Fintegrity

Privacy Policy

Fintegrity (傅通自业) Personal Information Processing Rules

Effective Date: April 30, 2026

Shanghai Fintegrity Information Technology Co., Ltd. ("we") takes your personal information and privacy seriously. This Policy is drafted in accordance with the Personal Information Protection Law of the People's Republic of China ("PIPL"), the Cybersecurity Law, and the Data Security Law, and explains how we collect, use, share, and protect your personal information, as well as the rights you enjoy. Please read this Policy carefully before using the Platform.

1. Introduction and Scope

This Privacy Policy applies to your use of fintegrity.cn and its subdomains (worker / company / admin / about), as well as any future WeChat Mini Program or iOS / Android client. If we launch separate products in the future, a separate privacy policy will apply. In this Policy, "personal information" means any information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding anonymized data.

2. Information We Collect

We collect the following categories of personal information for the purposes described: 1. Registration & login: phone number (with country code), password (encrypted at rest), SMS verification codes. 2. Real-name verification (voluntary, only when you complete it): • Personal: full name, ID type (national ID / passport / other), ID number, photos of both sides of the ID, optional liveness face capture • Company (China): company name, unified social credit code, legal representative name, business license • Company (international): registration number, country of registration, certificate of incorporation 3. Profile & resume (voluntary): name, avatar, city, bio, work / project / education history, skill tags, languages, awards, certificates. 4. Business data: job and service listings, chat messages, contract terms, bill records, ratings and reviews. 5. Device & log data: IP address, device model, OS, browser, access timestamps, action logs, cookie identifiers — used for service security and troubleshooting. 6. Contact (optional): email address, emergency contact. You may decline to provide voluntary information; doing so may limit certain features.

3. How We Use Your Information

We process your personal information solely for these purposes: • Account creation, login, password reset, and security verification • Real-name verification and legal compliance • Search, recommendation, and matching of jobs / services / talent • Powering chat, contracts, bills, and reviews • Sending in-platform notifications, SMS verification codes, and collaboration alerts • Improving the product (aggregated analytics that do not identify individuals) • Preventing fraud, abuse, and security incidents, and complying with regulatory requirements • Fulfilling reporting and cooperation duties required by law We will obtain a fresh consent before using your personal information for any purpose materially different from the above.

4. Cookies and Similar Technologies

We use cookies, LocalStorage, and similar technologies in your browser: • Strictly necessary: maintain login session (fintegrity-session), remember language preference (NEXT_LOCALE). These cannot be disabled without breaking login. • Preference: remember your currently active company identity, etc. • We do NOT use third-party advertising cookies and do NOT participate in cross-site tracking. You may clear cookies in your browser at any time, but you will need to log in again afterward.

5. Sharing, Transfer, and Public Disclosure

1. Entrusted processing: we engage the following types of vendors strictly under data processing agreements: • Aliyun (Hangzhou, China): database and object storage • Aliyun SMS: verification code delivery (only phone number + template parameters are transmitted) • SMTP provider: system email (only email address + body are transmitted) • WeChat Open Platform / Mini Program, Google, GitHub OAuth: only when you actively choose third-party sign-in 2. Profile visibility: depending on the resume visibility you set, your resume may be public, visible only to companies you have joined, or fully private. 3. We do NOT sell your personal information to any third party. 4. Compulsory disclosure: we may disclose information when lawfully requested by judicial or administrative authorities through due process. 5. Business transfer: in the event of merger, acquisition, or bankruptcy, the successor will continue to honor this Policy.

6. Cross-Border Data Transfer

Our servers and database are currently located within the People's Republic of China (Aliyun East China region). We do not transfer your personal information overseas as a default. If future business needs require cross-border transfer (e.g., displaying your resume to overseas companies you choose to engage with), we will obtain your separate consent and complete the personal information protection impact assessment and processing record-keeping required by Article 38 of PIPL.

7. Storage and Security

1. Retention: unless required otherwise by law, your personal information is permanently deleted 30 days after account closure; transaction records and contracts may be retained for at least 5 years per the E-Commerce Law and Accounting Law. 2. Security measures: • TLS 1.2+ for transit encryption • bcrypt one-way hashing for passwords • Database access restricted to specific IPs and least-privilege roles • Comprehensive audit logging (audit_logs table) • Regular backups and disaster-recovery drills 3. Incident response: in the event of a personal information breach, we will notify you and report to the regulator at the earliest opportunity, in line with Article 57 of PIPL.

8. Your Rights

Pursuant to Chapter 4 of PIPL, you have the following rights, exercisable through Account Settings or by emailing contact@fintegrity.cn: 1. Right to know: understand how we process your information (i.e., this Policy). 2. Right to decide: limit or refuse the processing of your information by others. 3. Right to access and copy: view and export your full profile via Account Settings → My Profile; structured data copies can be requested by email. 4. Right to portability: where regulatory conditions are met, transfer your information to another personal information handler you designate. 5. Right to correct and supplement: edit your profile directly in Settings, or request our help to correct it. 6. Right to delete: applicable when the processing purpose is fulfilled, you stop using the product, you withdraw consent, processing is unlawful, or the agreed retention period expires. 7. Right to withdraw consent: revoke any prior consent in Settings; withdrawal does not affect processing already conducted on the basis of that consent. 8. Right to explanation: request that we explain our personal information processing rules. We will respond within 15 working days of your request.

9. Minors

The Platform is intended for adults aged 18 or above with full civil capacity. We do not knowingly collect personal information from children under 14; if we discover such an account, we will close it immediately. If you are between 14 and 18, please use the Platform under the guidance of your guardian, who should review and consent to this Policy on your behalf.

10. Policy Updates

This Policy may be updated to reflect legal or product changes. Material changes (e.g., new categories collected, expanded sharing, narrowed user rights) will be communicated via in-platform announcement, email, or SMS at least 7 days in advance, with renewed consent obtained where necessary. The "Last updated" date appears at the top of this page; we recommend you review periodically.

11. Contact Us / Complaints

If you have any question, complaint, or wish to exercise your personal information rights, please contact us: • Email: contact@fintegrity.cn (please prefix the subject with "[Privacy]" for priority handling) • Phone: +86 17317519319 (Mon–Fri, 09:00–18:00 CST) • Address: Tengfei Yuanchuang Building, 686 Jiujiang Road, Huangpu District, Shanghai We will respond within 15 working days. If you are not satisfied with our response, you may complain to the Cyberspace Administration, the Ministry of Industry and Information Technology, or the Public Security Bureau, or bring the matter before a court of competent jurisdiction.