AOTAI Copilot Privacy Policy

This Privacy Policy explains how Shandong Aotai Electric Co., Ltd. ("we", "us", or "our") collects, stores, uses, shares, transfers, publicly discloses, and protects your personal information when you use AOTAI Copilot (the "App"), and describes the rights available to you.

Please read this policy carefully before using the App. This policy applies together with the AOTAI Copilot Terms of Service and Community Guidelines.

Section 1. Information we collect

We only collect personal information that is necessary to provide the App and follow the principles of lawfulness, fairness, necessity, and good faith.

1. Information you provide

• Registration and sign-in information: mobile phone number or email address, account nickname, avatar, and encrypted password. If you sign in through a third-party account, we receive the identifier information you authorize.

• Identity verification information: when you choose real-name or enterprise verification, we may collect your name, certificate type and number, enterprise name, and unified social credit code.

• User content: text entered in conversations and images, videos, files, or other materials that you upload for knowledge base, content understanding, and related functions.

2. Information collected automatically when you use the service

• Device and log information: device model, operating system version, device identifiers, network type, IP address, browser or app version, access time, operation logs, and crash logs.

• Service operation information: conversation identifiers, conversation history, skill invocation records, and model invocation logs, used for conversation continuity, troubleshooting, and service improvement.

• Audio, video, and image information: when you use voice conversation, image understanding, video understanding, or similar functions, we process the corresponding media data to provide those functions.

3. Information from third parties

• When you use third-party sign-in, third-party cloud storage, or third-party model or MCP services, we may receive necessary identifiers or content within the scope of your authorization.

Special notice for minors: the App is mainly intended for adults. If you are under 14 years old, please read this policy with your guardian and have your guardian make authorization decisions on your behalf.

Section 2. How we use your personal information

We use your personal information for the following purposes:

• To provide account registration, sign-in, identity verification, and account management.

• To provide AI conversation, knowledge base, skill invocation, image understanding, video understanding, and other core services.

• To maintain conversation context and history so you can continue conversations and review past records.

• To protect account and system security and prevent fraud, abuse, attacks, and illegal activity.

• To provide customer support and process feedback, appeals, and inquiries.

• To improve service quality, stability, and user experience in accordance with applicable laws and regulations.

• To fulfill legal, regulatory, and supervisory requirements.

If we need to use your information beyond the above purposes, we will ask for your consent again unless otherwise permitted by law.

Section 3. Automated decision-making and generative AI

The AI conversation and content generation functions in the App are generative artificial intelligence services. We perform necessary compliance processing for training data and generated content according to applicable laws and regulations.

We will not make decisions that have a major impact on your personal rights and interests solely through automated decision-making. If you believe automated processing has affected your lawful rights, you may contact us through the methods listed in Section 11.

Section 4. Cookies and similar technologies

We may use cookies, LocalStorage, device identifiers, and similar technologies to identify sign-in status, maintain sessions, remember preferences, and perform necessary security protection and statistical analysis.

You can manage or clear the above data through your device or browser settings, but some functions may be affected.

Section 5. How we share, transfer, and publicly disclose information

We may share necessary personal information with service providers that are bound by confidentiality obligations, including cloud service and storage providers, model and algorithm service providers, security and risk control services, and customer support tools.

We require recipients to protect your personal information and use it only within the scope necessary to provide App services.

Third-party AI service sharing

After reading and agreeing to this Policy, when you actively use AI chat, knowledge-base Q&A, image or video understanding, speech recognition or synthesis, translation, summarization, or another feature that requires model processing, we send the data necessary to complete that request to one or more of the following third-party AI service providers, depending on the feature and model enabled at that time:

• Tongyi Yunqi (Hangzhou) Information Technology Co., Ltd. (Alibaba Cloud Model Studio and Qwen): may receive your text prompts, necessary conversation context, knowledge-base retrieval excerpts, and images, videos, audio, files, or extracted content that you actively submit, for intent recognition, content generation, translation, summarization, visual understanding, speech recognition, and speech synthesis.

• Beijing Zhipu Huazhang Technology Co., Ltd. (Zhipu AI and GLM): when a corresponding model is enabled, may receive your text prompts, necessary conversation context, knowledge-base retrieval excerpts, and supported image or file content for content understanding and generation.

• Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd. (DeepSeek): when a corresponding model is enabled, may receive your text prompts, necessary conversation context, and knowledge-base retrieval excerpts for content understanding and generation.

• Beijing Moonshot AI Technology Co., Ltd. and its affiliates (Kimi): when a corresponding model is enabled, may receive your text prompts, necessary conversation context, knowledge-base retrieval excerpts, and supported image or file content for content understanding and generation.

We do not send your password, SMS verification code, or complete account credentials as model request fields. However, if you include your name, contact details, identity information, work materials, or other personal information in a prompt, conversation, image, video, audio file, or other file, that information will be sent as part of the submitted content. Do not submit sensitive personal information, or another person's personal information, unless it is necessary for the current AI request.

The data is used only to process your request, return results, protect service security, and meet necessary legal obligations. We do not authorize these providers to use the data for advertising, marketing, profiling, or independent model training unrelated to the App. Through service agreements, access controls, encrypted transmission, and data minimization, we require them to provide a level of data protection no lower than this Policy and applicable law. Providers may retain request data for the period necessary under applicable law and their service agreements.

The providers' published privacy rules are available at:

• Alibaba Cloud Model Studio: https://terms.alicdn.com/legal-agreement/terms/privacy_policy_full/20230801173543354/20230801173543354.html

• Zhipu AI: https://docs.bigmodel.cn/cn/terms/privacy-policy

• DeepSeek: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html

• Kimi: https://platform.kimi.com/docs/agreement/userprivacy

You can prevent future transmission by no longer using features that require third-party AI processing. You may also delete the relevant conversation, delete your account, or contact us through Section 11 to withdraw consent or request deletion. Withdrawal may make the relevant AI features unavailable and does not affect processing performed before withdrawal based on your consent.

We will not transfer your personal information to third parties unless we obtain your consent or a transfer is required for merger, acquisition, asset transfer, or similar reasons. In such cases, we will require the new recipient to continue to follow this policy.

We only publicly disclose personal information with your consent or when required by laws, regulations, regulators, or judicial authorities.

Section 6. Storage and protection

Personal information collected and generated in the People's Republic of China will be stored in China. If cross-border transfer is required, we will obtain separate consent and perform the procedures required by law.

We retain personal information only for the period necessary to achieve service purposes, fulfill legal obligations, or resolve disputes. After that period, we will delete or anonymize the information unless otherwise required by law.

We use industry-standard security measures, including transmission and storage encryption, access control, security audits, data classification management, and separation of development and operations environments.

Section 7. Sensitive personal information

Sensitive personal information involved in the App may include biometric information, identity certificate information, minors' information, and sensitive data that may appear in uploaded images or videos.

We will process sensitive personal information only after separate notice and separate consent where required, and we will apply stricter protection measures.

Section 8. Your rights

You may access, copy, correct, supplement, delete, withdraw consent for, cancel your account related to, obtain a copy of, request portability of, and request explanations about your personal information, subject to applicable laws.

We will respond to your request within 15 working days after verifying your identity. Complex requests may require additional time, and we will inform you of the expected timing.

You can also permanently delete your account in the App through My > Settings > Account and Security > Delete Account. After you complete password verification or SMS verification for your bound phone and confirm again, your sign-in permission is revoked immediately. Your account and product data, including chat messages, memories, uploaded files, feedback, device data, and session data, start permanent cleanup and cannot be restored. If a temporary failure occurs, cleanup continues automatically while the account remains locked. We do not send an SMS or email completion notice. We keep only de-identified network security logs for 180 days for security and legal obligations; they cannot be used for product analytics and are deleted when the period expires.

Section 9. Advertising

We do not share your personal information or device identifiers with third-party advertising platforms for personalized commercial advertising. If this changes in the future, we will obtain your consent separately.

Section 10. Protection of minors

Minors who are 14 years old or above should read this policy and use the App under guardian guidance. Minors under 14 years old should use the App with guardian authorization.

If a guardian finds that we collected a minor's personal information without guardian consent, the guardian may contact us to request deletion.

Section 11. Updates and contact information

We may revise this policy from time to time. For material changes, we will notify you through prominent in-app notices, pop-ups, or other reasonable methods, and request consent again where required.

If you have questions, suggestions, complaints, or requests regarding this policy or your personal information, please contact us:

• Operator: Shandong Aotai Electric Co., Ltd.

• Registered address: No. 282 Bole Road, Jinan High-tech Development Zone

• Email: aotaimarket@aotaidianqi.com

• Customer service hotline: 400-0531-772