持安办公助手隐私政策

更新时间：2024年10月21日

生效时间：2024年10月21日

导言

感谢您使用持安办公助手！您使用持安科技有限公司提供的相关服务，即表示您信赖我们对您的信息的处理方式。我们深知这项责任事关重大，因此一直致力于保护您的信息，并让您拥有知情权。

持安办公助手是由北京持安科技有限公司(以下简称“我们”)研发和运营的为移动终端提供手机令牌、办公代理等功能的软件，公司注册地为北京市昌平区回龙观东大街338号创客广场A105。我们根据相关法律法规，制订本政策并致力于保护您的个人信息安全。

本政策包含了我们处理和保护您的个人信息的条款，我们建议您完整地阅读本政策，在需要时，按照本政策的指引作出您认为适当的选择。您使用或继续使用持安办公助手或相关服务，即意味着同意我们按照本《持安办公助手隐私政策》收集、使用、储存和分享您的相关信息。我们收集的个人信息仅用于提供和改进服务。除非本隐私政策中另有说明，否则我们不会与任何人一起使用或分享您的信息。

一、我们收集的信息

我们收集您提供给我们的部分或全部信息，以及您使用网站和应用程序的数据，但我们将主要使用收集的数据为您提供满意的服务，并提高您的使用体验。

1.1 设备和技术信息的收集

我们可能会收集您使用我们的应用程序所需的数据，我们可以维护和分析应用程序的功能。

为确保我们的功能和服务能正常实现，我们会收集有关您的设备的某些信息，包括:

iOS端的面容ID、指纹、手势密码(具体权限以您实际使用iOS版本功能为准，我们仅在校验密码时调用系统识别接口，不上传至服务器)。
安卓设备下的Android ID、硬件序列号、MAC地址及IMSI、IP地址，IDFVs，操作系统，以及面容ID、指纹、手势密码(我们仅在校验密码时调用系统识别接口，不上传至服务器)。
我们会收集系统语言设置，用于在软件中使用与系统一致的语言。
我们会收集网络状态（无线等）、时区会话开始/停止时间和时间戳，用于获取、校验网络时间。
为了向您提供动态密码功能，我们将使用您的动态生成的序列号(由我们随机生成)，用于在相关动态密码功能下使用。在您开始使用动态密码功能时，我们还将收集您的动态密码：手机令牌，一次性密码、手机型号。
我们将使用设备传感器，为向您提供扫码、指纹密码等功能，我们仅在校验时使用，不会将您的数据上传至服务器。

我们将对您的相关密码信息做加密处理或者仅在设备本地处理处理您的个人信息。

二、我们会为以下目的收集使用您的个人信息

持安办公助手将收集的数据用于以下其中的部分或全部目的：

2.1 登录和认证

当您登录软件时，需要由您向企业管理人员（以下简称“管理员”）向您提供服务器信息以及您的账号、密码，您输入上述信息后即可登录本软件，如有需要会向您的手机号码发送验证短信以完成登录账号认证。

2.2 代理服务

为了向您提供远程代理数据传输服务，以及进行用户的设备认证。需要获取您的设备信息和网络信息。代理服务会将您的设备终端与公司内部办公网络进行连接，以便您可以访问公司内部网络资源。该服务不会访问、劫持、篡改您的内容信息。

2.3 安全保障功能

持安致力于为您提供安全、可信的产品与使用环境，为实现安全保障功能，我们可能会自动收集某些信息，包括但不限于您使用的移动设备类型，移动设备唯一ID，移动设备的IP地址，移动设备操作系统，调用设备传感器，您使用的移动互联网浏览器的类型，唯一的设备标识符和其他诊断数据。

以上信息将上报至您的企业，由您的企业存储。我们不会上报以上信息，我们仅在设备本地处理您的个人信息。

2.4 扫码功能

为了向您提供二维码扫描初始化配置与激活移动令牌的功能，我们需要访问您的摄像头、相机权限，如不授权该权限将不能使用该功能，但不影响您使用我们提供的其他功能，您仍然可以通过输入验证码形式完成初始化配置或令牌激活。

2.5 复制手机识别码

为了向您提供复制手机识别码的功能，我们需要获得访问剪贴板的权限，如不授权该权限将不能使用该功能，但不影响您使用我们提供的其他功能。

2.6 统计分析与性能监控

为统计分析产品运行情况及改进用户体验，持安办公助手可能会使用您的设备信息和日志信息。

同时为了向您提供设备异常与性能分析服务，进行设备的识别、获取设备状态（在线、离线、所处网络环境）、进行设备数统计以及单设备问题调试，所收集的必要信息：

Android：Android ID，操作系统信息和版本号，硬件序列号，MAC地址及IMSI，IP地址，CPU信息，存储信息，WLAN接入点，网络接入方式、类型、状态，网络质量数据，地理位置（如果授予地理位置权限），蓝牙开启状态，USB调试模式状态；
iOS：操作系统信息和版本号、IP地址、CPU信息、存储信息、WLAN接入点、网络接入方式、类型、状态、网络质量数据、系统时区、越狱状态；
应用信息：应用版本、应用程序包名称、进程启动时间、崩溃时间、崩溃线程名、活动过的页面名称、当前进程所有线程堆栈、应用服务日志信息、应用文件名称、应用文件大小、磁盘大小。

以上信息将上报至您的企业，由您的企业存储。我们不会上报以上信息，我们仅在设备本地处理您的个人信息。

三、信息存储

您的个人信息将不会被上传我们的服务器，您的企业决定上述个人信息的存储方式、地点和期限，以及到期后的处理方式，具体请与您的企业沟通了解。您可以在App的【设置-关于-联系管理员】中找到企业管理员的联系方式，进行咨询。

四、删除信息

由于您的个人信息将不会被上传我们的服务器，因此我们无权删除您的个人信息。您的企业将决定如何删除您的个人信息，具体请与您的企业沟通了解。您可以在App的【设置-关于-联系管理员】中找到企业管理员的联系方式，进行咨询。

五、保护信息

我们已经实施了合理的安全措施，以保障收集信息的机密性、安全性和完整性，并防止未经授权的访问和使用违反本隐私政策的信息。虽然我们采取合理的努力，以保障您的信息在我们维护时依然安全，但请注意，没有任何安全措施是绝对安全的。因此，我们强烈建议您采取积极措施保护个人信息的安全，包括但不限于使用复杂密码、定期修改密码、不将自己的账号密码等个人信息透露给他人等。

关于您的企业所采取的数据保护方式和安全措施，请联系您的企业沟通了解。您可以在App的【设置-关于-联系管理员】中找到企业管理员的联系方式，进行咨询。

六、个人信息保护

本软件账号所有权及有关权益均归您的企业所有，您完成首次登陆后仅享有该账号的使用权。您的账号仅限于您本人使用，未经企业书面同意，禁止以任何形式赠与、借用、出租、转让、售卖或以其他方式许可他人使用该账号。如果您的企业发现或者有合理理由认为使用者并非账号初始注册人，您的企业有权在未通知您的情况下，暂停或终止向该账号提供服务，并有权注销该账号，而无需向该账号的用户承担法律责任，由此带来的因您使用本服务产生的全部数据、信息等被清空、丢失等的损失，您应自行承担。

根据相关法律规定，您有权访问、更正您的个人信息。如您作为企业雇员使用本软件，请联系您的企业管理员以更正您的个人信息。在符合注销条件的情况下，您的账号可能会被注销，账号注销后，您的个人信息会被删除或被匿名化处理。

您可以在【设置-关于-联系管理员】中找到企业管理员的联系方式。

七、cookie技术

我们使用cookie和类似的跟踪技术来跟踪我们服务上的活动并保留某些信息。

Cookie是包含少量数据的文件，可能包含匿名唯一标识符。Cookie会从网站发送到您的浏览器并存储在您的设备上。还使用其他跟踪技术比如信标，标签和脚本等，用于收集和跟踪信息以及改进和分析我们的服务。

您可以指示您的浏览器拒绝所有cookie或指示何时发送cookie。但是，如果您不接受cookie，您可能无法使用我们服务的某些部分。

我们使用的Cookie示例：

会话Cookie。我们使用Session Cookies来运营我们的服务。
偏好Cookie。我们使用首选项Cookie来记住您的偏好和各种设置。
安全Cookies。出于安全考虑，我们使用安全Cookie。

八、退出

根据本隐私政策，您可以从您的每台设备上卸载所有应用程序并停止使用本网站，从而永远自由地选择不参与将来在软件内收集您的个人信息。

九、变更或撤销授权范围

您可以在设备本身操作系统中关闭精准地理位置、摄像头、相册的授权、更改同意范围或撤回授权。撤回授权后，您的组织将无法收集与这些权限相关的信息。如果您对处理所收集的任何个人信息有疑问，请联系您的组织。

十、注销账号

由于您的账号数据是存储在您当前的企业中，我们无法注销您的账号。在您终止使用本软件后，您可以向您的企业管理员提交申请注销您的个人账号，由企业管理员处理。

您可以在【设置-关于-联系管理员】中找到企业管理员的联系方式。

十一、联系我们

如果您对本隐私政策或个人信息保护相关事宜有任何疑问或投诉、建议时，您可以通过以下方式与我们联系:

您可以将问题发送至service@chiansec.com。
通过https://www.chiansec.com/与我们联系。
将您的问题邮寄至下列地址:
北京市昌平区回龙观东大街338号创客广场A105
邮政编码：102208

我们会在收到您的请求并在验证您身份后的15天内完成核查和处理。如无法响应您的请求，我们会在法律规定的时限要求内，向您发送通知并解释原因。

十二、隐私政策的变更

根据适用的隐私法律和原则，我们可能会不时更改隐私政策，我们将通过在此页面上发布新的隐私政策来通知您任何更改。您继续使用持安办公助手或相关服务即表示您接受我们的隐私政策。

建议您定期查看本隐私政策以了解任何变更。本隐私政策的更改在此页面上发布时生效。

另请您知悉，在以下情形中，我们将无法响应您的请求：

与我们履行法律法规规定的义务相关的；
与国家安全、国防安全直接相关的；
与公共安全、公共卫生、重大公共利益直接相关的；
与刑事犯罪侦查、起诉、审判和执行判决等直接相关的；
有充分证据表明个人信息主体存在主观恶意或滥用权利的；
出于维护个人信息主体或其他个人的生命、财产等重大合法权益但又很难得到本人授权同意的；
响应您的请求将导致您或其他个人、组织的合法权益受到严重损害的；
涉及商业秘密的。

附录

第三方SDK清单

Android第三方SDK

1）Rxjava + Retrofit + OkHttp3

功能：用于网络请求

收集个人信息类型：无

第三方SDK地址：https://square.github.io/retrofit/

2）RXBinding

功能：数据绑定

收集个人信息类型：无

第三方SDK地址：https://github.com/JakeWharton/RxBinding

3）ARoute

功能：组件化跳转

收集个人信息类型：无

第三方SDK地址：https://github.com/alibaba/ARouter

4）EventBus

功能：事件订阅--发布总线

收集个人信息类型：无

第三方SDK地址：https://github.com/greenrobot/EventBus

5）Bravh

功能：列表的封装

收集个人信息类型：无

第三方SDK地址：https://github.com/pursuithigher/BravhBase

6）com.cazerotrust.zxing

功能：扫码功能、读写相册

收集个人信息类型：无

第三方SDK地址：https://github.com/Ritarupa1995/testDev

7）钉钉SDK

功能：用于第三方登录

收集个人信息类型：设备识别信息

第三方SDK隐私政策：https://page.dingtalk.com/wow/dingtalk/act/privacypolicycn?wh_biz=tm

8）企业微信SDK

功能：用于第三方登录

收集个人信息类型：设备识别信息

第三方SDK隐私政策：https://work.weixin.qq.com/nl/privacy

9）飞书SDK

功能：用于第三方登录

收集个人信息类型：设备识别信息

第三方SDK隐私政策：https://www.feishu.cn/privacy

iOS第三方SDK

1）AFNetworking

功能：用于App中部分网络请求

收集个人信息类型：无

第三方SDK地址：https://github.com/AFNetworking/AFNetworking

2）Masonry

功能：用于App中部分界面布局

收集个人信息类型：无

第三方SDK地址：https://github.com/SnapKit/Masonry.git

3）MBProgressHUD

功能：用户提示信息展示

收集个人信息类型：无

第三方SDK地址：https://github.com/jdg/MBProgressHUD

4）YYModel

功能：用于数据模型化

收集个人信息类型：无

第三方SDK地址：https://github.com/ibireme/YYModel

5）钉钉SDK

功能：用于第三方登录

收集个人信息类型：设备识别信息

第三方SDK隐私政策：https://page.dingtalk.com/wow/dingtalk/act/privacypolicycn?wh_biz=tm

6）企业微信SDK

功能：用于第三方登录

收集个人信息类型：设备识别信息

第三方SDK隐私政策：https://work.weixin.qq.com/nl/privacy

7）飞书SDK

功能：用于第三方登录

收集个人信息类型：设备识别信息

第三方SDK隐私政策：https://www.feishu.cn/privacy

（完）

北京持安科技有限公司

Chian Client Privacy Policy

Updated : October 21st, 2024

Effective date : October 21st, 2024

Preface

Thank you for using Safe Office Assistant ! When you use the related services provided by Chian Technology Co., Ltd., it means that you trust us in how we process your information. We understand the importance of this responsibility and are committed to protecting your information and giving you the right to know.

Chian Office Assistant is a software developed and operated by Beijing Chian Technology Co., Ltd. (hereinafter referred to as "we") that provides functions such as mobile phone tokens and office agents for mobile terminals. The company is registered at 338 Huilongguan East Street, Changping District, Beijing Maker Square A105. We formulate this policy in accordance with relevant laws and regulations and are committed to protecting the security of your personal information.

This policy contains our terms for processing and protecting your personal information. We recommend that you read this policy in its entirety and, when necessary, make choices you deem appropriate in accordance with the guidelines of this policy. When you use or continue to use the Smart Office or related services, it means that you agree to our collection, use, storage and sharing of your relevant information in accordance with this Privacy Policy of the Smart Office . The personal information we collect is only used to provide and improve the service. We will not use or share your information with anyone except as described in this Privacy Policy.

1. Information We Collect

We collect some or all of the information you provide to us, as well as your website and application data, but we will mainly use the collected data to provide you with satisfactory services and improve your experience.

1.1 Collection of equipment and technical information

We may collect data that is necessary for your use of our application and we may maintain and analyze the functionality of the application.

In order to ensure that our functions and services can be implemented normally, we will collect certain information about your device, including:

Face ID , fingerprint , and gesture passwords on the iOS side (the specific permissions are subject to the functions of the iOS version you actually use, we only call the system identification interface when verifying the password, and do not upload it to the server) .
Android ID, hardware serial number , MAC address , IMSI, IP address, IDFVs, operating system , and face ID , fingerprint , gesture password of the Android device (we only call the system identification interface when verifying the password, and do not upload it to the server ) .
We will collect system language settings to use the language consistent with the system in the software .
We will collect network status (wireless, etc.), time zone session start/stop time and timestamp for obtaining and verifying network time .
In order to provide you with the dynamic password function, we will use your dynamically generated serial number (randomly generated by us) for use under the relevant dynamic password function . When you start using the dynamic password function, we will also collect your dynamic password: mobile phone token, one-time password, mobile phone model.
We will use device sensors to provide you with functions such as code scanning and fingerprint passwords. We will only use them for verification and will not upload your data to the server .

We will encrypt your relevant password information or only process your personal information locally on the device.

2. The purpose of collecting and using your personal information

Chian Client uses the collected data for some or all of the following purposes:

2.1 Login and authentication

When you log in to the software, you need to provide you with server information, account number, and password to the enterprise management personnel (hereinafter referred to as "administrator"). After you enter the above information, you can log in to the software. If necessary, a verification SMS will be sent to your mobile phone number to complete the login account verification.

2.2 Proxy service

In order to provide you with remote agent data transmission services and perform network fault diagnosis, we need to collect device network information. The proxy service will connect your device terminal with the company's internal office network so that you can access the company's internal network resources. This service will not access, hijack, or tamper with your content information.

2.3 Security function

Chian is committed to providing you with a safe and reliable product and use environment. In order to achieve security functions , we may automatically collect certain information, including but not limited to the type of mobile device you use, the unique ID of the mobile device, the IP address, mobile device operating system, calling device sensors, type of mobile internet browser you use, unique device identifier and other diagnostic data.

The above information will be reported to your company and stored by your company. We will not receive or store the above information.

2.4 Scan function

In order to provide you with the functions of QR code scanning initial configuration and activation of mobile tokens, we need to access your camera and camera permissions. If you do not authorize this permission, you will not be able to use this function, but it will not affect your use of other functions we provide. You can still complete the initial configuration or token activation by entering the verification code form.

2.5 Copy Identification Code

In order to provide you with the ability to copy Identification Code, we need to obtain access to the clipboard. If you do not authorize this permission, you will not be able to use this function, but it will not affect your use of other functions we provide.

2.6 Statistical analysis and performance monitoring

To statistically analyze the operation of the product and improve user experience, Office Assistant may use your device information and log information.

Andriod APP: Android ID, operating system information and version number, hardware serial number , MAC address , IMSI, IP address, CPU information, storage information, WLAN access point, network access method, type, status, network quality data, geographic location (if you grant geographic location permissions), Bluetooth on status, USB debugging mode status.
iOS APP: operating system information and version number, IP address, CPU information, storage information, WLAN access point, network access method, type, status, network quality data, system time zone, jailbreak status.
Application information: application version, application package name, process start time, crash time, crash thread name, active page name, all thread stacks of the current process, application service log information, application file name, application file size, disk size.

The above information will be reported to your company and stored by your company. We will not receive or store the above information.

3. Information storage

Your organization determines the storage method, location and period of the aforementioned personal information, as well as the processing method after expiration. Please communicate with your organization for details.

4. Delete information

Due to your personal information not being uploaded to our server, we do not have the authority to delete your personal information. Your organization will decide how to delete your personal information. Please communicate with your organization for details.

5. Protection of information

We have implemented reasonable security measures to safeguard the confidentiality, security and integrity of the information we collect and to prevent unauthorized access and use of the information in violation of this Privacy Policy. While we take reasonable efforts to keep your information secure while we maintain it, please be aware that no security measure is absolutely secure.

Regarding the data protection methods and security measures adopted by your organization, please contact your organization to communicate and understand.

6. Personal Information Protection

The ownership and related rights of this software account belong to your company. After completing your first login, you only have the right to use the account. Your account is only for your personal use. Without the written consent of the enterprise, it is prohibited to gift, borrow, rent, transfer, sell, or otherwise license others to use this account in any form. If your company discovers or has reasonable reasons to believe that the user is not the initial registrant of the account, your company has the right to suspend or terminate the provision of services to the account without notifying you, and has the right to cancel the account without incurring legal liability to the user of the account. Any losses caused by the clearing or loss of all data, information, etc. arising from your use of this service shall be borne by you.

According to relevant laws and regulations, you have the right to access and correct your personal information. If you are an employee of a company using this software, please contact your employer's administrator to correct your personal information. If the cancellation conditions are met, your account may be cancelled. After the account is cancelled, your personal information will be deleted or Data anonymization.

7. Cookie technology

We use cookies and similar tracking technologies to track activity on our Services and to retain certain information.

Cookies are files containing small amounts of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. We also use other tracking technologies such as beacons, tags and scripts to collect and track information and improve and analyze our services.

You can instruct your browser to refuse all cookies or to indicate when cookies are sent. However, if you do not accept cookies, you may not be able to use some parts of our service.

Examples of cookies we use:

Session cookies. We use Session Cookies to operate our services.
Preference cookies. We use preference cookies to remember your preferences and various settings.
Security Cookies. For security reasons, we use security cookies.

8. Exit

In accordance with this Privacy Policy, you may permanently and freely opt-out of future collection of your personal information within the software by uninstalling all applications from each of your devices and ceasing to use this website.

9. Change or withdraw the scope of authorization

You can turn off the authorization of precise geographic location, camera, photo album in the operating system of the device itself, change the scope of consent or withdraw your authorization. After withdrawing the authorization, your organization will not be able to collect information related to these permissions. If you have issues with the processing of any personal information that has been collected, please contact your organization.

10. How to cancel your account

Since your account data is stored in your current business, we are unable to cancel your account. After you terminate the use of the Software, you can submit an application to your administrator to cancel your personal account, which will be handled by the administrator.

You can find the contact information of your administrator in [Settings - About - Contact Administrator].

11. Contact us

If you have any questions, complaints or suggestions about this Privacy Policy or personal information protection related matters, you can contact us in the following ways:

You can send questions to service@chiansec.com.
Contact us at https://www.chiansec.com/
Mail your questions to:
A105, Maker Plaza, No. 338 Huilongguan East Street, Changping District, Beijing
Zip code: 102208

We will complete the verification and processing within 15 days after receiving your request and verifying your identity. If we are unable to respond to your request, we will send you a notice and explain the reasons within the time limit required by law.

12. Changes to the Privacy Policy

In accordance with applicable privacy laws and principles, we may change the Privacy Policy from time to time and we will notify you of any changes by posting the new Privacy Policy on this page. Your continued use of Smart Office Assistant or related services constitutes your acceptance of our Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page.

Please also be aware that we will not be able to respond to your request in the following circumstances:

Related to our fulfillment of our obligations under laws and regulations;
Directly related to national security and national defense security;
Directly related to public safety, public health, and major public interests;
Directly related to criminal investigation, prosecution, trial and execution of judgments;
There is sufficient evidence that the subject of personal information has subjective malice or abuse of rights;
For the purpose of safeguarding the major legal rights and interests of the personal information subject or other individuals such as life and property, but it is difficult to obtain the authorization and consent of the individual;
Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals or organizations;
Those involving trade secrets.

Appendix

List of third-party SDKs

Android third-party SDK

1）Rxjava + Retrofit + OkHttp3

Function: for network requests

Types of Personal Information Collected : None

Third-party SDK address: https://square.github.io/retrofit/

2）RXBinding

Function: data binding

Types of Personal Information Collected: None

Third-party SDK address: https://github.com/JakeWharton/RxBinding

3）ARoute