Tangren IM Privacy Policy

1. Scope and Data Processing Roles

This policy applies to processing within the Tangren IM app and the server-side processing necessary to operate the app. Information already collected by an enterprise customer before adopting Tangren IM, websites or systems independently operated by an enterprise customer, and third-party services accessed via external links are not directly governed by this policy.

If you use Tangren IM as enterprise customer-service staff, your account may be created, assigned, suspended, or deleted by your enterprise, and your enterprise administrator may view account status, work records, and customer conversations in accordance with its internal permissions. Enterprises should provide applicable notices and obtain the necessary authorizations before collecting personal information from employees or end customers.

2. Information We Process

We do not require you to provide precise geolocation, contacts, call logs, health, financial-payment, or government ID information to use Tangren IM's core customer-service communication features. If a future version genuinely requires a new processing category, we will update this policy first and obtain separate authorization where required by law or platform rules.

3. Device Permissions and How They Are Invoked

The app requests permissions only when you trigger the corresponding feature. Declining non-core permissions will not affect features that do not depend on them, such as text-based customer service, and you may withdraw authorization at any time in your device system settings.

If the actual permissions shown by the Android or iOS system differ from this section, please do not grant permissions unrelated to core functions for now, and contact us via the email address at the end of this policy.

4. Purposes and Legal Bases for Processing

We use information only to the extent necessary to achieve the following purposes:

• Perform the service agreement by providing login verification, enterprise member permissions, customer conversations, message and attachment transfer, cross-device synchronization, and notifications;
• Process customer communication data on the lawful instructions of enterprise customers;
• Protect the security of accounts, enterprise customers, chat participants, and the service, including preventing fraud, spam, unauthorized access, and other abuse;
• Diagnose faults, maintain system availability, and analyze performance in an aggregated or de-identified manner;
• Respond to inquiries, complaints, and data-rights requests;
• Comply with applicable laws, court orders, or regulatory requirements.

In regions where applicable data protection law requires a legal basis to be stated, we process information based on the performance of a contract, compliance with legal obligations, balanced legitimate interests, or, where necessary, your consent. Your withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

We do not sell chat content, device identifiers, or usage records to third parties, do not use them for cross-company or cross-app behavioral profiling, and do not serve targeted advertising based on personal data.

5. Sharing, Delegated Processing, and External Disclosure

We provide information to recipients only in the following necessary situations, and limit their processing through contracts, permission controls, and security measures:

• Your affiliated enterprise customer and its administrators: to assign customer-service tasks, manage member permissions, view and handle that enterprise's customer conversations, and conduct compliance audits and service-quality management.
• Infrastructure processors: cloud servers, databases, object storage, content delivery, and network-security providers, as necessary for hosting, backup, attachment transfer, and defense against attacks.
• Platform and push services: Apple Push Notification service (APNs), Firebase Cloud Messaging (if actually used by the Android version), or device-manufacturer push services, to deliver message alerts to your device. Push content will minimize sensitive information as much as possible.
• Diagnostic and technical-support providers: only when the app actually integrates and enables the relevant services, to process crash, performance, and fault information; such information must not be used for advertising profiling.
• Professional advisors and lawful recipients: audit, legal, or security advisors bound by confidentiality obligations, as well as competent authorities where we have reasonable grounds to believe disclosure is legally required.
• Successors in business changes: in the event of a merger, acquisition, reorganization, or asset transfer, we will require the successor to continue complying with this policy and provide advance notice as required by law.

Except in the above situations, at your explicit instruction, or as otherwise required by law, we will not share personally identifiable information with unrelated third parties. We require providers that process information on our behalf to offer protection no lower than described in this policy and to process only in accordance with written instructions.

6. Cross-Border Processing

Depending on the enterprise customer's deployment region, server locations, and support needs, Tangren IM may process information outside your country or region. Data protection laws may differ across regions. Where cross-border transfers occur, we will adopt contractual protections, transfer impact assessments, access restrictions, encryption, or other effective safeguards in accordance with applicable law. You may ask about the main processing regions and safeguards relevant to your version via the contact email.

7. Retention Periods, Account Closure, and Data Deletion

We retain information for the shortest period necessary to achieve the purposes described in this policy, taking into account enterprise customer configuration, contractual requirements, security needs, and applicable law:

• Account and enterprise data: retained while the account is active; after account deletion, in principle deleted or de-identified from active systems within 30 days.
• Customer communication content: retained in accordance with the affiliated enterprise's lawful retention settings or contract term; after the enterprise relationship ends, active copies are in principle deleted within 90 days where there is no continued retention obligation.
• Security, login, and diagnostic logs: usually no longer than 180 days; may be extended when needed to investigate security incidents, disputes, or fulfill legal obligations.
• Backup copies: cleared in isolation according to the backup rotation cycle, usually no longer than 90 days after a deletion request is completed, during which they are used only for disaster recovery with restricted access.
• Rights-request and complaint records: retained for the period necessary to demonstrate that requests were handled and to fulfill legal obligations.

You may initiate deletion via the account deletion entry provided in the app; you may also visit the Tangren IM Account and Data Deletion instructions, or submit a request to ucvip168@gmail.com using your registration/work email. We will verify the requester's identity and generally complete the process and notify you of the outcome within 30 days.

If the account was created by an enterprise, we may need to verify authorization with that enterprise's administrator and assist the enterprise in handling the data under its control. Merely disabling or freezing an account is not equivalent to deletion. Limited records that must be retained for tax, litigation, anti-fraud, security, or other statutory obligations will be isolated, restricted in use, and deleted after the statutory period expires.

8. Information Security

We adopt technical and organizational measures appropriate to the risk, including transmission encryption, access permission controls, identity verification, operation logs, vulnerability remediation, backup recovery, and confidentiality and security requirements for providers. No network transmission or storage can be guaranteed to be absolutely secure; in the event of a security incident that may pose a higher risk to your rights, we will notify affected individuals and competent authorities in accordance with applicable law and take remedial measures.

Please protect your account credentials, avoid sharing accounts, and immediately notify your enterprise administrator and us upon discovering abnormal logins, message leaks, or device loss.

9. Your Rights and Choices

Depending on the applicable law in your location, you may have the right to:

• Know and access the personal information we process and obtain a copy;
• Correct inaccurate or incomplete information;
• Request deletion of your account and related information, or restrict or object to specific processing;
• Withdraw consent-based processing and system permissions;
• Where applicable, request the information you provided in a portable format;
• Lodge a complaint with the competent data protection authority in your jurisdiction.

You can manage available options in the app's account or privacy settings, withdraw camera/microphone/photo/notification permissions in system settings, or make a request via the email address at the end of this policy. We may require identity verification proportionate to the risk of the request. We will not discriminate against you for lawfully exercising your privacy rights.

10. Minors

Tangren IM is a business tool for enterprises and authorized staff. It does not target children and is not intended for self-registration by anyone below the legal working or contracting age in their location. We do not knowingly collect children's information for advertising purposes. If you believe a child has provided us with information without proper authorization, please contact us, and we will verify and take appropriate measures such as deletion.

11. Updates to This Policy

We may update this policy due to changes in features, data practices, laws, or platform rules. After an update, we will indicate the new effective date on this page; if the change materially affects your rights or expands the use of personal information, we will notify you before it takes effect through in-app prompts, notices, or other reasonable means, and obtain consent again where necessary. We will not retroactively use personal information for incompatible new purposes without the necessary notice or authorization.

12. Contact Us

If you have questions, complaints, or rights requests regarding this policy, Tangren IM's data processing, or account deletion, please contact:

To help us respond, please indicate "Tangren IM Privacy Request" in the email subject and state your account identifier, affiliated enterprise (if applicable), request type, and the minimum information necessary to verify your identity. Please do not send passwords, full ID documents, or sensitive information unrelated to the request via ordinary email.