Privacy Policy

1.1 To provide you with user creation and documents maintenance services

1.1.1 When your employer creates an account for you on YXT Platform, it needs to create an account username and password according to the organizational structure of the enterprise, i.e your employer. After your account is created, you can change the password by yourself on YXT Platform. Work Position, username and password are necessary information for an account.

1.1.2 When you use YXT Platform, in order to maintain your basic information and improve your service experience, you need to choose to fill in and/or complete the information required for the use of the corresponding service, including your mobile phone number, email, gender, location, Avatar, nickname, birthday, department. If you do not provide these information, it will not affect your use of the functions of the YXT Platform, but it may affect your personalized service experience.

1.2 To provide you with online learning services

YXT Platform is an online learning APP. In order to help you access courses and other learning resources on the YXT Platform, we need to use your network, i.e. wifi or cellular network. We collect technical data related to your network connection, such as IP address and network type, which are used to ensure normal operation of services and provide technical support. We do not collect your browsing history or other network usage data unrelated to learning.

1.3 To provide you with online learning community services

The YXT Platform provides online learning tools such as Q&A, instant messaging (IM communication) and notes. When using the Q&A, instant messaging (IM communication) and note-taking functions on YXT Platform, the videos, pictures, comments, and interactive information you uploaded will be stored in the servers of YXT Platform, because such storage is necessary to realize this function. We store it in an encrypted way, and you can delete such documents at any time. Once deleted, these information cannot be recovered. Unless you choose or comply with relevant laws and regulations, we will not provide the above documents to third parties, or use it for other purposes than this function. Where permitted by law, we may de-identify this information for service improvement purposes.

Please be kindly noted that the content and information you share when using our services will involve Personal data. You are responsible for the content you share and must ensure that such content:

• Does not infringe upon others' intellectual property rights or other legitimate interests;
• Does not violate applicable laws and regulations;
• Does not contain unauthorized personal data of others.

If it contains other people's Personal data, please confirm that you have obtained the legal authorization of others. Please consider more carefully whether to disclose or even publicly share relevant sensitive Personal data when using our services. If we find that your shared content violates the above requirements, we reserve the right to take necessary measures, including but not limited to removing the relevant content, restricting your account functions, or terminating our services to you.

1.4 To provide you with basic user learning experience

In order to ensure basic user experience when you use YXT Platform, when you choose to use YXT Platform to learn, you need to provide us or allow us to collect the following device permissions and information.

• Obtain the WLAN connection status of your device, so that it can remind you in time when more data traffic would be consumed by playing video courses or live stream on YXT Platform.
• Judging the running status of APP to determine whether the YXT Platform is running in the foreground, so as to provide you with appropriate notifications according to your usage scenarios.
• Change the volume so that you can change the volume when watching or listening to audio and video courses.
• Control the vibration. When you do not open the APP, you will receive IM chat messages or course notices prompted by vibration.
• Gravity sensing. According to the direction of your phone, videos and live stream from YXT Platform can be automatically landscaped to enhance your learning experience.
• Local database write and read permissions. When you watch a video course, you can cache the video file to your phone so that you can watch and learn offline.
• Phone sleep function. In order to avoid the interruption of learning caused by the automatic sleep of the mobile phone in the process of watching video, we need to use the sleep function of your mobile phone, so that the video learning process is not interrupted by the sleep function.
• Application new version installation reminder. In order to improve your learning experience, YXT Platform will continue to be upgraded online. We will remind you to download and install the latest version in YXT App.
• Get the App list. We need to obtain the APP signature installed in the current system and compare it with the current APP to ensure that YXT APP in your device is an official APP. This information is only stored and applied locally.
• Get the list of currently running APP processes. In order to ensure that the main process executes the necessary code, we need to get the name of the currently running APP process and compare it with the current APP package name. This information is only stored and applied locally.
• To ensure that you get a smoother and easier experience, when you use the relevant services provided by YXT, we will identify your identity through small data file "Cookie" to help you reduce the number and frequency of information entry, or assist in judging the security status of your account. Cookies usually contain identifiers, site names and some numbers and characters. With the help of cookies, websites can store your preference information to improve product services and user experience, or to detect and prevent security risks in time to provide you with better services. We will not use cookies for any purpose other than those described in this policy, and you can keep or delete cookies according to your preferences. You can clear all cookies saved in the software, and your related information will be deleted after you manually clear it.

1.5 To provide you with Technical Service Support

When you encounter a system crash in the process of using YXT Platform, we need your authorization to read the mobile phone status and identity after your consent, including the mobile phone device type, system version, MAC address, IMEI to quickly locate and Solve the corresponding problem.

Please be kindly noted that separate device information and system version information are information that cannot identify a specific person.

1.6 Other additional service

In order to provide you with more convenient, high-quality and personalized products and/or services and strive to improve your experience, we will collect and use your Personal data in the following additional services provided to you. If you do not provide these information, it will not affect YXT Platform’s basic services, such as browsing, searching, and purchasing services, but you will not be able to obtain the user experience that these additional services bring to you. These additional services include as following:

• Camera-based additional services. After enabling the camera permission in your system, you can use this function to scan the code to log in, scan, sign in, take photos or videos for communication with other users.
• Additional services for photo/video access and upload based on photo albums (photo library/video library). You can use this function to upload your photo/videos after enabling the album permission to change avatars, change backgrounds, upload moment/community pictures, and send photos in instant messaging (IM communication).
• Phone-based Additional Services. You can avoid phone calls in learning audio and video courses after enabling the monitoring permission of the incoming call status to avoid affecting the credit record for a better learning experience.
• Storage-based additional services. After enabling the storage permission, you can cache the courses content locally to facilitate subsequent offline learning and obtain the ability to record related system error logs.

Please kindly understand and agree that the above additional services require you to turn on your camera, photo album, microphone (voice), calendar, location, phone and storage access permissions in your device in order to achieve collection and use of the information involved these permissions. You can check the status of the above permissions item by item in your device settings, and decide whether to turn these permissions on or off at any time. Please be kindly noted that if you open any permission, you authorize us to collect and use relevant Personal data to provide you with corresponding services. Once you close any permission, it means that you cancel the authorization, and we will no longer continue to collect and use related Personal data based on the corresponding permission, meanwhile the services corresponding to this permission can not be provided. However, your decision to close the permission will not affect the previous collection and use of information based on your authorization.

1.7 Others

1.7.1 If the information you provide contains Personal data of other users, you must ensure that you have obtained legal authorization before providing such information to YXT Platform. If it involves minor's Personal data, you need to obtain formal consent of the corresponding minor's guardian before publishing. In the above-mentioned circumstances, the guardian has the right to contact us through the means of Article 9 of this policy to request correction or deletion of the content involving minor's Personal data.

1.7.2 If we use the Personal data for other purposes not specified in this policy, or use the information collected for a specific purpose for other purposes, or if we actively obtain your Personal data from a third party, we will obtain your consent in advance.

If we indirectly obtain your information from a third party, we will explicitly request the third party in writing to collect your Personal data after obtaining your consent in accordance with the law and inform you of the content of the shared information before such collection. If it involves sensitive Personal data, it needs to be clearly confirmed by you before providing it to us for use. We require the third party to make a commitment to the legality and compliance of the source of Personal data. If the third party violates the law, we will clearly require it to bear the corresponding legal responsibility, meanwhile, our professional security team will carry out security reinforcement for Personal data, including sensitive Personal data reporting, sensitive Personal data encrypted storage and access control, etc.. We will protect the Personal data obtained indirectly by using no less than the same protection measures as we use for the Personal data of our own users.

1.7.3 Legitimate Exemption from the Consent to Collect and Use Personal data

Please kindly understand and agree that in the following cases we do not need your authorization to collect and use your Personal data, and we will not respond to your requests for correction/modification, deletion, cancellation, withdrawal of consent, request for information.

1. When it is related to national security and national defense security;
2. When it is related to public safety, public health and major public interests;
3. When it is related to criminal investigation, prosecution, trial and execution of sentences;
4. When it is to be used to protect the lives, property and other major legitimate rights and interests of you or other individuals, but it is hard to get the individuals' consent;
5. When your Personal data collected is disclosed to the public by yourself;
6. When your Personal data is collected from the legally publicly disclosed information, such as legitimate news reports, governmental public information and other channels;
7. When it is necessary for signing or performing any contracts or other documents with you;
8. When it is necessary for maintaining the safe and stable operation of YXT products and related services, such as finding and handling failures of products and related services;
9. When it is necessary for legitimate news reporting;
10. When it is necessary for academic research institutes to carry out statistical or academic research for public interest, and when providing results of academic research or description, the Personal data contained in the results is de-identified;
11. When it is necessary for personnel management purposes or business improvement purposes;
12. Other circumstances as stipulated by laws and regulations.

Please be aware that, in accordance with applicable laws, if we take technical measures and other necessary measures to process Personal data, so that the data recipient cannot re-identify a specific person and cannot recover, or we will conduct de-identification research, statistical analysis and forecasting on the collected information to improve the content and layout of YXT Platform, provide product or service support for business decisions, and improve our products and services (including using anonymous data for machine learning or model algorithm training), the use of the latter data by such processing does not require further notice to you and your consent.

1.7.4 If we stop any products or Service of YXT Platform, we will promptly stop activities that continue to collect your Personal data, notify you of the cessation of operations in the form of emails and/or in-site letters and/or push notifications, and delete or anonymize your Personal data of our holdings in connection with a closed service. In the case of minor's Personal data, we will promptly notify the minor's guardian of the notice of cessation of operations.

2.1 Data Sharing

We will not share your Personal data with any company, organization or individual other than YXT and its affiliates, unless one of the following conditions is met:

• Sharing with explicit consent. After obtaining your explicit consent, we will share your Personal data with other parties.
• We will share your Personal data externally in accordance with laws and regulations or the mandatory requirements of government authorities（for example, in legal proceedings or investigations）.
• Sharing with our affiliates. Your Personal data will be shared with our affiliates. We will only share necessary Personal data and subject to the purposes stated in this Privacy Policy. If the affiliated company wants to change the purpose of processing Personal data, it will ask for your authorization again.
• Sharing with authorized partners. Some of our services will be provided by authorized partners only for the purposes stated in this Privacy Policy. We share some of your Personal data with our partners to provide better customer service and user experience. For example, when you use the live stream service of YXT Platform, we need to share your device type and system version with the live stream service provider to mobilize the support of the corresponding live stream function. We will only share your Personal data for legal, legitimate, necessary, specific and explicit purposes, and only share Personal data necessary to provide such services. Our partners are not authorized to use the shared Personal data for any other purpose.

For companies, organizations and individuals with whom we share your Personal data, we will sign strict confidentiality agreements with them, requiring them to process Personal data in accordance with our instructions, this Privacy Policy and any other relevant confidentiality and security measures.

2.2 Entrusted processing

2.2.1 We may entrust authorized partners to process your Personal data in order to authorize partners to provide certain services for you or perform functions on our behalf. We will only entrust it to process your information for the legal, legitimate, necessary, specific and explicit purposes stated in this Privacy Policy, authorized partners can only access the information they need to perform their duties, and we will require them not to use the information for any other purpose beyond the scope of the entrust. If authorized partners use your information for purposes not entrusted by us, they will obtain your consent separately.

2.2.2 In order to ensure the stable operation and function realization of our services and enable you to use and enjoy more services and functions, our App will embed the SDKs of authorized partners or other similar Apps. We will conduct strict security testing on the application programming interface (API) and software tool development kit (SDK) for authorized partners to obtain relevant information, and agree strict data protection measures with authorized partners, so that they can comply with this policy and any other relevant confidentiality and security measures to handle Personal data.

2.3 Transfer

We will not transfer your Personal data to any companies, organizations and individuals, except in the following cases:

• Transfer with explicit consent. After obtaining your explicit consent, we will transfer your Personal data to other parties.
• To meet the requirements of laws and regulations, legal procedures or mandatory government requirements or judicial rulings.
• When YXT or its affiliates are involved in merger, division, acquisition or bankruptcy liquidation, if it involves the transfer of Personal data, we will require new companies and organizations that hold your Personal data to continue to abide by this Privacy Policy, otherwise we will require the company or organization to seek authorization from you again.

2.4 Disclosure

We will only disclose your Personal data in the following circumstances:

• After obtaining your express consent(such as written or electronic consent).
• Disclosure based on law. We will disclose your Personal data when required by law, legal process, litigation or government authorities.

4.1 Access to your Personal data

You have the right to access your Personal data, Except for exceptions provided by laws and regulations. If you want to exercise your data access right, you can access it yourself in the following ways: You can access your personal data information and other data in "Setting-Account Setting- Personal data".

4.2 Correct your Personal data

When you find that the Personal data we process about you is inaccurate, you have the right to correct it yourself or to ask us to make corrections. You can edit your profile information, change your password, add security information through "4.1 Access your Personal data".

4.3 Delete your Personal data, including: learning history, chat records, personal favorites, and learning data.

In the following circumstances, you may request us to delete your Personal data.

• If our processing of Personal data violates laws and regulations,
• If we collect and use your Personal data without your consent,
• If our processing of Personal data violates our agreement with you,
• If we permanently cease to provide you with products or services.

When you delete information from our service, we will not delete the corresponding information from the backup system immediately, but will delete the information when the backup is updated.

4.4 Change the scope of your authorization and consent

Each business function requires some basic Personal data to be completed. For the collection and use of additionally collected Personal data, you can give or withdraw your authorization at any time. The App has the function of revoking the authorization. You can turn off the relevant privacy authorization in Settings --> Permissions, specifically: Android phone-->Settings-->Apps-->Permissions; IOS phone-->Settings-->Privacy-->Permissions-->Apps; After you withdraw your consent or authorization, we cannot continue to provide you with such features and services, and we will no longer process your Personal data. However, your decision to withdraw your consent or authorization will not affect our previous Personal data processing based on your authorization..

4.5 Logoff of Account

You can logoff the previously registered account at any time. You can do it in the following ways: contact the system administrator of your current enterprise/institution offline and request to logoff/delete the account.After your account is logged off, We will stop providing you with products or services, and at your request, we will delete the relevant information about you or anonymize it in 15 work days, except otherwise specified by laws and regulations.

4.6 Constraining the automatic decision-making of information systems

In some business functions, we only make decisions based on non-human automatic decision-making mechanisms including information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to consult us.

4.7 Responding to your above request

For security, you will need to provide a written request or otherwise prove your identity. We will first ask you to verify your identity and will take no more than fifteen days to process your request.

For repeated or exceed reasonable limits requests, we will charge a certain cost as appropriate. For those that are unnecessarily repetitive, require excessive technical means (eg, need to develop new systems or fundamentally change existing practices), pose risks to the legitimate rights and interests of others, or are highly impractical (eg, involve backing up information stored on computer magnetic tapes) request, we will refuse it.

In the following cases, according to the requirements of laws and regulations, we will not be able to respond to your request:

1. Related to YXT's performance of the obligations stipulated by laws and regulations.
2. When it is directly related to national security and national defense security.
3. When it is directly related to public safety, public health and major public interests.
4. When it is directly related to criminal investigation, prosecution, trial and execution of sentences.
5. There is sufficient evidence to show that you have subjective malice or abuse of rights, such as your request will endanger public safety and the legitimate rights and interests of others, or your request is beyond the scope that can be covered by general technical means and commercial costs.
6. When it is to be used to protect the lives, property and other major legitimate rights and interests of Personal data subjects or other individuals, but it is hard to get the individuals' consent.
7. Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations.
8. Involving business secrets.

Related Third-party service (SDK) details are as follows:

Android：

SDK Name	Personal data collected	Third Party	Function/Purpose	Privacy Policy Document of Third-party SDK Provider
Tencent Browse Service（X5 core）	IMEI, International mobile subscriber identity(IMSI), MAC address, User model, screen size, OS version number, target API, ApnType, Network change listening broadcast and MAC address of Wifi	Tencent Technology (Shenzhen) Co., Ltd.	A complete solution to optimize the mobile browser experience	Please refer to: Interpretation of Tencent's Frequently Asked Questions
Umeng Statistical Analysis SDK	IMEI, MAC, Android ID, IDFA, OpenUDID, GUID, SIM IMSI, location information	Umeng Tongxin (Beijing) Technology Co., Ltd.	Realize statistical analysis of page user data	Please refer to: Umeng Privacy Policy
Bugly SDK	Mobile brand, Android system version, Android system API level, Manufacturer system version, CPU architecture type, Whether the device is rooted or not, Occupied disk space size, Occupied sdcard space size, Occupied memory space size, Network type, Name and PID of the currently running process for the application	Tencent Technology (Shenzhen) Co., Ltd.	Used for app abnormal operation analysis	Please refer to: Bugly Privacy Policy

IOS：

SDK Name	Personal data collected	Third Party	Function/Purpose	Privacy Policy Document of Third-party SDK Provider
Umeng Statistical Analysis SDK	iOS Advertising Identifier (IDFA)、location	Umeng Tongxin (Beijing) Technology Co., Ltd.	Realize statistical analysis of page user data	Please refer to: Umeng Privacy Policy
Bugly SDK	Mobile model, iOS system version, Manufacturer system version, CPU architecture type, Occupied disk space size, Occupied memory space size, Network type	Tencent Technology (Shenzhen) Co., Ltd.	Used for app abnormal operation analysis	Please refer to: Bugly Privacy Policy