RuYiGo Manager Privacy Policy

Effective date: March [27] of [2025]

[Introduction]

Welcome to use our products and/or services! We are well aware of the importance of user information to you, and your trust is very important to us. We will strictly abide by laws and regulations and take corresponding security protection measures to protect your user information. Based on this, RuYiGo Manager service providers (or simply" we") to develop this RuYiGo Manager Privacy Policy (hereinafter referred to as" this Policy"or" this Privacy Policy") to help you fully understand how we collect, use, share, store and protect your user information during your use of our products and/or services, and how you can manage your user information so that you can better make appropriate choices.

Before you begin to use our products and/or services, please be sure to read and understand this policy carefully, especially the terms marked with bold/bold underline, to ensure that you fully understand and agree before you start to use it. In addition to this policy, in certain scenarios, we will also explain to you the corresponding information collection purpose, scope and use mode through instant notification (including pop-up window, page prompt, etc.) and function update description. These instant notification and function update description form part of this policy and have the same effect with this policy. The professional vocabulary involved in this policy, we try to explain to you in a concise and popular statement, so that you can understand. If you have any questions, comments or suggestions about the contents of this policy, you can contact us through the contact information at the end of this policy.

If you agree to this policy, you have understood the products and/or services we provide, as well as the necessary user information required for the operation of the corresponding products and/or service functions (please note that the user information mentioned in this policy may include personal information and/or Sensitive personal information, please refer to the "Appendix: Related Definitions" for details, which will not be repeated below), and give the corresponding collection and use authorization. However, you agree this policy does not mean that you have separately agreed to open additional functions and deal with unnecessary user information. We will solicit your consent separately according to your actual use and relevant laws and regulations.

This Privacy Policy will help you understand the following:

ARTICLE Ⅰ: Scope of Application

ARTICLE Ⅱ: Information collection and use

ARTICLE Ⅲ: The partners involved in the use of data, transfer and disclosure of user information

ARTICLE Ⅳ: Your rights

ARTICLE Ⅴ: Storage of information

ARTICLE Ⅵ: Update of policy

ARTICLE Ⅶ: Contact Us

Appendix: Relevant Definitions

ARTICLE Ⅰ:Scope of Application

This policy Applies to RuYiGo Manager service providers to the client,as well as with the development of technology in the new form of products and services to you.We and our affiliates have separate privacy policies or similar legal documents for the products or services they provide to you,and the corresponding products or services Apply to the corresponding privacy policies or similar legal documents.

This policy does not apply to services provided to you by other third parties.For example,when a service provider Manager RuYiGo provides services to you based on its service content,the information you provide to the service provider does not Apply to this policy.

It should be noted that as a user of RuYiGo Manager, if you use the technical services Manager by RuYiGo to provide services for your users, because your business data belongs to you, you should separately agree with your users on a privacy policy or similar legal documents.

ARTICLE Ⅱ Information Collection and Use

When you use our products and/or services, we need or may need to collect and use your user information, including the following two types:

(1) In order to provide you with the basic functions of our products and/or services and to fulfill the obligations stipulated by laws and regulations, you must authorize us to collect and use the necessary information. If you refuse to provide the corresponding information, you will not be able to use our products and/or services;

(2) In order to provide you with our products and/or services additional functions, you can choose to agree or disagree with our collection and use of information. If you refuse to provide, you will not be able to normally use the relevant additional functions or can not achieve our intended function effect, but it will not affect your use of our basic functions.

We would like to remind you that we are committed to creating a variety of products and/or services to meet your needs. Because we provide you numerous product and/or service types, and different users choose to use the specific product and/or service scope is different, the basic function or additional function and the corresponding collection of information type, scope will be different, please refer to the specific product and/or service function.

The specific functional scenarios we will provide you include:

2.1 Help you complete the account login

（a） Basic user services:

We provide you with the basic functions of RuYiGo Manager products and services through the Taobao platform account.You need to provide us with the corresponding account information according to the login method you choose.In order to link your Taobao platform account,we may need to collect your mobile phone number.If you do not complete the account login,you will not be able to use all the functions and services of RuYiGo Manager normally.

In order to ensure that we are providing services for you,we may verify your identity based on the above information you provide.If there is a scenario where you need to determine your necessary identity according to law (including protecting the rights and interests of minors according to law,cracking down on telecom network fraud,withholding taxes for you,administrative law enforcement or determination of relevant subjects in judicial proceedings),you authorize us to obtain the necessary authentication information of your corresponding Alipay account from Alipay Company for the above purposes.

（b）Account information display:

After you use the designated account to log in to RuYiGo to Manager products and services, we may display your mobile phone number,store name,store address,and the operations you perform on the RuYiGo Manager or products and services associated with the RuYiGo Manager account in the RuYiGo Manager.(You can use the products or services provided by us and/or affiliated companies through the RuYiGo Manager account in the link portal or other product/service portal provided by us),including centralized display of your personal data,product information and trading orders through RuYiGo Manager account.We respect your choices regarding the RuYiGo Manager Service and RuYiGo Manager Account settings.

2.2 To show you information about goods or services

In order to

show you goods and services which better suit your needs, we will give you personalized advertising. If you want to manage the personalized advertisements we push to you, you can set them in "My-System Settings-Advertisement Management"(click Manage Personalized Advertisements).

2.3 To help you complete the goods and inventory management

（a） Help you with commodity filing:

You can turn on the camera/video camera and photo album (picture library/video library) permissions during "commodity filing",enter commodity barcode information by scanning commodity barcode/two-dimensional code or uploading commodity barcode/two-dimensional code photos,enter and manage commodity name,retail price,initial inventory quantity,commodity pictures and other information,and authorize us to display the above information in RuYiGo Manager.If you do not agree with the above authorization,you can manually enter the way to file the goods.

（b） Help you to manage the shelf life of goods:

You can turn on the camera/video camera and photo album (picture library/video library) permissions during "commodity management-shelf life management-code scanning",enter shelf life, production date and other information by scanning commodity bar code/two-dimensional code or uploading commodity bar code/two-dimensional code photos,and authorize us to display the above information in RuYiGo Manager.If you do not agree with the above authorization, you can manually enter the shelf life management.

（c） Help you check the inventory of goods:

You can turn on the camera/video camera and photo album (picture library/video library) permissions during"inventory management-inventory inquiry",enter the commodity barcode information by scanning the commodity barcode/two-dimensional code or uploading the commodity barcode/two-dimensional code photo to confirm the commodity to be inquired,and authorize us to display the above information in RuYiGo Manager.If you do not agree with the above authorization,you can manually enter the way to query the inventory of goods.

（d） Help you to confirm the goods out,warehousing information:

You can open the permissions of camera/camera and photo album (picture library/video library) in"Inventory Management-Inventory Inquiry-Code Scanning",enter the barcode information and the quantity of goods entering and leaving the warehouse by scanning the barcode/two-dimensional code or uploading the barcode/two-dimensional code photos of goods,and authorize us to display the above information in RuYiGo Manager.If you do not agree with the above authorization, you can manually enter the information to confirm the goods in and out.

(e) Customer service and dispute handling

When you contact us or Apply for dispute resolution,in order to protect your account and system security,we need you to provide the necessary personal information(specific account nickname)to verify your account identity.

In order to contact you, help you solve the problem as soon as possible or record the solution and result of the problem,we may store your communication,communication/call record and related content(including account information,other information you provide to prove the relevant facts,or contact information you leave).

In order to provide services and improve the quality of services,we may also use your other information,including the relevant information you provide when you contact customer service.

In order to facilitate your communication with customer service when describing your problem,you can open the"my-contact customer service"camera/camera,photo album(photo library/video library)permissions.

(f) Offer you additional services

In order to provide you with more convenient and high-quality products and/or services,and strive to improve your experience,we may collect and use your personal information by enabling system permissions in the following additional services provided to you.If you do not agree to enable the relevant permissions, it will not affect your use of RuYiGo Manager basic services, you may not be able to obtain these additional services to bring you user experience.

You can turn these permissions on or off at any time at your discretion.

Please note that if you open any permission,you authorize us to collect and use relevant personal information to provide you with corresponding services.Once you close any permission,you cancel the authorization,and we will no longer continue to collect and use relevant personal information based on the corresponding permission,nor can we continue to provide you with the services corresponding to the permission. Your decision to close the permission will not affect the previous information collection and use based on your authorization.

You can click this toview App permission requests and usage instructions.

ARTICLE Ⅲ: The Partners Involved in the Use of Data, Transfer and Disclosure of User information

3.1 Basic principles

When working with partners,we will adhere to the following principles:

(a) The principle of legality and minimum necessity:the data processing should have a legal basis,have a legitimate purpose,and achieve the purpose of processing the minimum scope.

(b) The user's right to know and decision-making power maximization principle:in the process of data processing,fully respect the user's right to know and decision-making power to the user's information processing.

(c) Security capability strengthening principle:we will take necessary measures to ensure the security of the user information we process,carefully evaluate the purpose of the data used by the partners,conduct a comprehensive assessment of the security capabilities of these partners,and require them to follow the relevant requirements of the cooperation agreement.

You can view our data partner information here.

3.2 Scope of partners

If the specific functions and scenarios involve services provided by our affiliates and third parties,the scope of cooperation includes our affiliates and third parties.

3.3 Entrusted processing

We may entrust authorized partners with the processing of your user information in order to authorize partners to provide you with certain services or perform functions on our behalf. We will only entrust them to process your information for the lawful, legitimate, necessary, specific and clear purposes stated in this policy. Authorized partners can only access the information required for them to perform their duties, and we will require them through agreements not to use this information for any other purpose beyond the scope of entrustment. If the authorized partner uses your information for purposes not entrusted to us, it will obtain your consent separately.

3.4. Joint processing

For the scenario of joint processing of user information, we will sign relevant agreements with partners in accordance with laws and regulations and agree on their respective rights and obligations to ensure compliance with relevant laws and regulations and protect data security in the process of using relevant user information.

3.5. Cooperation scenarios

（a） Advertising and Analytics Services

We will entrust our partners to process information related to advertising, coverage and effectiveness under the premise of adopting the security technology common in the industry. We will not delegate your personally identifiable information to our partners.

（b） Security and Statistical Analysis

(ⅰ) Ensure use safety: We attach great importance to the safety of products and services. In order to protect the legitimate rights and interests of RuYiGo Manager users from illegal infringement, our partners may use necessary equipment, account numbers and log information.

(ⅱ) Analysis of products: In order to analyze the stability of RuYiGo Manager products and services, partners providing analysis services may need information such as service usage, device identification information, and overall Application installation and usage.

(ⅲ) Academic research: In order to enhance scientific research capabilities in related fields and promote the level of scientific and technological development, we may use de-identified or de-identified data with partners (such as research institutes, universities and other institutions) on the premise of ensuring data security and proper purpose. Anonymized data.

（c） SDK usage

In order to ensure the stable operation and function realization of our client, so that you can use and enjoy more services and functions, our application will be embedded in the authorized partner's SDK or other similar application. We will conduct strict security checks on the application program interface (API) and SDK through which the authorized partner obtains relevant information, and agree with the authorized partner on strict data protection measures to process user information in accordance with this policy and any other relevant confidentiality and security measures. Except where the authorized partner separately obtains your consent.

You can click here toview our access SDK details.

(d) Other collaboration scenarios

In addition to the above cooperation scenarios, we may also entrust information to other partners who support our business, including providing technical infrastructure services, analyzing the use of our services, and providing other customer services.

(ⅰ) transfer

If we need to transfer user information due to merger, separation, dissolution, or bankruptcy, we will inform you of the recipient's name or name and contact information. The receiving party will continue to perform this policy and other statutory obligations. If the receiving party changes the original processing purpose and processing method, it will obtain your consent again.

(ⅱ) public disclosure

We will only publicly disclose your user information under the following circumstances:

（1） based on your active choice and other separate consent, we may publicly disclose your user information;

（2） In order to protect the personal and property safety of users of RuYiGo Manager and its affiliated companies or the public from infringement, we may disclose user information about you in accordance with the Applicable laws of RuYiGo Manager or relevant agreements and rules of RuYiGo Manager, including relevant breach of contract and the measures we take against you.

(ⅲ) cease operation

If we stop operating products or services, we will stop collecting your user information in a timely manner. We will send a notice one by one or send you a notice to stop operation in the form of an announcement, and delete or anonymize the user information we hold related to the products or services that have been shut down.

(ⅳ) legal exemption from your authorized consent

Please understand that in the following cases, in accordance with laws, regulations and national standards, the partner uses, or we transfer or disclose your user information without obtaining your authorization and consent:

(1) Necessary to conclude or perform a contract at your request.

(2) We may be in accordance with laws and regulations, litigation, dispute resolution necessary, or in accordance with the administrative, judicial authorities in accordance with the requirements, and other statutory obligations to perform the necessary, share your user information.

(3) It is necessary to respond to public health emergencies or to protect the life, health and property safety of natural persons in emergency situations.

(4) Implement news reports, public opinion supervision and other behaviors for the public interest, and handle user information within a reasonable range.

(5) In a reasonable range to deal with your own public user information, or other legitimate public user information (such as legitimate news reports, government information disclosure and other channels of legitimate public user information).

(6) Other circumstances stipulated by laws and regulations.

ARTICLE Ⅳ: Your Rights

4.1 Query

You have the right to access, correct and supplement your information through customer service contact.

4.2 Replication

You can log in to the RuYiGo Manager and enter "My-Settings" to copy your store information (if any). If you need to copy your other personal information, you can process it by contacting the online customer service of RuYiGo Manager.

4.3 Delete

You can request us to delete user information in the following situations:

(a) if our handling of user information violates laws and regulations;

(b) If we collect and use your user information without your explicit consent;

(d) If our processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose;

(e) If we stop providing products and/or services, or if the retention period has expired.

For security purposes, you may need to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request.

When you or we assist you to delete the relevant information, we may not be able to delete the corresponding information from the backup system immediately due to Applicable legal and security technical restrictions. We will securely store your personal information and restrict any further processing of it until the backup can be cleaned or anonymized.

4.4 Change Authorization Consent

You can change or withdraw the scope of your authorization to collect and process your personal information by contacting customer service.

However, please note that for some types of personal information, such as information necessary to achieve RuYiGo Manager basic functions or information necessary to fulfill our obligations under laws and regulations, we may not be able to respond to your request to change the scope of authorization. When you withdraw your authorization, we will no longer process the corresponding personal information. However, your decision to withdraw authorization will not affect our previous processing of personal information based on your authorization.

4.5 Account Cancellation

You can Apply to cancel your account in the following ways.

Submit an account cancellation Application in "My-Account and Security-Cancellation Account;

After you voluntarily cancel your account, we will stop providing you with products or services and delete or anonymize your personal information as required by Applicable law. If it is technically difficult to delete personal information, we will anonymize it, or stop processing other than storage and taking necessary security measures, unless otherwise provided by laws and regulations.

4.6 Automatic Decision of Constrained Information System

In some business functions, we may make decisions based solely on non-human automated decision mechanisms, including algorithms. If these decisions affect your legitimate rights and interests, you can contact us through customer service.

ARTICLE Ⅴ:Storage of Information

5.1 Storage Period

We will only achieve the purpose of this policy for the required period of time to retain your personal information, unless the law has mandatory retention requirements. We determine the storage period of personal information based on the following criteria:

(a) Complete the purpose of the transaction related to you, maintain the corresponding transaction and business records, in response to your possible inquiries or complaints;

(b) Ensure the safety and quality of the services we provide to you;

(d) Whether there are other special agreements or laws and regulations on the retention period.

Beyond the retention period, we will delete or anonymize your personal information as required by Applicable law.

5.2 Storage Location

The user information we generate or collect in the People's Republic of China is stored on servers in China. Unless we obtain your separate consent, or in order to perform the contract with you, or in order to comply with the obligations stipulated by laws and regulations, we will not provide any of your user information abroad.

5.3 Storage Security

(a) Technical measures for data protection

We have taken reasonable and feasible security measures in accordance with industry standards to protect your information from unauthorized access, public disclosure, use, modification, damage or loss of personal information. For example, we will use encryption technology to improve the security of personal information. When exchanging data between your browser and the server, it is protected by SSL protocol encryption. We provide HTTPS protocol for secure browsing. We will use trusted protection mechanisms to prevent malicious attacks on personal information. We will deploy access control mechanisms to ensure that only authorized personnel can access personal information. At present, our important information system has passed the three-level evaluation of network security level protection.

(b) Organizational measures for data protection management

We have established an advanced data security management system with data as the core and around the data life cycle in the industry to improve the security of personal information from the dimensions of organization construction, system design, personnel management and product technology. We have set up a dedicated personal information protection department. Through training courses and examinations, we constantly raise awareness among our employees about the importance of protecting personal information.

If our physical, technical or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering or destruction of information, resulting in damage to your legitimate rights and interests, we will promptly activate the emergency plan and take reasonable and necessary measures to minimize the impact on you. In the event of a personal information security incident, we will also inform you of the basic situation and possible impact of the security incident in accordance with the requirements of laws and regulations, the disposal measures we have taken or will take, suggestions that you can independently prevent and reduce risks, and remedial measures for you. We will inform you by text messages, phone calls, push notifications and other reasonable channels. If it is difficult to inform one by one, we will issue an announcement in a reasonable and effective manner. At the same time, we will also report the handling of personal information security incidents in accordance with the requirements of the regulatory authorities.

(d) Prevention of account security risks

When using the Ruyi Store Assistant client, you will inevitably disclose your personal information, such as contact information or contact address, to the counterparty or potential counterparty. In addition, you can also establish communication, exchange information or analyze content with third parties through our services. Please properly protect your personal information, only provide it to others when necessary, and do not trust to trade through other trading tools, so as to avoid information theft or even telecom network fraud.

If you are concerned about the disclosure of your personal information, especially your account or password, please contact our customer service immediately so that we can take corresponding measures according to your Application.

ARTICLE Ⅵ: Update of Policy

In order to bring you a better product and service experience, we continuously strive to improve our products, services and technologies. When new services and business processes change, we may update our privacy policy to inform you of specific changes. However, we will not limit your rights under this Policy without your express consent. We will post any changes to this policy on a dedicated page.

For major changes, we will also provide more prominent notification (including we will notify or prompt you through a pop-up window).

Material changes referred to in this policy include, but are not limited:

(1) Significant changes have taken place in the business model of the product. For example, the purpose of processing personal information, the type of personal information processed, and the use of personal information;

(2) business adjustment, transaction mergers and acquisitions caused by the change of the subject of the privacy policy, the new subject receiver to change the original processing purpose, processing methods;

(3) Changes in the main objects of personal information sharing or public disclosure;

(4) Significant changes in the user's personal information rights and the way they are exercised;

(5) When the contact information and complaint channels of the person in charge of personal information protection change;

(6) When the personal information protection impact assessment report indicates that the existence of the product has a significant impact on personal rights and interests.

We will also archive the old version of this policy on the RuYiGo Manager dedicated page for your review.

ARTICLE Ⅶ: Contact Us

You can contact us in the following ways, and we will reply to your request within 15 days:

(1) If you have any questions, comments or suggestions about this policy, you can contact us through RuYiGo Manager customer service;

(2) We have also set up a full-time user information protection department, which you can contact through [TMXY-jygl@service.alibaba.com] (please indicate that it is related to [RuYiGo Manager] and explain the specific facts). The office address is [Legal Service Desk, Floor 1, Building 4, 969 Wenyi West Road, Yuhang District, Hangzhou]]. Please note that we may not respond to questions that are not related to this policy or your personal information rights.

If you are not satisfied with our response, especially if you believe that our user information processing has harmed your legitimate rights and interests, you can also seek a solution by filing a lawsuit with the court with jurisdiction in the defendant's domicile.

Appendix: Relevant Definitions

RuYiGo Manager: clients operated by RuYiGo Manager service providers.

RuYiGo Manager Service Provider: Hangzhou Tmall Campus Technology Service Co., Ltd., an Internet information and software technology service provider Manager by RuYiGo.

Affiliates: Affiliates of the Taobao platform service provider disclosed in the latest listed company annual report of Alibaba Group Holding Limited.

User information: User information refers to the user member information, such as name and contact information, submitted by you or collected by us in order to provide services to you by registering your account on the website of RuYiGo Manager and using our services. For details, please refer to the information required to be collected and used for each business function in "Collection and Use of 2. Information" in this policy. Wherein, part of user information belongs to personal information and/or sensitive personal information.

Business data: It is different from user information and refers to the data that users upload, download, and distribute through the technical services of the RuYiGo Manager, such as the services of the RuYiGo.

Personal information: refers to all kinds of information related to identified or identifiable natural persons recorded electronically or otherwise, excluding anonymized information.

Sensitive personal information: once leaked or illegally used, sensitive personal information is personal information that can easily lead to infringement of natural person's personal dignity or personal and property safety, including biometric identification, religious belief, specific identity, medical and health, financial account, whereabouts and trajectory information, as well as personal information of minors under the age of 14.

Children: Minors under the age of fourteen.

Device information: including hardware model, hardware serial number, software list, Application installation list, software installation list, unique device identification code IMEI, device MAC address, SIM card IMSI information, Android ID, MEID, OpenUDID, GUID, Bluetooth information, broadcast component communication Information, ICCID, operator information, sensors (gyroscope, gravity sensor, acceleration sensor, environmental sensor, optical heart rate sensor), OAID(Android universal advertising identifier), IDFA/IDFV(IOS Device Identifier), clipboard WLAN access point such as SSID, BSSID. The actual product collection shall prevail.

Service log information: IP address, browser type, telecom operator, language, access date and time, mobile device information, deviceId, and Applet version number.

Deidentification: The process by which personal information is processed so that it cannot be identified to a specific natural person without the aid of additional information.

Anonymization: The process by which personal information is processed without identifying a specific natural person and cannot be recovered.