Privacy Policy
Effective: 2026-10-02 Version: v2.0 Issued by Dongguan Jinnuo Software Co., Ltd. ("we", "us")
Dear user, thank you for trusting Jinnuo Cloud and Jinnuo ERP. We attach great importance to your personal information and handle it under the principles of lawfulness, legitimacy, necessity and good faith. Please read this policy carefully, in particular the terms in bold concerning your material rights. If you have any questions, please contact us per "Section 11 – Contact Us". If you disagree with any part of this policy, please discontinue use. By starting to use our services, you are deemed to have read, understood and accepted this policy.
If you are a minor under the age of fourteen, please read this policy together with a guardian and use the services only with the guardian's consent (see "Section 9 – Protection of Minors").
1. Introduction and Scope
1.1 This policy is formulated pursuant to the Personal Information Protection Law, Data Security Law, Cybersecurity Law of the People's Republic of China and related regulations, and constitutes an integral part of the Terms of Service with equal legal effect.
1.2 Definitions. "Personal information" means information relating to an identified or identifiable natural person recorded electronically or otherwise; "sensitive personal information" means information whose leakage or unlawful use may infringe human dignity or endanger personal or property safety, including mobile numbers and login IP addresses, marked with [Sensitive] in this policy for your attention; "de-identification" means processing rendering a subject unidentifiable and irreversible; "anonymization" means processing rendering a subject unidentifiable, irreversible and permanently unlinkable to any individual.
1.3 This policy applies to the Jinnuo Cloud website (www.goldword.cn) and Jinnuo ERP mobile (App, WeChat Mini Program, H5) and web products. Please note that for other individuals' information contained in business data you enter or upload (e.g., employee or customer contacts), you, as the handler of such information, are kindly requested to obtain the relevant individuals' consent and assume corresponding responsibility; we process such data solely as your entrusted party (see "Section 4 – Entrusted Processing"). Thank you for your understanding.
2. How We Collect and Use Your Personal Information
2.1 Information necessary for basic functions. To provide stable and reliable ERP services, we collect the following. If you choose not to provide it, the related functions may not work properly, and we appreciate your understanding:
| Scenario | Personal information | Purpose | Required |
|---|---|---|---|
| Registration, login | [Sensitive] Mobile number, SMS code, login password | Account creation, identity verification, anti-abuse | Yes |
| Tenant onboarding | Company name, contact name | Tenant creation, service provisioning, contract performance | Yes |
| Authentication & security | [Sensitive] Login IP, device model, OS version, app version, operation logs | Risk control, security audit, troubleshooting | Yes |
| WeCom/DingTalk SSO (optional) | [Sensitive] Mobile number, name, department, CorpId | Password-free login, enterprise attribution, directory sync | No (not collected unless you use it) |
2.2 Information for extended features. Collected only when you actively use the following features, entirely at your discretion. You may decline or withdraw authorization in system settings; extended features may then be unavailable, but basic bookkeeping and approval functions remain unaffected:
| Scenario | Personal information | Purpose |
|---|---|---|
| Invoice OCR, attachments, avatar | Photos taken with the camera, images selected from the album | Invoice recognition, attachment archiving, avatar display |
| Demo requests (website form) | Name, [Sensitive] phone number, company, requirements | Sales contact and demo follow-up (only for matters you initiate) |
| AI assistant (tenants with AI enabled) | Conversation input | Passed through to the tenant's own configured model |
2.3 A note on sensitive information. Items marked [Sensitive] above are sensitive personal information, processed only where truly necessary and under strict safeguards. By accepting this policy, you grant separate consent to our processing of such sensitive personal information, for which we are grateful. We do not proactively collect ID numbers, bank card numbers, biometrics (face/fingerprint) or precise geolocation. Should business needs require such collection in the future, we will seek your separate consent via a prominent pop-up; nothing will be collected without it.
2.4 You understand and agree that, pursuant to applicable laws, we may process your personal information without further consent where: (1) necessary to conclude or perform a contract to which you are a party; (2) necessary to perform statutory duties or obligations; (3) necessary to respond to public health emergencies; (4) personal information already lawfully disclosed by you or otherwise lawfully disclosed is processed within a reasonable scope; or (5) other circumstances prescribed by laws or administrative regulations.
3. System Permission List
3.1 Following the principle of data minimization, we request system permissions only where necessary for the functions in Section 2. Each permission can be granted separately at time of use and revoked at any time in system settings — we respect every choice you make. No permission is enabled without your authorization:
| Permission | Platform | Purpose | Effect of denial |
|---|---|---|---|
| Camera | App / Mini Program | Invoice OCR, attachment photos | Photo upload unavailable; album selection still works |
| Album / storage | App / Mini Program | Selecting attachments, saving exported reports | Cannot select or save image files |
| Microphone | App (declared on Android) | Reserved for future voice input; not invoked in the current version | No current effect; separate consent will be sought if ever enabled |
| Network | All | Syncing business data | Online services unavailable |
3.2 The WeChat Mini Program follows WeChat platform rules and currently requests none of the private-information APIs under requiredPrivateInfos. Please use it with confidence.
4. Sharing and Entrusted Processing
4.1 Third-party SDK and service list. To keep services running reliably, we have prudently integrated the following third parties, sharing only the minimum information necessary, under data processing agreements requiring safeguards no weaker than this policy:
| Third party | Developer | Purpose | Information shared | Privacy policy |
|---|---|---|---|---|
| Alibaba Cloud (ECS/SMS) | Alibaba Cloud Computing Ltd. | Cloud hosting, SMS verification | [Sensitive] Mobile number, server logs | https://terms.aliyun.com/legal-agreement/terms/privacy_policy |
| WeCom | Tencent Technology (Shenzhen) Co., Ltd. | SSO, push, directory sync | Name, [Sensitive] mobile number, department | https://work.weixin.qq.com/about/privacy |
| DingTalk (incl. H5 JSAPI) | Alibaba DingTalk (China) Information Technology Co., Ltd. | SSO, approval reminders, directory sync | Name, [Sensitive] mobile number, department | https://page.dingtalk.com/wow/dingtalk/act/privacypolicy |
| Tenant-configured AI model | Per the tenant's chosen vendor | AI Q&A (AI-enabled tenants only) | Conversation content (passed through, never retained for training) | Per the vendor's published policy |
4.2 Entrusted processing. Business data you enter (including others' personal information therein) belongs to you. We process it solely as your entrusted party to provide bookkeeping, approval and reporting services, strictly within that mandate — never reused commercially, never used for model training or profiling. Please rest assured.
4.3 Sharing, transfer, disclosure. Except as listed in 4.1 or otherwise required by law, we do not share, transfer or publicly disclose your personal information. Should a merger, split or dissolution require a transfer, we will inform you of the recipient's name and contact details in advance and require continued compliance with this policy; any change of processing purpose will be subject to your renewed consent.
5. Cookies and Similar Technologies
5.1 The website (H5/Web) uses necessary cookies and local storage to maintain login sessions and remember preferences — essential for operation, never for tracking or profiling. You may clear cookies in browser settings, though this may end the session and require re-login; we apologize for any inconvenience. Mobile apps and Mini Programs do not use cookie tracking.
6. How We Store Your Information
6.1 Location. Your personal information is stored on Alibaba Cloud servers within mainland China and does not leave the country in principle. Should cross-border transfer become necessary (e.g., at your request for overseas access), we will seek your separate consent and conduct a security assessment in accordance with the law, fully protecting your right to be informed.
6.2 Retention. Data is kept for the account lifetime plus the statutory retention period. Accounting vouchers and books follow the Measures for the Administration of Accounting Archives; operation logs are kept for no less than six months as required by cybersecurity laws. Upon expiry, data is promptly deleted or anonymized (unless otherwise prescribed by law).
7. How We Protect Your Information
7.1 We take technical and managerial measures commensurate with the risks: HTTPS in transit; salted irreversible password hashes; AES-encrypted tenant API keys; RBAC-based access control with multi-tenant data isolation; end-to-end operation audit trails. We continuously improve our security, and do our utmost to safeguard your information.
7.2 Please understand that no security technology can be absolutely risk-free despite reasonable and effective measures. We maintain an incident response plan: in the unfortunate event of a security incident, we will immediately respond, take remedial action, and notify you of the situation, impact and remedies as required by law; where individual notification is impracticable, a public announcement will be issued to minimize impact.
8. Your Rights
8.1 We fully respect your rights as a personal information subject. Exercise them via the channels below; we will respond within 15 business days (or explain in advance if more time is exceptionally needed):
| Right | How to exercise |
|---|---|
| Access, copy, correct, supplement | Self-service in App "Mine → Settings" or web "Profile" |
| Delete personal information | Same self-service for documents/records; account-level deletion see deregistration |
| Withdraw consent | Disable the permission or unbind SSO; features relying on it may be limited, prior lawful processing unaffected |
| Deregister account | App "Mine → Settings → Deregister", web "Profile → Deregister", or email request; data deleted or anonymized afterwards (except statutory retention) |
| Complaints | Email 613888866@qq.com or call per "Section 11"; we will handle your request wholeheartedly |
8.2 Please understand that certain information must remain during the statutory retention period after deregistration (e.g., accounting archives, audit logs); it will be deleted or anonymized upon expiry. Thank you for your understanding.
9. Protection of Minors
9.1 Our services are primarily designed for business management scenarios and are not directed at minors. If you are a child under fourteen, please read this policy with a guardian and use the services only with the guardian's express consent; guardians may contact us at any time to access, correct or delete relevant information, and we will cooperate actively. Should we discover inadvertently collected children's information, we will delete it promptly. We appreciate guardians' supervision and understanding.
10. Policy Updates
10.1 This policy may be updated as laws evolve or business develops; updates will be announced on the website with revised dates and version numbers. For material changes, we will seek your renewed consent via in-app pop-ups or prominent announcements — thank you for your understanding and support: (1) material changes to purposes, methods or categories of processing; (2) changes to sensitive-information rules; (3) changes to sharing/transfer recipients; (4) material changes to how you exercise your rights; (5) changes to contact or complaint channels. Continued use constitutes acceptance of the updated policy.
11. Contact Us
- Developer / handler: Dongguan Jinnuo Software Co., Ltd.
- Address: Building 12-1304, Zhonghui Jinshiboshan, Huangjiang, Dongguan, Guangdong, China
- Email: 613888866@qq.com
- Hours: Mon–Sat 9:00–18:00
- For any questions, comments or suggestions about this policy or information protection, please reach us through any channel above and we will reply promptly. If unsatisfied with our response, you may also report to cyberspace, industry-information-technology or market-regulation authorities or consumer organizations; we respect and cooperate with such supervision.
Appendix: Version History
- v2.0 (2026-10-02): Comprehensive revision following leading-industry practice — added information inventory, permission list, third-party SDK list, separate consent and minor-protection clauses, with more standardized wording.
- v1.0 (2026-10-02): Initial release.
