Privacy Policy隐私

Privacy Policy

Updated Date: January 19, 2026 Effective Date: January 19, 2026

Dear Users of MetaGrav Official Website: We have updated the MetaGrav Official Website Privacy Policy (hereinafter referred to as "this Policy"). This update adjusts matters including scenarios of personal information processing. We recommend you review this policy promptly to fully understand relevant changes.

Summary

MetaGrav is established in accordance with the laws of the People's Republic of China. We value and protect users’ personal information. This Policy explains how we process and protect your personal information, and how you can exercise your rights over your personal information. This Policy applies to MetaGrav official website (domain: metagrav.com).

This Policy will help you understand the following contents:

How we collect and use your personal information
How we use Cookies and similar technologies
How we share, transfer and publicly disclose your personal information
How your personal information is transferred globally
How we store your personal information
How we protect your personal information
How you manage your personal information
How we handle children’s personal information
How this Policy is updated
How to contact us

MetaGrav fully understands the importance of personal information to you and strives our best to ensure the safety and reliability of your personal information. We always respect your trust and strictly abide by principles for personal information protection: lawfulness, legitimacy, necessity and good faith, purpose limitation, consent by choice, data minimization, security guarantee, consistent rights and liabilities, user participation, openness and transparency. Meanwhile, MetaGrav commits to adopting corresponding security protection measures in accordance with industry-standard security practices to protect your personal information.

Please read and understand this Policy carefully before using our products or services.

1. How We Collect and Use Your Personal Information

Personal information refers to all information recorded electronically or in other forms relating to identified or identifiable natural persons, excluding anonymized information. MetaGrav collects and uses your personal information solely for the purposes described in this Policy. When you browse MetaGrav official website, you may fill in or upload personal information on different pages. The specific scenarios are as follows:

(1) Customer Service & Contact Us

Account Registration and Login To create your account, you may need to provide MetaGrav with your mobile phone number, email address and login password. During or after account registration, you may optionally provide your nickname and avatar to complete your profile. Failure to provide such optional information will not affect your use of basic functions on MetaGrav official website.
Respond to your support tickets You may submit support tickets to us. We will collect information including product type, requirement description and attachments, problem description and attachments, urgency level, enterprise/entity name, industry, province/city, contact person, contact phone number, contact email, device serial number, App account, purchase channel, delivery address, invoice title and tax ID, so that we can contact you and respond to your requests in a timely manner.

After receiving your equipment maintenance ticket, we will provide after-sales and maintenance support and may charge service and maintenance fees under certain circumstances. You may choose online payment or corporate bank transfer. If you select online payment, the payment service is provided by Alipay. Alipay will collect your order information, transaction records and payment records to verify transactions. You may refer to Alipay Privacy Policy for more details. If you choose corporate transfer, we will collect your payment receipt screenshot to confirm payment and proceed with after-sales maintenance.

Respond to your complaints To improve service quality, you may submit complaints. We will collect complaint type, associated ticket, complaint description and attachments, contact phone number and contact email to follow up and reply to your complaint.
Submit discovered vulnerabilities While using our products or services, you may submit discovered vulnerabilities. We collect vulnerability title, vulnerability name, vulnerability category, detailed description, relevant files, contact email and verification code, so we can confirm and fix vulnerabilities and notify you of progress when necessary.

(2) Purchase and Delivery of Products or Services

You may click "Purchase / Cooperation" on the website to buy our products. For consumer-grade purchases, you will be redirected to our official flagship store on Tmall. For industrial-grade purchases, we collect your name, country/region, mobile number, email address, company name, industry, project city, delivery address, purchased product name/model and remarks to arrange purchase coordination.

You may also click Customer Service — Place Order, or click Online Consultation — New Ticket — Product Purchase to contact us for procurement. In such cases, we collect your enterprise name, industry, province/city, contact person, phone number, contact email, required product type, requirement description, attachments and urgency to match suitable products for you.

(3) Newsletter Subscription

If you wish to receive updates and new service announcements, you may subscribe on our News page. We collect your email address to send you information that may interest you. You may unsubscribe following the instructions in the email if you no longer wish to receive such communications.

(4) AI Assistant / AI Document Assistant

When you use the AI assistant or AI document assistant on MetaGrav website, we collect your input content to answer your inquiries. We will not use your personal information for AI model training.

(5) Search

When using the website search function, we collect your search terms to deliver accurate search results.

(6) Job Applications

If you want to join our team, we collect your name, mobile number, major, school, email and resume information. We use this information to assess your suitability for open positions, communicate regarding job opportunities and proceed with recruitment and onboarding procedures.

(7) Become Our Supplier

If you intend to become our supplier, we collect the following information: (1) Business contact information: job title, name, email, mobile number, phone and fax; (2) Company basic information: registered enterprise name, registered address, taxpayer identification number, business license photo and detailed address; (3) Company qualification documents; (4) Verification code.

We use this information to evaluate potential supplier qualifications, communicate for formal procurement cooperation and carry out follow-up procurement processes. You may refer to the New Supplier Registration Agreement for further details.

(8) Use MetaGrav Products or Services

When using MetaGrav products and services, you may need to provide information to enable normal functions, including mobile number, email, website operation instructions, device identifiers, device model, OS version, IP address of devices and products, product control data and logs, content uploaded when interacting with products (images, voice messages), product geolocation, order information, region and time information, depending on product business scenarios. If you refuse to provide such information, we cannot deliver corresponding product or service functions, but this will not affect other functions of MetaGrav official website.

(9) Exceptions to Authorization Consent

You acknowledge that we may collect and use your personal information without obtaining your consent under the following circumstances:

Related to national security or national defense security;
Related to public security, public health and major public interests;
Related to criminal investigation, prosecution, trial and judgment enforcement;
Necessary to respond to public health emergencies or to protect the life, health and property safety of you or other natural persons in urgent situations;
The personal information is voluntarily disclosed to the public by you;
Personal information collected from legally publicly available sources such as legitimate news reports and government information disclosure;
Necessary for concluding a contract at your request;
Necessary to maintain the secure and stable operation of our products and/or services, such as detecting and resolving product/service failures;
Necessary for legitimate news reporting;
Statistical or academic research conducted by academic institutions for public interests, with de-identification applied to personal information in published research results;
Related to our performance of statutory obligations;
Other circumstances stipulated by laws and regulations.

2. How We Use Cookies and Similar Technologies

(1) Cookies

To keep the website running normally, we store small data files called Cookies on your computer or mobile device. Cookies usually contain identifiers, site name, and a set of numbers and characters. With Cookies, the website can verify your identity, guarantee data and service security, and deliver better products and services.

We will not use Cookies for purposes outside those stated in this Policy. You may manage or delete Cookies by yourself. You can clear all Cookies stored on your device. Most web browsers include functions to block Cookies. If you disable Cookies, you will need to manually adjust settings each time you visit our website. Please refer to official browser guides for instructions on changing browser settings.

(2) Technologies Similar to Cookies

Besides Cookies, we may use web beacons, pixel tags and other similar tracking technologies on the website. For example, emails we send may contain clickable URLs linking to our website content. When you click such links, we track the click to understand your product and service preferences and improve customer service. Web beacons are usually transparent images embedded in websites or emails. Pixel tags in emails allow us to know whether an email has been opened. If you do not want your activities tracked in this way, do not click image or text links inside emails, or unsubscribe from our mailing list at any time.

3. How We Share, Transfer and Publicly Disclose Your Personal Information

(1) Sharing

We will not share your personal information with any companies, organizations or individuals outside MetaGrav, except for the following situations:

Your explicit prior consent or authorization has been obtained;
Requested by yourself;
Required by laws, regulations, mandatory administrative or judicial requirements;
In compliance with relevant agreements signed with you (including electronically signed online agreements and corresponding platform rules) and other legal documents;
We may share your personal information with our affiliates. Only necessary personal information will be shared and bound by the purposes stated in this Policy. If our affiliates intend to change the purpose of personal information processing, they will obtain your authorization again;
Certain services are provided by authorized partners to achieve the purposes stated in this Policy. We may share part of your personal information with partners to improve customer service and user experience. For example, when purchasing our products online, we need to share your information with logistics providers to arrange delivery or partner services. We share personal information only for legal, legitimate, necessary, specific and clear purposes, and only the minimum information required to deliver services. Our partners are prohibited from using shared personal information for other purposes. MetaGrav’s authorized partners currently include suppliers, service providers and other cooperating parties. We send information to global suppliers and service partners supporting our business, including technical infrastructure, transaction and communication services such as payment, logistics, SMS and email services. We sign agreements with companies, organizations and individuals we share personal data with, requiring them to process personal information in accordance with our instructions, this Policy and other arrangements, and implement necessary security safeguards;
You may actively disclose or share your personal information with third parties (including unspecified audiences). Please note any information you share can be read, collected and used by third parties. Please carefully consider publishing content containing your personal information. MetaGrav shall not be liable for information leakage or misuse resulting from your voluntary sharing.

(2) Transfer

Transfer means transferring control of your personal information to other companies, organizations or individuals. We will not transfer your personal information to any third party except for the following circumstances:

Your explicit prior consent or authorization has been obtained;
Requested by yourself;
In compliance with relevant agreements signed with you and other legal documents;
Required by laws, regulations, mandatory administrative or judicial requirements;
In the event of merger, acquisition, bankruptcy liquidation, asset transfer or similar transactions involving personal information transfer, we will require the new entity holding your personal information to remain bound by this Policy. Otherwise, we will require the new entity to obtain your authorization again.

(3) Public Disclosure

Public disclosure means releasing information to the public or unspecified groups. We will publicly disclose your personal information only under the following circumstances:

Your explicit prior consent or authorization has been obtained;
Required by laws, regulations, mandatory administrative or judicial requirements.

(4) Exceptions to Authorization Consent

Under applicable laws and regulations, we may share, transfer or publicly disclose your personal information without prior consent in the following circumstances:

Related to national security or national defense security;
Related to public security, public health and major public interests;
Related to criminal investigation, prosecution, trial and judgment enforcement;
Necessary to protect major legitimate rights such as life and property of you or other individuals, and it is difficult to obtain consent from the individual;
The personal information is voluntarily disclosed to the public by you;
Personal information collected from legally publicly available sources such as legitimate news reports and government information disclosure;
Necessary for concluding a contract at your request;
Necessary to maintain the secure and stable operation of our products and/or services, such as detecting and resolving product/service failures;
Necessary for legitimate news reporting;
Statistical or academic research conducted by academic institutions for public interests, with de-identification applied to personal information in published research results;
Related to our performance of statutory obligations;
Other circumstances stipulated by laws and regulations.

Please note that sharing or transferring anonymized personal information where recipients cannot re-identify the data subject does not require further notification or consent.

4. Global Transfer of Your Personal Information

In principle, personal information collected and generated within the People's Republic of China will be stored within China, unless cross-border transmission is permitted under applicable laws.

If we need to transfer personal information outside your jurisdiction for business expansion, whether to affiliates or third-party service providers, we will comply with applicable laws. We implement unified security safeguards to ensure all such transfers meet requirements of local data protection laws.

5. How We Store Your Personal Information

(1) Storage Period

In general, we retain your personal information only for the shortest period necessary to fulfill the purposes authorized by you, unless otherwise required by law or you provide additional consent. After the retention period expires, we delete or anonymize your personal information.

(2) Storage Location

In accordance with laws and regulations, user personal information collected in mainland China will in principle be stored within mainland China. We also require our third-party service providers to store such data in mainland China.

6. How We Protect Your Personal Information

(1) To protect your personal information, we implement industry-standard security measures to minimize risks of destruction, theft, leakage, unauthorized access, use, disclosure and alteration of your personal information. We establish data compliance management systems to govern storage and usage of personal information, and ensure we do not collect personal information unrelated to our products, web pages or services.

(2) We have appointed a personal information protection officer, formulated management systems and process specifications for personal information protection. We conduct personal information protection impact assessments for high-risk processing activities including sensitive personal information handling and external data sharing. Meanwhile, we organize security and privacy training to raise employee awareness. We strictly control personnel access to personal information and require confidentiality obligations and audits. Violators will be punished in accordance with internal rules.

(3) We classify personal information based on type and sensitivity, and deploy corresponding technical protection measures including access control, de-identification, encrypted storage and isolated storage. Data masking during display and encrypted transmission are adopted to secure your personal information.

(4) We recommend you properly protect your personal information, especially account login credentials and other sensitive data when using our products and website services. While we deploy safeguards, please understand that no information security measure is absolutely invulnerable. We have established early warning mechanisms and emergency response plans as required by law to mitigate security incidents. If a security incident occurs, we will notify you by email, letter, phone, push notification or other legally required means. If individual notification is not feasible, we will issue public announcements. We will also report incident handling to regulatory authorities and cooperate with government agencies.

(5) If our products or website services cease operation, we will immediately stop collecting personal information. We will notify you via push notifications or announcements, and delete or anonymize your personal information within a reasonable period. Anonymization refers to technical processing making individuals non-identifiable and irreversible; anonymized data is no longer treated as personal information.

(6) The internet environment is not 100% secure. We will do our utmost to protect any information you send to us. If our physical, technical or administrative safeguards are breached leading to unauthorized access, disclosure, tampering or destruction of information and harm to your legitimate rights, we will bear corresponding legal liabilities.

7. How You Manage Your Personal Information

You have the right to access, copy, correct and delete personal information held by us, withdraw consent for personal information processing and cancel your account. Corresponding controls are available:

(1) Access and copy your personal information

Account information — After login, you may view and copy your profile information by clicking Personal Information / Account Security.
Ticket / complaint information — After login, you may view and copy ticket and complaint records via My Tickets / My Complaints.
Vulnerability submission records — After login, view and copy your submitted vulnerability information via Vulnerability List.
Industrial order / job application / supplier information — After submission, you may send an email to 【security@metagrav.com】 or contact us via methods listed on our website.

(2) Correct your personal information

If you find errors in your personal information processed by us or need edits, you may edit and resubmit or request correction. You can email us at 【security@metagrav.com】 or use contact channels on our website.

(3) Delete your personal information

You may send an email to 【security@metagrav.com】 to request deletion of personal information under the following circumstances:

Our collection and processing of personal information violates laws and regulations;
Our processing violates agreements with you;
The processing purpose has been fulfilled, cannot be fulfilled, or is no longer necessary;
We stop providing products or services or retention period expires;
You withdraw consent.

If we approve your deletion request, we will notify entities that have received your personal information and require them to delete the data unless legally exempt or they hold independent authorization from you. After deletion, due to legal and technical backup restrictions, we may not instantly erase data from backup systems. Your data will be securely stored, isolated and processed until backups can be purged or anonymized.

(4) Scope of withdrawing consent

Delivery of our products or certain functions may require necessary personal information (refer to Section 1 of this Policy). For processing of optionally collected personal information, you may grant or withdraw consent at any time.

After withdrawal of consent, we will stop processing corresponding personal information. Withdrawal will not affect prior processing performed under your previous authorization.

(5) Data portability

If you need to transfer your personal information to another platform, enterprise or organization, contact us through channels in this Policy. We will review your request and provide means for the designated party to obtain your personal information if compliant with applicable laws.

(6) Account cancellation

You may cancel your registered account via Account Security on your profile page, or send an email to 【security@metagrav.com】 to apply for account cancellation.

After account cancellation, we stop providing products and services and delete or anonymize your personal information upon your request unless otherwise required by law.

Kind reminder: Cancelling your account may bring inconvenience for after-sales rights protection. If you previously registered accounts on MetaGrav related applications or communities, those accounts may also be cancelled and associated data will no longer be retrievable. Please operate carefully.

(7) Response to your requests

For security purposes, you may need to submit written requests or provide identity verification. We will verify your identity before handling requests.

If you are unsatisfied with our reply, you may file complaints or reports with cyberspace, telecommunication, public security, market supervision and other regulatory authorities.

We generally do not charge fees for reasonable requests. However, we may charge cost fees for repeated or excessive requests. We may reject unreasonable requests that require massive technical reconstruction, create risks to third-party legitimate rights, or are impractical.

We cannot fulfill requests under the following circumstances as required by law:

Directly related to national security or national defense security;
Directly related to public security, public health and major public interests;
Directly related to criminal investigation, prosecution, trial and judgment enforcement;
Sufficient evidence shows malicious intent or abuse of rights;
Fulfilling the request would seriously damage legitimate rights of you or other individuals/organizations;
Necessary to protect major legal interests of life and property of you or others, and consent cannot be obtained;
Involving trade secrets;
Related to our statutory obligations.

8. How We Handle Children’s Personal Information

Our products, website and services are mainly intended for adults. Definitions of children may vary under local laws and customs. We define children as persons under the age of 14.

Children shall not create user accounts without parental or guardian consent.

We protect children’s personal information in accordance with national laws and regulations. We collect, use, share or disclose children’s personal information only when permitted by law, with explicit consent from parents/guardians, or necessary to protect children. If we discover we have collected children’s information without verifiable parental/guardian consent, we will delete such data as soon as possible.

If you are a parent or guardian and have questions about your child’s personal information submitted to MetaGrav, please contact us.

9. How This Policy Is Updated

This Privacy Policy may be revised. We will publish all changes on this page. For material changes, we will provide prominent notices. Material changes include but are not limited to:

Major adjustments to product functions or service models, such as changes to purposes of personal information processing, types of collected personal information, or usage methods;
Major changes to main recipients for sharing, transferring or public disclosure of personal information;
Major changes to your rights regarding personal information processing and exercise methods;
Changes to responsible departments, contact methods and complaint channels for personal information protection;
Significant changes to ownership or organizational structure, such as ownership changes caused by business restructuring, bankruptcy or mergers & acquisitions;
High risks identified in personal information protection impact assessment reports.

Your continued use of MetaGrav official website after the effective date of updates indicates you have fully read, understood and accepted the revised Policy and agree to be bound by it.

10. How to Contact Us

If you have any questions, comments or suggestions regarding this Policy, please send email to 【security@metagrav.com】. We will review your inquiry and reply within fifteen working days after receiving your feedback.

If you are not satisfied with our reply, especially if our personal information processing activities infringe your legitimate rights, you may file complaints or reports with cyberspace, telecommunication, public security, market supervision and other regulatory authorities.