Shanghai Definesys Information Technology Co., Ltd. Privacy Policy

Shanghai Definesys Information Technology Co., Ltd. and its global affiliates (hereinafter referred to as "Definesys", "we", and "our") understand the importance of privacy to you and are committed to respecting your privacy and ensuring the security of your personal data. Please read and understand this Privacy Policy (hereinafter referred to as "this Policy") before submitting any personal data to Definesys. This Policy applies to all Definesys websites and products and services developed or co-developed by Shanghai Definesys Information Technology Co., Ltd., including but not limited to those displaying this Policy or linking to it.

This Policy describes how Definesys collects, uses, and processes your personal data. However, this Policy may not address all possible data processing scenarios. Information regarding the collection of specific data in connection with particular products or services may be continuously or periodically supplemented in this Policy or provided in a separate notice at the time of collection.

"You" refers to any natural person or legal entity that uses Definesys products and services (including all members within an enterprise who use Definesys product systems), not limited solely to purchasing, downloading, or integrating services management personnel.

Please note that when using Definesys products or services, you may be required to provide your personal data in the scenarios and manner described in this Policy. In certain circumstances, you may choose not to provide Definesys with personal data; however, if you choose not to provide it, Definesys may not be able to provide you with related products or services, nor respond to or resolve any issues you encounter.

Please read this Privacy Policy carefully and thoroughly. Your agreement/consent to the descriptions in this Policy and authorization for Definesys to collect, use, and process your data as described herein will be demonstrated by your continued use of Definesys products and services. Please note that the authorized entities include Shanghai Definesys Information Technology Co., Ltd. and all its affiliated companies worldwide, as well as their global affiliated platform products. For example: your authorization will be deemed as your consent to allow Definesys and affiliated platform products to access and use your user registration information after you register for a Definesys Pass.

The purpose of this Policy is to help you understand the following:

  1. How We Collect and Use Your Personal Data
  2. How We Use Cookies and Similar Technologies
  3. How We Disclose Your Personal Data
  4. How to Access or Modify Your Personal Data
  5. How We Protect Your Personal Data
  6. How We Handle Children's Personal Data
  7. Third-Party Providers and Their Services
  8. How Your Personal Data is Transferred Globally
  9. How This Policy is Updated
  10. How to Contact Definesys

1. How We Collect and Use Your Personal Data

Personal data refers to information that, when used alone or in combination with other information, can identify an individual. Such data may be directly submitted by you when using our websites, products, or services, and when interacting with us—for example, when you create an account or contact us for support. Alternatively, it may be obtained by recording how you interact with our websites, products, or services, such as through technologies like Cookies, or by receiving usage data from software running on your device. Where permitted by law, we may also obtain relevant data from public and commercial third-party sources. The data we collect depends on how you interact with Definesys, including the websites visited or products and services used, such as name, gender, company name, position, address, email address, phone number, login information (account and password), photos, identification information, etc. We also collect information you provide to us and the content of messages you send to us, such as query information you enter or questions or information you provide to obtain customer support.

1.1 How Data is Collected

Below, we will illustrate in which scenarios and how Definesys's products and services will collect your data:

(1) Product Registration
When you start using Definesys products, the information provided during registration will be used to create your user account. Additionally, when you contact the Definesys user service department, this information will assist Definesys in providing support, helping you complete the use of specific functions under your authorization, including but not limited to upgrades, cluster configuration, debugging, restoration, and resolving specific issues to ensure normal product use.

(2) Product Usage
Definesys may use information collected during product usage to: periodically verify your right to use the product; confirm whether you are using an earlier version of the product/feature before notifying you of upgrades to new products/features or whether it would be helpful for your use of Definesys; and allow you to receive internal product messages you request from Definesys.

(3) Internal Analysis
Our collection and use of such data are intended to provide you with services, ensure the normal operation of services and the security of your account, help identify issues you encounter while using Definesys products and services, prompt us to timely improve and optimize product features and services, and ultimately deliver a better product and service experience. Additionally, it aims to provide you with configuration suggestions better suited to your needs, enabling you to use Definesys products more optimally and fully based on your specific conditions and personalized requirements.

This includes:

  1. Collecting data to identify your identity to provide more accurate services;
  2. Collecting environmental information about the server where you deploy Definesys products, including system capacity and version, etc.;
  3. Collecting engineering configuration information about your use of Definesys products;
  4. Collecting information about your operational preferences to help improve and enhance your user experience and service satisfaction.

(4) Issue Resolution
To help resolve issues of varying degrees that arise during your use of Definesys products and assist us in improving product functionality, we may require authorization to obtain the following for accurate issue identification:

  1. Log files, including but not limited to dump files, logs, and other types of log files;
  2. Engineering files (excluding data in your database), solely for attempting to reproduce and analyze potential issues in your system. Engineering files will be deleted after issue reproduction and analysis and will not be used further;
  3. Error screenshots: There may be situations where you are required to provide error screenshots or where automatic screenshots are taken when an error occurs to quickly and timely identify the cause of the error. Please note that we only focus on information related to the error cause and never disclose any data that may be captured in screenshots to any third party.

1.2 Purposes of Data Collection

We may use your personal data for the following purposes:
(a) Creating an account.
(b) Fulfilling your transaction or service requests, including order execution; delivering, activating, or verifying products or services; providing training and certification and managing and processing training and certification results; participating in online or offline activities; making changes at your request or providing information you request (e.g., marketing materials, white papers for products or services); and providing technical support.
(c) Contacting you with your consent; sending you information about products and services that may interest you; inviting you to participate in Definesys events (including promotions), market research, or satisfaction surveys; or sending you marketing information. If you do not wish to receive such information, you may unsubscribe at any time.
(d) Sending you important notices, such as notifications of operating system or application updates and installations.
(e) Providing you with a personalized user experience and personalized content.
(f) Certifying and managing suppliers and business partners, and communicating or conducting business with suppliers and business partners.
(g) Conducting internal audits, data analysis, and research to improve our products and services.
(h) Analyzing business operational efficiency and measuring market share.
(i) Troubleshooting errors when you choose to send us error details.
(j) Synchronizing, sharing, and storing data you upload or download, as well as data required to perform uploads and downloads.
(k) Protecting the security of our products, services, customers, or users, and implementing and improving our loss prevention and anti-fraud programs.
(l) Complying with and enforcing applicable legal requirements, relevant industry standards, or our policies.

1.3 Non-Identifiable Data

Definesys may also collect and use non-identifiable data. Non-identifiable data refers to data that cannot be used to identify an individual. Non-identifiable data mainly includes the following categories:
(a) Version information of product terminals (designer & mobile).
(b) Statistics on the usage of product terminal functions (including template production time, AlphaFine function records).
(c) Crash error logs of product terminals (designer & mobile).
(d) Basic environmental information of the server connected to the product terminal (product version, environment container type, JDK version, etc.).
(e) Statistics on the usage of product functions on the server connected to the product terminal (function usage, template usage, etc.).

Definesys collects this data to understand how users use its products and services. This allows Definesys to improve its services and better meet customer needs. Definesys may, at its discretion, collect, use, process, transfer, or disclose non-identifiable data for other purposes. We will make every effort to isolate your personal data from non-identifiable data and use the two types of data separately. If personal data is mixed with non-identifiable data, it will still be treated as personal data.

When Definesys processes your personal data, we will comply with applicable legal requirements and process it based on appropriate legal grounds, including:

  • Processing your personal data to perform a contract when responding to your transaction or service requests;
  • Processing your personal data based on your consent;
  • Processing your personal data based on our or a third party’s legitimate interests when contacting you, conducting marketing or market research, improving our products and services, or implementing and improving our loss prevention and anti-fraud programs. These legitimate interests include enabling us to manage and operate our business more effectively and provide our products and services; protecting the security of our business, systems, products, services, and customers; internal management, compliance with internal policies and processes; and other legitimate interests described in this Policy;
  • We may also process your personal data based on compliance with and enforcement of legal obligations.

2. How We Use Cookies and Similar Technologies

2.1 Cookies

To ensure the normal operation of our websites, we may sometimes store small data files called Cookies on your computer or mobile device. A Cookie is a plain text file stored on your computer or mobile device by a web server. The content of a Cookie can only be retrieved or read by the server that created it. Each Cookie is unique to your web browser or mobile application. Cookies usually contain identifiers, site names, and some numbers and characters. With Cookies, websites can store data such as user preferences or items in a shopping cart.

Definesys enables Cookies for the same purposes as most websites or internet service providers: to improve user experience. With Cookies, websites can remember a user's single visit (using session Cookies) or multiple visits (using permanent Cookies). With Cookies, websites can save settings, such as the language, font size, and other browsing preferences of your computer or mobile device. This means that users do not need to reconfigure their preferences each time they visit. If a website does not use Cookies, it will treat the user as a new visitor every time they open a webpage. For example, if you log in to a website and then navigate to another webpage, the website will not recognize you, and you will be logged out again. Definesys will not use Cookies for any purposes other than those described in this Policy. You can manage or delete Cookies based on your preferences. For details, please see AboutCookies.org. You can clear all Cookies saved on your computer; most web browsers have the function to block Cookies. However, if you do so, you will need to change user settings manually each time you visit our website. For detailed instructions on how to change browser settings, please visit the following links:
Internet Explorer, Google Chrome, Mozilla Firefox, Safari, Opera.

2.2 Web Beacons and Pixel Tags

In addition to Cookies, we may use other similar technologies such as web beacons and pixel tags on our websites. For example, emails sent by Definesys to you may contain links to Definesys website content. If you click on such a link, Definesys will track this click to help us understand your product and service preferences and improve customer service. Web beacons are typically transparent images embedded in a website or email. With pixel tags in emails, we can determine whether an email has been opened. If you do not wish your activities to be tracked in this manner, you can unsubscribe from Definesys mailing lists at any time.

Your use of our website signifies your agreement to the use of Cookies, web beacons, and pixel tags as described above.

3. How We Disclose Your Personal Data

In cases where certain services are provided by our authorized partners, we will share your personal data with such partners as described in this Policy. For example, when you purchase our products online, we must share your personal data with logistics service providers to arrange delivery or to arrange for partners to provide services. Additionally, we may share personal data among our affiliated companies.

4. How to Access or Modify Your Personal Data

You should ensure that all personal data submitted is accurate. We will strive to maintain the accuracy and completeness of personal data and update it promptly.

Where required by applicable law, you may (1) have the right to access specific personal data we hold about you; (2) require us to update or correct your inaccurate personal data; (3) object to or restrict our use of your personal data; and (4) request that we delete your personal data. If you wish to exercise any of these rights, please provide us with feedback online. For security reasons, we may require you to make a written request. If we have reasonable grounds to believe that such requests are deceptive, unfeasible, or would infringe upon the privacy rights of others, we may refuse to process the request.

Where required by applicable law, when we process your personal data based on your consent, you also have the right to withdraw your consent at any time. However, the withdrawal of consent will not affect the legality and validity of our processing of your personal data based on your consent before the withdrawal, nor will it affect our processing of your personal data based on other appropriate legal grounds.

If you believe that our processing of your personal information does not comply with applicable data protection laws, you may contact the relevant data protection authority.

5. How We Protect and Retain Your Personal Data

We value the security of personal data. We adopt appropriate physical, administrative, and technical safeguards to protect your personal data from unauthorized access, disclosure, use, modification, damage, or loss. For example, we use encryption technology to ensure data confidentiality; we use protection mechanisms to prevent data from malicious attacks; we deploy access control mechanisms to ensure that only authorized personnel can access personal data; and we conduct security and privacy protection training courses to enhance employees' awareness of the importance of protecting personal data. We will do our best to protect your personal data, but please note that no security measure is perfect.

We will retain your personal data for the period necessary to achieve the purposes described in this Policy. For data that exceeds the necessary storage period, we will take measures to delete or anonymize it, unless required or permitted by law to extend the retention period. Because the storage period of data may vary depending on different scenarios and products and services, the criteria we use to determine the retention period include: the time required to retain personal data to fulfill the business purpose, including providing products and services, maintaining corresponding transaction and business records, controlling and improving product and service performance and quality, ensuring the security of systems, products, and services, responding to possible user inquiries or complaints, and locating issues; whether the user agrees to a longer retention period; and whether laws, contracts, etc., have special requirements for data retention. We will retain your registration information as long as your account is necessary to provide you with services. You may also choose to delete your account. After you delete your account, we will stop providing products and services based on that account and, unless otherwise required by law, delete your corresponding personal data.

6. How We Handle Children's Personal Data

Our products, websites, and services are primarily intended for adults. Children may not create their own user accounts without the consent of a parent or guardian. In cases where we collect children's personal data with parental consent, we will only use or disclose such data as permitted by law, with the explicit consent of the parent or guardian, or when necessary to protect the child. If we discover that we have collected children's personal data without prior verifiable parental consent, we will take steps to delete the relevant data as soon as possible.

7. Third-Party Providers and Their Services

To ensure a smooth browsing experience, you may receive content or web links provided by third parties (hereinafter referred to as "third parties") outside of us and our partners. We have no control over such third parties. You can choose whether to access links, content, products, and services provided by third parties.

We have no control over the privacy and data protection policies of third parties, and such third parties are not bound by this Policy. Before submitting personal information to third parties, please refer to the privacy policies of these third parties.

8. How Your Personal Data is Transferred Globally

We are a multinational company, which means that the personal data we collect may be processed in the country/region where you use the products or services, in other countries/regions where we, our affiliated companies, subsidiaries, service providers, or business partners have facilities, or may be accessed from these countries/regions. The data protection laws in these countries/regions may vary. In such cases, we will take measures to ensure that the data we collect is processed in accordance with the requirements of this Policy and applicable laws.

9. How This Policy is Updated

We reserve the right to update or modify this Policy from time to time. If our privacy policy changes, we will post the latest version of the privacy policy here. If we make significant changes to the privacy policy, we may also notify you through various channels, such as posting a notice on our website or sending you a separate notice.

10. How to Contact Us

If you have any questions, comments, or suggestions, please contact us by visiting www.definesys.com.

When we process your personal data in accordance with this Privacy Policy, the entity that responds to your requests, contacts you, provides you with products or services, or has or is about to enter into a contract with you is the controller of the relevant personal data.