关闭
首页
隐私与安全政策
发布日期：2023 年 04 月 14 日
生效时间：2023 年 04 月 14 日
贵方的隐私权利
本隐私与安全政策(“隐私政策”或“本政策”)规定了当贵方使用我们用于提供服务 的网站(www.xtransfer.cn)或任何其他网站链接(“URL”)、应用程序和工具(XTransfer App)(以下统称为“我方平台”)时，我们(即上海夺汇网络技术有限公司，注册地址为中国(上海)自由贸易试验区张杨路 828-838 号 26 楼 E、F 层)以及我们的子公司、 控股公司、控股公司的子公司(以下统称为“XTransfer”、“我们”)收集、使用、 存储、共享和保护贵方的个人或公司信息的基础。当贵方与我们共享信息时，例如注册 XTransfer 账户时，我们可以提供更好的服务体验。通过使用我们的服务，贵方接受并 同意以下规定，同时我们希望贵方了解我们将如何使用贵方信息以及贵方可以采用哪些 方式保护隐私。如果贵方对本政策有任何问题，请发送电子邮件与我们联系： privacy@xtransfer.cn
本隐私政策将帮助您了解以下内容：
- 贵方所拥有的相关权利
- XTransfer 如何收集贵方的信息?
- XTransfer 何时收集贵方的信息？
- XTransfer 收集哪些信息？
- XTransfer 如何使用贵方的信息？
- XTransfer 何时共享贵方的信息?
- XTransfer 如何保存和保护贵方的信息?
- XTransfer 如何保护未成年人的信息?
- XTransfer 会将贵方的信息保存多长时间？
- 我方隐私与安全政策的变更
- 您如何联系我们?
- 语言
- 附件一《第三方SDK目录》
- 附件二《调用设备权限清单》
贵方所拥有的相关权利包括：
1) 访问权：贵方可以随时要求获得我们拥有的关于贵方的个人信息。我们将尽力在收到贵方请求后的5 个工作日内回复贵方的询问；
2) 更新权：如果贵方发现我们保存贵方的个人数据有任何不准确或不完整，请通过访 问贵方的账户在网上更新信息。如果在访问贵方的账户或在线更改时有任何问题，请告 知我们，我们将对记录进行相应更新；
3) 停止营销权：贵方有权要求我们不要将贵方的个人信息用于营销目的或明确向我们告知不希望通过 no-reply@service.xtransfer.cn 收到我们的任何进一步通信；
4) 数据迁移权：贵方有权要求我们将贵方的个人信息提供给其他数据控制者，例如第三方服务提供商；
5) 信息删除权：贵方有权要求我们删除不再需要或不再受到 XTransfer 相关法律义务 约束的数据，或删除任何过时信息；
6)撤回同意：我方平台的某些功能将需要基于您授权同意提供的信息或者开启的设备 权限才能得以完成，您可以通过关闭相应业务功能的方式撤回该等同意。当您撤回同意 后，我们无法继续为您提供对应的功能，也不再处理您相应的个人信息。但您撤回同意 的决定，不会影响我们此前基于您的授权而开展的个人信息处理。贵方还可以随时通过 privacy@xtransfer.cn 联系我们，要求我们审查我们保留的任何信息、我们的使用方式以及我们的披露对象(除非受到法律限制)。
XTransfer 如何收集贵方的信息?
贵方自愿提供信息，我们也直接从贵方那里收集信息，但我们也可能会从第三方收到关 于贵方的信息(如营销机构、市场调查公司、我们在集团公司的供应商、承包商和顾问、 贵方的同事和业务联系人、公共网站和公共机构)，以及当贵方使用我们的网站和服务时自动发送的信息。
我方以及我方采用的第三方服务提供商将通过 cookies、网络信标和其他技术收集有关 贵方使用我方网站和我方服务的信息。
1）XTransfer 与第三方软件开发包(SDK)服务商的合作
为保障客户端的稳定运行、功能实现，使您能够使用和享受更多的服务及功能，我们的应用中会嵌入授权合作伙伴的 SDK 或其他类似的应用程序，您可以通过附件一《第三方 SDK 目录》查看我们接入授权合作伙伴的 SDK 详情。我们会对授权合作伙伴获取有关信 息的应用程序接口(API)、软件工具开发包(SDK)进行更严格的安全检测，并与授权 合作伙伴约定严格的数据保护措施，令其按照本政策以及其他任何相关的保密和安全措 施来处理个人信息。如您发现这些 SDK 或其他类似的应用程序存在风险时，建议您立即 终止相关操作并及时与我们取得联系。
2）XTransfer 如何使用 Cookies
Cookies 是我们通过您的网络浏览器传输到您的计算机硬盘驱动器上的字母数字标识符， 用于保存记录，并通过了解和记住您的特定浏览偏好，在未来为您提供量身定制的体验。 贵方可以编辑贵方的浏览器选项，以便屏蔽 cookies。我们网站的访问者如果将网络浏览器设置为不接受 cookies，仍然可以浏览我们的网站。但如果贵方禁用了所有 cookies (包括必需的 cookies)，大部分网站功能将无法正常工作，甚至可能无法登录使用我们的服务。可以在我们的 Cookie 政策中找到更多信息。
XTransfer 何时收集贵方的信息?
我方可能会在贵方使用我方服务时收集和保存贵方向我方提供的任何信息，包括贵方在 网页表单上添加信息、添加或更新贵方的账户信息、参与争议解决，或以其他方式就我方的服务与我方进行通信。
XTransfer 收集哪些信息?
(1) 实现我们产品或服务所必须的功能
当贵方使用我们的产品或服务时，在下列情形中，贵方可能需要向我方提供或授权我方 收集相应产品或服务所需的个人信息。如贵方拒绝提供部分功能或服务所需信息，贵方 可能无法使用部分功能或服务，但这不影响贵方正常使用我方的其他功能或服务。
注册认证
在贵方注册 XTransfer 账户时，贵方需要向我方提供手机号码/电子邮件信息并设置密码用以创建 XTransfer 账户，我方将通过发送短信验证码/验证邮件的方式来验证您的信息是否有效。
登录 XTransfer 账户后，贵方可以自主完善输入您的电话、联系地址及其他个人信息。 在完成注册后，使用我方服务之前，贵方需要进行企业认证，在进行企业认证时，贵方 需要向我方提供企业基本信息，企业证照，以及企业相关自然人(包含法人、董事、实 控人、最终受益人和被授权人)的身份信息，及相关证照的影印件或照片。
收款
为向贵方提供收款服务，当贵方收到款项后需提供贸易相关的材料(包括合同或发票等)， 以完成款项入账的操作。如因风险合规审查的需要，我方会根据具体情况要求贵方提供更多的交易相关信息。
结汇提现
为实现结汇提现的功能，贵方需先进行绑定结汇提现账户的操作，这需提供贵方的财务 信息(包括借记卡或银行账户信息)。除贵方的财务信息和收款时提供的贸易相关材料 以外，贵方需根据发货情况提供交易相关的物流单据或物流相关支持资料。如因风险合 规审查的需要，我方会根据具体情况要求贵方提供更多的交易相关信息。
普通提现
为实现普通提现的功能，贵方需先进行绑定普通提现账户的操作，这需提供贵方绑定的 普通提现账户的财务信息(包括借记卡或银行账户信息)。
转账
为实现转账的功能，贵方需提供转账收款方银行账户信息及相关的商业信息。
(2) 优化服务体验、客服、用户权益保障
出于优化贵方在我方服务体验的目的，更好地为贵方提供客户服务以及保障您作为用户 所能享有的权益之目的，我方可能收集贵方的下列信息，如贵方不提供或不同意我们留 存前述信息，我方可能无法提供与优化服务体验、客服及用户权益保障相关的部分服务， 但不影响贵方使用我们的其他服务。
优化服务体验
我们和我们的第三方服务提供商可能收集以下信息：您的域名、您的浏览器类型和操作 系统、您的互联网协议(IP)地址、您访问我们网站或使用我们服务的持续时间、您在 我们网站上的活动，以及将您引导到我们网站的引用 URL 或网页。
客服沟通
当贵方联系我们的客服以获得我们的客户服务时，您还需要提供贵方的 XTransfer 账户 信息和相关交易信息来核实您的身份。同时为保证服务质量、保障平台用户权益、防止 欺诈，以及检查贵方在客服服务过程中提供的信息准确性，我们将对贵方接听和拨打我 方的客服电话的通话进行录音，贵方通过在线客服进行的聊天信息也会被收集。前述录 音和聊天记录在被保留一段时间后会自动删除，除非由于合规要求或合法利益需要而保留。
用户权益保障
我们会时不时收集您向我们提供的反馈意见/建议或举报时提供的信息。
(3) 为提供附加功能而调用的设备权限
为向您提供便捷、优质的服务，我们可能会调用您设备上的一些权限。在您使用相应功 能时会看到弹窗提醒，询问您是否授权。您可以在移动设备的设置功能中选择关闭部分 或全部权限。基于不同的移动设备操作系统，上述权限的开启和关闭方式可能有所不同， 具体请参考设备及系统开发方的说明或指引。关于我们调取您设备权限的具体情况，详 见后文附件二《调用设备权限清单》。
除此以外，我们还可能需要贵方提供更多商业和/或身份信息，例如，如果贵方发送或 接收某些高价值或高额交易，或根据遵守适用法律规定的反洗钱义务的需要。 在贵方使用我们的服务期间，如果向我们提供任何个人(除贵方以外)的个人数据， 贵方保证已经获得了相关个人的同意向我们披露他/她的个人数据， 并且他/她同意我们出于本隐私政策规定的目的收集、使用和披露这些个人数据。 但我们不会在未经贵方事先同意的情况下收集和处理任何类型的个人敏感数据， 除非法律要求，例如关于贵方种族或族裔、宗教信仰、个人健康信息等方面的详细信息。
XTransfer 如何使用贵方的信息?
我方收集贵方信息的主要目的在于向贵方提供一个安全、流畅、有效和定制化的体验。 我方可能将贵方的个人信息用于以下目的
- 验证贵方的身份；
- 为了行使与双方合同相关的我们的权利并履行我们的义务，与贵方沟通关于我 们的服务或任何服务条款和条件变更的相关情况；
- 实现贵方具体向我方提供信息的目的，包括对贵方的询问做出回复、提供贵方要求的信息以及提供客户服务支持等；
- 对我方向贵方发送或展示的内容及信息进行定制化，以及以其他方式向贵方提 供在使用我方网站和服务时的个性化体验；
- 管理我们的内部运营服务，包括用于故障排除、数据分析、测试、研究、统计和调查目的；
- 保护我们的客户、员工和公司财产——例如，对涉及我方或与我方开展业务的 其他公司的欺诈、骚扰或其他类型的非法活动进行调查；
- 遵守香港内外任何适用的法律和/或监管规定；
- 向贵方提供或允许选定第三方向贵方提供我们认为贵方可能感兴趣的商品或服务信息；
- 用于与上述各项直接相关或附带的目的。
XTransfer 何时共享贵方的信息?
我们将只选择出于以下原因与第三方共享贵方的信息，包括服务提供商、代理和供应商、 受监管机构(如金融机构)、关联实体和业务合作伙伴(“合作伙伴”)、监管机构/执法机构：
- 为履行和执行我们与贵方之间合同的必要目的而与贵方或合作伙伴签署的任何 合同，此种情况下我们数据共享的接收方决定于贵方的特定业务选择，我们将 不会与贵方前述业务无关的接收方进行数据共享，并且我们会与共享的合作伙 伴签署严格的保密协定，要求他们按照我们的隐私政策以及采取严格的数据安全措施来处理和使用数据；
- 回应法律程序——遵守法律、司法程序、传票、法院命令或其他法律程序；
- 履行监管机构/执法机构对我们提出的法规要求——回应与贵方签订的任何合 同相关的国家/地区当地的监管与执法机构要求，包括但不限于监管与执法信息请求、监管与执法信息报告等；
- 保护我方与其他人——我方若认为有必要调查、防止非法活动、疑似欺诈、对 我方服务条款和条件或本隐私政策的违反或就其采取行动，或作为涉及我方的 诉讼证据时，我方可能会披露贵方的信息；
- 在我方被另一实体收购或与之合并的情况下，或如果我方实质全部资产被转让给该其他实体；
- 与广告主、媒体等合作伙伴共享——我们可能会与前述合作伙伴合作以多种形 式将经过处理后的脱敏数据用于包括优化广告投放和提升营销效果等的商业化 使用之目的。除非得到贵方的授权，否则我们不会将贵方的个人身份信息向合 作伙伴分享。我们会向这些合作伙伴提供有关广告投放人群策略数据或广告主 广告效果的数据，而不会提供任何个人身份信息，或者我们将这些信息进行汇总处理，以便它无法作身份识别；
- 协助我们改进和优化我们网站的分析和搜索引擎提供商；
- 我们的集团实体或子公司，可通过书面形式联系 privacy@xtransfer.cn 的方式进行查询。
贵方同意，我们从贵方收集的数据将储存在中国大陆境内第三方的云服务器上，此外 我们从贵方收集的数据可能传输并存储在中国大陆以外的目的地。也可能由上一条所述 的在中国大陆运营的实体进行处理，前提是经过贵方的明确授权或者法律法规或者相关监管机构的明确要求。
如我们涉及在中国大陆以外地区传输、存储或处理贵方数据的情况。我们将会依据相关 法律法规的规定，确保贵方的数据得到与境内同等水平的保护，并按照法律法规要求进 行安全评估或者备案后进行出境。此外，我们确保自己和合作伙伴都将采取适当的技术、 物理和组织安全措施来保护贵方的数据。我们还确保与这些第三方签订了适当的合同来保护贵方的相关数据。
XTransfer 如何保存和保护贵方的信息?
您的个人信息保护
我们将严格遵守相关法律法规，尊重并保护用户的个人隐私，除了在与用户签署的隐私保护 协议和网站服务条款以及其他公布的准则规定的情况下，未经用户授权不随意公布和泄露用户个人身份信息。
技术措施与数据安全措施
我们采取符合业界标准的物理、电子和管理方面的安全措施来保护您的个人信息安全。我们 通过建立数据分级管理、系统安全管理、数据安全开发规范来管理规范信息的存储和使用。 我们通过与信息接触者签署保密协议、完善监控和内部管理制度来对数据进行全面安全控制。
我们会采取一切合理可行的措施，保护您的个人信息。例如，在您的浏览器与 XTransfer 之间交换数据时受 SSL 加密保护；使用加密技术确保数据的保密性；使用双因素验证保护 账户安全；通过受信赖的保护机制防止账户遭到恶意攻击；定期对相关人员进行网络信息安全培训并进行考核，使网站相关管理人员充分认识到网络安全的重要性，严格遵守相应规章制度。
安全认证
我们已通过了公安部信息安全等级保护三级认证，并与监管机构、第三方测评机构建立完善 的沟通机制，为您的信息安全提供全方位保障。
如您不慎泄露登陆账号和密码，应当及时拨打我们客服电话 4009989930，以便我们锁定相关的操作权限，防止他人非法操作；在您提供有效身份证明和相关凭据并经我们审查核实后， 您可以重新设定密码并恢复正常使用。
XTransfer 如何保护未成年人的信息?
我们非常重视对未成年人个人信息的保护，我们平台的服务主要面向成年人。如您为未成年人，建议请您的父母或监护人阅读本政策，并在征得您父母或监护人同意的前提下 使用我们的服务或向我们提供您的信息。如您的监护人不同意您按照本政策使用我们的 服务或向我们提供信息，请您立即终止使用我们的服务并及时通知我们，以便我们采取 相应的措施。我们将根据国家相关法律法规的规定保护未成年人的个人信息的保密性及安全性。
对于经父母或监护人同意使用我们的产品或服务而收集未成年人个人信息的情况，我们 只会在法律法规允许、父母或监护人明确同意或者保护未成年人所必要的情况下使用、共享、转让或披露此信息。
如果我们了解到平台收集的未成年人的个人信息未获得可证实的父母或监护人的同意， 我们会设法尽快对相关数据采取适当处理。
XTransfer 会将贵方的信息保存多长时间?
作为一家受监管的金融机构，根据法律规定，在贵方关闭在我们公司的账户之后，XTransfer 仍需存储一些贵方的个人和交易数据。贵方的数据只会基于必要情况在内部 访问，并且只有在绝对必要的情况下才将对其进行访问或处理。自 XTransfer 与贵方终止业务关系之日起或自 XTransfer 为贵方提供的单次服务结束之日起，贵方的信息将会 被保存七年。当贵方或与贵方相关的交易涉及反洗钱或反恐融资等法律调查或诉讼，并 且相关法律调查或诉讼在满七年保存期限之时仍未完结，相关的信息将会被保存至该调查或诉讼结束。
我们将会删除不再需要的信息。我们必须保存的所有信息将采用最高安全等级。
我方隐私与安全政策的变更
我方可以在任何时候对本隐私政策进行修订并通过在我方平台发布修订版本。在适当的 情况下，将通过电子邮件、短信、页面弹窗的方式告知贵方。修订版本将自有效发布日 起生效。您可以随时通过“设置-关于我们-隐私与安全政策”查看相关内容。
您如何联系我们
如果贵方对我方的隐私与安全政策或数据处理有任何疑问、意见或建议，可以通过邮件 或电话与我们联系，我们联系方式如下：
电话：400-998-9930
电子邮箱：privacy@xtransfer.cn
贵方有权注销 XTransfer 账户，您可以提前 30 日通过您的注册邮箱向我们发送注销申 请，并备注注销原因至 service@xtransfer.cn，我们将在收到后处理您的注销申请。
语言
如果本政策的英语和中文版本之间出现差异，将以英语版本为准。
附件一《第三方SDK目录》
| 编号 | SDK 名称 | 所属机构 | SDK 用途 | SDK 收集的个人信息 | 隐私权政策链接 |
|---|---|---|---|---|---|
| 1. | 友盟 SDK | 友盟同欣(北 京)科技有限公司 | 基础包、推送、分享、统计 | 设备信息(IMEI/android ID/IDFA/ OPENUDID/GUID、SIM 卡 IMSI 信息/地理位置等) | https://www.umeng.com/page/policy |
| 2. | 小米推送 | 小米科技有限责任公司 | 消息推送 | 设备信息、网络类型、设备型号、应用信息 | https://privacy.mi.com/all/zh_CN/ |
| 3. | Vivo 推送 | 广东步步高电子工业有限公司 | 消息推送 | 设备信息、设备型号 | http://www.vivo.com.cn/about-vivo/privacy-policy |
| 4. | 魅族推送 | 珠海市魅网科技有限公司 | 消息推送 | 设备信息、定位、应用信息、网络类型、设备型号 | https://www.meizu.com/legal.html |
| 5. | 华为推送 | 华为技术有限公司 | 消息推送 | 设备信息、网络类型、设备型号、应用信息 | https://www.umeng.com/page/policy |
| 6. | OPPO 推送 | OPPO 广东移动通信有限公司 | 消息推送 | 设备信息、设备型号 | https://privacy.oppo.com/cn/policy/ |
| 7. | 微信开放平台 | 腾讯科技(深圳)有限公司 | 微信授权登录、微信分享、微信支付、微信收藏 | 设备信息(IMEI、IMSI、MAC 地址、AndroidID )、网络信息、微信账号信息 | https://privacy.qq.com/policy/tencent-privacypolicy |
| 8. | 阿里播放器 | 阿里云计算有限公司 | 视频播放服务 | UUID、设备型号、IP地址 | https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112151438_20307.html?spm=a2c4g.11186623.0.0.10da5ff2M0jmcp |
| 9. | 网易易盾号码认证SDK | 杭州网易智企科技有限公司 | 唯一设备识别码（UUID ),设备基本信息（设备品牌及型号，设备厂商，设备所运行系统版本，名称，系统内核信息，设备CPU架构）、日志信息（网络连接状态及类型，IP地址，DNS,运营商信息） | UUID、设备型号、IP地址 | https://dun.163.com/clause/privacy |
| 10. | 顶象设备指纹SDK | 北京顶象技术有限公司 | 设备指纹生成 | 设备相关的浏览器信息，Canvas指纹，IP地址（经用户授权后获取） | https://www.dingxiang-inc.com/docs/detail/const-id#doc-h2-3 |
附件二《调用设备权限清单》
请知悉：
1. 为保障 XTransfer App 功能实现与安全稳定运行/为您提供个性化服务的目的，我 们可能会申请调用您某些移动设备的权限。
2. 本清单将展示我们可能申请调用的您的移动设备权限。随着 XTransfer App/我们功 能的升级，如申请或使用的设备权限类型与目的发生变动，我们将及时更新列表。
3. 请您知悉，我们接入的第三方 SDK 也可能会申请调用某些设备权限。
安卓系统设备权限清单
| Android 设备权限 | 使用目的 |
|---|---|
| 摄像头 | 用于身份证识别、识别二维码、人脸识别、上传用户资料、录像、拍 照，扫一扫功能。 |
| 相册 | 用于上传用户资料、人脸识别，开户功能。 |
| 通讯录 | 用于图片加载 |
| 短信 | 用于自动检测验证码功能。 |
| 网络通讯 | 用于与服务端进行通讯功能。 |
| 设备信息(电话状态) | 用于保障账户、交易安全以及交易风控保障功能。 |
IOS 系统设备权限清单
| IOS 设备权限 | 使用目的 |
|---|---|
| 摄像头 | 用于身份证识别、识别二维码、人脸识别、上传用户资料、录像、拍 照，扫一扫功能。 |
| 相册 | 用于上传用户资料、人脸识别，开户功能。 |
| 网络通讯 | 用于与服务端进行通讯功能。 |
Privacy and Security Policy
Release Date: April 14,2023
Effective Date: April 14,2023
Your Privacy Rights
This Privacy and Security Policy ("Privacy Policy" or “This Policy”) sets out the basis on which we (Shanghai Duohui Network Technology Co., Ltd., the registered address of which is China (Shanghai) Pilot Free Trade Zone, No. 828-838 Zhangyang Road, 26th Floor E, F )together with our subsidiaries, our holding company, subsidiaries of our holding company from time to time, collectively called "XTransfer", "our", "us" or "we") collect, use, store, share and protect your personal or company information as you use our website (www.xtransfer.cn) or any other Uniform Resource Locators ("URL"), application and tools (collectively, the "Our Platform") through or on which we provide services offered to you (the "Services"). When you share information with us, for example by registering for an XTransfer account, we can make that service experience even better. By using our Services, you accept and consent to the practices set out below and at the same time we want you to be clear how we’re using your information and the ways in which you can protect your privacy. If you have any questions with regards this policy, please contact us on email: privacy@xtransfer.cn
Privacy Policy will help you understand the following content:
- Your rights
- How Does XTransfer Collect Your Information?
- When Does XTransfer Collect Your Information?
- What Information Does XTransfer Collect?
- How Does XTransfer Use Your Information?
- When Does XTransfer Share Your Information?
- How does XTransfer store and protect your information?
- How does XTransfer protect the information of minors?
- How Long Does XTransfer Store Your Data?
- Changes to Our Privacy and Security Policy
- How to Contact Us?
- Language
- Annex 1<Third Party SDK Directory>
- Annex 2<Invocation List of Device Permission>
Your rights include:
i. Right to access: you can ask details of your personal information we hold about you at any time. We will endeavor to respond to your query within 5 business days of receiving your request;
ii. Right to update: if you find out any inaccuracy or incompleteness for your personal data that we hold for you, you are responsible to update the information online through your account access. If case of problems accessing your account or changing online, please inform us and we will update our records accordingly;
iii. Right to stop marketing: You have the right to ask us not to use your personal information for marketing purposes or expressly let us know that you do not wish to receive any further communication from us by contacting at privacy@xtransfer.cn ;
iv. Right to data portability: You have a right to ask us to provide your personal information to another data controller, for e.g. a third-party provider of services;
v. Right to delete your information: You have the right to ask us to delete your data when it is no longer necessary, or no longer subject to a legal obligation to which XTransfer is subject to, or to have any obsolete information removed;
VI.Withdrawal of consent: Certain functions of our platform will be performed based on the information you have agreed to provide or the device permissions you have authorized, you can withdraw such consent by turning off the corresponding functions. After you withdraw your consent, we will not be able to continue to provide you with the corresponding functions, and we will no longer process your corresponding personal information. However, your decision to withdraw your consent will not affect our previous processing activities of personal information based on your previous authorization. You can also ask us to review any of the information we have retained, how we have used it, and to whom we have disclosed it (except where restricted by law) at any time by contacting us on email privacy@xtransfer.cn
How Does XTransfer Collect Your Information?
You voluntarily provide, and we collect information directly from you, but may also receive information about you from third parties (e.g., marketing agencies, market research companies, our suppliers, contractors and consultants at our group companies, your colleagues and business contacts, public websites and public agencies) automatically, when you use our Website and the Services.
We, and our third party service providers，automatically collect your information about your use of our Website and our Services through cookies, web beacons, and other technologies.
1) Cooperation between XTransfer and Third-party Software Development Kit (SDK) Service Providers
In order to ensure the stable operation of the client and the realization of functions, so that you can use and enjoy more services and functions, our application will embed the SDK of authorized partners or other similar applications. You can use the "Third Party SDK Directory" (See attachment 1) View the SDK details of our authorized partners. We will conduct more stringent security tests on the application programming interface (API) and software tool development kit (SDK) for authorized partners to obtain relevant information, and agree strict data protection measures with authorized partners to comply with this policy and other Any relevant confidentiality and security measures to handle personal information. If you find that these SDKs or other similar applications are at risk, it is recommended that you immediately terminate the relevant operations and get in touch with us in time.
2）How Does XTransfer Use Cookies?
Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes and in order to offer you a more tailored experience in the future, by understanding and remembering your particular browsing preferences. You can edit your browser options to block cookies. Visitors to our Website who disable their web browsers’ ability to accept cookies will still be able to browse our Website. However, most website features will not function correctly, if you disable all cookies (including essential cookies) and you may not even be able to login to use our Services. More information can be found in our Cookie policy.
When Does XTransfer Collect Your Information?
We may collect and store any information you provide us when you use our Services, including when you add information on a web form, add or update your account information, participate in dispute resolutions, or when you otherwise correspond with us regarding our Services.
What Information Does XTransfer Collect?
(1) Realize the necessary functions of our products or services
When you use our products or services, you may need to provide or authorize us to collect your personal information required for the corresponding products or services in the following conditions. If you refuse to provide information required for some functions or services, you may not be able to access to these functions or services, but it will not affect your normal use of our other functions or services.
Registration and certification
When you register for an XTransfer account, you need to provide us with your mobile phone number/email information and set a password to create an XTransfer account. We will verify whether your information is valid by sending a SMS verification code/verification email.
After logging in to your XTransfer account, you can independently complete and enter your phone number, contact address and other personal information. After completing the registration and before using our services, you also need to complete the corporate certification. When performing corporate certification, you need to provide us with basic corporate information, corporate license and the identity information as well as the photocopy or photo of the relevant license of the corporate-related natural person(s) (including legal person, director, actual controller, the ultimate beneficiary and the authorized person) .
Payment Collection
In order to provide you with payment collection services, you need to provide trade-related materials (including contracts or invoices, etc.) to credit the payment. If required for risk compliance review, we may request you to provide more transaction-related information based on specific circumstances.
Settlement of Exchange and Payment Withdrawal
In order to realize the function of settlement of exchange and payment withdrawal, you must first bind your settlement and withdrawal account, which requires your financial information (including debit card or bank account information). In addition to your financial information and trade-related materials provided at the time of payment, you need to provide transaction-related logistics documents or logistics-related supporting materials based on the delivery situation. If required for risk compliance review, we will request you to provide more transaction-related information based on specific circumstances.
Ordinary Payment Withdrawal
In order to realize the function of ordinary payment withdrawal, you need to bind your ordinary withdrawal account first, which needs to provide your financial information (including debit card or bank account information) of the aforesaid ordinary withdrawal account.
Transfer
In order to realize the function of transfer, you are required to provide the bank account information of the transferee and related business information.
2) Optimize of Service Experience, Customer Service, Protection of User Rights and Interests
For the purpose of optimizing your service experience on our platform, providing you with better customer service and protecting your rights as our user, we may collect the following information about you, in case that you do not provide or agree with our retention of the aforementioned information, we may not be able to provide you with certain services related to the optimization of service experience, customer service and user rights protection, but it will not affect your use of our other services.
Optimize of Service Experience
We and our third-party service providers may collect the following information from you: your domain name, your browser type and operating system, your Internet Protocol (IP) address, the duration of your visit to our website or use of our services, your activities on our website, and the referring URLs or pages that lead you to our website.
Communications of Customer Service
In case that you contact our customer service to obtain our customer service, you also need to provide your XTransfer account information and related transaction information to verify your identity. Meanwhile, in order to ensure the quality of service, protect the rights and interests of our users, prevent fraud, and check the accuracy of the information you provide in the process of our customer service, we will record the calls you receive and make to our customer service hotline . The chat history information between you and our online customer service will also be collected.The aforesaid call recordings and chat history 13 information will be automatically deleted after being retained for a certain period of time, unless preserved due to the needs of compliance requirements or legitimate interest needs.
Protection of User Rights and Interests
From time to time, we may collect feedback/recommendations information or the information you provided during reporting.
(3) Device Permissions invoked to Provide Additional Functions
In order to provide you with convenient and high-quality services, we may need to invoke some permissions on your device. When you use the corresponding function, you will see a pop-up reminder asking you whether to authorize it. You can choose to turn off some or all permissions in the settings of your mobile device. Based on different mobile device operating systems, the opening and closing methods of the above permissions may be different. For details, please refer to the instructions or guidelines of the device and system developers. If you would like to see more details on our access to your device permissions, please refer to the appendix 2 "Invocation List of Device Permission".
Besides, we may also need additional commercial and/or identification information from you e.g. if you send or receive certain high-value or high-volume transactions or as needed to comply with our anti-money laundering obligations under applicable law. In providing the personal data of any individual (other than yourself) to us during your use of our Services, you promise that you have obtained consent from such individual to disclose his/her personal data to us, as well his/her consent to our collection, use and disclosure of such personal data, for the purposes set out in this Privacy Policy.
We do not, however, collect and process any types of personal sensitive data without your prior consent or unless we are required to by law, for e.g. details about your race or ethnic origin, religious beliefs, personal health information, etc.
How Does XTransfer Use Your Information?
Our primary purpose in collecting personal information is to provide you with a secure, smooth, efficient, and customized experience. We may use your personal information:
- To validate your identity;
- To exercise our rights and perform our obligations relating to your contract with us, to communicate with you about our Services or any changes in the Service’s terms and conditions that apply to you;
- For the specific purposes you provide the information to us, including to respond to your queries, to provide any information that you request, and to provide customer support;
- To tailor the content and information that we may send or display to you, and to otherwise personalize your experiences while using our Website and our Services;
- To administer our Services for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- To protect our customers, employees or property — for instance, to investigate fraud, harassment or other types of unlawful activities involving us or other companies that we do business with;
- To comply with any applicable legal and/or regulatory requirements in or outside of Hong Kong;
- To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you.
- For purposes directly related or incidental to the above.
When Does XTransfer Share Your Information?
We will only choose to share your information with third parties, including service providers, agents and suppliers, regulated institutions (e.g., financial institutions), affiliated entities, business partners(collectively, “business partners”) and regulatory agencies/law enforcement agencies for the following reasons:
- Signing of contract between our business partners or you for the necessary purpose of performing and executing of any contract we entered into with you. Under this case, the recipients of data are determined by your particular business choice and we will not share data with recipients unrelated to your foregoing business. In addition, we will sign strict confidentiality agreements with our business partners that we shared your information with, requiring them to process and use data in accordance with our privacy policy and take strict data security measures;
- In response to legal process – to comply with the law, a judicial proceeding, summons, court order, or other legal proceedings;
- Performance the legal compliance requirements by regulatory and law enforcement agencies – in response to the regulatory and law enforcement agencies’ requests of countries/areas related any contract we entered into with you, including but not limited to regulatory and law enforcement information requests, regulatory and law enforcement information reports and so on;
- To protect us and others – we may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our Services’ terms and conditions or this Privacy Policy, or as evidence in litigation in which we are involved;
- In connection with business transfers – to another entity if we are acquired by or merged with such other entity, if substantially all of our assets are transferred to such other entity;
- Share with advertisers, media and other partners – we may cooperate with the aforementioned partners to use the processed desensitization data in various forms for commercial purposes including optimizing advertising and improving marketing effects. Unless authorized by you, we will not share your personal information with these partners. We will provide these partners with data on the population strategy of advertising or the effectiveness of advertising instead of any personal information, or we will aggregate these personal information to make them unrecognizable.
- For analytics and search engine providers that assist us in the improvement and optimization of our site;
- For our group entities or subsidiaries, you can learn more by sending email to privacy@xtransfer.cn in the written form.
You agree that the data that we collect from you will be stored on a third-party cloud server in mainland China. In addition, your data may be transferred to and stored at a destination outside mainland China. It may also be processed by entities referred to in this clause above, who operate outside mainland China, the premise of which is upon your explicit authorization or the explicit requirements of laws and regulations or relevant regulatory agencies.
In case that we may transfer, store or process your information outside mainland China, we will ensure that your data is protected at the same level as the laws and regulations in mainland China, and we will transfer the data outbound after safety assessment or filing in accordance with laws and regulations. In addition, we will ensure that both ourselves and our business partners take adequate and appropriate technical, physical and organizational security measures to protect your data. We also ensure we have appropriate contractual protections in place with these third parties.
How Does XTransfer Store and Protect Your Information?
Protection of your personal information
We will strictly abide by relevant laws and regulations to respect and protect users’ privacy rights. Unless in accordance with XTransfer General User Terms and Conditions, Privacy and Security Policy, Website Terms of Use, and other published guidelines on our platform, we will not disclose and reveal your personal information without your authorization.
Technical measures and data security measures
We take security measures in respect of physical, electronic, and management that comply with industry standards to protect your personal information. We manage the storage and use of standardized information by establishing data hierarchical management, system security management, and data security development specifications. We conduct comprehensive security control of data by signing confidentiality agreements with information receivers, completing monitoring and internal management systems.
We will take all reasonable and feasible measures to protect your personal information. For example, the data exchange between your browser and XTransfer is protected by SSL encryption; encryption technology is used to ensure the confidentiality of data; two-factor authentication is used to protect account security; a trusted protection mechanism is used to prevent malicious attacks on accounts; conduct network information security training and assessment regularly for relevant personnel to make them fully realize the importance of network security and strictly abide by corresponding rules and regulations.
Safety certification
We have passed the third-level information security level protection certification of the Ministry of Public Security, and have established a sound communication mechanism with regulatory agencies and third-party evaluation agencies to provide all-round protection for your information security.
If you accidentally disclose your login account and password, you shall contact our customer service hotline 4009989930 as soon as possible for us to lock the user’s operating authority timely to prevent any third-party from illegal operation. Besides, you can reset your password and resume to normal use after providing valid identification and relevant credentials which have been reviewed and verified by us.
How Does XTransfer Protect the Information of Minors?
We attach great importance to the protection of minors' personal information, and the services of our platform are mainly for adults. If you are a minor, it is recommended for your parents or guardians to read this policy and you can only use our services or provide us with your information after the consent of your parents or guardians. If your guardian does not agree that you use our services or provide us with information in accordance with this policy, please stop using our services immediately and notify us as soon as possible so that we can take corresponding measures. We will ensure the confidentiality and security of minors' personal information in accordance with relevant laws and regulations.
For minors' personal information collected during the use of our products or services with the consent of parents or guardians, we will only use, share, transfer or disclose such information if it is permitted by laws and regulations, there is express consent of parents or guardians or it is necessary to protect minors.
If we find out that the personal information of minors collected by the platform has not obtained the consent of a verifiable parent or guardian, we will try to take appropriate measures to process the relevant data as soon as possible.
How Long Does XTransfer Store Your Data?
As a regulated financial institution, XTransfer is required by law to store some of your personal and transaction data beyond the closure of your account with us. Your data is only accessed internally on a need to know basis, and it will only be accessed or processed if absolutely necessary. Your information shall be kept for seven years from the year when the business relationship is terminated or the year when the one-off service is ended. Where you or your transaction(s) are involved with investigation (such as anti-money laundering and Counter-Terrorist financing) or other legal actions, and if such investigation or legal action is still on-going upon the expiration of seven years, the related information will be kept until the end of such investigation/legal action.
We always delete information that we no longer need. And everything we need to keep is subject to the highest levels of security.
Changes to Our Privacy and Security Policy
We may amend this Privacy Policy at any time by posting a revised version on our platform and, where appropriate, by notifying you in the forms of e-mail, text messages or pages pop up. The revised version will be effective as of the published effective date. You can find the relevant content of this policy at any time through "Settings-About Us-Privacy and Security Policy".
How to Contact Us？
If you have any questions, comments or suggestions about our privacy and security policy or data processing, you can contact us by email or phone. Our contact information is as follows:
Phone: 400-998-9930
Email: privacy@xtransfer.cn
You have the right to cancel your XTransfer account by sending us a cancellation application 30 days in advance through your registered email address with the reason of cancellation to service@xtransfer.cn. We will process your cancellation request accordingly.
Languages
If there is a discrepancy between the English and Chinese versions of this policy, the English version will prevail.
Annex 1<Third Party SDK Directory>
| No. | Name of SDK | Affiliation | Usage of SDK | Personal Information Collected by SDK | Link of Privacy Policy |
|---|---|---|---|---|---|
| 1. | Umeng SDK | Umeng Tongxin (Beijing) Technology Co., Ltd. | Basic package, push, share, statistics | Device Information (IMEI/android ID/IDFA/OPENUDI D/GUID、SIM Card IMSI Information/Geogr aphic location and so on) | https://www.umeng.com/page/policy |
| 2. | Xiaomi push | Xiaomi Technology Co., Ltd. | message push | Device information, Network type, Device model, Application information | https://privacy.mi .com/all/zh_CN/ |
| 3. | Vivo push | Guangdong BBK Electronic Industry Co., Ltd. | message push | Device information, Device model | http://www.vivo.c om.cn/about-viv o/privacy-policy |
| 4. | Meizu push | Zhuhai Meiwang Technology Co., Ltd. | message push | Device information, location, Application information, Network type, Device model | https://www.meiz u.com/legal.html |
| 5. | Huawei push | Huawei Technologies Co., Ltd | message push | Device information, Network type, Device model, Application information | https://developer .harmonyos.com/ cn/docs/design/d es-guides/privac y-statement-000 0001077380966 |
| 6. | OPPO push | OPPO Guangdong Mobile Communication Co., Ltd. | message push | Device information, Device model, | https://privacy.oppo.com/cn/policy/ |
| 7. | WeChat Open Platform | Tencent Technology (Shenzhen) Co., Ltd. | WeChat login authorization,WeChat sharing, WeChat payment, WeChat collection | Device information (IMEI, IMSI, MAC address, AndroidID), Network information, WeChat account information | https://privacy.qq.com/policy/tencent-privacypolicy |
| 8. | Alibaba Player | Alibaba Cloud Computing Co., Ltd. | Video playback service | UUID, device model, IP address | https://terms.aliyun.com/legal-agreement/terms/suit_bu1_ali_cloud/suit_bu1_ali_cloud202112151438_20307.html?spm=a2c4g.11186623.0.0.10da5ff2M0jmcp |
| 9. | NetEase Yidun Number Authentication SDK | Hangzhou NetEase Intelligent Enterprise Technology Co., Ltd. | One-click registration of mobile phone number verification | Unique device identification code (UUID), basic device information (device brand and model, device manufacturer, device running system version, name, system kernel information, device CPU architecture), log information (network connection status and type, IP address, DNS, operator information) | https://dun.163.com/clause/privacy |
| 10. | Top Image Device Fingerprint SDK | Beijing Top Image Technology Co., Ltd. | Device fingerprint generation | Device related browser information, Canvas fingerprint, IP address (obtained after user authorization) | https://www.dingxiang-inc.com/docs/detail/const-id#doc-h2-3 |
Annex 2<Invocation List of Device Permission>
Please be aware:
1. In order to ensure the realization and operation of XTransfer App functions in safe and sable ways/ provide you with personalized services, we may apply to invoke certain permissions of your mobile device.
2. This list will show the possible mobile device permissions that we may apply to invoke. With the upgrade of XTransfer App/our functions, such as changes in the type and purpose of device permissions applied for or used, we will update this list in time.
3. Please be aware that some third-party SDKs we use may also apply for to invoke certain permissions of your mobile device.
Invocation List of Device Permission for Android System
| Android device permissions | Purpose of use |
|---|---|
| Camera | ID card recognition, QR code recognition, face recognition, uploading user information, video recording, taking photos, and scanning. |
| Photo album | Upload user information, face recognition, account opening |
| Address book | Image loading |
| Short message | Automatically detect verification codes |
| Network communication | Communicate with the server |
| Device Information (Phone Status) | Guarantee account, transaction security and transaction risk control |
Invocation List of Device Permission for IOS System
| IOS device permissions | Purpose of use |
|---|---|
| Camera | ID card recognition, QR code recognition, face recognition, uploading user information, video recording, taking pictures, scanning |
| Photo album | Set avatar, face recognition, open account |
| Network communication | Communicate with the server |
