ECI Link Privacy Policy
Updated: [September 3, 2026]
Effective: [September 3, 2026]
Published: [September 3, 2026]
Introduction
EC Innovations, Co. Ltd. and its affiliates and controlled subsidiaries (collectively referred to as "ECI", "we", or the "Company") are fully aware of the importance of personal information and document content to you (the "User" or "you"). We are committed to maintaining your trust in us and adhere to the following principles: accountability, purpose limitation, consent, data minimization, transparency, security, and user participation.
The ECI Link Privacy Policy (hereinafter referred to as "this Policy") aims to transparently explain to you how we collect, use, store, share, transfer, publicly disclose, and protect your information when you use the services of ECI Link (hereinafter referred to as "this Platform"), as well as how you manage your own information.
Please read this Policy carefully and thoroughly understand it, as these terms are closely related to your rights and interests. By logging in, browsing, uploading files, submitting orders, or otherwise using the services of this Platform in any manner, you are deemed to have read, understood, and agreed to be bound by all the terms and conditions of this Policy. If you do not agree to any provision of this Policy, please immediately stop using the Platform.
Article 1 Information Collection
1.1 Account Information: When you register an account on the Platform, we collect your name, email address, company name, position, contact information (such as phone number and address), industry, and other registration information you voluntarily provide.
1.2 User Content: The core functionality of this Platform is to process the text, documents, and other materials you upload, input, or submit (hereinafter referred to as "User Content") to provide machine translation services. We process User Content only to the extent necessary to provide the services.
1.3 Translation Output: The resulting text and related metadata generated from machine translation processing of User Content through this Platform (hereinafter referred to as "Translation Output").
1.4 We automatically collect the following information when you access and use this Platform:
(1) Log Information: IP address, browser type and version, operating system, device type, device identifier, referring/exit pages, clickstream data, and access date and time;
(2) Feature Usage Information: feature modules used, number and frequency of API calls, translation language pairs, character count statistics, and feature preference settings;
(3) Performance Data: response times, error logs, and system events.
1.5 Payment Information: If you purchase paid features, our partnered third-party payment service providers will process your payment card information, billing address, and other information necessary to complete the transaction. We will not access or store your full payment card information (such as your full credit card number or CVC code).
1.6 Customer Support Communications: records of your communications with us regarding technical support, account inquiries, or other customer service matters (including emails, online chat logs, phone recordings, etc.).
Article 2 Use of Information
2.1 We use the collected information for the following purposes:
(1) To create and manage your account, verify your identity, and provide the services and features you request;
(2) To process your User Content and generate and deliver Translation Output;
(3) To process payments for paid features and manage subscriptions and renewals;
(4) To communicate with you regarding service updates, system notifications, technical support, and administrative matters;
(5) To monitor and analyze usage trends, conduct statistical and performance analysis, and improve the functionality, performance, and user experience of the Platform;
(6) To improve the technical performance and translation quality of the Platform based on anonymized, aggregated statistical data (which does not contain any original User Content or Translation Output that can identify any user);
(7) To detect, prevent, and respond to fraud, abuse, security incidents, and illegal activities;
(8) To comply with applicable laws, regulations, legal processes, or governmental requests;
(9) With your explicit consent, to send you marketing and promotional information related to this Platform.
2.2 Important Notes Regarding User Content:
(1) We will not use your User Content or Translation Outputs directly and without desensitization to train, fine-tune, or improve ECI models, nor will we use them for the development of other algorithms or systems outside of ECI models.
(2) We will not sell, license, or provide your User Content or Translation Outputs to any third party for their own machine learning training or data analysis purposes.
(3) We will not use your User Content or Translation Outputs to create any user profiles, or use them to deliver targeted advertising.
(4) We will only process User Content within the scope necessary to provide the services and ensure platform security, and the processing period shall not exceed the reasonable time required for the provision of the services.
Article 3 Information Sharing
3.1 We will not sell your personal information or User Content to third parties.
3.2 We may share your information in the following circumstances:
(1) Affiliates: Sharing with ECI's affiliates and controlled subsidiaries to provide and maintain the services of this Platform, provide customer support, and conduct internal management and audits. All affiliates are bound by this Privacy Policy or data protection obligations of an equivalent level.
(2) Service Providers: Shared with third-party service providers that provide us with services such as infrastructure, hosting, payment processing, data analytics, customer support, email communications, and security monitoring. These service providers may access your information only to the extent necessary to provide services to us, and are subject to strict contractual confidentiality and security obligations. We require all service providers to sign a Data Processing Agreement (DPA), specifying their obligations and responsibilities as data processors.
(3) Legal Requirements: Disclosing your information under applicable laws, regulations, legal processes, or mandatory requests from government authorities. To the extent permitted by law, we will notify you prior to disclosure so that you have the opportunity to seek a protective order or other remedies.
(4) Business Transfers: In connection with any merger, acquisition, restructuring, asset sale, or financing transaction involving ECI or its business, your information may be transferred as part of the transaction. We will ensure that the transferee commits to protecting your information at a level of protection no less stringent than that provided in this Privacy Policy.
(5) With your explicit consent or instruction to share with third parties.
Article 4 Data Storage and Cross-Border Transfer
4.1 The core infrastructure of the Platform is deployed within China (including Hong Kong and Macao). User Content and Translation Outputs are stored on servers within China by default.
4.2 To provide global service support, your account information and usage data may be transferred to ECI's affiliates or service providers located in other countries and regions. When conducting cross-border data transfers, we will adopt one or more of the following protective measures in accordance with the requirements of applicable data protection laws:
(1) Transfer data to servers located within China;
(2) Apply the cross-border data transfer mechanisms stipulated in Article 38 of the Personal Information Protection Law of the People's Republic of China, including but not limited to passing a security assessment organized by the national cyberspace authority, obtaining personal information protection certification, or entering into a standard contract;
(3) Apply the Standard Contractual Clauses under the GDPR;
(4) Ensure that the country/region where the recipient is located has been recognized as providing an adequate level of data protection, or adopt other transfer mechanisms recognized by applicable laws.
Article 5 Data Security and Retention
5.1 We implement the following technical and organizational security measures to protect your information:
(1) Data Encryption: All data in transit and data at rest are encrypted in accordance with the standards required by applicable national laws and relevant regulations. Encryption keys for User Content are managed separately from system administration keys.
(2) Access Control: Access to User Content is subject to the principle of least privilege. Only authorized technical and operations personnel have access, and all access activities are fully logged. Regular review and revocation mechanisms are implemented for access permissions.
(3) Network Security: Firewalls, intrusion detection and prevention systems, web application firewalls, and DDoS protection are deployed. Regular penetration testing and vulnerability scanning are conducted.
5.2 We retain your personal information and User Content for the period necessary to fulfill the purposes described in this Privacy Policy, or for the period required by applicable laws. The specific retention rules are as follows:
(1) During the existence of your account, we retain your account information, User Content, and Translation Outputs so that you can access and use them;
(2) After account cancellation, we will delete or anonymize your account information, User Content, and Translation Outputs within thirty (30) calendar days, unless applicable laws require an extended retention period;
(3) The retention period for usage data shall not exceed twenty-four (24) months, and data exceeding this period will be deleted or anonymized.
5.3 Users may delete the Translation Outputs on their own through the Platform. After a user cancels their account, ECI will process their information in accordance with the aforementioned retention rules.
Article 6 User Rights
6.1 In accordance with applicable laws and the provisions of this Agreement, you shall enjoy the following rights:
(1) Right of access: to obtain a copy of your personal information held by us;
(2) Right to rectification: to correct inaccurate or incomplete personal information;
(3) Right to deletion: to request the deletion of your personal information under certain circumstances;
(4) Right to restrict processing: to restrict our processing of your personal information under certain circumstances;
(5) Right to data portability: to receive your personal information in a structured, commonly used, and machine-readable format, and the right to transmit that information to another service provider;
(6) Right to object: to object to our processing of your personal information under specific circumstances;
(7) Right to withdraw consent: to withdraw your consent in consent-based processing activities; such withdrawal shall not affect the lawfulness of processing based on consent before the withdrawal.
6.2 If you wish to exercise the above rights, please contact us via the contact information set forth in Article 8 of this Privacy Policy. We will respond to your request within the timeframe required by applicable laws. To protect the security of your information, we may need to verify your identity.
Article 7 Changes to this Privacy Policy
7.1 ECI may update this Privacy Policy from time to time. Users will be notified of material changes through platform announcements, in-site notifications, or their registered email addresses at least thirty (30) days in advance. By continuing to use the Platform after the expiration of the change notification period, you are deemed to have accepted the updated Privacy Policy.
Article 8 Contact Us
8.1 If you have any questions, comments, or requests regarding this Privacy Policy, or if you wish to exercise your data protection rights, please contact us using the following method: Email: [privacy@ecinnovations.com]. We will respond within fifteen (15) working days upon receipt of your request. If you are dissatisfied with our response, you have the right to file a complaint with the relevant data protection supervisory authority.