Coremail Email Privacy Policy

Last Updated: June 6, 2024

Effective Date: June 6, 2024

Welcome to Coremail Email!

Coremail Email (hereinafter referred to as "this Product") is an email management service software. It effectively ensures enterprise data security, is committed to improving office efficiency, and provides solutions for enterprise collaborative work. This Product provides services such as email, enterprise contacts, and calendar. Guangdong Mailtech Computer Technology Co., Ltd. and its authorized service provider (Lunkr Technology (Guangzhou) Co., Ltd.) are the service providers for this Product.

Coremail Email values user privacy. When you use the services, we will collect and use your relevant information. We wish to explain through the "Coremail Email Privacy Policy" (hereinafter referred to as "this Policy") how we collect, use, store, and share such information when you use the services, as well as the ways we provide you to access, update, control, and protect such information. This Policy is closely related to the Coremail Email client services you use. We hope you read it carefully and, when necessary, make appropriate choices in accordance with the guidance of this Policy. For technical terms involved in this Policy, we strive to use concise descriptions and provide links for further explanation to facilitate your understanding.

It should be noted that this Policy applies to the features and services of the Coremail Email product itself (such as email, contacts, calendar, etc.), and does not apply to other products or services provided by third parties through this Product. You should fully understand the product features and privacy policies of third-party services before choosing to use them.

What Personal Information We Collect

We collect and process personal information directly from your employer (for example, when your employer sets up your account), and also collect and process personal information directly from you (for example, during your use of this Product). Personal information refers to information and data including account, usage, device, and log information.

1. Account Information: To use this Product, you may need to first register a Coremail email system account. Therefore, we will obtain personal information about you provided by your employer, such as avatar, enterprise email address, name, position, etc. Your employer may provide additional personal information about you, or update the personal information provided to us during your use of this Product.

2. You understand and agree that, based on your employer's representations and warranties, your employer has obtained your explicit authorization prior to providing any of your personal information to us. The scope of collecting your personal information is limited to what is necessary to achieve the purposes of this Agreement or other agreements entered into between your employer and us. Your employer has fully informed you of the purpose, scope, and manner of use of collecting your personal information. If you cannot confirm the contents of this clause, you should immediately stop using this Service and confirm the foregoing matters with your employer. We act solely as a data processor, processing your personal information in accordance with your employer's instructions. We do not bear any legal liability for your employer's collection and use of your personal information.

3. Information collected during your use of this Product. When you use this Product, we automatically collect your device model, system version, unique advertising identifier, system language, and detailed information about your use of our services, such as browsing history, time zone, region and language settings, server logs (including access date and time), application crashes, and other system activity information. You can send files, calendar information, etc. to this Product. We collect information related to the following: schedules you create and edit on this Product, any other user content you disseminate, etc.

4. When you log in to the email for identity verification or to receive email notifications, we will request your authorization for the device information and system notification permissions required for the corresponding features based on the features you wish to use, depending on the scenario. If you do not agree or cancel the authorization, you will not be able to use the corresponding features, but this will not affect your use of other features.

5. In accordance with relevant laws and regulations, the following situations do not require your authorization for collecting your information:
(1) Related to national security and defense security;
(2) Related to public safety, public health, or major public interests;
(3) Related to criminal investigation, prosecution, trial, and execution of judgments;
(4) For the purpose of protecting the vital legitimate rights and interests of the information subject or other individuals, such as life and property, but it is difficult to obtain your consent;
(5) The information collected is voluntarily disclosed to the public by you;
(6) Collecting information from legally publicly disclosed sources, such as legitimate news reports and government information disclosures;
(7) Necessary for entering into a contract at your request;
(8) Necessary for maintaining the safe and stable operation of Coremail Email, such as discovering and addressing product or service failures;
(9) Necessary for legitimate news reporting;
(10) Necessary for academic research institutions to conduct statistics or academic research based on public interests, and when providing external academic research or descriptive results, the information contained in the results has been de-identified;
(11) Other circumstances as stipulated by laws and regulations.

How We Use This Information

1. Email Login
To register an account and become a user of this Product, to log in to this Product through your account so that you can use the services provided by this Product, including but not limited to organization member management, enterprise contacts, quick navigation, calendar, and interoperability with other software; to provide user callbacks for service optimization and service upgrade notifications, introductions, etc. for registered accounts.

2. Name, Avatar, Enterprise Phone Number, Enterprise Email, Department Organization Structure
If you use this Product as an enterprise user member, to achieve enterprise function content such as internal organization display and internal organization communication as required and selected by your employer; Unless otherwise provided in this Agreement, such information is controlled by your employer and provided to us; if you, as an enterprise user member, communicate with non-enterprise members, to facilitate mutual identity confirmation and improve communication efficiency, we will display your name, avatar, affiliated enterprise name, enterprise email, and other information to the contact based on the communication function you select.

3. Device model, system version, and unique advertising identifier serve solely as unique identifiers for identity verification. Based on the specific permissions you grant during software installation and use, to provide the basic services of this Product based on relevant technical information and to ensure the technical requirements necessary for the normal operation of this Product.

4. Personal Information as Required by Laws, Regulations, and Rules
To fulfill legal obligations stipulated by relevant laws, regulations, and rules, and in compliance with mandatory requirements from government, judicial authorities, or other legally authorized entities, to collect relevant information or disclose it to legally authorized entities

We will take reasonable and feasible measures to try to avoid collecting personal information that is unrelated to the purpose of use. If our use of your personal information exceeds the scope of the stated purpose or what has a direct or reasonable connection with it, we will inform you separately and obtain your explicit consent before using your personal information.

How We Process Your Personal Information

1. We will not share or transfer your personal information to third parties, unless you have given prior authorization and consent, or the personal information shared or transferred has been de-identified, and the third party receiving such information cannot re-identify the information subject.

2. We will only share with third parties the information necessary to achieve the purpose, and you understand and authorize our information sharing in such circumstances. If a third party needs to use personal information beyond the aforementioned purpose of use due to business needs, that third party will need to seek your consent again.

3. We will not publicly disclose your information unless we obtain your consent. However, in circumstances where the provision of your personal information is required by laws, regulations, rules, other normative documents, mandatory administrative enforcement or judicial requirements, we may disclose your personal information to administrative enforcement or judicial authorities in accordance with the type of personal information and the method of disclosure requested. When we receive a disclosure request, subject to compliance with laws and regulations, we require that the corresponding legal certification documents be provided, and we only provide data that law enforcement or judicial departments have the legal authority to obtain for specific investigation purposes. Subject to the permissibility of laws and regulations, all documents we disclose are protected by encryption measures.

4. In the following circumstances, sharing, transferring, or disclosing your information does not require prior authorization and consent:
(1) Related to national security and defense security;
(2) Related to public safety, public health, or major public interests;
(3) Related to judicial or administrative enforcement activities such as criminal investigation, prosecution, trial, and execution of judgments;
(4) For the purpose of protecting the vital legitimate rights and interests of you or other individuals, such as life and property, but it is difficult to obtain the individual's consent;
(5) Information voluntarily disclosed to the public by you;
(6) Collecting information from legally publicly disclosed sources, such as legitimate news reports and government information disclosures.

5. According to legal provisions, sharing, transferring, or disclosing de-identified personal information, where it is ensured that the data recipient cannot restore and re-identify the information subject, does not constitute external sharing, transfer, or public disclosure of personal information. The storage and processing of such data will not require separate notification to you or your consent.

How We Protect Your Information

1. We attach great importance to your information security. Coremail Email actively responds to national laws and regulations, strictly complies with compliance, personal information privacy protection, and other requirements. On the basis of establishing an internal security system, we actively obtain recognition from external authoritative institutions and relevant certifications, and have currently passed ISO 9001 and ISO 27001 certifications.
2. We employ strict data processing permission controls to prevent unauthorized use of data, and have security measures in place for client-side security, server-side security, network security, and data security.

3. In the event of a cybersecurity incident, we will take timely remedial measures in accordance with our cybersecurity incident contingency plan. If our physical facilities or technical protective measures are breached, resulting in the leakage, illegal provision, or misuse of your personal information, causing damage to your legitimate rights and interests, we will bear the corresponding liability in strict accordance with the law.

4. It should be noted that the internet industry is ever-changing, and there is no absolute security. Although we have a comprehensive security protection mechanism, certain risks still exist. We also recommend that you actively take measures such as using complex passwords and changing passwords regularly. If you discover that your account, password, and/or other identity elements may have been or have been leaked, please contact us immediately so that we can take timely measures to avoid or reduce relevant losses.

Where We Store Your Personal Information

1. Storage Location:
In accordance with laws and regulations, we store your personal information collected and generated during operations within the territory of the People's Republic of China. Currently, we do not transmit such information overseas. If we do transmit it overseas, we will comply with relevant national regulations or seek your consent.

2. Storage Period:
During your use of this Product, we will continue to store your personal information, and the storage period shall not exceed the period necessary to provide services to you. After you terminate the use of this Product, unless laws and regulations provide otherwise for the retention period of specific information, we will delete or anonymize your information. If we cease to operate this Product's services, we will delete or anonymize the personal information we hold in accordance with applicable laws within a reasonable period.

Your Rights

1. How to Access and Correct Your Personal Information
Accessing personal information: You can view your name, email, and other information under Settings or in the enterprise contacts organization structure. If you need to correct personal information, you can submit a correction request to your employer, which will be processed by the enterprise user administrator.

About Account Registration and Deactivation

This APP does not support user self-registration of accounts, nor does it support user self-deactivation of accounts. Accounts are managed centrally by the administrator of the user's enterprise or the email service application provider.

Changes

In the event of any material changes to this Privacy Policy, we will make reasonable efforts to notify all users, such as by posting a notice on this Product; however, you should regularly review this Privacy Policy to stay informed about any changes. We will also update the "Last Updated" and "Effective Date" at the top of this Privacy Policy. Your continued access to or use of this Product after this Privacy Policy is updated shall be deemed as your acceptance of the updated Privacy Policy. If you do not agree to the updated Privacy Policy, you must stop accessing or using this Product.

Third-Party Services

This Product may connect to or link to social media or other services provided by third parties (including websites or other forms of services). These include:

1. We provide links to you through advertisements or other means of our services, enabling you to link to third-party services or websites;

2. Other circumstances involving third-party services. For example, to achieve the purposes stated in this Policy, we may integrate SDKs or other similar applications provided by third-party service providers, and share certain information collected in accordance with this Policy with such third-party service providers to provide better customer service and user experience. Currently, the third-party service providers we integrate mainly include the following types:
(1) For advertising-related services, including ad display, ad data monitoring/statistics, etc.;
(2) For message push functionality: We use the Huawei SDK to provide you with messaging services. The push SDK we use obtains your device token for specific event reminders, etc.
(3) For obtaining device location permissions, collecting device information and log information, etc., with your consent;
(4) For third-party authorization services, including third-party account login, sharing content to third-party products, etc.;
(5) For supporting product function modules, including video playback, speech recognition, intelligent customer service, content storage, etc.;
(6) For optimizing product performance, including improving hardware network configuration capabilities, reducing server costs, hot-fixing features, etc.;
(7) For account security and product hardening related services, including network monitoring, domain name resolution (HTTPDNS), anti-hijacking, anti-spam and anti-fraud, encryption/decryption services, etc.
We will only share your information for legitimate, necessary, and specific purposes. For third-party service providers with whom we share information, we will require them to fulfill relevant confidentiality obligations and take appropriate security measures.

Integrated Third-Party SDK

Huawei Push
Purpose: To implement offline message push for Huawei devices
Personal Information Collected: AAID, Token
Provider: Huawei Device Co., Ltd.
Privacy Policy Link: https://consumer.huawei.com/cn/privacy/privacy-policy/

3. Third-party social media or other services are operated by the relevant third parties. Your use of third-party social media services or other services (including any information you provide to such third parties) is subject to the third party's own terms of service and information protection statements (not this Policy). You need to carefully read their terms. This Policy only applies to the personal information we collect and does not apply to any services provided by third parties or third-party information usage rules. If you discover that these third-party social media or other services pose risks, we recommend that you terminate the relevant operations to protect your legitimate rights and interests.

4. Auto-Start Description
(1) To ensure that this application can normally receive push messages from the client while in a closed or background running state, this application needs to use the (auto-start) capability. It will periodically send broadcasts through the system to wake up this application's auto-start or associated start behavior, which is necessary for implementing functions and services.
(2) Calendar synchronization: Supports system calendar synchronization to wake up the email.

Minors

If you are a minor under 18 years of age, before using this Product's services, you should read and agree to this Privacy Policy jointly under the supervision and guidance of your parents or other guardians.
We protect minors' personal information in accordance with relevant national laws and regulations. We will only collect, use, store, share, transfer, or disclose minors' personal information where permitted by law, with the explicit consent of parents or other guardians, or where necessary to protect the minor. If we discover that we have collected a minor's personal information without first obtaining verifiable parental consent, we will take steps to delete the relevant information as soon as possible.
If you are the guardian of a minor and have questions about the personal information of the minor under your guardianship, please contact us through the contact information provided in this Privacy Policy.

You agree to the processing of your sensitive personal information for the purposes and in the manner described in this Privacy Policy.

How to Contact Us

You can contact us via ohfeedback@coremail.cn to contact us. We will contact you as soon as possible after receiving your feedback and verifying your identity.