隐私政策

一、政策说明 Policy Statement

1. 本隐私政策用于说明本内部管理App收集、使用、存储、保护员工相关信息的全部规则。员工登录使用App，即表示知悉并同意本隐私政策全部条款。

1. This Privacy Policy specifies rules for collection, usage, storage and protection of employee information. Logging in and using the App means you acknowledge and accept all terms herein.

2. 本App仅用于公司内部业务，不面向公众运营。所有信息收集仅支撑运维、办公必要功能，无广告推送、用户画像、第三方共享等商业化用途。

2. This App operates for internal corporate business only, not for public commercial use. All data collection serves operation needs only; no advertising, user profiling or commercial data sharing.

二、我们收集的信息 Information We Collect

2.1 员工账号身份信息 Account Info

• 收集内容：员工工号、姓名、手机号、所属部门；由企业统一录入，员工自助登录。
• Collected data: employee ID, full name, mobile number, department; imported uniformly by the company for employee login.
• 使用目的：员工身份核验、账号权限管控、运维操作溯源、异常登录风控。
• Purpose: identity verification, access control, operation audit, abnormal login risk management.

2.2 设备基础信息 Device Information

• 收集内容：设备型号、系统版本、设备唯一标识（OAID）、网络状态。
• Collected data: device model, OS version, OAID, network status.
• 使用目的：消息推送、设备登录校验、线上故障排查、运维日志定位。
• Purpose: Honor push notification, device login verification, online troubleshooting, operation log tracing.

2.3 文件存储相关（对应WRITE_EXTERNAL_STORAGE权限）

• 权限用途：申请存储权限仅用于运维报表（Excel/PDF）下载保存、本地运行日志存储、附件文件读写。
• Permission purpose: Storage permission is required only for downloading operation reports (Excel/PDF), saving local logs, reading & writing attachments.
• 说明：App不会主动扫描手机相册、通讯录、私人文档；仅读写本业务主动导出/下载的文件。
• Note: The App never actively scans your photos, contacts or personal files. It only accesses files exported/downloaded by business operations.

2.4 运行日志信息 Operation Logs

• 收集内容：登录时间、操作记录、机器人设备操作行为、接口访问记录。
• Collected data: login time, operation records, robot control records, API access logs.
• 使用目的：运维问题复盘、内部安全审计、违规操作追溯。
• Purpose: troubleshooting review, internal security audit, violation tracing.

三、信息使用规则 How We Use Data

• 所有信息仅限大虎智源内部运维、管理使用，不会出售、出租、转让给任何外部公司、第三方机构。
• All data is used internally by Dahu Zhiyuan only. Data will never be sold, rented or transferred to external companies or third parties.
• 不会基于收集信息开展精准广告、营销推广；无对外商业化数据变现行为。
• No targeted advertising or commercial marketing based on collected data; no external data monetization.
• 仅在法律法规要求、司法机关依法调取时，对外提供必要信息。
• Data disclosure only happens when required by law or judicial authorities.

四、信息存储与保存周期 Data Storage & Retention

• 员工在职期间，账号、操作日志持续留存；员工办理离职后，账号权限同步关闭。
• Account and operation logs are retained during employment; account access will be disabled after resignation.
• 离职后，公司按照内部合规要求留存必要运维审计日志，员工私人联系方式可申请脱敏处理。
• Necessary audit logs are retained for compliance after resignation; employees may apply for desensitization of personal contact info.
• 所有业务数据存放于企业内网服务器，外网无开放访问通道。
• All business data is stored on internal corporate servers with no public external access.

五、权限管控说明 Permission Control

App仅申请业务必备权限，无多余敏感权限：

The App applies for essential permissions only; no redundant sensitive permissions:

• 存储权限：文件导出、日志保存；可在手机系统设置手动关闭，关闭后报表下载功能无法使用。
• Storage: report export & log saving. You may disable it in system settings, which will disable file download functions.
• 无通讯录、短信、位置、相机等非必要权限；未申请GET_ACCOUNTS账号读取权限。
• No unnecessary permissions such as contacts, SMS, location or camera. GET_ACCOUNTS is not requested.

六、员工个人权利 Your Rights

• 查询：可向公司IT运维部申请查询本人账号数据、操作日志。
• Access: You may apply to the IT department to check your account data and operation logs.
• 更正：个人手机号、部门信息有误，可提交申请修改。
• Correction: Submit applications to correct wrong mobile number, department info.
• 注销：办理离职即可完成账号停用，申请个人信息脱敏。
• Cancellation: Account access is revoked upon resignation; you may apply for personal info desensitization.

七、信息安全保障 Data Security Protection

公司采取服务器防火墙、账号密码加密、接口Token鉴权、操作日志全留存等多重防护方式，防范数据泄露、篡改、丢失。员工严禁私自转发、截图内部数据，避免人为泄密。

The company adopts firewalls, password encryption, Token authentication and full log backup to prevent data leakage, tampering and loss. Employees shall not forward or screenshot internal data without permission.

八、第三方SDK说明 Third-party SDK

• 推送SDK：用于接收运维消息告警，获取设备标识完成推送下发，遵循隐私规范。
• Honor Push SDK: delivers operation alerts; collects device ID for push service, complying with Honor privacy rules.
• 无其他第三方统计、埋点、广告SDK，无第三方私自收集用户信息。
• No extra third-party tracking, analytics or advertising SDKs; no unauthorized third-party data collection.

九、政策更新 Policy Updates

公司可根据国家法规、业务调整更新本隐私政策，新版本会在App内公示。员工继续使用App即视为同意更新后的条款。

The company may update this policy per laws and business changes. New versions will be announced in App. Continued use equals acceptance of updated terms.

十、联系方式 Contact Us

如对隐私规则有疑问、诉求，可联系公司IT运维部对接处理。

Contact the IT Operation Department for any questions or requests regarding privacy rules.