隐私政策

更新日期：2025 年 12 月 8 日
生效日期：2025 年 12 月 8 日

北京指掌易科技有限公司（以下简称"我们"）十分重视您的个人信息和隐私保护。本隐私政策旨在帮助您了解我们在您使用 ZWork Hub （以下简称"本应用"）时如何收集、使用、保存、保护您的信息。

请您在使用本应用前认真阅读并充分理解本政策内容。一旦您继续使用，即视为您已阅读、理解并同意本隐私政策。

一、适用范围及账号来源

ZWork Hub是一款面向企业客户的移动办公与信息服务应用，用于向企业内部员工、合作伙伴与供应商人员提供通知公告、文档分发、设备状态查看以及其他企业内部业务服务。

本应用 不对公众开放注册。

所有用户账号均由使用本应用的企业客户创建和管理，员工通过企业提供的账号登录本应用。

企业客户作为数据控制方，依法决定其员工个人信息处理的目的和方式；我们作为受托的数据处理方，仅在企业客户的授权和指示范围内处理相关信息。

二、我们收集的信息及用途

我们仅在为企业客户提供服务所必需的范围内收集信息，包括：

1. 账号相关信息（由企业提供）

• 企业用户 ID
• 企业邮箱、手机号码（如企业账号体系包含）
• 用户在企业内的角色、权限
• 部门及企业组织信息

用途：用于身份认证、权限控制、企业内部信息推送与业务功能实现。

说明：这些数据全部由企业客户提供，本应用不会向公众开放注册，也不会自行搜集额外的员工资料。

2. 设备与系统信息

我们可能会收集以下与设备相关的数据：

• 设备型号与操作系统版本
• 应用版本信息
• 网络类型

用途：用于服务运行分析、故障定位及企业设备管理能力的实现。

3. 位置信息（如企业启用）

当企业客户启用安全策略或区域服务功能时，我们可能会请求访问您的位置。

• 收集方式： 精确定位或模糊定位（由系统权限决定）
• 用途包括但不限于：
  • 匹配企业安全策略（例如基于地理位置的访问控制）
  • 风险设备识别
  • 记录设备访问行为的合规性

我们不会记录或存储您的持续位置信息，不会进行轨迹跟踪。所有位置数据仅用于企业所要求的安全策略匹配行为。位置信息的启用与否由企业客户统一配置，用户仅在获得系统授权后才会被访问相关信息。

4. 文档、公告与交互行为记录

我们可能会记录：

• 文档下载行为
• 公告阅读状态
• 功能使用情况（非内容本身）

用途：提供企业内部的通知确认、审计追溯及运营统计服务。

三、我们如何使用信息

收集的信息仅用于：

1. 实现企业内部办公功能（文档传输、公告通知等）
2. 身份认证及权限校验
3. 提供企业内部设备安全与合规模块
4. 发送企业要求的通知与消息
5. 优化性能、错误排查与体验改进
6. 配合企业客户的合规与审计要求

我们不会将您的信息用于企业业务以外的目的。

四、我们如何共享、转移与披露信息

1. 与企业客户共享

您的企业是该应用的使用方，因此：

• 企业 IT 管理员可以查看或管理您的账号、权限及相关使用记录；
• 我们根据企业的要求向企业提供必要的数据处理能力。

2. 我们不会出售个人信息

我们不会向任何第三方出售或出租您的个人信息。

3. 服务提供商

在必要情况下，我们可能会委托云存储、日志服务、CDN 提供商等为企业提供技术支持，并要求其严格遵守保密义务。

4. 法律法规要求

在涉国家安全、公共利益、法律程序要求时，我们可能依法披露相关数据。

五、数据存储与安全保护

• 我们在中国境内存储和处理与本应用相关的数据。
• 我们使用加密传输、访问控制、日志审计等措施保护您的信息安全。
• 数据仅在企业业务持续期间或法律要求的期限内保存，企业可随时删除其员工数据。

六、您的权利

如企业授权，您有权：

• 访问、更正企业账号资料
• 查询相关记录
• 请求企业管理员删除或停用账号

如需处理个人信息相关事宜，请与您的企业管理员联系，我们将在企业客户授权的前提下协助处理。

七、权限使用说明

本应用可能会请求以下权限，并严格按照如下目的使用：

• 定位权限: 用于匹配企业访问策略（如基于位置的安全策略）、设备风险校验，不用于轨迹跟踪。
• 网络访问权限: 用于企业服务器通信、消息同步、文档下载等核心功能。
• 通知权限: 用于接收企业公告、紧急通知和业务提醒。
• 存储权限: 用于保存企业文档或离线数据。
• 相册权限： 用于用户更改头像等。
• 摄像头权限： 用于用户扫描获取企业专属组织二维码登录。

我们不会超范围调用权限，也不会在未授权情况下使用权限。

八、未成年人保护

本应用仅面向企业员工及授权人员，不面向未成年人提供服务。如企业错误创建未成年人账号，请及时删除。

九、隐私政策更新

我们可能根据业务变化、法律法规更新本政策。更新后我们将在应用内或企业后台通知企业客户。继续使用本服务即表示您接受更新后的政策。

十、联系我们

如对本政策有任何问题，请通过以下方式联系我们：

企业客户也可通过其客户经理与我们联系。

---

Privacy Policy

Last Updated: December 8, 2025
Effective Date: December 8, 2025

Beijing Zhizhangyi Technology Co., Ltd. (hereinafter referred to as "we", "us", or "our") highly values your personal information and privacy protection. This Privacy Policy is intended to help you understand how we collect, use, store, and protect your information when you use ZWork Hub (hereinafter referred to as "the App").

Please read and fully understand this Privacy Policy before using the App. By continuing to use the App, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

I. Scope of Application and Account Source

ZWork Hub is an enterprise-oriented mobile workplace and information service application. It is used to provide internal services to enterprise employees, partners, and supplier personnel, including but not limited to announcements, document distribution, device status viewing, and other enterprise internal business services.

The App does not provide public user registration.

All user accounts are created and managed by enterprise customers that deploy the App. Users log in using accounts provided by their respective enterprises.

Enterprise customers act as data controllers, lawfully determining the purposes and methods of processing employees' personal information. We act as an entrusted data processor, processing relevant information only within the scope authorized and instructed by enterprise customers.

II. Information We Collect and Its Purpose

We collect information only to the extent necessary to provide services to enterprise customers, including the following:

1. Account-Related Information (Provided by Enterprises)

• Enterprise user ID
• Enterprise email address and mobile phone number (if included in the enterprise account system)
• User roles and permissions within the enterprise
• Departmental and organizational information

Purpose: Used for identity authentication, access control, internal information delivery, and implementation of enterprise business functions.

Note: All such data is provided by enterprise customers. The App does not offer public registration and does not independently collect additional employee personal information.

2. Device and System Information

We may collect the following device-related information:

• Device model and operating system version
• Application version information
• Network type

Purpose: Used for service operation analysis, fault diagnosis, and implementation of enterprise device management capabilities.

3. Location Information (If Enabled by Enterprise)

When enterprise customers enable security policies or region-based services, we may request access to your location information.

• Collection methods: Precise or approximate location (as determined by system permissions)
• Purposes include but are not limited to:
  • Matching enterprise security policies (e.g., location-based access control)
  • Identifying risky devices
  • Recording device access behavior for compliance purposes

We do not record or store continuous location data and do not perform location tracking. All location information is used solely for enterprise-required security policy matching. Whether location access is enabled is configured uniformly by enterprise customers, and access occurs only after system-level user authorization is granted.

4. Documents, Announcements, and Interaction Records

We may record:

• Document download activities
• Announcement reading status
• Feature usage information (excluding content itself)

Purpose: To provide enterprise internal notification confirmation, audit traceability, and operational statistics services.

III. How We Use Information

Collected information is used solely for the following purposes:

1. Implementing enterprise internal office functions (e.g., document delivery and announcements)
2. Identity authentication and access control
3. Providing enterprise internal device security and compliance modules
4. Sending enterprise-required notifications and messages
5. Performance optimization, error troubleshooting, and experience improvement
6. Supporting enterprise customers' compliance and audit requirements

We do not use your information for purposes beyond enterprise business needs.

IV. How We Share, Transfer, and Disclose Information

1. Sharing with Enterprise Customers

As your enterprise is the deploying entity of the App:

• Enterprise IT administrators may view or manage user accounts, permissions, and related usage records
• We provide necessary data processing capabilities to enterprises in accordance with their requirements

2. No Sale of Personal Information

We do not sell or rent personal information to any third party.

3. Service Providers

When necessary, we may engage service providers such as cloud storage, logging services, or CDN providers to support enterprise services, and we require them to comply with strict confidentiality obligations.

4. Legal and Regulatory Requirements

We may disclose relevant data in accordance with applicable laws and regulations involving national security, public interest, or legal procedures.

V. Data Storage and Security Protection

• We store and process data related to the App within the territory of the People's Republic of China.
• We protect information security through measures such as encrypted transmission, access control, and audit logging.
• Data is retained only for the duration of enterprise business needs or as required by law. Enterprises may delete their employees' data at any time.

VI. Your Rights

Subject to enterprise authorization, you have the right to:

• Access and correct enterprise account information
• Review relevant records
• Request enterprise administrators to delete or deactivate accounts

For personal information-related requests, please contact your enterprise administrator. We will assist in accordance with enterprise authorization.

VII. Permission Usage Description

The App may request the following permissions and strictly use them for the stated purposes:

• Location Permission: Used for matching enterprise access policies (e.g., location-based security policies) and device risk verification; not used for tracking.
• Network Access: Used for communication with enterprise servers, message synchronization, and document downloads.
• Notification Permission: Used to receive enterprise announcements, emergency notifications, and business reminders.
• Storage Permission: Used to store enterprise documents or offline data.
• Photo Library Permission: Used for user profile picture modification.
• Camera Permission: Used for scanning enterprise-specific organization QR codes for login.

We do not access permissions beyond their intended scope, nor do we use permissions without authorization.

VIII. Protection of Minors

The App is intended solely for enterprise employees and authorized personnel and is not designed for use by minors. If an enterprise mistakenly creates an account for a minor, the account should be deleted promptly.

IX. Updates to This Privacy Policy

We may update this Privacy Policy in response to business changes or legal and regulatory requirements. Updated policies will be communicated to enterprise customers through the App or enterprise management systems. Continued use of the service constitutes acceptance of the updated policy.

X. Contact Us

If you have any questions regarding this Privacy Policy, please contact us through the following channels:

Enterprise customers may also contact us through their designated account managers.