Compliance Specifications for Chuanshanjia SDK Developers

These Compliance Specifications for Chuanshanjia SDK Developers (hereinafter referred to as "the Specifications") are established to help Chuanshanjia SDK developers and operators (hereinafter referred to as "You") provide third-party SDK services in compliance with relevant laws, regulations, policies and standards, and protect users' personal information. Furthermore, these Specifications allow you to understand the compliance of Chuanshanjia data services and the security protection technology adopted, especially methods and measures to protect personal information and privacy.

I. Compliance requirements for personal information privacy

The following content aims to clarify key compliance requirements related to the collection and use of personal information in the course of using the Chuanshanjia SDK.

1. Apps require a standalone Privacy Policy

This Privacy Policy shall comply with national laws and regulations, national standards, relevant regulatory requirements and agreements between you and Chuanshanjia related to data security and personal information protection, and fully inform users of the inclusion and use of the Chuanshanjia SDK. Chuanshanjia SDK will obtain the following personal information and permissions of the end users of your Applications:

SDK name	Cooperation method	Personal information field and type	Usage and purpose
Chuanshanjia SDK	Ad cooperation	Device Information: [Android&iOs] Device brand, model, software system version, resolution, network signal strength, IP address, device language, sensor information and other basic information. [Android only] Android ID [iOS only] mobile phone system restart time, total disk space, total system memory space, number of CPUs and other basic information, IDFV You can choose whether to provide Chuanshanjia with such information to boost ad performance: [Android&iOs] Wireless SSID name, WiFi router MAC address, device MAC address (for iOs, only applicable to versions below iOS 3200) [Android only] device identifier(Such as IMEI, OAID, IMSI, ICCID, GAID (GMS Service only), MEID, device serial number build_serial, the specific fields differ depending on the software and hardware versions) [iOS only] device identifier (Such as IDFA, the specific fields differ depending on the software and hardware versions)	Ad placement, ad monitoring attribution, anti-cheating
		Apps Information: [Android only] developer name, app package name, version number, application status You can choose whether to provide Chuanshanjia with such information to boost ad performance: [Android only] Application list information	Ad placement, anti-cheating
		Ad Information: [Android&iOs] interactive data such as display, click and conversion of ads	Ad placement, ad monitoring attribution, anti-cheating
		Geographic Location: You can choose whether to provide Chuanshanjia with such information to boost ad performance: geographic location of the device	Ad trageting palcement and anti-cheating
		Performance Data: [Android&iOs] crash data, performance data, etc.	Reduce application crashes and provide stable and reliable services
		Other Information: carrier information and device time zone.	Ad placement, anti-cheating

Permissions	Function	Usage and purpose
READ_PHONE_STATE	[Optional] Read mobile device identification, etc.	Ad placement, ad monitoring attribution, anti-cheating
ACCESS_COARSE_LOCATION	[Optional] Access to location information	Precise advertising and anti-cheating
ACCESS_FINE_LOCATION	[Optional] Access to location information	Precise advertising and anti-cheating
ACCESS_WIFI_STATE	[Optional] Allow applications to access information about the Wi-Fi network	Ad placement, ad monitoring attribution, anti-cheating
WRITE_EXTERNAL_STORAGE	[Optional] Allow applications to write external storage	App download ad placement and ad material storage
READ_EXTERNAL_STORAGE	[Optional] Allow applications to read external storage	App download ad placement and ad material storage
QUERY_ALL_PACKAGES	[Optional] Access to list of application	Ad placement, anti-cheating

Different personal information may be obtained by different SDK versions. To protect the safety of End Users and the feasibility of the service, Chuanshanjia will continue to update the SDK version to improve security. Chuanshanjia will notify you of any SDK version updates by sending an in-site notification. Please update the SDK version in a timely manner. You shall be solely responsible for any issues caused due to your failure to promptly update the SDK.

2. You shall display the Privacy Policy within the app according to the requirements of national laws, regulations, policies and standards, including but not limited to:

You shall display the Privacy Policy in an independent and obvious manner, which means the Privacy Policy shall be displayed separately. When the app is opened for the first time, the user shall be prompted to read the Privacy Policy through pop-up windows or other obvious methods. The user must actively agree to the Privacy Policy. Once agreed to, the Chuanshanjia SDK will only be enabled to collect and process personal data. You should clearly inform users of the purpose, method and scope of collecting and using personal information. However, please note that reasons such as improving the service quality, enhancing the user experience, sending targeted information, and developing new products are not sufficient reasons to require users' permission to collect personal information. Users shall actively and independently agree to the Privacy Policy. Users' authorization shall not be obtained by default or via deception.

II. Compliance requirements for using Chuanshanjia SDK services

Before accessing the Chuanshanjia SDK, you should carefully read the Chuanshanjia Agreement, these Specifications, the User Agreement, and the Privacy Policy, and based on your app's Privacy Policy as well as your collection, storage, using, and sharing of personal information, you shall audit your own compliance procedures.

1. You understand and acknowledge that the purpose of the Chuanshanjia SDK is to collect personal data, and you acknowledge that data collection is required for the purpose of ad cooperation between Chuanshanjia and you. In order to present information or services of higher relevance to the end user, the Chuanshanjia SDK will optimise ad placement through computer algorithms based on the information collected to improve the accuracy of ad delivery.

2. You promise that you have formulated and published your app's Privacy Policy in accordance with relevant requirements, and within this Privacy Policy, you have clearly, unambiguously and conspicuously stated the necessity of the Chuanshanjia SDK to collect personal information, as well as the scope, methods and purpose of data collection. Meanwhile, you should ensure that when the app runs for the first time, the user is prompted to read your app's Privacy Policy and grant authorization via a pop-up window or other compliant methods. The Chuanshanjia SDK shall only be allowed to collect and process personal information once legal authorization has been obtained.

3. You have carefully read and understood the Chuanshanjia Agreement, these Specifications, the User Agreement, and the Privacy Policy and you promise that your collection, storage, using, and sharing of personal information via the Chuanshanjia SDK has been authorized and agreed to by the user. The aforementioned actions shall not violate relevant national laws and regulations, national standards, and the purposes agreed by both parties.

4. You promise to abide by the relevant laws and regulations regarding the protection of minors and children’s personal information. If your app possibly provides services to children under the age of fourteen, you promise to take relevant measures to ensure that you receive authorization from their guardians.

5. You guarantee that you have clearly informed users in the app's Privacy Policy that Chuanshanjia is your ad partner, and informed users of the purpose, method, and scope of personal information collected and used by the Chuanshanjia SDK.

6. You shall be solely responsible for resolving any claims or any legal disputes in any form raised by your users or third parties against Chuanshanjia arising from your violation of the Chuanshanjia Agreement, these Specifications, the User Agreement, and the Privacy Policy. You should compensate for all losses caused to Chuanshanjia and their associated entities, if any.

7. You guarantee that the data obtained by Chuanshanjia shall be kept confidential during the period of cooperation or following the termination of cooperation with Chuanshanjia and you shall take all legal measures to prevent the above-mentioned data from being spread, disseminated, disclosed, duplicated, abused, and accessed by unauthorized persons so as to avoid the data being used beyond the purpose of cooperation between the two parties.

8. Before the two parties enter into a cooperation agreement, Chuanshanjia has the right to conduct a data compliance due diligence check on you for risk assessment, review the certificates and documents verifying the personal information you have acquired legally as well as the User Agreement and the Privacy Policy published on the official website. Chuanshanjia has the right to request you to revise the content of the User Agreement and the Privacy Policy or improve the authorization mechanism and other compliance mechanisms in any case of non-compliance. All your obligations and responsibilities under the Chuanshanjia Agreement, the Specifications, the Chuanshanjia User Agreement, and the Privacy Policy do not constitute any form of exemption due to the right for Chuanshanjia to perform risk assessment under this clause. You are still required to perform the obligations and assume legal responsibilities herein.

III. Data security capabilities of Chuanshanjia

Chuanshanjia attaches great importance to data security and will endeavor to take reasonable security measures, including technical and administrative measures, to protect data from improper use, unauthorized access, public disclosure, use, modification, damage, loss, or leakage. We will use encryption technology, anonymization, and other reasonably practicable means that are not inferior to those adopted by industry peers to protect data security, use security protection mechanisms to protect your personal information against malicious attacks, and establish a special security department, security management system and data security process to ensure data security. We will adopt strict data usage and access systems to ensure that only authorized personnel may access your personal information and we will conduct security audits on the relevant data and technologies from time to time. Although the reasonable and valid measures mentioned above have been adopted and the standards required in applicable laws and regulations have been complied with, please understand that in the Internet industry, it is impossible to always ensure the total security of information even if we try our best to enhance security measures due to technical limitations and various possible malicious techniques. However, we will endeavor to ensure the security of the personal information you provide to us to the greatest extent possible.

You acknowledge and understand that the system and communication network for your access to our services may fail due to factors beyond our control. We therefore strongly suggest that you adopt active measures to protect the security of your personal information, including but not limited to using strong passwords, regularly modifying the passwords, and not disclosing data including your passwords to others. We will formulate contingency plans and, in the event of a security event involving user information, immediately implement such plans to prevent the expansion of the impact and consequences of such security events. Once any personal data security event (leakage, loss, etc.) occurs, we will, as required by relevant laws and regulations, promptly notify you of the following: basic information and possible impact of the security event, handling measures we have taken or will take, suggestions on how to prevent and lower your risks on your own, as well as the corresponding remedial measures. By logging out of Chuanshanjia and its related services and browsing or using other websites, services, and content resources, we will not be able or obligated to protect any personal information you submit to the software and websites outside of Chuanshanjia and its related services, irrespective of whether your login, browse, or use of the aforesaid software and websites based on links or instructions provided on Chuanshanjia. Meanwhile, we will also report the handling of the security event involving user information as required by the competent authorities. By logging out of Chuanshanjia and its related services and browsing or using other websites, services, and content resources, we will not be able or be obligated to protect any personal information you submit to the software and websites outside of Chuanshanjia and its related services, irrespective of whether you login, browse, or use any of the aforesaid software and websites based on links or instructions provided on Chuanshanjia.

If you have any questions, please contact Chuanshanjia immediately.