclosure regarding the collection and use of your personal information. Unless otherwise provided for in the specific business scenarios below, any personal information you voluntarily submit to us in the course of using the ZiBird services shall be deemed to have been provided with your consent for our collection and use as described in this Policy.

1. Account Registration: To access and use our services, you are required to register an account by providing accurate and truthful information, including but not limited to your company name, full name or entity name, email address, phone number, account name, password, and any other information requested during registration. You must ensure that all registration details remain accurate and up-to-date. Failure to provide such information may result in unsuccessful registration or inability to log into your ZiBird account.

2. Product Usage: When you access our products, we collect sufficient information necessary to complete your operations. Our servers automatically collect and aggregate access-related data, which may include your ZiBird account, IP address, operating system, browser type, and other technical identifiers.

3. Third-Party Information Sharing: We may receive your personal information from authorized third-party sources. For example, in order to provide you with services such as store management, you may be required to provide or authorize us to obtain relevant account information, business data, or other information as prompted by the authorization interface of third-party platforms. We will use such data only after verifying the legality of the data source and in compliance with applicable laws and regulations.

4. Paid Services: If you purchase any paid services from ZiBird, you will be required to provide payment-related information such as billing details, order information, and the payer's full name to complete the transaction. Payments are processed through third-party payment processors, which are responsible for securing your financial data and processing the payment on our behalf.

5. Operations and Service Provision: Operating our business and providing services to you constitute core aspects of our commercial activities. In accordance with the needs of routine business operations, we may use your personal data internally for purposes including but not limited to conducting internal audits, performing data analysis and research activities. Furthermore, we may use the information we collect to conduct big data analytics. For example, we may analyze the collected information to create statistical products that do not contain any personal identifiers, which are used to present an overview of our services, identify behavioral patterns of different user groups, and generate insights for service optimization. In addition, we may process and analyze your usage behavior and conduct data research and analysis for various purposes, including but not limited to improving products or services, optimizing business arrangements, and supporting commercial decision-making. We may disclose and share such data externally with our partners in the form of anonymized and aggregated statistical insights that contain no personally identifiable information. To ensure secure and stable business operations, network security, and optimization of our services, we may need to collect device information, network-related data, user information, user preferences (such as privacy settings), and other technical or diagnostic information related to the services you use. If you refuse to provide such information, we may not be able to ensure the proper and secure functioning of the services provided to you.

6. Third-Party Personal Data: If you submit personal data of other individuals while using our services, you must ensure that you have obtained proper and explicit authorization from those individuals. You may voluntarily provide personal information (such as username, password, phone number, email, and role) of your team members in order to create sub-accounts and assign organizational roles. By using ZiBird, you authorize us to collect and process personal information of third-party customers, either directly shared by you or obtained under your instructions, including but not limited to their address, email, age, name, phone number, social media accounts or links, and transaction history. You are responsible for ensuring that such information is collected and shared in a lawful and compliant manner under applicable data protection laws. We reserve the right to conduct audits on the legality of the data source and its processing.

7. Customer Support: If you contact us via telephone, email, or other communication channels for product-related inquiries or technical support, you may provide us with personal or account information necessary to fulfill your request or resolve an issue.

Use of Information

We use the information we collect for certain legitimate business purposes, including but not limited to the following:

1. To provide users with subscription-based services;

2. To process payments;

3. To notify users about upgrades, service alerts, promotions, or other information that may be of interest to them;

4. To respond to user inquiries and to continually improve our website, products, and services based on user-provided information and feedback;

5. For IP-based location tracking and anti-fraud purposes;

6. To verify the identity of the account owner and accurately track account activity, thereby assisting technical personnel in analyzing and resolving potential user issues;

7. We place great importance on the protection of user data and privacy. We will never disclose any user information to third parties without user consent, nor will we sell user data under any circumstances;

8. To gain a better understanding of how individuals interact with our applications and services;

9. To enhance, modify, personalize, or otherwise improve our applications and services;

10. To prevent security breaches and misuse.

If we intend to use the information collected for a specific purpose in any manner not previously disclosed in this Privacy Policy, or if we plan to use your personal data for a purpose other than that for which it was originally collected, we will obtain your prior consent or ensure there is another lawful basis for such use (unless otherwise required or permitted by applicable laws and regulations).

Lawful Basis for Processing Personal Data

We process personal data in accordance with applicable data protection laws and ensure that each processing activity is supported by a lawful basis. The lawful basis may vary depending on the type of data involved and the specific context in which it is collected, including how you interact with our services. Our data processing activities are generally based on the following lawful grounds:

1. Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party, specifically the ZiBird Terms of Use, or in order to take steps at your request prior to entering into such a contract;

2. Legal Obligation: Processing is necessary to comply with a legal obligation to which we are subject, or to protect the rights, safety, or property of ZiBird, its subsidiaries or affiliates, our users, or third parties;

3. Legitimate Interests: Processing is carried out for the purposes of our legitimate interests, such as maintaining the security of our services, communicating with you, and improving our services. We will only rely on this basis where our legitimate interests are not overridden by your fundamental rights and freedoms or your right to data protection;

4. Consent: Where we rely on your explicit consent to process personal data, such consent will be obtained in advance. You have the right to withdraw your consent at any time. The procedure for withdrawal is set out in this Policy;

5. Other Lawful Grounds: Any other lawful basis as permitted or required under applicable data protection legislation.

Information Sharing

Under no circumstances will we sell or rent your personal information to any third party. We will not transfer your personal information to any third party for processing or any other purpose unless permitted under this Policy, required by applicable laws and regulations, or with your prior explicit consent. We only share your personal information with our subsidiaries, affiliates, service providers, or other relevant third parties for limited and specific purposes, including but not limited to fulfilling customer orders, delivering certain website-related products and services, communicating with customers, providing customer support, improving customer service, preventing fraud, and processing payment methods. We ensure that all such parties are subject to strict confidentiality obligations. These parties include:

1. Fraud and Abuse Prevention Entities: We may disclose personal data in good faith to prevent fraud, abuse, or attacks on our services, or to protect the security of ZiBird and its users.

2. Affiliated Companies: Personal data may be shared with ZiBird's affiliated entities for the purpose of customer service, order fulfillment, billing, technical support, and legal or regulatory compliance. Our affiliates are permitted to use personal data only in accordance with this Privacy Policy.

3. Regulatory Authorities: We may disclose personal data to authorized law enforcement agencies, regulatory bodies, courts, or other public authorities if legally required to do so or when necessary to protect our legal rights and the safety of our users or the public.

4. Corporate Transaction Participants: Where permitted by law and consistent with this Privacy Policy, personal data may be disclosed in connection with strategic corporate transactions, such as a merger, acquisition, sale of assets, or other restructuring.

5. Partners and Distributors: We may engage with third parties to assist with sales, consulting, support, and technical services related to our offerings. Where authorized, we may share your personal data with such partners and distributors, and will obtain your consent when required.

6. Sub-processors and Service Providers: We may engage vendors to act on our behalf to provide hosting, marketing, advertising, analytics, customer support, credit card processing, or security services. These vendors are contractually obligated to protect the confidentiality, privacy, and security of your data.

7. Third-Party Applications: At your direction, we may share personal data with third-party applications available in our marketplace. You are solely responsible for any data you instruct us to share with such applications.

8. Other Users and the Public: Depending on your account settings, we may share personal data with other users of the service and the public. You may control which information is made public by adjusting your preferences in the "User Settings" section of your profile. Please note that any information you share in collaborative environments may be publicly accessible.

Other than for the purposes stated above, we will not share your personal information with any other third party without your explicit consent, unless otherwise permitted or required by applicable laws, regulations, or extraordinary circumstances. This includes situations where ZiBird is required to disclose such information in response to lawful requests from government authorities, law enforcement agencies, regulatory bodies, subpoenas, or other legal documents, or when we believe it is reasonably necessary to protect any person's safety, resolve security or technical issues, prevent fraud, or defend ZiBird's legal rights or property. We may also share aggregated statistical data with our partners that does not identify any individual. For more information on how we share your personal information, you may contact us at support@zibird.com.

Data Security

1. We take the security of your personal data very seriously and are committed to implementing reasonable security measures—both technical and organizational—to safeguard your information. We have enabled security protections for user accounts and adopt industry-standard safeguards such as password encryption to prevent unauthorized access, disclosure, use, modification, damage, loss, or leakage of the personal data you provide.

2. We employ a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, or disclosure. However, please understand that no method of transmission over the Internet or method of electronic storage is 100% secure. Despite our best efforts to enhance our security measures, we cannot guarantee the absolute security of your information due to technological limitations and potential malicious acts.

3. We encourage you to use complex and unique passwords to help us secure your account. While we will make every effort to protect any information you send us, we also rely on you to maintain awareness of your own information security and adopt proper protective practices.

4. In the unfortunate event of a personal data security incident, we will promptly inform you of the general circumstances of the incident, its potential impact, the remedial measures we have taken or will take, and suggestions for how you can mitigate the risks. We will notify you using the contact information you have provided to us, including but not limited to in-person notice, text message, telephone call, or email. Where individual notification is impractical, we will take reasonable and effective alternative measures, such as public announcements. Additionally, we will proactively report the handling and remediation of personal data security incidents to the relevant regulatory authorities as required by applicable laws and regulations.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by applicable law. If you deactivate your account or delete your information, we will retain your existing personal data for the minimum period required by applicable laws and regulations. During this period, your personal information will not be used for any commercial purposes. Once the retention period has expired, we will delete or anonymize your personal information in accordance with applicable data protection standards.

You may request to cancel your registered ZiBird account at any time by contacting us through the channels provided in this Policy. We may require you to verify your identity in order to ensure the security of your account.

After your account is deactivated, we will cease providing services to you and, upon your request, delete your personal data within the legally prescribed timeframe—unless otherwise required by law or mutually agreed upon between you and us.

User Rights

You are responsible for ensuring that all personal information you provide is accurate, complete, and up to date. In accordance with applicable laws and regulations, we place great importance on your ability to manage your personal information and are committed to safeguarding your rights. We will make every reasonable effort to support and protect your rights, giving you meaningful control over your privacy and the security of your personal data.

Depending on your jurisdiction, you may have certain legal rights in relation to your personal data, including but not limited to:

1. The right to access the personal data we have collected about you;

2. The right to correct or update inaccurate or incomplete personal data, in certain circumstances;

3. The right to delete or restrict the processing of your personal data under specific conditions;

4. The right to object to the processing of your personal data, where permitted by applicable law;

5. The right to withdraw your consent, where data processing is based on your consent;

6. The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another organization, where technically feasible.

If you wish to exercise any of your rights under applicable data protection laws, or if you have any questions regarding how we process your personal data, you may contact us at support@zibird.com. We will respond to your request within the timeframe required by the applicable data protection legislation.

Cookies and Tracking Technologies

To enhance your access experience, we may send one or more small data files known as cookies—or similar technologies—to your computer or mobile device. Each cookie is uniquely assigned to you and can only be read by the web server within the domain that issued the cookie. We use cookies to simplify repeat login procedures, help determine your login status, and support the security of your account and data.

We do not use cookies for any purpose other than those described in this Privacy Policy. You have the ability to manage or delete cookies according to your preferences. You can delete all cookies stored on your computer, and most web browsers are configured to accept cookies automatically. However, you can usually modify your browser settings to reject cookies if you prefer. You may also delete cookies stored within applications. Please note that if you choose to disable or delete cookies, you may need to manually adjust your settings each time you access our products, and previously stored information may be lost. This may also affect the security or functionality of the services you use. For more information on how to change your browser's cookie settings, please visit the settings or help page of the browser you are using.

Many web browsers offer a "Do Not Track" (DNT) feature that allows users to signal their preferences regarding online tracking. Currently, no uniform standard has been adopted by major internet standards organizations to dictate how websites should respond to such signals. Nevertheless, if your browser is set to send a DNT request, we will respect your preference.

Social Media Login

If you choose to log in through a social media account, we may access certain personal profile information as permitted by the relevant platform. The use of such data will be subject to this Privacy Policy.

Third-Party Links

This website may contain links to other websites or offer products and services provided by third parties. Please be aware that we are not responsible for the content, privacy practices, or data handling procedures of such third-party services. When you access or use third-party products or services through our platform, your personal information will be subject to the privacy policies and terms of those third parties. If you are required to use third-party services in the course of using ZiBird, we will clearly inform you on the relevant page that the service is provided by a specific third party. We strongly recommend that you carefully read and fully understand the applicable privacy agreements and policies of the third party before accepting or using their products or services.

Children's Privacy

While local laws and customs may vary in the definition of a child, we regard any individual under the age of 18 as a minor. ZiBird services are intended for users who are at least 18 years of age. However, due to the nature of the Internet, ZiBird is unable to effectively verify the age or legal capacity of users. By accessing or using ZiBird services and accepting this Privacy Policy, you represent and warrant that you are at least 18 years old and possess full legal capacity to enter into binding contracts under the laws of your jurisdiction of residence or the jurisdiction in which this Policy is accepted. If you do not agree to, or are unable to comply with, any term of this Privacy Policy, you must not use ZiBird's products or services.

If we become aware that we have inadvertently collected personal data from a minor or any natural person who lacks full legal capacity, without verifiable prior consent from a parent or legal guardian, we will take reasonable steps to delete such data as soon as possible.

If you are a parent or legal guardian of a minor or an individual lacking full civil capacity and have any concerns about how their personal data is being processed, please contact us at support@zibird.com.

Cross-border Transfer of Personal Information

The personal information we collect through the provision of our services is stored on servers located in Singapore. If it becomes necessary, in the course of providing our services or through our service providers/partners, to transfer your personal information to recipients located outside of your jurisdiction, we will provide you with detailed information regarding: the purpose of the transfer, the method of transfer, the identity of the overseas recipient, the categories of personal data being transferred, the security standards that will be applied during the transfer, and the rights you, as the data subject, are entitled to exercise, along with the procedures for exercising such rights. We will obtain your separate and explicit consent (or rely on another lawful basis for processing, as permitted by applicable laws) before initiating any cross-border transfer of your personal information. Furthermore, we will require the overseas recipient to process your personal data in accordance with our instructions, this Privacy Policy, and any other applicable confidentiality and security measures. We will not transfer your personal data to any overseas recipients if the legal conditions, procedures, or safeguards required by applicable laws, regulations, normative documents, or regulatory authorities are not met.

[If You Are Located in the European Economic Area (EEA)] The personal information we collect from you may be transferred to or accessed remotely from recipients located in countries or regions outside the EEA, including countries that may not be recognized as providing an adequate level of data protection by the European Commission. We will ensure that such transfers comply with applicable data protection laws and provide adequate protection for your personal data. Where required under applicable law, our business partners will obtain your valid consent prior to transferring your personal data to non-EEA recipients, including ZiBird affiliates or any other recipients as outlined in this Privacy Policy. You have the right to withdraw your consent at any time.

Privacy Policy Updates and Governing Law

This Privacy Policy may be updated periodically without prior notice in order to reflect changes in our personal data protection practices. We will notify you of any material changes to this Privacy Policy by posting a notice on our website and indicating the most recent update date at the top of the Privacy Policy. If we make significant changes to this Privacy Policy, we will take additional measures to notify you in a more prominent manner, which may include, but are not limited to, on-site pop-up notifications or banners on relevant webpages, along with a clear explanation of the material changes made. Whether or not we have provided you with individual notice of such changes, your continued use of our products or services after the updated Privacy Policy is published constitutes your acceptance of the revised terms. The updated Privacy Policy will be legally binding on both you and us. We encourage you to review this Privacy Policy regularly and to contact us using the information provided in the "Contact Us" section below if you have any questions or concerns about updates to the policy.

This Policy shall be governed by, interpreted, and enforced in accordance with the laws of the People's Republic of China (excluding the laws of Hong Kong, Macau, and Taiwan), without regard to its conflict of laws principles.

If any provision of this Policy is found to be invalid, unenforceable, or in violation of applicable law, in whole or in part, for any reason, such provision shall be deemed deleted. The remaining provisions of this Policy shall remain in full force and effect and continue to be binding.