Document

SERES APP Privacy Policy

Introduction

respects and protects the security of your personal data, and we will collect necessary personal data from you in strict accordance with the law. SERES APP (hereinafter referred to as "the APP") allows users to realize intelligent functions such as inquiring vehicle data and operating remote control through mobile phones. Personal data will be processed in the use of Seres APP. The SERES APP Privacy Policy (hereinafter referred to as "the Policy") is intended to inform you and explain how we handle your personal data and your rights at present or in the future.

You are advised to read the full text of the Policy and provide your personal data to us only after you have understood, accepted and agreed to the Policy.

We will try our best to ensure that the contents of the Policy are accurate, transparent and easy to understand. If you have any question about the Policy, please feel free to contact us through the contact information published in the Policy.

Text
The Policy will help you understand the following:
I. The data controller and the types of data we collect
II. The purpose of our processing of personal dataIII. How we share personal data with third parties
IV. How we protect your personal data
V. Mobile phone system permissions and third-party SDK used by APP
VI. How we transmit your personal data to third countries or international organizations
VII. How we store your personal data
VIII. Your rights and how to get in touch with us
IX. How we protect children's personal data
X. How to update the policy

The data controller and the types of data we collect
SERES Automobile Co., Ltd. (address: No. 7, Wuyunhu Road, Shapingba District, Chongqing.is the data controller under the Policy, which means that on the basis of legitimacy, it is only for us to decide the purpose and method of processing personal data. In order to realize the services and functions of the APP, we may need to collect the following data:
1. Account registration, login, modification and cancellation
In order to register, log in, modify and cancel an account, we will collect the following data from you:
(1) In order to register an account, you agree that we collect, your mobile phone number, user name and avatar;
(2) In order to log in an account, you agree that we collect, your mobile phone number, login device ID and IP address;
(3) In order to modify an account, you agree that we collect, your user ID, user name, avatar ID and IP address;
(4) In order to cancel an account, you agree that we collect, your user ID.
2. Vehicle use
In order to provide you with more diverse car networking functions and services according to your vehicle model and the functions and services you actually choose, we may need to collect the following data:
(1) Vehicle binding
When you need to realize the intelligent functions such as querying vehicle data, operating remote control, binding the vehicle with the APP, and exercising your data rights, you agree that we collect, your mobile phone number, e-mail address, login device ID, IP address, license plate, vehicle nickname and vehicle VIN code.

(2) Vehicle data query
When you need to cooperate with us to fulfill legal obligations, carry out safety analysis, identify and solve potential problems and investigate accidents, you agree that we collect, your vehicle VIN code, electrical device working status data (such as air conditioner working status, opening status of door, window, lock and trunk, seat adjustment switch working status, etc.) and APP version information as we need to collect and process the vehicle data related to vehicle use, operation and condition through the supporting on-board sensing device of automobile products.
(3) Vehicle remote control management
When you need to use the vehicle remote control management function to check the vehicle status, you agree that we collect, your vehicle VIN code, vehicle control password, battery and charging data, total mileage, cruising mileage (oil + electricity), seat status data, opening status of door, window and lock, air conditioning data, tire pressure data, tire temperature data and other vehicle status message reminders.

The purpose of our processing of personal data

Data processing activities	The purpose of data	Data type
Account registration, login and modification	1.Used to generate SERES account information. 2.Logging in with an account.	Mobile phone number, user ID, user name, avatar, login device ID and IP address
Account cancellation	Logging out of related accounts by user ID	User ID
Vehicle binding	1.The collection of relevant information is used to establish the binding relationship between the vehicle and the account. 2.Displays the relevant beliefs of the bound vehicle, making it easy for the user to check the vehicle information within the app. 3.Collect the login device ID, IP address, convenient in the process of user application use problems can be quickly query to locate the problem.	Mobile phone number, e-mail address, login device ID, IP address, license plate, vehicle nickname and vehicle VIN code
Vehicle data query	According to the user's version and VIN, the relevant vehicle data is returned to the user for display.	Vehicle VIN code, electrical device working status data and APP version information
Vehicle remote control management	1.The user's request to control the vehicle will use the VIN and vehicle control password to confirm the correspondence between the user and the vehicle. 2.After the car control is completed, it will get the latest status of the vehicle including battery and charging data, total mileage, range (fuel + electricity), seat status data, door, window and lock opening status, air conditioning data, tire pressure data, tire temperature data to display to the user. 3.When the relevant state of the vehicle changes, some alert messages are generated, which are notified to the user by means of app notifications and stored in the in-app message center.	Vehicle VIN code, vehicle control password, battery and charging data, total mileage, cruising mileage (oil + electricity), seat status data, opening status of door, window and lock, air conditioning data, tire pressure data, tire temperature data and other vehicle status message reminders

III. How we share personal data with third parties
We attach great importance to the security of your personal data. In principle, we will not share your personal data with any third party. Even if we need to share your personal data with a third party when necessary, we will inform you of the purpose of sharing data processing activities between the APP and a third party in strict accordance with the law, and sign a data processing agreement.

It is worth noting that our sharing behavior does not need your prior consent when the following legal reasons exist:

Data processing is necessary for theperformance of the contract to which the data subject is a party, or data processing is necessary for specific actions according to the requirements of the data subject before concluding a contract;
Data processing is necessary for the fulfillment of the legal obligations borne by the controller;
Data processing is necessary for the protection of the vital interests of the data subject or another natural person;
Data processing is necessary for the execution of tasks in the field of public interest or for the exercise of official functions entrusted to the controller;
Data processing is necessary for the realization of the legitimate interests pursued by the controller or a third party, except that the interests, basic rights and freedoms enjoyed by the data subject who need to protect their personal data take precedence over the above legitimate interests, especially when the data subject is a child.

How we protect your personal data

We attach great importance to the security of your personal data. We have taken reasonable and feasible security measures in line with industry standards to protect your personal data and prevent unauthorized access, disclosure, use, and loss of personal data. In addition, where personal data transfer is involved, we ensure that your personal data is fully protected by signing a data transfer agreement with the data receiver or other applicable technical measures. We will take appropriate technical and organizational protection measures to protect your personal data from disclosure, especially measures that prevent any unauthorized person from accessing personal data, such as data encryption. However, with the continuous development of network technology, we cannot eliminate unsafe factors completely. If there is an unfortunate personal data security incident, we will report it and notify you in time according to the requirements of laws and regulatory agencies, and take remedial measures in time.

Mobile phone system permissions and third-party SDK used by APP
Mobile phone system permissions used by APP

To enhance the service experience or implement product features, our services or features may require the use of your system permissions, which will be enabled only with your express consent, and your personal data will be collected only when necessary for the relevant services or features. If the permissions are disabled, we may not be able to provide you with the function that these consents correspond to. You can manage the relevant permissions in the APP according to actual needs.
Please note that if you open any permission, you agree that we can collect and use relevant personal data to provide you with corresponding services. Once you disable any permission, it indicates you cancel your consent, and we will no longer continue to collect and use relevant personal data based on the corresponding permission, nor will we continue to provide you with the services corresponding to the permission. Your decision to disable permissions will not affect the previous collection and use of personal data based on your consent.

Permission name	Permission purpose	Whether there are any inquiries	Whether it can be disable
Camera or album permission (ios, Android)	We will apply for camera or album permission when you set up your avatar and scan the code to log in to the IVI. If you refuse this consent, the above functions will not work normally, but it will not affect your normal use of our products or services.	Yes	Yes
Network permission (ios, Android)	After the local network permission is enabled, you allow the APP to obtain the network status of the device and communicate with the cloud service. If this consent is refused, the corresponding functions of the APP will not work normally.	Yes	Yes
Obtain mobile phone process data （Android）	We will obtain the mobile phone process data during the running of the APP, which is only used to judge the foreground and background status of the APP, and change the data interaction strategy according to this status to ensure the real-time interaction of user data and reduce the consumption of mobile phone resources.	Yes	Yes
Fingerprint/Face permission (ios, Android)	You can enter face ID or fingerprint ID data on your device in advance, and complete data verification on your device when using the service, which is used to quickly verify identity. We need to use your face ID and fingerprint ID permissions to receive verification results, but we do not collect your face ID and fingerprint ID data, only obtain verification results provided by hardware service providers based on your consent. If this permission is not enabled, you will not be able to use face ID and fingerprint ID to unlock, but it will not affect your choice of other unlocking methods. Please note that your face ID and fingerprint ID are sensitive data. Please read the relevant privacy policies and instructions of the hardware service provider when providing your above data to the hardware service provider. If this consent is refused, the above functions will not work normally, but it will not affect your normal use of our products or services.	Yes	Yes
Device identification permission （ios、Android）	Obtain the device identification to identify the device data for ensuring service security, account security and improving browsing experience.	Yes	Yes
Read-write system setting （ios、Android）	When you use SERES APP to modify the permissions of the system, in order to jump to the system setting interface, we may need to enable the permissions of modifying the settings of the APP on your mobile phone device.	Yes	Yes
Mobile phone storage permission/SD card	When your avatar is uploaded through SERES APP, we may need to enable the storage permission of your mobile phone device. If you refuse this consent, the above functions will not work normally, but it will not affect your normal use of our products or services.	Yes	Yes
Telephone permission (ios, Android)	You can make quick calls to customer service after your phone permission is enabled, but we will not collect your phone contacts.	Yes	Yes
Location permission (ios, Android)	We will access your location data in the background after the location permission is enabled, and your location data will be used to navigate with maps and find and locate vehicles. If you refuse this consent, the above functions will not work normally, but it will not affect your normal use of our products or services.	Yes	Yes

Third-party SDK

In order to ensure the stable operation of APP or realize related functions, we may access the Software Development Kit (SDK) provided by a third party to achieve the above related purposes. We will fulfill our security obligations and monitor the SDK of data obtained by partners to protect data security.

The third-party SDK we access mainly serves the needs of you and other users, so we may adjust the third-party SDK we access when meeting new service requirements and changing business functions. We will publicly explain to you on accessing the third-party SDK in a timely manner in the Policy. At present, the third-party SDK accessed by APP is as follows:

SDK name

Name of third-party company

Personal data collected

Link of third-party privacy policy

EngageLab

METAVERSE CLOUD PTE. LTD.

device information

Network information (including network type, operator information)

https://www.engagelab.com/license/privacy

How we transmit your personal data to third countries or international organizations

We are well aware of the importance of personal data to you. The personal data you provide to us will be transmitted and stored in a data center located in Dublin, Ireland. According to law, if the SERES APP is involved in transferring your personal data to a third country or international organization, we will inform you of the purpose, protection measures and legality basis of relevant data processing activities. Furthermore, we will take appropriate technical and organizational protection measures to protect your personal data during transfer and comply with other obligations stipulated by the laws of your location.

VII. How we store your personal data

For the personal data collected during the use of the APP will be stored in a data center located in Dublin, Ireland, we will store your personal data within a reasonable period of time according to the requirements of relevant laws and regulations and industry practices. In addition to the mandatory provisions of laws and regulations, our criteria for determining the reasonable storage period are as follows:

whether the personal data is necessary for your continuous use of products and service;
whether the personal data is necessary for your to exercise your rights or legitimate interests;
whether you agree to a longer storage period;
Other reasonable storage conditions.

After the storage period expires, we will erase or anonymize your personal data in due course within a reasonable period, considering the cost and operability of data management.

VIII. Your rights and the way to contact us

(I) Your rights

You have the right to request us to provide, amend personal data, request restrictions on data processing activities, object to the processing of your personal data and request data portability. If data processing is based on your consent, you may withdraw your previous consent at any time, but such withdrawal does not affect the legality of data processing based on your consent before the withdrawal is made. The above rights specifically include:

Getting a copy of your personal data. The specific path can be obtained according to "How to get in touch with us" in the Policy;
Sending some of your data to you or other data controllers in a convenient way. The specific path can be obtained according to the way in "How to get in touch with us" in the Policy;
Update your personal data by following the path "My Account" > "Account Information"
Restricting the processing of your personal data under specific circumstances. The specific path can be contacted according to the way in "How to get in touch with us" in the Policy;
Canceling your personal account. The specific path can be contacted according to the way in "How to get in touch with us" in the Policy;
If you have any questions, please contact us first, and we will respond positively to your rights. If you feel that our response does not respect your rights, you can contact your local regulator.

(II) The way to contact us

SERES Automobile Co., Ltd.

1.1 E-mail: DPO@seres.cn

1.2 Mai address: No.5-9, Wuyunhu Road, Huilongba Town, Shapingba District, Chongqing

How we protect children's personal data

In principle, the APP is only for adults, but considering that different countries or regions may have different regulations on the age requirements of drivers and the age definition of children, the specific personal data collection methods will be carried out in strict accordance with local laws and regulations. If we find that the children's personal data has been collected without the guardian's consent, we will delete this part of the data as soon as possible. If you find that we have inadvertently collected the children's personal data, please contact us through the contact information published in this article, and we will delete this part of personal data as soon as possible, or obtain the consent or consent of the child's guardian to ensure the legality of data processing behavior.

How to update the policy

After the Policy is updated, we will remind you to browse the updated privacy policy version in the form of pop-up window. In addition, we will record the effective time of the privacy policy in detail in the text of the Policy, and provide contact information for your consultation on relevant issues.