CashbackPlus Privacy Policy

1. Introduction

Your trust is of paramount importance to CashbackPlus (hereinafter referred to as "we" or "CashbackPlus"). We deeply understand the importance of personal information and are fully committed to protecting your privacy and personal information security when you use our services.

This Privacy Policy aims to explain how we collect, use, store, share, and protect your personal information, as well as how you can manage this information, when you use CashbackPlus's products and/or services (including but not limited to downloading, installing, opening, browsing, registering, logging in, and using our applications, websites, and related functions, hereinafter collectively referred to as "Our Services").

Please read and fully understand this policy before using Our Services. By continuing to use Our Services, you acknowledge that you have understood and agreed to all contents of this Privacy Policy (including subsequent updated versions).

Important Note: This policy does not apply to services independently provided by third parties on the CashbackPlus platform, or to products or services that have separate privacy policies.

If you have any questions about this policy or personal information protection, please contact us using the contact information provided in the "8. Contact Us" section.

This Privacy Policy will help you understand the following:

1. How We Collect and Use Your Personal Information
2. How We Use Cookies and Similar Technologies
3. How We Share, Transfer, and Publicly Disclose Your Personal Information
4. Information Storage and Protection
5. User Personal Information Rights
6. Protection of Minors' Personal Information
7. Policy Updates
8. Contact Us

2. How We Collect and Use Your Personal Information

We will only collect and use your personal information for the purposes explicitly stated in this Privacy Policy or as permitted by applicable law. Once the purpose of collection no longer exists and continued retention is no longer required by law, we will stop collecting, or process your information in a way that cannot be associated with you.

2.1. Categories of Personal Information We May Collect

• Identity Information: Name, gender, avatar, date of birth, government-issued identification information.
• Contact Information: Delivery address, email address, phone number, social media accounts (e.g., Douyin, Line), emergency contact information, other contact methods you provide when communicating with us.
• Account and Payment Information: Bank account information, credit card details (e.g., card number, type, expiry date), payment transaction records.
• Transaction Information: Order details, product lists, and other product and service information related to you.
• Technical Information: IP address, login data, browser type and version, time zone setting, location information, operating system, device identifiers (IMEI, MAC address, Cookies, etc.), and other device information you use to access the platform.
• Profile Information: Username, password, PIN, Single Sign-On ID (SSO ID), OTP password, traffic data, geotags, order history, interests, preferences, feedback, and survey responses.
• Usage Information: How you use the platform, behavior, browsing history (including search records, access time, date, referring website), Cookies, device ID, device type, connection details, browser information, language, operating system, etc.
• Marketing and Communication Information: Your preferences for receiving marketing information, communication preferences, your chats, emails, or call records on the platform or with third-party customer service.
• Additional Information: We may ask you to provide copies of additional identification documents, or collect relevant information if you are suspected of violating our policies.

2.2 How We Use Your Personal Information

2.2.1. To Implement Core Business Functions

• Account Registration and Management: To comply with laws and regulations and provide convenient services, you need to provide your mobile number or email address and network identification information (e.g., avatar, nickname, login password) when registering a CashbackPlus account. We will encrypt your mobile number. When you register or log in using a third-party account, we will obtain the authorized third-party account information you share (e.g., avatar, nickname) and link it to your CashbackPlus account.
• Product or Service Information Display: To display and recommend product or service information that may be of interest to you, we will collect and use your browsing, click, and transaction records when you access or use CashbackPlus, combined with legally collected device information, service log information, and other authorized information, to predict your preference characteristics through algorithmic models. Based on your preference characteristics, we will push commercial advertisements and other information that may be of interest to you on the CashbackPlus application, or send you commercial messages.
• Help You Complete Orders and Manage Orders: To enable you to understand and inquire about order information and manage it, we will collect order information generated during your use of Our Services to display it to you and facilitate your order management.
• Provide and Optimize Services: To facilitate your use of services and access to the platform; manage your account; display your username or profile on the platform; support your use of sub-applications on the platform; respond to your inquiries, feedback, claims, or disputes through us or third-party service providers.
• Marketing and Advertising: To provide you with information that may be of interest to you or that you have requested; to send you marketing or promotional information from us or third-party sellers periodically (if you have opted to receive it); to assist in behavioral marketing and advertising activities. For promotional purposes, we may use your transaction and cashback activity information, which may be publicly accessible and shared in advertising and marketing campaigns.
• Legal and Operational Purposes: To conduct fraud detection, identity verification; to compare and audit information with third parties to ensure data authenticity; to process complaints, feedback, enforcement, and removal requests related to content you upload; to collect statistical and research data for internal reporting or legal requirements; to retain data according to CashbackPlus policies to establish or process legal claims; to prevent or investigate violations of terms of use, privacy policy, corruption, illegal activities, etc.; to conduct due diligence; to comply with legal and regulatory requirements (including displaying your name, contact information, and company information when necessary); to respond to law enforcement requests; to protect life, health, and safety.
• Analysis, Research, Business, and Development: To understand your experience using the services; to improve platform page layout or content and personalize it; to conduct surveys, including user demographic and behavioral research; to improve existing technologies (e.g., speech recognition) through machine learning and other methods; to generate more attributes based on the data you provide to offer more targeted information; to conduct data analysis, testing, and research, monitor usage trends; and to further develop Our Services.
• Extended Functions Based on Clipboard/Pasteboard Information: When you copy product titles, product links, share or receive shared information, your clipboard/pasteboard information function will be invoked each time the app is launched to quickly search for the product information you want to obtain. Clipboard/pasteboard information will only be processed on your device, and we will not store your clipboard/pasteboard information for any other purpose. You can enable/disable clipboard information reading permissions in [My] - [Settings].
• Other Additional Functions: To achieve the above purposes, you have agreed to automated decision-making processes.

2.2.2. Essential for Enhanced Service Functionality

• Data Analysis and Personalized Recommendations: We may collect your order and browsing information to perform data analysis and build user profiles, thereby displaying products or services that may be of interest to you.
• Service Quality Improvement: We may obtain information you provide when contacting customer service, responses to questionnaires, and information from your communications with us.
• Cross-Device Consistency: We may link information collected from your various devices to provide consistent services across those devices.
• Information Integration: We may combine information from one service with information from other services to provide personalized content and recommendations.
• Affiliates and Partners: When interacting with affiliates and partners, we may share relevant information in accordance with the law or with your authorization.

2.2.3. Essential for Service Security

To enhance the security of your use of our services and those of our affiliates and partners, prevent risks such as phishing websites, fraud, network vulnerabilities, viruses, attacks, intrusions, more accurately identify behaviors that violate laws and regulations or CashbackPlus agreements, and protect account security, we may use or integrate your account information, browsing information, order information, commonly used software information, device information, service log information, and information from affiliates and partners shared with your authorization or in accordance with the law, to comprehensively assess account and transaction risks, perform identity verification, detect and prevent security incidents, and record risky links and IP addresses, taking necessary recording, auditing, analysis, and disposal measures in accordance with the law. We will also receive your device information for analyzing system problems, statistical traffic, troubleshooting risks, and for troubleshooting when you choose to send abnormal information.

2.2.4. Basic Communication Functions

We will use your communication information (such as mobile number, Line account) to communicate or interact with you directly. For example, if suspicious activity is detected (e.g., login from an unusual device or location), we or our affiliates may send you notifications. In addition, we or our affiliates and partners may contact you to provide guidance on product/service usage, inform you of changes or improvements, invite you to participate in experience activities, etc.

2.2.5. You Can Choose Whether to Authorize Us to Collect and Use Your Personal Information

To enhance your user experience, we may collect and use your personal information in the following additional functions. You can choose not to authorize, but you can still use the basic services of CashbackPlus, only unable to use these additional functions.

• Access and Upload based on Album (Photo/Video Gallery): You can authorize uploading photos/pictures/videos for avatar replacement, real-name authentication, posting comments, sharing audio/video, providing proof when contacting customer service, etc. We may use your uploaded photos or pictures and other evaluation information.
• Additional functions based on WhatsApp: After adding a WhatsApp account, we or our affiliates and partners may initiate the add friend function to provide more convenient product explanations and communication. You are free to choose whether to link your WhatsApp number. Choosing to link means you understand and agree that your WhatsApp information may be shared with our partners in accordance with this Privacy Policy.
• Additional functions based on bank card information: After you upload identity information (name, ID number) and bank card information (card number, issuing bank), we will share it with qualified third-party service providers to verify the consistency of identity and bank card information. After successful verification, you can use the bank card to withdraw your account balance.

Please understand:

• You can add or delete bank card information at any time to enable or disable this function.
• Enabling any permission means you authorize us to collect and use relevant personal information to implement the corresponding function.
• Disabling permission means revoking authorization, and we will no longer collect and use relevant personal information based on that permission, nor will we be able to provide the corresponding function. Disabling permission does not affect processing previously performed based on authorization.

2.2.6. Situations Where Personal Information Can Be Collected and Used Without Authorization

In the following situations, we may collect and use personal information without your authorization and consent:

• Related to national security or national defense security.
• Related to public safety, public health, or major public interests.
• Related to criminal investigations, prosecutions, trials, and execution of judgments, etc., in judicial or administrative enforcement.
• To protect your or others' major legitimate rights and interests, such as life and property, but it is difficult to obtain your consent.
• Personal information that has been made public by the individual themselves.
• Personal information collected from legally publicly disclosed information, such as news reports, government information disclosure, etc.
• Necessary for the conclusion and performance of a contract to which you are a party.
• Necessary for maintaining the safe and stable operation of products/services, such as detecting and disposing of faults.
• Necessary for legal news reporting.
• Academic research institutions conducting statistical or academic research based on public interest, and when providing results externally, the information is de-identified.
• Other circumstances stipulated by applicable laws and regulations.

Please note: If we take technical measures to process personal information such that the data recipient cannot re-identify specific individuals and cannot restore the information, or if we de-identify the collected information for research, statistical analysis, and prediction to improve CashbackPlus content and layout, support business decisions, and improve products/services (including using anonymous data for machine learning or model training), then the use of such processed data does not require additional notification or your consent.

2.2.7. Obtaining Your Personal Information from Third Parties

We may obtain account information (avatar, nickname, region, gender, etc.) that you authorize to share from third parties, and after you agree to this Privacy Policy, we will bind your third-party account to your CashbackPlus account so that you can directly log in using the third-party account. After reaching an agreement with the third party and confirming the legality of the information source, we will use your information in compliance with the law.

If we obtain information indirectly from a third party, we will obtain your consent in advance in accordance with the law and require the third party in writing to explain the legality of its information collection, the content and purpose of sharing, and the data recipient. Before providing your sensitive information to us, the third party must also inform you of the information type, the identity of the recipient, and security measures, and obtain your explicit confirmation in advance. We will require the third party to guarantee that the information source is legal and compliant, and if the third party violates the law, it will bear corresponding responsibility. We will take the same protection measures for indirectly obtained personal information as for our own user information.

In addition, with your consent, we may share your account information (avatar, nickname, and other information prompted on the page) with third parties to facilitate your registration or login to third-party accounts.

2.2.8. General Rules for Collecting and Using Personal Information

We will use the collected personal information in accordance with the provisions of this Privacy Policy. If the information you provide contains personal information of other users, please ensure that you have obtained legal authorization before providing it.

Unless you delete or refuse collection through system settings, all personal information you provide during the use of services will remain valid. When you cancel your account or we stop operating CashbackPlus products or services, we will stop using and delete your personal information, unless otherwise required by laws and regulations.

After collecting personal information, we will anonymize it through technical means, and the anonymized information cannot identify your identity. We have the right to use anonymized information and, without disclosing your personal information, to analyze the user database and use it for commercial purposes. We will not use your personal information for other purposes that are not directly or reasonably related to the purpose of collection.

We will collect usage statistics for products/services and may share them with the public or third parties to demonstrate overall usage trends. These statistics do not contain your identity information.

When we need to collect your personal information beyond the scope of this policy, or use the information for other purposes not specified in this policy, we will notify you in advance and obtain your consent.

3. How We Use Cookies and Similar Technologies

3.1. Cookies

To ensure the normal operation of the CashbackPlus platform, provide you with a more convenient access experience, and recommend content or advertisements that may be of interest to you, we will store small data files called Cookies on your computer or mobile device. Cookies usually contain identifiers, website names, and some numbers and characters. With Cookies, websites and clients can store your registration account, encrypted password, preferences, and other data. Cookies can also help us count traffic, analyze page design, and advertising effectiveness.

You understand and agree that some of Our Services require Cookies to function. You can modify the acceptance level of Cookies or refuse Cookies from the CashbackPlus platform through your browser or plug-in. However, if you do so, it may affect your secure access to the Cashback Plus platform and use of services, and you may need to change user settings each time you visit.

3.2. Web Beacons and Pixel Tags

In addition to Cookies, we may also use similar technologies such as web beacons and pixel tags. For example, emails we send to you may contain click links to our website. If you click on that link, we will track your click behavior to understand your product/service preferences and improve customer service. Web beacons are usually embedded in websites or emails. With transparent images and pixel tags, we can understand whether an email has been opened, thereby determining whether to send emails to users. If you do not want us to track your activity in this way, you can unsubscribe from our mailing list at any time.

4. How We Share, Transfer, and Publicly Disclose Your Personal Information

4.1. Sharing of Information

Except for the following situations and as otherwise provided in Section 2.2.6, we will not share your personal information with any company, organization, or individual:

• With your explicit consent or authorization in advance.
• According to applicable laws and regulations, legal procedures, mandatory administrative or judicial requirements.
• To the extent permitted by applicable law, it is necessary to take corresponding measures to protect us, our affiliates, partners, you, or other CashbackPlus users, or public interests, property, and safety from harm.
• Only by sharing your information can we achieve core functions or provide the services you need.
• To resolve disputes or disagreements between you and others.
• According to relevant agreements signed with you (including electronically signed agreements and platform rules) or other legal documents.
• Use based on academic research.
• Use in line with social and public interests as per applicable law.

Sharing with Affiliates: We may share your personal information with our affiliates, but only limited to necessary personal information, and only for the purposes described in this Privacy Policy. If an affiliate intends to change the processing purpose, it will obtain your authorization again.

Sharing with Partners: We may entrust trusted partners to provide services, and therefore may share some of your personal information (such as order information, account information, device information, location information, etc.) with partners and other third parties to ensure smooth service delivery and enhance customer experience. We will only share information for legitimate, proper, necessary, specific, and explicit purposes, and partners are not authorized to use the information for any other purpose unrelated to providing services. Currently, our partners include the following types:

Product or Service Providers: Including providers of infrastructure technical services, logistics and delivery, payment services, data processing, consulting and analysis, etc. For example, we will share your identity information (name, ID number) and biometric information (static or dynamic facial features) with third-party service providers to complete real-name authentication; share identity information and bank card information with qualified third parties to verify bank cards and enable withdrawals; share order information with logistics service providers to complete delivery; share order numbers and amounts with third-party payment institutions to complete payments; and share mobile numbers and/or Line numbers with third-party service providers for more convenient communication.

Third-party Merchants: To meet your needs for purchasing goods or services from third-party merchants and enable them to complete subsequent after-sales services, we must share your order information with third-party merchants.

Partners entrusted by us for promotion: We may provide promotional services to user groups on behalf of other businesses. We may use your personal information and indirect user profiles to share information on promotional reach and effectiveness with the entrusting party. We will not provide information that can directly identify individuals, or we will process it in an aggregated manner. For example, we can tell clients how many people saw a promotion or purchased a product, or provide statistical information without personal identifiers to help them understand their audience and increase advertising reach.

For companies, organizations, and individuals with whom we share personal information, we will require them to process the information in accordance with our instructions, this Privacy Policy, and other relevant confidentiality and security measures. For sensitive personal data, we will require third parties to use data de-identification and encryption technologies to better protect user data.

To comply with laws, enforce or apply our terms of use and other agreements, or protect the rights, property, or safety of us, you, or other CashbackPlus users (such as preventing fraud and illegal activities, reducing credit risk), we may exchange information with other companies and organizations. However, this does not include selling, renting, sharing, or otherwise disclosing personal information for profit in violation of the commitments in this Privacy Policy.

4.2. Transfer of Information

Except for the following situations, we will not transfer your personal information to any company, organization, or individual:

• With your explicit consent or authorization in advance.
• According to applicable laws and regulations, legal procedures, mandatory administrative or judicial requirements.
• According to relevant agreements signed with you (including electronically signed agreements and platform rules) or other legal documents.
• In mergers, acquisitions, asset transfers, or similar transactions, if personal information transfer is involved, we will require the new company or organization holding your personal information to continue to comply with this Privacy Policy; or we will acquire the company or organization and obtain your authorization and consent again.

Public Disclosure

We will only publicly disclose your personal information in the following situations and under the premise of industry-standard security protection measures:

• At your request, disclose the personal information you specify in the disclosure method you explicitly agree to.
• When applicable laws, regulations, administrative enforcement, or judicial requirements demand the provision of your personal information, we may disclose it as required. Upon receiving such requests, we will require the issuance of corresponding legal documents (e.g., subpoenas or investigation letters). We will disclose the requested information as transparently as legally permitted and carefully review all requests to ensure their legal basis.
• For accounts involved in illegal activities or fraudulent behavior, we will only disclose necessary information related to the relevant accounts.

4.4. Exceptions to Prior Authorization for Sharing, Transferring, and Publicly Disclosing Personal Information

In the following situations, sharing, transferring, and publicly disclosing your personal information does not require your prior authorization and consent:

• Related to national security or national defense security.
• Related to public safety, public health, or major public interests.
• Related to judicial or administrative enforcement, such as criminal investigations, prosecutions, trials, and execution of judgments.
• To protect your or others' major legitimate rights and interests, such as life and property, but it is difficult to obtain your consent.
• Personal information that you have made public yourself.
• Personal information collected from legally publicly disclosed information, such as legal news reports, government information disclosure, etc.

Please note: If we take technical measures to process personal information such that the data recipient cannot re-identify specific individuals and cannot restore the information, then sharing, transferring, and publicly disclosing such processed data does not require additional notification or your consent.

5. Information Storage and Protection

5.1. Our Technologies and Measures to Protect Your Personal Information

We attach great importance to the security of personal information and take all reasonable and feasible measures to protect your personal information:

• Data Security Technical Measures: We keep pace with cutting-edge security technologies, provide multiple protection measures for data assets, establish data security protection mechanisms to prevent unauthorized use or modification, and adopt reliable disaster recovery strategies to avoid data corruption or loss. We formulate security group policies, use secure encryption technologies such as HTTP, use encryption technology to store personal information, and adopt multi-factor authentication technology to protect information security.
• Other Security Measures: We manage and regulate the storage and use of personal information by establishing a data classification and grading system, data security management specifications, and data security development specifications. We implement comprehensive security control over data through monitoring and auditing mechanisms, establish data security management agencies and emergency response agencies, and conduct security and privacy protection training to raise employees' awareness of the importance of personal information protection.
• We only allow employees, partners, and affiliate personnel who need to know this information to access personal information, and establish strict access control and monitoring mechanisms. All personnel who may access your personal information are required to fulfill confidentiality obligations, and failure to do so will result in legal liability or termination of the cooperation relationship.
• The internet is not completely secure. Communication with other users (such as emails, instant messaging, social software) cannot be guaranteed to be fully encrypted. We recommend that you set complex passwords and pay attention to protecting your personal information security.
• When you conduct online transactions with third parties through CashbackPlus, you will inevitably disclose your personal information (such as contact information) to the transaction counterpart. Please protect your personal information and only provide it to others when appropriate.
• When you use Our Services, information you voluntarily share or publicly share may involve your or others' personal information, and even sensitive information (such as personal information contained when uploading avatars or comments). Please pay attention to sharing relevant content.
• Although we try our best to ensure information security, the internet is not absolutely secure. If our physical, technical, or management security measures are damaged, resulting in unauthorized access, disclosure, alteration, or destruction of information, we will bear responsibility for the damage caused to your legitimate rights and interests in accordance with the law.
• Security Incident Handling: To deal with risks such as personal information leakage, damage, or loss, we have formulated security incident classification and grading standards and handling procedures, established a dedicated security incident emergency response team, and developed security plans for different types of incidents, including loss prevention, analysis, localization, and remedial measures, and cooperate with relevant departments to trace the source. If a personal information security incident unfortunately occurs, we will promptly inform you of the basic situation of the incident, possible impacts, measures taken or to be taken, measures you can take to prevent and reduce risks, and provide relevant suggestions, remedial measures, and contact information of the personal information protection officer and agency, in accordance with applicable legal requirements. We will inform you promptly through letters, phone calls, push notifications, etc. If it is difficult to inform individually, we will adopt reasonable and effective ways to publish announcements. At the same time, we will actively report the incident handling situation to the applicable regulatory authorities as required.
• If you have any questions about our personal information protection, you can contact us through the contact information in "8. Contact Us". If you find that your personal information has been leaked, please contact us immediately through the above contact information so that we can take corresponding measures.

5.2. Storage of Personal Information

• Storage Location: In principle, the personal information we collect and generate will be stored within the country or region where your services are located or where we operate, unless otherwise stipulated by applicable laws, with your explicit authorization, or you conduct cross-border transactions yourself through the internet or other means. In the above cases, we will ensure that your personal information is fully protected in accordance with this Privacy Policy. If it is necessary to transfer information overseas due to business development, we will explicitly inform you and obtain your consent. After your authorization and compliance with legal requirements, your personal information may be transferred to jurisdictions outside the country/region where you use products or services, and these regions may have different data protection laws. We will ensure that adequate and equivalent protection is provided during the transfer, for example, by obtaining your consent or taking security measures such as data de-identification.
• Storage Period: We will only retain your personal information for the period necessary to provide CashbackPlus platform services or achieve the purposes described in this Privacy Policy, unless you agree to extend the retention period, or laws have mandatory retention requirements (such as the e-commerce law requiring that information on goods and services and transaction information be retained for at least three years from the date of completion of the transaction). The criteria for determining the period include: completing transaction purposes, saving transaction and business records, responding to your inquiries or complaints, ensuring service security and quality, and other special agreements. When your personal information exceeds the retention period, we will delete your information, unless otherwise stipulated by laws and regulations.
• Service Termination Processing: If we terminate services or operations, we will notify you at least 30 days in advance and delete your personal information after termination.

6. User Personal Information Rights

We attach great importance to the management of your personal information and do our best to protect your rights to access, correct, supplement, delete, and withdraw authorization. Your rights include:

6.1. Access, Correction, and Supplement of Your Personal Information

Except as otherwise provided by laws and regulations, you have the right to access, correct, and supplement your personal information. After completing account registration, logging in, and performing necessary identity verification, you can operate in the following ways:

• Account Information: View all personal information you submitted (including nickname, avatar) through "My" -> "Settings", and you can correct information such as Line number and phone number.
• Order Information: View all order statuses through "My" -> "My Orders". You can delete completed orders, but this may affect our ability to accurately determine your purchase information and provide corresponding after-sales service.
• Browsing Information: Access your browsing history through "[Account]" -> "[Activity Records]".

In addition to the above information, some personal information used to enhance user experience and ensure transaction security, or generated during function operation, cannot be directly accessed and corrected by you, but you can contact us to request deletion or anonymization.

6.2. Deletion of Your Personal Information

You can delete some information (such as shipping information, order information, browsing information) through the above paths. In the following cases, you can ask us to delete your personal information:

• We process personal information in violation of applicable laws and regulations.
• We collect and use your personal information without your consent.
• We process personal information in violation of an agreement with you.
• You cancel your CashbackPlus account.
• We terminate services and operations.

If we decide to respond to your deletion request, we will also notify entities that have obtained your personal information from us and require them to delete it promptly, unless otherwise stipulated by laws and regulations or the entity has obtained its independent authorization.

When you or we assist you in deleting information, due to legal and security technology limitations, we may not be able to immediately delete corresponding information from the backup system. We will securely store your personal information and isolate it from further processing until the backup can be cleared or anonymized.

6.3. Change of Authorization Scope or Withdrawal of Authorization

You can change the authorization scope or withdraw authorization by deleting information, turning off device functions, or making privacy settings on the CashbackPlus platform. You can also withdraw all authorizations for us to continue collecting your personal information by canceling your account.

Please note that each business function requires some basic personal information. When you withdraw your consent or authorization, we will not be able to continue to provide you with services corresponding to the withdrawal, nor will we process your corresponding personal information. However, your decision to withdraw consent does not affect the processing of personal information previously performed based on your authorization.

6.4. Account Cancellation

You can apply to cancel your account directly in our product. For specific operating methods and conditions, please refer to the relevant account cancellation agreement on the CashbackPlus platform. After account cancellation, we will stop providing products/services to you and delete your personal information in accordance with applicable laws and regulations.

We will collect and verify the personal identity information, security status, device information of users and applicants, and do our best to protect user rights and ensure that the application for cancellation is made by the user themselves or their authorized person. The above information is only used for this account cancellation business.

We specifically remind you that account cancellation is irreversible. Once you cancel your account, we will stop providing products/services to you and delete your personal information in accordance with the law.

6.5. Personalized Recommendation Information

Our relevant information recommendations and other functions may be based on non-manual automated decision-making mechanisms, including information systems, algorithms, etc.

6.6. Complaint and Reporting

If you cannot access, correct, or delete your personal information through the above methods, or need to access, correct, or delete other personal information generated during the use of products/services, or believe that we have violated laws and regulations or agreements with you in the collection and use of personal information, or have other complaints, suggestions, or questions, you can contact us through the contact information agreed at the bottom of this Privacy Policy.

For security reasons, we may require you to provide a written request or otherwise prove your identity. We will reply within 30 days after receiving your feedback and verifying your identity.

In principle, we do not charge for reasonable requests; however, for repeated requests beyond a reasonable scope, we may charge a certain fee depending on the situation. We may refuse requests that are not directly related to your identity, unreasonably repetitive, require excessive technical means (such as developing new systems or fundamentally changing existing practices), pose risks to the legitimate rights and interests of others, or are extremely impractical.

In the following situations, we may not be able to respond to your request in accordance with applicable laws and regulations:

• Related to national security or national defense security.
• Related to public safety, public health, or major public interests.
• Related to judicial or administrative enforcement, such as criminal investigations, prosecutions, trials, and execution of judgments.
• There is sufficient evidence to show that you have subjective malice or abuse of rights.
• Satisfying your request will cause serious harm to your or other individuals' or organizations' legitimate rights and interests.
• Involving trade secrets.

7. Protection of Minors' Personal Information

We attach great importance to the protection of minors' personal information. Minors are not allowed to create user accounts without the consent of their parents or other guardians. In e-commerce activities, we assume that you have the corresponding civil capacity. If you are under 18 years old, please ensure that your parents or guardians carefully read this Privacy Policy, and you may only use Our Services after obtaining their consent. We also need to obtain the permission of their parents or guardians before collecting and processing any personal information of minors.

For personal information of minors collected through our products or services with the consent of parents or other guardians, we will only use such information when permitted by applicable law, with the explicit consent of parents or guardians, or when necessary to protect minors, and we will not share, transfer, or publicly disclose it.

If we find that we have collected personal information of minors without verifiable consent from parents or guardians, we will make every effort to delete the relevant data immediately.

8. Policy Updates

To provide you with better services and adapt to the development of CashbackPlus's business, this Privacy Policy will be updated from time to time. We will not reduce your rights under this policy without your explicit consent. The updated version will be published on the Cashback Plus application and official website, and you will be notified through announcements or other appropriate channels before the changes take effect. Please check CashbackPlus regularly for the latest updates. By continuing to use Our Services, you agree to the revised Privacy Policy.

For significant changes, we will also provide more prominent notifications (e.g., through SMS, private messages, or login/browsing page reminders, explaining the specific changes).

Significant changes referred to in this policy include but are not limited to:

• Major changes to our service model, including the purpose, type, and method of processing personal information.
• Significant changes in ownership or organizational structure, such as changes in ownership due to business adjustments, bankruptcy, mergers, or acquisitions.
• Significant changes in the main objects of personal information sharing, transfer, or public disclosure.
• Significant changes in your rights to participate in personal information processing and how to exercise them.
• Changes in contact information and complaint channels.
• Personal information security impact assessment reports indicating high risk.

9. Contact Us

If you have any questions, comments, or suggestions about this Privacy Policy or your personal information, please feel free to contact us.

• Email: CashbackPlus_privacy@gmail.com (Personal Information Protection Officer)
• In-app support: Visit the "My" page and click the customer service icon for help.

We strive to respond within 30 days after receiving your feedback and confirming your identity. If you are not satisfied with our response, especially if you believe that our handling of your personal information has affected your legitimate rights and interests, you can contact relevant local regulatory authorities (such as data protection agencies, internet, telecommunications, public security, industrial and commercial administration departments), or file a lawsuit with the People's Court at the defendant's domicile.