Please refer to the version of the Privacy Policy that applies to your applicable region. 请参阅适用于您所在地区的隐私政策版本
生效日期：2025年8月5日
最后更新日期：2025年10月22日
欢迎您下载SChat！我们深知个人信息对您的重要性，并会尽全力保护您的个人信息安全可靠。本隐私政策（下称“本政策”）用于告知您我们处理您个人信息的情况。
本政策适用于中国境内（港澳台地区除外）注册并使用SChat的用户。中国境外的用户请参阅国际版本的隐私政策，SChat是由上海聆先信息技术有限公司（注册地为上海市长宁区金钟路968号5号楼501、502、503、505、506、507、508室，以下简称“我们”或“希音”）提供的平台。本隐私政策包括我们与您之间就使用的SChat所涉及的所有个人信息处理活动，包括但不限于一对一聊天、群聊、消息操作、会话管理及电话拨打等（不同语言版本以及不同客户端（电脑端、移动客户端（“APP”）及其他客户端）服务时关于个人信息（以下或称“信息”）所涉及的有关条款。
本隐私政策写明了在不同场景下我们处理你的个人信息的方式，为了帮助你更加直观、简明地了解我们如何收集、使用以及保护你的个人信息，我们也为你提供了内容更加简洁的 《隐私保护政策摘要》，该指引为本隐私政策的一部分。
本隐私政策将帮助您了解以下内容：
附录1：第三方信息共享清单
附录2: 个人信息收集清单
我们深知个人信息对您的重要性，并会尽全力保护您的个人信息安全可靠。我们致力于维持您对我们的信任，恪守以下原则，保护您的个人信息：权责一致原则、目的明确原则、选择同意原则、最小必要原则、确保安全原则、主体参与原则、公开透明原则等。同时，我们承诺，我们将按业界成熟的安全标准，采取相应的安全保护措施来保护您的个人信息。
您同意个⼈信息处理规则仅代表您已了解SChat提供的功能所需的必要个⼈信息。但这并不代表只要您开始使用我们的应用，我们将处理本政策中涉及的全部个人信息。仅当您开启使用特定功能及/或为遵守法律法规的要求时，我们会根据“最小必要”原则，为实现明确合理的目的，处理您的相关个人信息。您可以拒绝提供我们功能所需的必要个⼈信息，但这可能导致您无法使用其功能。对于非必要的个⼈信息处理，我们会单独征求您的同意。如果您拒绝 我们收集非必要个⼈信息，并不会影响您使⽤基本业务功能。
请在使用我们SChat的服务前，务必仔细阅读本政策以帮助您了解维护自己隐私权的方式，特别是以粗体/粗体下划线标识的条款，您应重点阅读，在确认充分理解并同意后再开始使用。本政策中与您的权益（可能）密切相关的重要条款，已采用明显标识来特别提醒您，请您重点查阅。
如果您勾选【“我已阅读并同意”】并确认提交，即视为您同意本政策并授权我们按照本政策规定处理您的个人信息。如果我们欲将您的个人信息用于本隐私政策未说明的其它用途，或基于特定目的收集来的信息用于其它目的，我们会及时以合理的方式告知您，并获得您的授权同意。
需要特别说明的是，本政策不适用于其他第三方向您提供的服务，第三方向您提供的服务适用其向您另行说明的隐私政策。
在本政策中，相关定义如下：
“个人信息” 或“信息”是指以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息，不包括匿名化处理后的信息。
“敏感个人信息” 是指一旦泄露或者非法使用，容易导致自然人的人格尊严受到侵害或者人身、财产安全受到危害的个人信息，包括生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息，以及不满十四周岁未成年人的个人信息。敏感个人信息将以粗体标识。
“处理”是指个人信息的收集、存储、使用、加工、传输、提供、公开、删除等行为。
根据本隐私政策，个人数据指与已识别或可识别个人有关的任何信息，但不包括无法与特定个人相关联的匿名数据。我们将在适用法律允许的范围内收集和使用以下类型的个人信息，以确保为您提供全面、稳定且安全的即时通讯服务及相关功能。
2.1.1 为实现的SChat核心使用功能，我们需要收集您的个人信息。具体请参阅《附录2: 个人信息收集清单》。为实现的SChat的基本业务功能及为实现该功能所需收集的个人信息，若您拒绝提供实现某项功能所需收集的个人信息，则无法使用该业务功能。
2.1.2 请您注意，如果您提供的是他人个人信息，请您确保已获得相关主体的授权。
2.1.3 我们可能出于商业运营和雇佣相关的目的，处理您的个人数据，或为实现与本声明一致的其他合理商业目的，并遵守适用法律法规的规定，提供与维护服务需要您提供：
员工身份信息
用户身份信息：员工工号、姓名/别名/昵称、用户名/登录账号、邮箱地址、联系方式、员工头像
2.1.4 我们可能出于商业运营和外部用户包括外部顾问、供应商及合作伙伴沟通的目的，提供与维护服务需要您提供：
2.1.5 为确保SChat平台的即时通讯、群聊管理、语音及视频通话、会议功能、推送通知及电子邮件等服务的正常运行需要您提供：
2.1.6 为了对员工进行问卷调查，可能会根据问卷内容采集员工的相关信息。作为问卷回答方，您在填答问卷的时候应当自行判断是否同意填写问卷，以及是否同意向问卷发起方提交个人信息。
2.1.7 为满足身份验证要求，特别是在SChat的会议功能中，我们将根据您的所在地区提供不同的认证方式：
2.1.8 为服务优化，对服务使用情况进行分析，以持续改进SChat的各项功能，提升用户体验。
2.1.9 在您使用我们服务过程中，为安全保障开展身份验证、监控异常活动、排查系统故障以及防范安全威胁，以确保数据和网络安全，我们可能会自动收集您的使用情况并存储为网络日志信息，包括：
2.1.10 请注意，单独的设备信息、服务日志信息是无法识别特定自然人身份的信息。如果我们将这类非个人信息与其他信息结合用于识别特定自然人身份，或者将其与个人信息结合使用，则在结合使用期间，这类非个人信息将被视为个人信息，除取得您授权或法律法规另有规定外，我们会将这类信息做匿名化、去标识化处理。
2.1.11 与此同时我们也可能会基于合法权益，为自身或第三方利益处理您的个人数据，包括但不限于以下情况：
这些信息仅用于虚拟拨号实名验证，不会用于其他目的。您不会受到仅依赖自动化处理或未经您事先同意做出的决策的影响。
2.2.1 首次使用 SChat 数据同步说明（为确保信息延续性），我们需要您提供通信与协作相关数据，包括企微数据员工头像，聊天数据，群组信息；使用企微邮箱、微软邮箱的员工所有邮件数据
2.3 SChat实现相关业务功能将开启您的设备访问权限列举2.3.1 您在使用本软件时，为提供给您服务之目的，本软件可能获取您的如下权限，当然您可以拒绝开启以下权限，或在手机的设置中关闭本软件的以下权限，关闭权限不会影响您对本软件其他功能的使用。
2.3.2 实现相关业务功能可能开启您的设备访问及使用权限、使用场景逐项列举：
| 业务场景 | 场景说明 | 访问及使用权限 |
|---|---|---|
| 访问相册 | 发送图片或视频时获取读取手机相册 | 相册权限 |
| 语音输入 | 单聊/群聊中语音输入、音视频电话/会议、拍摄视频时音频输入 | 麦克风权限 |
| 拍照功能 | 视频会议、拍摄照片和视频，扫一扫等 | 摄像头权限 |
| 工作台-考勤 | 上下班打卡 | 定位权限 |
| 消息远程推送 | 消息提醒、日程提醒、会议提醒等 | 通知权限 |
| 复制粘贴内容 | 使用SChat应用时，方便从应用内粘贴内容至应用外 | 剪切板权限 |
2.4.1.根据法律法规规定，我们可能在以下的情况下处理您的个人信息而无需征求你的同意：
我们可能会使用Cookie、标签、网络像素及类似技术，通过SChat功能自动收集信息。Cookie或标签是允许我们的技术合作伙伴收集通常不会直接识别您身份的信息的代码片段。本部分内容描述了我们对Cookie的使用以及您对Cookie的控制能力。
Cookie是网站或其服务提供商通过您的网络浏览器传输到您设备硬盘上的小型网络文件，使SChat能够识别您的浏览器并记住某些信息。您的浏览器可能会包含用于与SChat交互的Cookie，例如维持您的登录会话和保护数据的安全工具。我们使用Cookie的主要目的包括：确保SChat正常运行；在您使用SChat时提供安全的浏览体验；收集关于您使用SChat的被动信息；帮助我们改进SChat；以及记住您的偏好以提供便利。
我们在服务中使用以下类型的Cookie：
必要Cookie这些Cookie是必不可少的，因为它们使您能够使用SChat。例如，必要Cookie允许您访问我们服务中的安全区域。没有这些Cookie，某些服务将无法提供。此类Cookie是SChat正常运行所必需的，且无法禁用。
功能Cookie我们可能会使用功能Cookie来记住您的选择，以便为您提供增强功能。例如，这些Cookie可用于记住您的姓名或偏好。虽然可以禁用这些Cookie，但这可能会导致您在使用我们的服务时功能减少。
性能或分析Cookie这些Cookie会收集关于您如何使用SChat的被动信息，包括您访问的网页和点击的链接。我们使用这些Cookie收集的信息来改进和优化SChat功能。您可以按照下文所述禁用这些Cookie。
您的浏览器可能会提供拒绝部分或全部浏览器Cookie的选项。您可以通过浏览器启用、禁用或删除Cookie。具体操作请遵循浏览器提供的说明（通常位于“帮助”、“工具”或“编辑”设置中）。请注意，如果您禁用浏览器Cookie，可能无法访问SChat的安全区域，且部分功能可能无法正常运行。如您想具体了解我们所收集的Cookie，请参阅《附录2：个人信息收集清单》。
4.1 委托处理
4.1.1 为了向您提供更完善、优质的服务，SChat功能中某些具体的模块、功能、服务会由我们的关联公司、合作伙伴或外部供应商提供。因此我们可能会与我们的关联公司、合作伙伴或外部供应商共享您的个人信息。我们的合作伙伴和外部供应商提供的支持、功能、服务包括提供收发邮件技术基础设施服务、音视频通话服务、消息平台推送服务、以及为需要通过SChat实名认证使用授权软件中接入的第三方产品等。我们也会聘请服务提供商来协助我们提供用户支持， 系统托管服务（包括云存储）、软件优化服务、电子邮件服务、系统维护服务等。
4.1.2 我们仅会出于本隐私权政策声明的合法、正当、必要、特定、明确的目的共享您的信息，而我们的关联公司、授权合作伙伴、外部供应商只能接触到其履行职责所需信息，且不得将此信息用于其他任何目的。
4.1.3 授权合作伙伴包括以下供应商、服务提供商和其他合作伙伴，我们将信息发送给支持我们服务的提供商和其他合作伙伴，这些支持包括提供收发邮件技术基础设施服务、音视频通话服务、消息平台推送服务、以及为需要通过SChat实名认证使用授权软件中接入的第三方产品等。我们也会聘请服务提供商来协助我们提供用户支持， 系统托管服务（包括云存储）、软件优化服务、电子邮件服务、系统维护服务等。
4.1.4 您可通过SChat“工作台”自主选择开通、管理并使用第三方服务或应用若你通过SChat“工作台”自主选择开通第三方服务（如小程序等），我们将在取得你的同意后向该服务提供方提供你的基础信息（UserID、头像等信息）及基础权限（如企业客户权限信息、审批接口权限信息等）。若你不同意提供，你将无法使用该第三方服务，但不会影响你使用SChat的其他功能。你开通使用第三方服务时，需阅读并充分了解并遵守第三方服务的产品功能、声明及相应的协议。
4.1.5 除了获得您的同意，我们不会向我们的关联公司以外的任何公司、组织和个人提供您的个人信息，在您的单独同意后，我们仅会出于合法、必要、正当、明确的目的处理您提供的个人信息，并且只会提供必要的个人信息，法律法规另有约定的除外。
4.2.1 在您使用SChat服务的过程中，为了提供语音和视频通话、在线会议、通知及移动考勤等相关功能，我们的应用中会嵌入授权合作伙伴的SDK或其他类似的应用程序。在第三方向您提供产品和服务时，可能会获取到以下权限，请您注意阅读并遵守第三方的用户协议及隐私政策，具体请参阅《第三方信息共享清单》。
| SDK名称 | 功能性场景 | 隐私政策 |
|---|---|---|
| veRTC SDK | 用于提供音视频通话服务。 | https://www.volcengine.com/docs/6348/97456 |
| 腾讯会议 SDK | 用于提供在线会议服务。 | https://privacy.qq.com/document/preview/67043f4d1b5848e49251e5e228511eba |
| JPush SDK | 用于在 Android 和 Harmony 设备上推送通知。 | https://www.jiguang.cn/license/privacy |
| Firebase SDK | 用于在 Android 设备上推送通知。 | https://firebase.google.com/support/privacy |
| APNS (Apple Push Notification servicSDK | 用于在 iOS 设备上推送通知。 | https://www.apple.com/legal/privacy/ |
| 高德地图（AMap）SDK | 用于提供定位服务，并实现地图显示、位置确定和搜索等功能。 | https://lbs.amap.com/pages/privacy/ |
| Mapbox SDK | 用于提供定位服务，并实现地图显示、位置确定和搜索等功能。 | https://www.mapbox.com/legal/privacy |
4.2.2 我们接入的部分第三方SDK或类似应用程序可能会收集您的个人信息，如您在我们的服务中使用这类由第三方提供的服务时，您同意将由其直接收集和处理您的信息。各单项服务接入第三方SDK的情况可能有不同，如需了解具体单项服务接入第三方SDK的详细情况，请您前往对应的服务页面并查阅我们各单项服务的具体条款和相关页面。
4.2.3 以上第三方服务由相关的第三方负责运营。您使用该等第三方的服务（包括您向该等第三方提供的任何信息），须受第三方自己的服务条款及信息保护声明（而非本政策）约束，您需要仔细阅读其条款。本政策仅适用于我们所收集的个人信息，并不适用于任何第三方提供的服务或第三方的信息使用规则。如您发现这些第三方服务存在风险时，建议您终止相关操作以保护您的合法权益并及时与我们取得联系。
4.3.1 在涉及合并、分立、收购、资产转让、破产清算时，若需要转让个人信息的，我们将告知你相关情形（包括接收方名称和联系方式），同时要求接收方继续按照不低于本政策所要求的标准继续保护及处理您的个人信息。在法律规定的情况下，我们将要求接收方重新征求您的同意。
4.3.2 我们在原则上不会公开披露你的个人信息，除非是基于法律法规要求的合法性基础，在必要的情形下对您的个人信息进行公开。如需公开，我们会告知您公开的目的、公开的个人信息类型、涉及的敏感个人信息种类，并征得您的单独同意。
对于您的个人信息处理活动，我们会遵循合法、正当、必要的原则，具体包括：
5.2.1 为保障您的信息安全，我们已采取适当的物理、技术和组织安全措施，以确保您的个人数据免受意外丢失、未经授权的访问、使用、更改或披露。与此同时， 我们限制个人数据的访问权限，仅授权具有合法业务需求的员工、代理、承包商及其他相关第三方予以访问。
5.2.2 我们已依据适用法律法规采取了适当的保障措施（例如合同条款等），以确保您的数据获得充分保护并合法传输。若需了解有关保障措施的详细信息，欢迎随时与我们联系。
5.3.1 我们采取了内部管理制度和技术保障措施等多方面的保护方式以保护您的个人信息，具体而言包括但不限于：
5.4.1 技术保障措施上，我们在存储时采取了加密存储、隔离存储，在信息展示和下载时采取了去标识化处理，传输时采取了专线传输、加密传输、密钥和数据介质隔离传输等技术措施，以确保您的个人信息安全。
5.4.2 安全提示：尽管我们已经采取了上述的安全有效措施，并积极落实法律法规要求的标准，请您理解，由于技术的限制以及可能存在的外界各种恶意行为，我们无法保证信息百分百的安全，但我们将竭尽所能。互联网环境并非百分之百安全，我们将尽力确保或担保您发送给我们的任何信息的安全性。如果我们的物理、技术、或管理防护设施遭到破坏，导致信息被非授权访问、公开披露、篡改、或毁坏，导致您的合法权益受损，我们将承担相应的法律责任。
5.5.1 我们将在达成信息收集目的所需的最短时间内遵循适用的法律法规要求，保留您的个人信息。对于希音员工，在劳动合同期限内收集的信息，自劳动合同终止之日起保留五年（除非您与我们另行约定或法律法规另有规定）。保留期限届满后，我们将对您的个人信息进行删除或匿名化处理。
5.5.2 我们只会在达成本政策所述目的所需的期限内保留您的个人信息，除非法律有强制的留存要求，例如依据《中华人民共和国民法典》中向人民法院请求保护民事权利的诉讼时效期间为三年的要求履行义务。我们判断个人信息的存储期限主要依据以下标准：
5.5.3 在超出保留期间后，我们会根据适用法律的要求删除或匿名化处理您的个人信息，如删除或匿名化个人信息从技术上难以实现的，我们会应当停止除存储和采取必要的安全保护措施之外的处理。
在不幸发生信息安全事件后，我们将按照法律法规的要求，及时向您告知：安全事件的基本情况和可能的影响、我们已采取或将要采取的处置措施、您可自主防范和降低风险的建议、对您的补救措施。我们会及时将事件相关情况以邮件、信函、电话、推送通知的方式告知您，难以逐一告知信息主体时，我们会采取合理、有效的方式发布公告。同时，我们还将按照监管部门要求，主动上报信息安全事件的处置情况。若您的合法权益受损，我们将承担相应的法律责任。
5.7.1 我们已经取得了以下认证：信息安全和隐私合规管理体系认证（ISO27001 & ISO27701）和网络安全等级保护测评。
6.1.1 我们非常重视您对个人信息的关注，并尽全力保护您对于您个人信息查询、更正、删除、注销帐户、复制、撤回同意的权利、约束信息系统自动决策，以使您拥有充分的能力保障您的隐私和安全 (除法律法规另有规定外)。
6.1.2 您可通过第 11 条列明的联系方式提出上述请求访问及管理您的信息：
6.1.3 请注意，您更正、补充后的信息将在我们审核通过后生效；您的个人信息被修改，可能导致您与我们的业务往来受到影响。出于安全性和身份识别的考虑，您可能无法修改账号开通时提交的某些初始注册信息。
6.1.4 您可以在以下情形中，可以与我们联系向我们提出删除个人信息的需求，法律法规另行规定的除外：
我们依法评估并确认无合法依据保留您的个人信息后，我们将删除您的个人信息；如删除在从技术上难以实现的，我们将停止除存储和采取必要的安全保护措施之外的处理。如果我们可能不会立即在备份系统中删除相应的信息，但会在备份更新时删除这些信息。若我们决定响应您的删除请求，我们还将同时通知从我们获得您的个人信息的实体，要求其及时删除，除非法律法规另有规定，或这些实体获得您的独立授权。请注意，您的个人信息被删除，可能导致您与我们的业务往来受到影响或无法继续合作。
6.1.5 基于您同意而进行的个人信息处理活动，您有权撤回同意，但撤回同意可能会影响您使用 SChat 及其相关功能的能力，也可能导致您与我们的业务往来受到影响或无法继续合作。您撤回同意的，不影响撤回前基于您同意已进行的个人信息处理活动的效力。您可以通过本政策列明的联系方式与我们联系以改变你授权同意的范围。请您理解，每个业务功能需要一些基本的个人信息才能得以完成，当您撤回同意或授权后，我们无法继续为您提供撤回同意或授权所对应的服务，也不再处理您相应的个人信息。但您撤回同意或授权的决定，不会影响此前基于您的授权而开展的个人信息处理。
6.1.6 在某些业务功能中，我们可能仅依据信息系统、算法等在内的非人工自动决策机制作出决定。如果这些决定显著影响您的合法权益，您有权要求我们作出解释，我们也将提供适当的救济方式。
6.1.7 如您对隐私事宜有疑问或需进一步协助，请直接联系公司的隐私团队或数据保护官，我们将努力为您提供帮助。同时，您也有权向所属辖区的相关数据保护机构提出投诉，如需了解如何联系您所在地区的相关数据保护机构，请与我们联系。
6.1.8 如您与我们合作已终止后，您的账号将被注销。
6.1.9 注销账户 您有权注销您的账户，您可以通过联系APP内的在线客服申请注销；或者可以发送注销申请到邮箱[email protected]来注销。若您是通过组织开通的账户，当您离开所在组织或你所在组织解散团队的，也可以实现注销账户。您注销成功后，我们将根据法律法规的要求尽快删除您的个人信息或作匿名化处理。
6.2.1 为保障您的账户安全和您的个人信息安全，您向我们提出上述请求时，我们可能会先验证您的身份（如要求您提供书面请求或其他合理方式），然后再处理您的请求。我们可能会要求您提供特定信息，以验证您的身份并确认您的权益，同时为您提供我们所持有的关于您的个人数据或执行您的请求的相关信息。
6.2.2 根据适用法律的规定，我们可能有权或有责任拒绝您访问我们所持有的全部或部分个人数据。同时，依据我们的记录保存义务和内部政策，部分个人数据可能已被销毁、删除或匿名化处理。如我们无法提供您的个人数据访问权，我们将在不违反任何法律或监管要求的前提下，说明相关原因。
6.2.3 在法律规定豁免我们拒绝处理的情况下，我们有权利不响应您的请求，例如请求明显没有根据、过度要求，或需要披露第三方的信息的请求。
6.2.4 对于您合理的请求，我们原则上不收取费用，但对多次重复、超出合理限度的请求，我们将酌情收取成本费用。对于与您的身份不直接关联的信息、无合理理由重复申请的信息，或者需要过多技术手段（如需要开发新系统或从根本上改变现行惯例）、给他人合法权益带来风险或者不切实际的请求，我们可能会予以拒绝。
6.2.5 在以下情形中，我们将无法响应您的请求：
6.2.6 一般情况下，我们将在十五个工作日内完成处理。如果您对我们的响应情况不满意，可先友好协商，再次沟通。您有权利通过上海市人民法院或监管机构寻求解决方案。
6.3.1 在用户不幸逝世的情况下，近亲属可与我们联系，以行使法律规定的合法正当权益，例如对个人信息进行查阅，复制，更正，删除。
SChat 不面向未成年人（不满 14 周岁）提供服务，也不会主动收集任何未成年人信息。如果我们发现自己在未事先获得可证实的监护人同意的情况下收集了未成年人的个人信息，我们会设法尽快删除相关数据。如您为未成年人的监护人，当您对您所监护的未成年人的信息处理存在疑问时，或者您有事实证明未成年人并未取得监护人同意的情况下向我们提供了任何个人信息，请通过本政策文第 11 条的联系方式联系我们。
8.1.1 我们根据法律法规的合法性基础收集和使用您的敏感个人信息。我们仅在具有特定的目的和充分的必要性下，并采取严格保护措施的情形下，处理您的敏感个人信息。
8.1.2 我们向您收集的敏感个人信息包括身份证照片、您在使用 SChat 功能时所需的地理位置。例如，我们在您使用 SChat 用于签到时收集您的地理位置以，但如果您拒绝提供，则可能无法签到。
8.1.3. 此外，SChat 不会主动收集、存储、处理或分析您的敏感个人信息。然而，在使用聊天、文件传输和群组对话等功能时，您可能会主动发送或接收包含敏感内容的信息（例如文本、图像、语音、视频等形式），无论这些内容是否涉及您本人或第三方（例如其他用户）。此类信息由您和相关交流方自行掌控，我们无法识别、拦截或限制其传输。请您在操作时注意遵守希音集团关于信息分享和披露机密信息及个人资料的相关政策。
8.1.4. 对于敏感个人信息的特殊处理要求，在处理前，我们会向您获取单独同意并告知您的敏感个人信息使用规则，除非法律法规另有规定。在传输和存储敏感个人信息方面，我们会采用加密等安全措施。如果我们共享您的个人敏感信息或关联公司改变个人信息的使用及处理目的，将再次征求您的授权同意。
8.1.5. 在处理敏感个人信息的过程中，我们会采取技术措施对信息进行加工处理，断开与您身份等特定信息的关联，以无法识别特定个人。如果您拒绝我们的合作方在提供服务时收集为提供服务所必须的个人信息，将可能导致您无法使用 SChat 通过该合作方提供的服务。
9.1.1 按照相关法律法规规定，我们将把中华人民共和国境内运营过程中收集和产生的您的个人信息存储在中国境内及《个⼈信息跨境传输同意函》所载明的国家或地区。您理解并同意，由于我们通过遍布全球的资源和服务器提供产品或服务，这意味着，在获得您的授权同意后，您的个人信息可能会被转移到您使用产品或服务所在国家 / 地区的境外管辖区，或者受到来自这些管辖区的访问。
9.1.2 在遵守适用的个人信息跨境传输法律法规的前提下，可能根据公司运营的实际需求将根据本政策搜集的信息存储于中国大陆以外的其他国家 / 地区的服务器上、可能将您的个人信息的部分 / 全部提供给境外的关联公司、与我们关联公司有合作关系的中国大陆以外的第三方，包括但不限于欧盟、中华人民共和国、美国及新加坡。此类管辖区可能设有不同的数据保护法，甚至未设立相关法律。在此类情况下，我们会确保您的个人信息得到在中华人民共和国境内足够同等的保护。例如，我们会请求您对跨境转移个人信息的同意，或者在跨境数据转移之前实施数据去标识化等安全举措。
9.1.3 若个人信息涉及跨境传输的情况发生变更或新增，我们将及时向您告知境外接收方的名称、联系方式、处理目的、处理方式、个人信息类型以及您在境外接收方行使相关权利的方式和程序，并将依法征得您的同意。依据相关法律法规的要求，我们将在您的个人信息离境前进行安全评估。同时，为确保数据安全，我们会通过国家网络安全和信息化部门组织的安全评估程序或由其指定的专业机构进行个人信息保护认证，或遵循国家制定的标准合同，与境外接收方签订合同，以实施跨境传输。
业务场景
如您对本政策内容有任何疑问、意见或建议，您可以通过以下方式直接联系公司的隐私团队或数据保护官。一般情况下，我们将在十五天内回复。
电子邮件：[email protected] [email protected]
产品/服务提供方：上海聆先信息技术有限公司
联系地址：上海市长宁区金钟路 968 号 5 号楼 501、502、503、505、506、507、508 室
如果您对我们的回复不满意，特别是我们的个人信息处理行为损害了您的合法权益，您还可以通过上海市人民法院或监管机构寻求解决方案。
Effective Date: July 15, 2025
Last Updated: October 22, 2025
This Privacy Policy is intended to inform the users of SChat about how it collects, uses, stores, and protects your personal information, as well as the user's data subject rights. It applies to all personal information processing activities arising from using of SChat, including but not limited to one-on-one chats, group chats, message operations, session management, and making phone calls.
For the purposes of this Privacy Policy, the data controller shall be the relevant legal entity in SHEIN group (here “we”, “us”, “our”, or “SHEIN”) deciding why and how information about you (“personal data”) are collected and processed in the context of your employment or contract, i.e. for an employee, the SHEIN entity that entered into an employment agreement with you; or otherwise for a contractor, the SHEIN entity that entered into a contract for service with you or the company that you belong, as well as if you are an external user, including external consultants, suppliers, and partners. For the purposes of this policy, any reference to ‘controller’ shall mean the SHEIN entity that determines the purposes and means of the processing your personal data, unless otherwise defined under the applicable law; and shall also refer to equivalent terms defined under the applicable privacy laws (e.g. personal information processor, APP entity, data user) that refer to entities that is responsible for protecting the personal data that they collect and/or process.
This International version of the Privacy Policy shall not apply to users in Mainland China. For users in Mainland China, please refer to the top of this document.For the purposes of this Privacy Policy, personal data (also referred to as “personal information” under certain jurisdictions) means any information relating to an identified or identifiable individual. Personal data excludes anonymous data that cannot be associated in any way with a particular individual by SHEIN or any third party.
In order to provide you with a complete, stable and secure services and functions provided by SChat, we will collect and use the following types of personal information within the scope permitted by applicable laws.
While collection of some personal information is considered voluntary (e.g., nickname, avatar), which does not affect the core use and function of SChat, we require collection of the personal information described below to ensure functionality of SChat and for the purposes described in Section 3 of this Privacy Policy. Failure to provide such personal information may affect your ability to use certain functions of SChat.
(For SHEIN employees) The installation of SChat on company-assigned devices is mandatory for the performance of staff duties. However, installation of SChat on personal devices is optional and at the discretion of staff.
Care has been taken in the design of SChat to ensure that only such information as is necessary for the operation of the service and for SHEIN’s business purposes is processed.
Basic Identity Information: Employee ID, UID, name, nickname, corporate email address, avatar
Organizational Affiliation: Work location, department, name, and employee ID of immediate supervisor, name and employee ID of HRBP
Basic Identity Information: Name/Alias/Nickname, Username, Login Account, corporate email address, contact information and photo.
Organizational Affiliation: Company, Work area, department, administrator name and ID and position.
Verification Information: login password and login verification code.
Chat Content: Chat messages in one-on-one and group chats (including images/files/voices)
Group Information: Group ID, group administrators, group announcements
Meeting & Event Data: Start and end time of events, participants, detailed descriptions of events; Start/end time of meetings, meeting subject, meeting ID, historical meeting records, participant join/leave times, participation duration, attendance records, meeting minutes, dial-in numbers; In-meeting chat, notes, shared images/files, translation, subtitles, real-time transcription
Device Hardware Details: Device model, device SN (Serial Number), Android ID, Bluetooth MAC, device name, device screen resolution, device hardware manufacturer, device product name, device storage capacity, CPU info, memory usage, battery level
OS & Software Info: OS version, system name, system language, region/language settings; Installed application list, software list, software running list
Network Status & Connectivity: Network type, network access method, IP address, WiFi status (SSID, BSSID, WiFi list)
Internet or other similar network activity: as described above
Application Runtime Status: Application name, processes, number of running threads, system permission settings; App crash records, traffic statistics, operation logs, audio/video quality data (non-call content), feature usage records (e.g., third-party app authorization time), application permissions (camera/voice/album/calendar access)
User Activity Logs: Time spent in background/foreground after receiving a push notification
For some staff, SChat offers a clock-in functionality, which necessitates the processing of GPS data, information on whether the employee is within workplace attendance area at the time of clocking in. This functionality does not track your location on a constant basis, and does not affect your ability to switch of location services on your device’s settings. Whether this functionality is used by you will depend on your work location. In some locations, other clock-in solutions may be used.
Geolocation data may be necessary for providing transportation and business travel applications.
We may, from time to time, conduct surveys for various purposes, such as gathering employee satisfaction surveys, training assessments, workplace culture evaluations, among others, which are voluntary in nature. The employee information collected will vary based on the questions and the responses provided by the employee to the questions.
Message & Notification Logs: Message text, message summary, push records, push information logs
Email Data: Email subject, body, attachments; Email metadata (sender/recipient addresses, timestamp, IP address, email headers, email size)
Preference Configurations: User notification settings, rules/filter settings, email signature data, tag data
Organizational Metadata: Organization name, organization address book, contact phone number, organizational contacts, sub-department information
Inferences drawn from personal information mentioned above.
We obtain the categories of personal information listed above from the following categories of sources:
We will collect and use the above information lawfully, fairly, and to the extent necessary for the usage scenario to provide you with a better communication and collaboration experience.
Our third-party providers may also collect your information through SDK. For more information on how third parties may use your information, please see Section 5. (Data Sharing).
We may process your personal data for the following business and employment-related purposes or to carry out other reasonable business purposes consistent with this list in compliance with applicable law.
Providing and Maintaining Services
Ensuring the normal operation of instant messaging, chat group management, phone calls, video and audio calls, meeting management, push notifications, email, and other functions of SChat.
Security AssuranceConducting identity verification, monitoring abnormal activities, troubleshooting errors, and preventing security threats to ensure data and network security.
Improvement and OptimizationAnalyzing service usage to continuously improve the functions of SChat and enhance user experience.
Compliance and Legal ObligationsComplying with applicable laws and regulations, as well as regulatory requirements, including cooperating with judicial or administrative authorities on information disclosures required by law.
For more information on how we use your information, please see the relevant Employee & Contractor Privacy Notice.
We process your personal data pursuant to the legal bases set out below:
l When the processing is necessary for the performance of the employment or other agreements we concluded with you, or the organization you represent, or to take pre-contractual steps at your request.
l When the processing is necessary to comply with our legal and regulatory obligations under the applicable laws and regulations in your Home Location.
l Consent, where there is no restriction (under applicable laws in the jurisdiction you are residing in) on relying on employees' consent for processing personal data for purposes notified to employees, and where legitimate interests is not a valid legal basis under applicable privacy laws.
l Consent, for the employee satisfaction surveys, training assessments, workplace culture evaluations, among others, which are voluntary in nature.
l We may also process your personal data for our own legitimate interests or those of third parties, namely:
l To prevent fraud or other criminal activities.
l To ensure network and information security, including preventing unauthorized access to our computer and electronic communications systems and preventing malicious software distribution.
l To support internal administration with our affiliated entities.
l To carry out our contractual obligations with customers and suppliers. (e.g., personal data included in purchase orders, quality documentation, email correspondence and contracts between us and a customer or supplier).
l To restructure our business or engage in similar business transactions, such as a sale, merger, acquisition, restructure, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock.
l To conduct data analytics to review and better understand employee retention and attrition rates.
You will not be subject to decisions based solely on automated data processing or decision-making without your prior consent.
SChat will not actively collect, store, process, or analyze your sensitive personal information, except where you use certain functions of SChat that requires collection of geolocation data and the applicable law in your Home Location includes such data within the scope of sensitive data or special categories of personal data. However, please note: When using features such as chat, file transfer, and group conversations, you may actively send or receive content that contains sensitive information belonging to you or other third parties (for example, in the form of text, images, voice, videos, etc.). Such information is entirely controlled by you and the communication counterpart, and we cannot identify, intercept, or restrict its transmission. When applicable to you, please refer to the relevant SHEIN Group policies governing the sharing and disclosure of sensitive information.
We may disclose your personal data to other members of the SHEIN Group of companies for the purposes set out in this Privacy Policy. When you use SChat, in order to provide you with voice and video calls, online meetings, notifications, and mobile time and attendance functions, we need to entrust the processing of your personal information to the following third-party service providers for the business purposes described in Section 2 of this Privacy Policy:
| SDK name | Functional Scenarios | Privacy Policy |
|---|---|---|
| veRTC SDK | To provide audio and video call service. | https://www.volcengine.com/docs/6348/97456 |
| Tencent Meeting SDK | To provide online meeting service. | https://privacy.qq.com/document/preview/67043f4d1b5848e49251e5e228511eba |
| JPush SDK | To provide push notification on Android and Harmony devices. | https://www.jiguang.cn/license/privacy |
| Firebase SDK | To provide push notification Android devices. | https://firebase.google.com/support/privacy |
| APNS (Apple Push Notification service) SDK | To provide push notification on iOS devices. | https://www.apple.com/legal/privacy/ |
| Amap SDK | To provide mobile attendance service. | https://lbs.amap.com/pages/privacy/ |
| mapbox SDK | To provide mobile attendance service. | https://www.mapbox.com/legal/privacy |
The personal information disclosed to these third-party service providers consists of all personal information categories required for the necessary functionality of the services as described above.
Where we entrust the processing of your personal data to these third parties, we ensure they are bound by appropriate contractual terms of to ensure that they process the data securely, and only as instructed by us and in compliance with the requirements of applicable Privacy and Data Protection law.
We also disclose certain personal data (including name, email address and other profile details) of SHEIN employees and staff with external users (such as vendors or suppliers) when employees communicate with external users for the purposes of facilitating the communication. Similarly, certain personal data of external users will be disclosed to SHEIN employees for the purposes of facilitating communication.
We do not “sell” or “share” any Personal Information for cross-context behavioral advertising (as those terms are defined under applicable privacy laws), and we have not “sold” or “shared” any Personal Information for such purposes on any occasion.
To Maintain Legal and Regulatory Compliance.
We have the right to disclose your personal information as required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on us. We also may disclose your information where we reasonably believe that the disclosure is necessary to enforce our agreements or policies, or if we believe that disclosure will help us protect the rights, property, or safety of SHEIN or our customers.
Where we make such disclosure we will notify you, unless such notification is prohibited under applicable law.
For more information on how third parties may use your information, please see the relevant Employee & Contractor Privacy Notice.
We may use cookies, tags, web pixels, and similar technologies to automatically collect information through SChat functions. Cookies or tags are bits of code that allow our technology partners to collect information that usually does not directly identify you.
Information within this section describes our use of cookies and your ability to control the use of cookies.
Cookies are small web files that a site or its provider transfers to your device’s hard drive through your web browser that enables SChat to recognize your browser and remember certain information. Cookies may be included for your web browser to interact with the SChat, such as maintaining your logged-in session, and security tools to protect your data. Generally, we use cookies for the following purposes: to make SChat function properly; to provide a secure browsing experience during your use of SChat; to collect passive information about your use of SChat; to help us improve SChat; and to remember your preferences for your convenience.
We use the following types of cookies on our Services:
Your browser may provide you with the option to refuse some or all browser cookies. You can use your browser to enable, disable or delete cookies. To do this, follow the instructions provided by your browser (usually located within the "Help", "Tools" or "Edit" settings). Please note, if you set your browser to disable cookies, you may not be able to access secure areas of SChat, and some functions may not work properly. You can find more information about how to change your browser cookie settings at https://www.allaboutcookies.org .
For the purposes of providing you with the SChat functions and otherwise stated in this Privacy Policy, your personal data may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal data as your home country. These countries may include (but are not limited to) the EU, the People’s Republic of China, the United States, and Singapore.
Records of usage of SChat will be stored in the region in which you are located, but should you use SChat to contact a colleague in another region, a copy will also bne stored in that region.
We have put in place appropriate safeguards (such as contractual commitments) and supplemental measures in accordance with applicable legal requirements to ensure that your data is adequately protected and lawfully transferred.
In particular, SHEIN has in place an Intra-Group Data Sharing Agreement in place between its entities, which includes Standard Contractual Clauses as approved by the relevant authorities in the countries from which the personal data is transferred. These include the Clauses approved by the European Commission and by the Government of the United Kingdom.
For more information on the appropriate safeguards in place, please contact us at the details below.
For users in Japan, we rely on your consent for the cross-border transfer of your personal data; for more information on the personal information protection system of these countries, you can refer to Personal Information Protection Commission’s (PPC) website at https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku.
We have implemented appropriate physical, technical, and organizational security measures designed to secure your personal data against accidental loss and unauthorized access, use, alteration, or disclosure. In addition, we limit access to personal data to those employees, agents, contractors, and other third parties who have a legitimate business need for such access.
If you have reason to believe that your data is no longer secure or has been breached, please contact us using the contact information below.
We will retain your personal information for the shortest time necessary to achieve the purposes of collection or otherwise required by applicable laws and regulations. For information collected during the term of the employment contract (if applicable), it will be retained for 5 years after the employment contract ends, for the resolution of outstanding matters and to ensure business continuity (unless otherwise agreed upon between you and the Data Controller or required by applicable laws and regulations). After the retention period has expired, we will delete or anonymize your personal information.
Depending on your Home Location, by law you may have certain rights regarding your personal data. This may include:
l Request access to or know, correct, and erase (delete) the personal data that we hold about you.
l Request the receive certain personal data in a portable format
l Object to or request the restriction of the collection and processing of your personal data under certain circumstances.
l Request that we transfer your personal data to another party.
l Make a complaint with the relevant supervisory authority.
l Withdraw your consent if you have previously provided consent to the collection, processing, or transfer of your information for a specific purpose.
l Opt-out from personal information sales or sharing activities.
l To not be discriminated against for exercising any applicable rights.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your employment.
Exercising Your Rights:
If you want to access, correct, request erasure of your personal data, object to or request restriction of the processing of your personal data, request that we transfer a copy of your personal data to another party, or withdraw your consent, please contact us at [email protected].
We may request specific information from you to help us confirm your identity and your rights, and to provide you with the personal data that we hold about you or implement your request.
Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
You may choose to withdraw your consent to processing of your personal data under this Privacy Policy, but such withdrawal of consent may limit your ability to use SChat and its functions. Your withdrawal of consent will not affect the validity of personal information processing activities that have been carried out based on your consent before the withdrawal.
We request that you raise any issues directly with our privacy team or our Data Protection Officer (defined below) so that we have an opportunity to address your concern. You have the right to make a complaint with the relevant data protection authority in your jurisdiction by contacting the data protection authority directly. Please contact us if you require information on how to contact the relevant data protection authority in your Home Location.
Rights under Privacy and Data Protection law are generally not absolute and may be restricted or may not apply to all the data processed by SHEIN. Where SHEIN lawfully restricts the application of a right or believes that this right is not applicable, it will explain this in responding to your request.
Requests from Authorized Agents/Third Parties. For the protection of your account and the security of your data, only you or a person you formally authorize to act on your behalf may make a privacy request related to your personal information. If you use an authorized agent to submit such a request, we will require written proof that the authorized agent has been authorized to act on your behalf, which we obtain in the request verification process. Third parties may submit requests on a data subject's behalf; however, requests will still need to be directed to the data subject themselves for verification and authorization to proceed.
We have appointed a Data Protection Officer to oversee compliance with this Privacy Policy and related legislation. If you have any questions about this Privacy Policy, or how we handle your personal data, or would like to request access to your personal data, please contact our Data Protection Officer at: [email protected].
We reserve the right to update this Privacy Policy at any time and will take steps to provide you with a new Privacy Policy when we make any updates. We will communicate these changes in the usual way that we communicate with you. If we would like to use your previously collected personal data for different purposes than those we notified you about at the time of collection, we will provide you with notice and, where required by law, seek your consent, before using your personal data for a new or unrelated purpose.
If you have any questions about our processing of your personal data or would like to make an access or other request, please contact us at [email protected] or contact the Data Protection Officer at [email protected].