# iFLYTEK Open Platform Privacy Policy

This Privacy Policy only applies to the iFLYTEK Open Platform website and artificial intelligence API/SDK products (hereinafter referred to as "products") or services of SYNLAN TECHNOLOGY PTE.LTD. (hereinafter referred to as "SYNLAN" or "we").

Last modified: November 7, 2023

Effective date: November 7, 2023

SYNLAN understands the importance of personal information to you and will do our utmost to protect your personal information. We are committed to maintaining your trust in us and abide by the following principles to protect your personal information: consistency of powers and responsibilities, clear objectives, choice and consent, least enough, ensuring security, subject participation, openness and transparency, etc. At the same time, IFLYTEK undertakes that we will take appropriate security measures to protect your personal information in accordance with the mature industrial security standards. Please read and understand this Privacy Policy carefully before using our products (or services), and confirm to understand our rules on the processing of your personal information. Once you click to confirm acceptance of this Privacy Policy or after the Privacy Policy is updated, your continued use of this software means that you acknowledge and accept all the contents of this Privacy Policy (including the updated version), and agree that SYNLAN will collect, use, save, share, transfer or disclose your relevant personal information.

# Special Notes:

If a developer integrates the capabilities and services provided by the iFLYTEK Open Platform into his own products or services or uses the services provided by the iFLYTEK Open Platform in any form, the developer shall undertake to:

1. Comply with all applicable laws, policies and regulations related to collecting information from end users.

2. Disclose to the end users that the iFLYTEK Open Platform’s services are used in their products or services, and how the iFLYTEK Open Platform collects and processes data. In order to fulfill the above obligations, the developer can provide a link in a conspicuous place in the product and service agreement or privacy policy regarding the use of the IFLYTEK open platform’s services to point to this Privacy Policy.

3. Obtain sufficient, necessary and clear authorization, consent and permission from the end users, allowing us to use the collected and processed information for the services and purposes listed in this Privacy Policy, in compliance with relevant laws and regulations.

4. Has provided an easy-to-use user rights realization mechanism to the end users, explaining how and when the users can exercise their right to choose, how to access, correct their personal information, exercise the right to delete, and change the scope of their authorization or consent.

This Privacy Policy does not apply to services provided by third parties that are displayed in, linked to, or repackaged into our services using third-party privacy policies. For the services displayed in, linked to, or repackaged into our services, we do not understand or cannot control their actions, and therefore SYNLAN is not responsible for their actions; before you have reviewed and accepted their privacy policies, please access or use their services with caution. This Privacy Policy will help you understand the following:

1. Definition and interpretation

2. How we collect and use your personal information

3. How we use cookies and similar technologies

4. How we share, transfer and publicly disclose your personal information

5. How we store and protect your personal information

6. Your rights

7. How we handle minors' personal information

8. How your personal information transferred globally

9. How this Privacy Policy updated

10. Contact us

# I. Definition and Interpretation

# 1. Personal information

Personal Information refers to all kinds of information recorded by electronic or other methods that can identify a natural person’s personal identity alone or in combination with other information, including but not limited to the natural person ’s name, date of birth, ID number, personal biometric information, address and telephone number.

# 2. Personal sensitive information

Personal Sensitive Information refers to personal information that, once disclosed, illegally provided or misused, may endanger the security of the person and property, easily lead to damage to personal reputation, physical and mental health, or discriminatory treatment. Personal Sensitive Information includes but is not limited to ID number, personal biometric information, bank account number, communication content, health and physiological information.

# 3. Subject of personal information

The subject of personal information refers to the natural person identified by personal information.

# 4. De-identification

De-identification refers to the process during which personal information is subject to technical processing so that it is impossible to identify the subject of personal information without resorting to additional information.

# 5. Anonymization

Anonymization refers to the process during which personal information is subject to technical processing so that it is impossible to identify the subject of personal information and the processed information cannot be recovered.

# 6. Device

Device refers to a device that can be used to access the IFLYTEK Open Platform’s services, such as a desktop computer, laptop, tablet, or smartphone.

# 7. Unique device identifier

Unique Device Identifier (exclusive ID or UUID) refers to a string of characters programmed into the device by the device manufacturer and can be used to uniquely identify the corresponding device (the IMEI number of the mobile device). The unique device identifier has multiple usages, including being used to provide advertisements when cookies are not available.

# 8. IP address

Each device connected to the Internet is assigned a number which is called an Internet Protocol (IP) address. These numbers are usually assigned based on geographic area. IP addresses are often used to identify the location where the device is connected to the Internet.

# 9. GPS

Abbreviation for Global Positioning System. The GPS signal receiver on the device you use can receive signals from GPS satellites and use the information transmitted from such satellites to calculate your location.

# 10. WIFI

WiFi is a technology that allows electronic devices to be connected to a wireless local area network (WLAN), commonly referred to as a wireless network.

# 11. Base station

Base Station, i.e. a public mobile communication base station, is a form of radio station. It refers to a radio transceiver station that exchanges information with a mobile phone terminal through a mobile communication switching center in a certain radio coverage area.

# 12. SSL

SSL (Secure Socket Layer), also known as Secure Socket Layer, is a security protocol implemented on the Transmission Communication Protocol (TCP / IP). SSL supports various types of networks and provides three basic security services at the same time, all of which use public key and symmetric key technologies to achieve the confidentiality of information.

# 13. Information collection technology

The "automatic collection" described by the iFLYTEK Open Platform in the "the iFLYTEK Open Platform Privacy Policy" includes the following methods:

1. Cookie: Cookie refer to a small text file that is put in the client (in your computer, mobile phone or other smart terminal) by the server when you browse the web, and it can be used to improve your experience.

2. Web beacon: Web beacon is an electronic image file or other technology embedded in a website or email, which can be used to count the number of visitors, record whether and when you read an email or the website, or to use certain cookies.

3. Log files: Log files contain some data collected automatically. Such data includes Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), referring / exit pages, operating system, date / time stamp, and clickstream data.

4. ET Tag: ET Tag is the HTTP protocol header transmitted between the Internet browser and the Internet server. It can replace cookies to track individual users, so that we can understand and improve our services.

5. JavaScript: JavaScript is a programming language used to make more interactive and dynamic web pages. JavaScript can set, read and delete cookies.

# II. How we collect and use your personal information

The iFLYTEK Open Platform provides you with artificial intelligence product capabilities, services and solutions through the Internet. You can obtain and purchase the AI Service SDK and API interface through the iFLYTEK Open Platform. The iFLYTEK Open Platform website collects and uses your personal information for the purposes described below in accordance with the principles of lawfulness, legitimacy and necessity.

# 1. Providing you with the iFLYTEK Open Platform’s products and services

1. Information you filled in when registering your account: If you choose to use the functions of the iFLYTEK Open Platform, you need to register an iFLYTEK Open Platform account. When registering an iFLYTEK Open Platform account with a mobile phone number or email address, you will be asked to provide a mobile phone number and set a login password to protect your account from unauthorized entry.

2. Information submitted by you through our customer service center or during participating in the events held by SYNLAN: The questionnaire filled out when you participate in the iFLYTEK Open Platform’s online activities may contain the information like your name, phone number, email, and home address.

3. Voice, text, and image information that you submit when you experience product functions: We will collect your speech content, text information, and image information when you use the speech synthesis, voice dictation, voice transcription, text recognition, image recognition, and online translation experience provided by the iFLYTEK Open Platform website because the collection of such information is necessary to achieve the above functions. We will process your voice in real time and feed it back to you without saving your data more than a week.

4. Information you submitted to SYNLAN by other means: When you enter the account information page of the iFLYTEK Open Platform, you can voluntarily fill in the nickname,and location information. SYNLAN may use this information to create user portraits in order to provide you with more accurate and personalized product services.

5. Operation log information: When you use the iFLYTEK Open Platform website and the API / SDK products or services provided by the platform website, the system may automatically collect certain information through cookies or other methods to save it as a relevant network log. The purpose of collecting such information is to: Improve and optimize product experience, and ensure service stability and network security through data statistics. Such information includes: Your detailed usage of the iFLYTEK Open Platform, including your product service usage record, search and query content, visited page address, browser type, network status, operator, language used, access date and time, system Records of activities and web pages you visit.

# 2. Pushing and displaying customized content for you

Based on the information collected, we can recommend the content that may be of interest to you, including but not limited to recommending to or showing you the latest artificial intelligence products or third-party promotional information, sending marketing materials we think may be of interest to you, or sharing information with the iFLYTEK Open Platform’s related corporation with your consent, so that they can send you information about their products or services and marketing materials they think may be of interest to you.

# 3. Continuous development and optimization of products and services

We use the collected information to protect the business operations of SYNLAN and our affiliates, related corporations and partners, such as evaluating, maintaining, and improving the performance of products and services. If the system of the iFLYTEK Open Platform fails, the iFLYTEK Open Platform will record and analyze the information generated during failure of the system, and optimize the relevant services of the iFLYTEK Open Platform. In order to iterate and develop new products and services, we may statistically analyze the collected information to assist in decision-making, but the resulting data analysis results will not contain any of your identification information. For example, the iFLYTEK Open Platform invites users to participate in the "User Experience Improvement Program" in the provision of certain functions or services. For the users who join the User Experience Improvement Program, the iFLYTEK Open Platform will make statistics on the use of various functions of products or services as necessary. In this way, the quality of products or services can be improved by analyzing statistical data, and innovative products or services that are helpful to users will be launched. If you are not willing to participate in the program, you can choose to disable the relevant functions in the products / services.

# 4. Security guarantee

The iFLYTEK Open Platform will use your information for identity verification, security precautions, anti-fraud monitoring, archive backup, and customer security service purposes to improve the security of products and services.

# 5. Other purposes

The iFLYTEK Open Platform may also collect and use your personal information where such personal information is:

• directly related to national security and national defense security;
• directly related to public security, public health, and major public interests;
• directly related to criminal investigation, prosecution, trial and execution of judgments;
• necessary to protect your or other people's life, property and other important legal rights and interests, but it is difficult to obtain your consent;
• disclosed to the public by yourself;
• necessary to sign and perform the contract according to your requirements;
• required to maintain the safe and stable operation of the services provided, for example: Identifying and handling failures of products or services;
• necessary for academic research institutions to conduct statistics or academic research based on public interest, and the information contained in the results is de-identified when the results of academic research or descriptions are provided externally.

# 6. Supplementary notes

When we intend to use the information for other purposes not specified in this Privacy Policy, we will ask for your consent in advance. When we intend to use the information collected for a specific purpose for other purposes, we will ask for your consent in advance.

# III. How we use cookies and similar technologies

# 1. Cookie

To ensure the proper functioning of the website and better customer experience, we store small data files called cookies on your computer or mobile device. Cookies usually contain identifiers, site names, and some numbers and characters. With the help of cookies, the website can store data such as your preferences or products in the platform. We will not use cookies for any purpose other than those described in this Privacy Policy. You can manage or delete cookies according to your preferences. For details, see AboutCookies.org. You can clear all cookies saved on your computer, and most web browsers have a function to block cookies. However, if you do this, you will need to change the user settings yourself each time you visit our website.

# 2. Web beacons and pixel tags

In addition to cookies, we may also use other similar technologies such as web beacons and pixel tags on our website. For example, the email sent to you by us may contain a click URL that links to the content of our website. If you click the link, we will track the click to help us understand your product or service preferences and improve customer service. Web beacons are usually transparent images embedded in a website or email. With the help of pixel tags in emails, we can know whether emails are opened. If you do not want your activity to be tracked in this way, you can unsubscribe from our mailing list at any time.

# 3. Do Not Track

Many web browsers are set with the Do Not Track function, which can make Do Not Track requests to websites. At present, major Internet standards organizations have not established policies to regulate how websites should respond to such requests. However, if Do Not Track is enabled in your browser, then all of our websites will respect your choice.

# IV. How we process, share, transfer, and publicly disclose your personal information

# 1. Entrusted processing of information

We will verify this information through a credit reporting company recognized by the competent national credit rating business authority. We will sign strict confidentiality agreements with companies, organizations and individuals we entrust to process personal information, and require them to process personal information in accordance with our requirements, this Privacy Policy and any other related confidentiality and security measures.

# 2. Sharing of information

1. The iFLYTEK Open Platform will not share your personal information with companies, organizations and individuals other than the iFLYTEK Open Platform service providers, except for the following circumstances:

• Your explicit consent or authorization has been obtained in advance;
• Your personal information is shared as necessary under applicable laws and regulations, legal process requirements, mandatory administrative or judicial requirements;
• When our products or services are shared with our other products or services or with our affiliated companies, your personal information may be shared with affiliated companies of SYNLAN. We will only share the necessary personal information and are bound by the purpose stated in this Privacy Policy. If any of our affiliated and related companies intends to change the use and processing purpose of your personal information, it will seek your consent again.
• Sharing with authorized partners: For the purposes stated in this Privacy Policy, some of our services are provided jointly by us and our authorized partners. We may share some of your personal information with our partners to provide customers with better services and user experience. We will only share your personal information for legal, legitimate, necessary, specific and clear purposes, and only share the personal information necessary to provide services. Our partners have no right to use the shared personal information for any other purpose. Currently, our authorized partners include the following types:

(1) Authorized partners in advertising and analysis services. Unless your consent is obtained, otherwise we will not share your personally identifiable information (referring to the information that can identify you, such as name or e-mail, through which you can be contacted or identified) with our advertising and analysis services partners. We will provide these partners with information about the coverage and effectiveness of their advertisements without providing your personally identifiable information, or we will summarize this information so that they will not identify you personally.

(2) Suppliers, service providers and other partners. We send information to suppliers, service providers and other partners who support our business. These supports include providing technical infrastructure services, analyzing how our services are used, measuring the effectiveness of advertising and services, providing customer services, or conducting academics research and investigation. For companies, organizations and individuals with whom we share personal information, we will sign strict confidentiality agreements with them and require them to process personal information in accordance with our instructions, this Privacy Policy and any other related confidentiality and security measures.

# 3. Transfer of information to third parties

We will not transfer your personal information to any company, organization or individual, except for the following circumstances:

1. Your explicit consent is obtained: After obtaining your explicit consent, we will transfer your personal information to other parties;

2. The information is provided as required by applicable laws and regulations, legal process requirements, mandatory administrative or judicial requirements;

3. If any merger, acquisition or bankruptcy liquidation involves the transfer of your personal information, we will require new companies and organizations that hold your personal information to continue to be bound by this Privacy Policy, otherwise we will require the companies and organizations to ask you for authorization or consent again.

# 4. Disclosure of information

We will only publicly disclose your personal information in the following circumstances:

1. Your explicit consent is obtained;

2. Disclosure based on law: We may publicly disclose your personal information in accordance with laws, legal procedures, litigation or mandatory requirements of government authorities.

# 5. Other purposes for sharing, transferring, and disclosing personal information

The iFLYTEK Open Platform may also disclose your personal information where such personal information is:

1. related to national security and national defense security;

2. related to public security, public health, and major public interests;

3. related to criminal investigation, prosecution, trial and execution of judgments;

4. necessary to protect your or other people's life, property and other important legal rights and interests, but it is difficult to obtain your consent;

5. disclosed to the public by yourself.

# V. How we store and protect your personal information

# 1. How do we store information

1. Location to store information: the iFLYTEK Open Platform complies with laws and regulations, and materials collected about you will be stored on the server of the iFLYTEK Open Platform in Singapore, except where the transfer of personal data out of Singapore is in accordance with applicable laws and regulations, including the PDPA.

2. Time limit for storing information: Generally, the iFLYTEK Open Platform only retains your personal information for the shortest time necessary to achieve the purposes for which it was collected, which would have been notified to you at the point of collection. Generally, the personal information used to identify you and reflect related activities will be retained until you cancel your account as a user, unless the following applies:

• To comply with applicable laws and regulations and other relevant regulations;
• To comply with the provisions of court decisions, rulings or other legal procedures;
• To comply with the requirements of relevant government agencies or legally authorized organizations;
• The iFLYTEK Open Platform has reason to believe that it is necessary to comply with relevant laws and regulations;
• For the purposes to perform relevant service agreements or this Privacy Policy, safeguard the public interest, and protect the personal and property safety of the iFLYTEK Open Platform’s customers, the iFLYTEK Open Platform, other users or employees, or other legitimate rights and interests. After you stop using the iFLYTEK Open Platform, the iFLYTEK Open Platform will stop the collection and use of your information, unless otherwise stipulated by laws and regulations or regulatory authorities. When the relevant services of the iFLYTEK Open Platform stop operating, the iFLYTEK Open Platform will notify you including pushing notifications and announcements, and delete your personal information in the server or anonymize it within a reasonable period of time.

# 2. Data Security Measures

1. The iFLYTEK Open Platform will adopt security protection measures that comply with industry standards, including establishing reasonable system specifications and security technologies to prevent your personal information from unauthorized access, use and modification to avoid data damage or loss. For example, the iFLYTEK Open Platform’s network services are protected with encryption technologies such as transport layer security protocols, providing browsing services through https and other methods, to ensure the security of user data during transmission; we adopt encryption technologies (TLS, SSL) , anonymization and protection mechanisms to encrypt and store user personal information and isolate it through isolation technology; we manage and regulate the storage and use of personal information by establishing a data classification and grading system, data security management specifications, and data security development specifications; we only allow the iFLYTEK Open Platform’s employees and partners as well as affiliates who need to know this information to access personal information through confidentiality agreements with use information contacts and other methods, and set up strict access rights control and monitoring mechanisms to this end, and require all personnel who come to contact with your personal information to fulfill the corresponding confidentiality obligations. If they fail to fulfill these obligations, they will be held legally responsible or their cooperation with the iFLYTEK Open Platform will be suspended; we will hold security and privacy protection training courses to strengthen employees' awareness of the importance of protecting personal information.

2. We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected. We will only retain your personal information for the period required to achieve the purpose stated in this Privacy Policy, unless otherwise permitted under applicable law.

3. The Internet is not an absolutely secure environment, and email, instant messaging, and communication with other users are not encrypted. We strongly recommend that you do not send personal information through such methods. Please use a complex password to help us keep your account secure.

4. The Internet environment is not completely secure. The iFLYTEK Open Platform will make every effort to ensure or guarantee the security of any information you send to the iFLYTEK Open Platform. If the physical, technical or management protection facilities of the iFLYTEK Open Platform are damaged, the information is illegally authorized to be accessed, publicly disclosed, tampered with, or destroyed, and your legal rights and interests are damaged as a result, we will bear the corresponding legal responsibility.

5. Once any personal information security incident occurs unfortunately, the iFLYTEK Open Platform will promptly inform you of the following in accordance with the requirements of laws and regulations: The basic situation and impact of the security incident, the disposal measures taken or to be taken by the iFLYTEK Open Platform, suggestions for your active prevention and for reducing risks, and remedial measures for you, etc. The iFLYTEK Open Platform will promptly inform you of the relevant circumstances of the incident by email, letter, telephone, push notification, etc. When it is difficult to inform the personal information subjects one by one, the iFLYTEK Open Platform will adopt a reasonable and effective way to make an announcement. Besides, the iFLYTEK Open Platform will also actively report the handling process of the personal information security incident in accordance with the requirements of regulatory authorities.

# VI. Your Rights

In accordance with relevant laws, regulations, standards, and common practices in other countries and regions, we guarantee that you may exercise the following rights to your personal information. You can refer to the following steps for related operations:

# 1. Accessing your personal information

You can access basic information such as nickname, email address, mobile phone number, login password, etc. through the following steps:

1. Enter the iFLYTEK Open Platform website and log into your account of the Platform;

2. Click the account name you have logged in and click the basic information menu;

3. Click on basic information or security settings;

4. View the information you need. The iFLYTEK Open Platform is related to website business, and the specific operations may vary slightly with the iteration of the version. If failing to access these personal information through the above operations and pages, you can contact us at any time through the iFLYTEK Open Platform-[Technical Support]-[Submit Request].

# 2. Correcting Your Personal Information

You can change the basic information such as nickname, location, mobile phone number, etc. through the following steps:

1. Enter the iFLYTEK Open Platform website and log into your account of the Platform;

2. Click the account name you have logged in and click the basic information menu;

3. Click the basic information or security settings;

4. Change the information as needed. Different versions of the iFLYTEK Open Platform may have slight difference in operations. When you find that your personal information processed by us is wrong, you have the right to ask us to make a correction. If you are unable to correct this personal information through the above operations and pages, you can contact us at any time through the iFLYTEK Open Platform-[Technical Support]-Submit Request.

# 3. Deleting Your Personal Information

You can delete personal information through the following steps: Please submit the request for deletion through the iFLYTEK Open Platform- [Console]-[Requests]-[Submit Request]. After the offline verification is done and the corresponding risks are notified to you, we will delete your personal information as requested by you. According to relevant laws, the necessary condition for using the artificial intelligence cloud service provided by the iFLYTEK Open Platform is real-name authentication. If the related real-name authentication information is deleted, the service will be stopped. In the following circumstances, you can submit a request to us to delete your personal information:

1. Our handling of your personal information violates laws and regulations;

2. We collect and use your personal information without your consent;

3. Our handling of personal information violates the agreement with you;

4. You no longer use our products or services, or you have cancelled your account;

5. We no longer provide products or services to you. If we decide to respond to your request for deletion, we will also notify the entities that have obtained or are obtaining your personal information from us and ask them to delete your personal information in time, unless otherwise stipulated by laws and regulations, or such entities have obtained your authorization separately. When you delete information from our services, we may not immediately delete the corresponding information in the backup system, but will delete this information when the backup is updated.

# 4. Changing the scope of your authorized consent or withdrawing your authorization or consent

You can change the scope of your authorization to the iFLYTEK Open Platform to continue to collect personal information or withdraw your authorization by deleting information. Each business function cannot be achieved without certain basic personal information. For the collection and use of additionally-collected personal information, you can issue or withdraw your authorization or consent at any time. After you withdraw your consent or authorization, the iFLYTEK Open Platform cannot continue to provide you with the services corresponding to the consent or authorization withdrawn by you, and will no longer process your corresponding personal information. However, your decision to withdraw your consent or authorization will not affect the processing of personal information previously carried out based on your authorization.

# 5. Cancelling of account

You can cancel your account through the following steps: Please submit a request for canceling your account through the iFLYTEK Open Platform- [Console]-[Requests]-[Submit Request]. After the offline verification is done and the corresponding risks are notified to you, we will perform the account canceling for you. The products or services provided by the iFLYTEK Open Platform are used and managed through the account registered in the iFLYTEK Open Platform website. Canceling the account will result in the stop of all services provided under the account. The specific operation process is given in: Account Cancellation and Deletion Process

# 6. Responding to your above request

The iFLYTEK Open Platform will adopt appropriate technical means to ensure that you can inquire, supplement, correct or delete your personal data, or apply with the iFLYTEK Open Platform to add, correct or delete relevant information through the feedback or complaint channels provided by the iFLYTEK Open Platform in terms of products or services; the iFLYTEK Open Platform will handle your request according to the relevant process after receiving it. In order to ensure the security, you may need to provide a written request or prove your identity in another way as required in the handling process. The iFLYTEK Open Platform may require you to verify your identity before handling your request. The iFLYTEK Open Platform will make a reply within fifteen days. We will not charge any fees for your reasonable requests, but for your repeated requests that exceed the reasonable limit, the iFLYTEK Open Platform will charge you a reasonable fee as appropriate after providing you with a written estimate of such fee (except in relation to your requests to correct your personal information). For the requests that are unreasonably repeated, require too many technical means (e.g. requiring to develop a new system or fundamentally change existing practices), pose a risk to the legal rights of others or are disproportionately impractical (e.g. involving information stored on backup tapes), the iFLYTEK Open Platform may refuse. If you cannot access, correct or delete your personal information, or you need to access, correct or delete other personal information generated when you use the iFLYTEK Open Platform, or you think that the iFLYTEK Open Platform has any violation of laws and regulations or of the agreement on the collection or use of personal information, you can contact the iFLYTEK Open Platform through the official feedback channel of related products or services announced by the iFLYTEK Open Platform. We will not be able to respond to your requests if any of the exceptions under Fifth Schedule of the PDPA apply.

# 7. How we handle children’s personal information

The iFLYTEK Open Platform attaches great importance to the protection of children's personal information. The iFLYTEK Open Platform protects children's personal information in accordance with relevant national laws and regulations. We treat anyone under 14 years old as a child though local laws and customs define children differently. Our products or services are mainly for adults, and children cannot create their own user accounts without the consent of parents or legal guardians. In the case of collecting personal information of children with the consent of parents or legal guardians, the iFLYTEK Open Platform will only use or publicly disclose this information when allowed by law, after parents or legal guardians expressly agree, or necessary to protect children. If we find that we have collected children ’s personal information without prior verifiable parental consent, we will try to delete the relevant data as soon as possible.

# VIII. How your personal information is transferred around the world

In principle, the personal information we collect within the territory of Singapore is stored in the territory of Singapore. However, we provide products or services through resources and servers all over the world, this means that after obtaining your authorization or consent, your personal information may be transferred to the overseas jurisdiction of the country/region where you use the product or service, or you may receive interviews from such jurisdictions. Such jurisdictions may have different data protection laws, or even no relevant laws. In such cases, we will ensure that your personal information is adequately and equally protected as it is in Singapore. We may also ask for your consent to transfer personal information abroad, or implement security measures such as de-identification of data before the data is transferred abroad.

# IX. How to update this Privacy Policy

The Privacy Policy of the iFLYTEK Open Platform may change from time to time.

1. The iFLYTEK Open Platform will not reduce your rights under this Privacy Policy without your explicit consent. The iFLYTEK Open Platform will post any changes to the Privacy Policy on a dedicated page. At the same time, the iFLYTEK Open Platform will archive the old version of this Privacy Policy for your reference.

2. For major changes, the iFLYTEK Open Platform will also provide more prominent notifications, including the iFLYTEK Open Platform will notify you through website publicity and even provide you with pop-up prompts. The major changes referred to in this Privacy Policy include but are not limited to:

• The service mode of the iFLYTEK Open Platform has undergone major changes, such as the purpose of processing personal information, the type of personal information processed, and the use mode of personal information, etc.;
• The iFLYTEK Open Platform has undergone major changes in control and other aspects, such as owner changes caused by mergers and acquisitions, etc.;
• The main objects of personal information sharing, transfer or public disclosure have changed;
• There are major changes in your rights to participate in the processing of personal information and how you exercise them;
• The iFLYTEK Open Platform’s departments responsible for handling personal information security, contact information and complaint channels have changed;
• When there is a high risk as indicated by the personal information security impact assessment report;
• With the implementation of policies or laws, changes are made in response to national policies or laws and regulations.

# X. Contact us

If you have any questions or suggestions about this Privacy Policy in the process of using the iFLYTEK Open Platform, please contact us based on the following contact information:

E-mail: openplatform@iflytek.com

DPO: privacy@synlantech.com

Work Order: iFLYTEK Open Platform-[Console]-[Requests]-Submit Request. In order to ensure that we can efficiently handle your problems and give you feedback timely, you need to submit your identification certification, effective contact information, written requests and related evidences. We will process your request after verifying your identity. In general, we will make a reply within 72 hours. If you are dissatisfied with our response, especially if you believe that our personal information processing activities have damaged your legal rights and interests, you can also seek solutions through the following external channels: to file a lawsuit with [the court with jurisdiction in the place where SYNLAN resides].