Privacy Policy

1. How We Collect and Use Your Information

1.1 Information We Collect Directly from You

To ensure your normal use of the GPUNexus platform (https://gpunexus.com), we collect, in the following scenarios, information you voluntarily provide when using the services, or information we obtain through automated means (collectively, “User Information”):

1.1.1 Registration, Verification and Login

• (1) You can register for / log in to a platform account via your mobile phone number or a third-party platform (such as WeChat). If you use third-party login, we will obtain your public information on that platform (such as nickname, avatar, etc.).
• (2) If you are an individual user, you may need to provide your real name, ID card number, mobile phone number, and the card number of a China UnionPay member institution Class-I bank account or a credit card number to complete real-name verification.
• (3) If you are an enterprise user, you may need to provide the enterprise name, unified social credit code, registration/qualification certificates of the legal person or organization (including the business license, organization code certificate, legal-person registration certificate, etc.), a power of attorney (stamped with the entity's official seal), information of the legal representative or authorized person, corporate account information, and enterprise contact information.
• (4) During real-name verification, we may need to entrust a cooperating third-party verification agency to verify your true identity, and that agency will report the verification result back to us. If you do not provide such information, you will be unable to normally use our services.

1.1.2 During Use of the Services

• (1) To ensure the safe and stable operation of the services, we may collect your device information (such as device model, operating system, IP address, time zone, language), network access method, log information, usage frequency, crash records, usage details and related performance data.
• (2) When you participate in platform activities (such as surveys, lucky draws, etc.), we may collect your account information, contact details, address, etc. in order to contact you and issue rewards.
• (3) Consultation records, fault-report records, service tickets, troubleshooting processes, etc. generated when you use the platform services will be used for service optimization and issue response.
• (4) If you apply for offline delivery, product testing, domain-name services, or certificate-center services, we will collect and use the necessary information in accordance with applicable laws and regulations.

1.1.3 User Information Obtained from Third Parties

We may obtain certain information about you from affiliates and partners, but only on a lawful, necessary and secure basis, and for legitimate purposes such as improving the service experience and preventing fraud.

1.2 Changes to the Purposes of Collecting and Using User Information

If business development requires adjusting the purposes for which User Information is collected and used, we will obtain your consent again through prominent means such as on-page prompts, interaction flows, and agreement confirmation, unless the change is directly and reasonably related to the original purpose.

1.3 Business and Interaction Data

• 1.3.1 Data generated when you interact, through this platform, with open-source models, third-party websites, software, applications or services (such as text, images, audio, video, etc.) constitutes your business and customer data (“Interaction Data”), of which you retain full ownership.
• 1.3.2 We act solely as a neutral technology service provider, processing Interaction Data strictly according to your instructions, and will not access, use or disclose it without authorization, except where laws and regulations provide otherwise or where it is necessary for troubleshooting.
• 1.3.3 You must ensure that the source of the Interaction Data is lawful. Where personal information is involved, you must obtain the relevant authorization in accordance with the law. You shall bear full responsibility for all consequences arising from data you provide that violates laws and regulations, departmental rules, national policies, or infringes the rights of others.

1.4 AI-Generated Content Notice

1.4.1 When you use generative AI features such as AI chat and document generation, your input (e.g., questions, instructions, uploaded images) will be transmitted to the corresponding model service provider to generate responses. We transmit only the content necessary to provide the feature. Relevant algorithm filing information can be verified in the algorithm filing system of the Cyberspace Administration of China (beian.cac.gov.cn).

1.4.2 AI-generated content is automatically produced by artificial intelligence models and may be inaccurate, incomplete, or not as expected. It does not represent the views or position of the platform. Please verify before use.

1.4.3 To comply with the Measures for Labeling Artificial Intelligence-Generated Synthetic Content and relevant mandatory national standards, the platform will, where generated content is presented, indicate that the content is AI-generated in an appropriate manner, and will continue to improve its labeling approach as the products evolve. Such labeling information does not involve your personal identity information.

1.4.4 If you use models running locally on your device through the platform's client, your input and the generated results will be processed on that device and will not be uploaded to the platform's servers.

1.4.5 You may access, copy, rectify, and delete your generated content in accordance with the law. Once deleted, the corresponding labeling information will also be deleted.

1.5 Device Permissions

To enable the relevant features, our application requests the device permissions listed below. All permissions are invoked only within their corresponding functional scenarios. You may decline them; declining will only affect the corresponding feature and will not prevent you from using other features normally. You may also revoke any granted permission at any time through your device settings:

• Internet permission (INTERNET): establishes network connections used for core functions such as account login, online model services and model downloads;
• Network state permissions (ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE): detect network connectivity and Wi-Fi status, used for download-task scheduling and offline prompts;
• Camera permission (CAMERA): used to capture images for recognition and analysis when you actively use AI features such as image recognition;
• Notification permission (POST_NOTIFICATIONS): used for foreground-service status (compute sharing, model download progress) and message alerts;
• Foreground service permissions (FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC): used to keep compute sharing and model downloads running in the background;
• Wake lock permission (WAKE_LOCK): keeps the device from sleeping during background tasks such as compute sharing and model downloads;
• Battery optimization exemption permission (REQUEST_IGNORE_BATTERY_OPTIMIZATIONS): used to keep long-running background compute sharing online; you may decline, but doing so may affect the stability of background sharing;
• Storage permissions (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, Android 9 and below only): read and temporarily store images and model files.

2. How We Store Your Information

2.1 Place of Storage

In accordance with applicable laws and regulations, User Information collected and generated in the course of operating this website and related services domestically will be stored within the territory of the People's Republic of China.

2.2 Retention Period

We retain your information only for the period necessary to achieve the purposes of the services, including completing transactions, fulfilling legal obligations, and handling complaints. After you delete your account or your authorization expires, we will delete or anonymize the information, except where laws and regulations impose mandatory requirements otherwise.

3. How We Share, Transfer and Publicly Disclose Your Information

3.1 Sharing

We will not share your User Information with third parties, except in the following circumstances:

• (1) With your explicit consent;
• (2) To fulfill legal obligations or to comply with requirements of judicial or administrative authorities;
• (3) Sharing necessary information with affiliates or authorized partners to enable service functions (such as payment, real-name verification, customer service), sharing only the necessary scope, with partners bound by strict data-protection agreements;
• (4) For purposes such as security risk control and anti-fraud, sharing certain non-sensitive information with the necessary institutions.

3.2 Transfer

We will not transfer your personal information to any company, organization or individual, except in the following cases:

• (1) With your explicit consent or authorization;
• (2) Where required by applicable laws and regulations, legal procedures, or mandatory administrative or judicial requirements;
• (3) Due to a change of the platform's operating entity, merger, acquisition or bankruptcy liquidation, provided the successor entity undertakes to continue performing this Privacy Policy or to provide equivalent protection. If bankruptcy occurs with no data successor, we will delete your information.

3.3 Public Disclosure

We will publicly disclose your information only in the following cases:

• (1) With your explicit consent or based on your voluntary choice;
• (2) To protect the personal or property safety of you or the public from harm, we may disclose information about you based on applicable laws or the platform's related agreements and rules.

3.4 Exceptions Where Authorization Is Not Required

In the following circumstances, in accordance with laws and regulations and relevant national standards, our collection and use of your personal information does not require your prior authorized consent:

• (1) Related to national security or national defense;
• (2) Related to public security, public health or major public interests;
• (3) Related to criminal investigation, prosecution, trial and execution of judgments;
• (4) Necessary to protect the life, property or other major legitimate rights and interests of you or other individuals, but where it is difficult to obtain the individual's consent;
• (5) Personal information you have disclosed to the public on your own;
• (6) Collecting personal information from lawfully publicly disclosed information, such as lawful news reports and government information disclosure channels;
• (7) Necessary for concluding and performing a contract at the request of the personal information subject;
• (8) Necessary for maintaining the safe and stable operation of the software and related services, such as discovering and handling faults of the software and related services;
• (9) Necessary for conducting lawful news reporting;
• (10) Other circumstances prescribed by laws and regulations. Under the law, where shared or transferred personal information has been de-identified and it is ensured that the data recipient cannot restore or re-identify the personal information subject, such conduct does not constitute external sharing, transfer or public disclosure of personal information, and the storage and processing of such data will not require separate notice to or consent from you.

3.5 Third-Party SDK Disclosure

To implement the relevant features, we integrate the following third-party SDKs, whose personal-information collection behavior has undergone a security assessment. Please review the developer, purpose, scope of information collected and privacy-policy link of each SDK:

• (1) WeChat Open Platform SDK — developer: Shenzhen Tencent Computer Systems Co., Ltd.; purpose: logging in by scanning a WeChat QR code; information collected: openid, nickname and profile picture (obtained upon your active authorization); privacy policy: https://weixin.qq.com/cgi-bin/readtemplate?t=weixin_privacy.
• (2) Alipay App Payment Client SDK — package name: com.alipay.sdk; developer: Alipay (Hangzhou) Information Technology Co., Ltd.; purpose: to provide Alipay payment within the app, safeguard the security of your account and funds and the stable operation of payment services, fulfil statutory obligations such as anti-money laundering, counter-terrorist financing and anti-telecom-fraud, and enable network link selection and optimization; information collected: AndroidID, OAID, IDFV, sensor information (sensor list), device screen density, carrier information, Wi-Fi parameters and network type; privacy policy: https://opendocs.alipay.com/open/54/01g6qm#%E6%94%AF%E4%BB%98%E5%AE%9D%20App%20%E6%94%AF%E4%BB%98%E5%AE%A2%E6%88%B7%E7%AB%AF%20SDK%20%E9%9A%90%E7%A7%81%E6%94%BF%E7%AD%96.
• (3) Alibaba Cloud SMS — developer: Alibaba Cloud Computing Co., Ltd.; purpose: delivery of mobile-phone SMS verification codes; information collected: phone number and sending IP; privacy policy: https://www.aliyun.com/agreement/product/sms.

4. How We Protect the Security of Your Information

We adopt industry-standard technical measures such as encryption, anonymization and access control to protect your information, establish internal security-management systems and emergency-response plans, and strictly restrict data-access permissions. In the event of a security incident such as information leakage, we will notify you in a timely manner as required by law and take reasonable disposal measures. Please understand, however, that under the internet environment, due to technical limitations and various possible malicious means, information security carries inherent risks; you should also take reasonable measures (such as setting complex passwords, changing them regularly, and not disclosing your account password or other information to others) to protect the security of your own account.

5. How We Manage Your User Information

We attach great importance to the management of User Information, safeguarding your right to know, right to control and right to remedy with respect to your information in accordance with the law, to effectively maintain personal privacy and information security.

5.1 Your Rights in Information-Processing Activities

5.1.1 Generally, you may at any time access, copy, correct, view, modify or delete the User Information you have voluntarily provided.

5.1.2 If you find that our collection or use of your personal information violates laws or administrative regulations, or violates your agreement with us, you may contact us and request deletion of the personal information collected under such violation.

5.1.3 Requests to Delete Information in Specific Circumstances

When any of the following circumstances occurs, you may submit a request to us to delete User Information:

• (1) The purpose of processing the information has been achieved, can no longer be achieved, or is no longer necessary;
• (2) Our processing of User Information violates laws and regulations or your agreement with us;
• (3) We collected or used your information without your consent;
• (4) We cease to provide the products or services, or the retention period of the User Information has expired;
• (5) You withdraw your authorized consent;
• (6) If we no longer provide services to you;
• (7) Other circumstances prescribed by laws and administrative regulations.

5.2 Flexible Adjustment of the Scope of Authorization

Apart from the basic User Information that must be collected to realize business functions, for additional User Information collected, you may choose to withdraw authorization or adjust the scope of authorization. You may also withdraw our authorization to continue collecting all information at once by deleting your account. Please note that after consent or authorization is withdrawn, the corresponding service functions may no longer be usable, but User Information previously processed based on the authorization is unaffected.

5.3 Response to Requests

5.3.1 You are entitled to delete your account and to report or file complaints. To delete your account, go to “Settings → Account → Account Security → Delete Account” in the app, follow the on-screen prompts to complete identity verification and submit the deletion request; your personal information will be deleted within 15 business days after the account is deleted. To safeguard security, you may need to provide a written request and prove your identity by other means. For reasonable requests from you, we generally do not charge a fee. However, for repeated requests that exceed a reasonable limit, we may charge a certain cost according to the specific circumstances. We may refuse unfounded repeated requests that require excessive technical means, pose a risk to the legitimate rights and interests of others, or are impractical.

5.3.2 In the following circumstances, we will be unable to respond to your request:

• (1) Directly related to national security or national defense;
• (2) Directly related to public security, public health or major public interests;
• (3) Directly related to criminal investigation, prosecution, trial and execution of judgments;
• (4) There is sufficient evidence showing that you act in subjective bad faith or abuse your rights;
• (5) Necessary to protect the life, property or other major legitimate rights and interests of you or other individuals, but where it is difficult to obtain the individual's consent;
• (6) Responding to your request would cause serious harm to the legitimate rights and interests of you or other individuals or organizations;
• (7) Involving trade secrets.

5.4 Handling upon Cessation of Operations

If we cease operations due to business adjustments or other reasons, we will notify you in advance by means such as announcements and notices, immediately stop collecting your information, and delete or anonymize the User Information we hold.

6. Protection of Minors

• 6.1 This platform mainly provides services to enterprise and professional users. The services are of a professional, productive nature and do not involve entertainment, social or other addictive content aimed at minors; in principle, this platform does not provide services to minors.
• 6.2 This platform has formulated and implements the Minors Management System, identifying and verifying user identity through technical means such as mobile-phone-number registration and real-name verification: if a user is identified as a minor under 14 years of age, this platform will not provide the relevant services in accordance with the law; if a user is identified as a minor aged 14 or over but under 18, the relevant services may be used only with the consent of their guardian.
• 6.3 This platform continuously adopts management systems and technical measures to prevent minors from becoming overly dependent on or addicted to the relevant services, including function restrictions, usage reminders and content control, and strictly protects minors' personal information, not using minors' information for model training or commercial purposes.
• 6.4 If we discover that we have collected minors' information without guardian consent, or if a guardian submits a relevant request, we will promptly verify and delete or anonymize the relevant information; guardians may contact us through the contact details publicized in this agreement.

7. Use of Cookies and Similar Technologies

We may use cookies and similar technologies to optimize the access experience, understand user habits and analyze usage preferences, etc. In this process, we may send one or more cookies or anonymous identifiers to your device. You can manage or disable cookies through your browser settings, but disabling them may affect the optimal service experience. We commit not to use the information collected by such technologies for purposes other than those described in this Policy.

8. Updates to This Privacy Policy

We may revise this Policy based on business development, regulatory requirements, etc. The revised Policy will be notified to you via platform announcements, SMS push or other appropriate means. If you continue to use GPUNexus platform products or services after this Privacy Policy is revised, it indicates that you have fully read, understood and accepted the revised Privacy Policy and are willing to be bound by the revised Privacy Policy.

9. Scope of Application

This Privacy Policy applies to all products, services, features and solutions already provided by this platform or that may be launched from time to time in the future. If you use third-party services through this platform, your information will be governed by that third party's privacy policy rather than this Privacy Policy. If you use this platform's technology services to provide services to your own users, the data generated from your business cooperation with your customers belongs to you, and this Privacy Policy does not substitute for the privacy policy between you and your users.

10. Contact Us

If you have any questions about this Privacy Policy, please contact the GPUNexus platform through the following channels, and we will strive to respond to and handle your questions within a reasonable time:

• Company name: Chengfang Technology (Beijing) Co., Ltd.
• Company email: data@chengfangtech.com

Appendix: Minors Management System

• Article 1 (Purpose and Scope of Application) To implement the Law of the People's Republic of China on the Protection of Minors, the Regulations on the Protection of Minors in Cyberspace, and the regulatory requirements of cyberspace authorities concerning generative-AI services, and to safeguard the legitimate rights and interests of minors, this platform formulates this System. This System applies to all products and services of this platform (including intelligent agents, MaaS services and mobile-side local models).
• Article 2 (Applicable Audience) This platform mainly serves enterprise and professional users; the services are of a professional and productive nature and, in principle, do not provide services to minors.
• Article 3 (Identification of Minors) This platform verifies user identity through real-name technical means such as mobile-phone-number registration and real-name verification: authentication and services will not be provided to those under 14; those aged 14 or over but under 18 may use the services only with guardian consent.
• Article 4 (Addiction Prevention and Content Management) This platform does not provide minors with gamified, entertainment-oriented or virtual-intimacy services prone to causing addiction; it applies function restrictions, time reminders and content control to minors' use, and continuously monitors and handles content that may affect minors' physical and mental health.
• Article 5 (Protection of Personal Information) This platform applies minimization to the collection of minors' personal information, adopts security measures such as encryption and de-identification, and does not use minors' information for model training, advertising or marketing purposes.
• Article 6 (Guardians' Rights) Guardians have the right to query, correct and delete information about the minors under their guardianship through the contact details publicized by this platform; upon receiving a guardian's request or proactively discovering that minors' information was collected without guardian consent, this platform promptly verifies and deletes or anonymizes it.
• Article 7 (Supervision and Responsibility) This platform designates dedicated personnel responsible for the protection of minors, periodically checks the implementation of this System, cooperates with the requirements of regulatory authorities, and continuously improves the mechanisms for protecting minors.