VOYAH Automobile Technology Co., Ltd. and its affiliates (hereinafter referred to as "VOYAH" or "we") respect and protect your right of privacy. Its legal domicile is No. N3010, 3rd Floor, R&D Building N, Artificial Intelligence Science and Technology Park, Economic and Technological Development Zone, Wuhan, China. We will fully guarantee the security of your personal information under the laws and regulations. This Privacy Policy aims to make you clearly understand how we will collect, use, share, store, and protect your personal information and how you can manage your personal information when you use the services on VOYAH's official website.

It should be noted that this Privacy Policy does not apply to the services provided to you by other third parties, nor is it applicable to products or services for which we have separately set up a privacy policy.

We attach great importance to protecting users' privacy rights. In order to provide you with more accurate services, we will collect, use, and disclose your personal information under the provisions of this Privacy Policy. We hope that you carefully read and confirm that you have fully understood the contents written in this Privacy Policy before using our products and/or services so that you can make appropriate choices according to the guidelines of this Privacy Policy. When you start using or continue to use our official website services after we update this Privacy Policy (we will inform you of the update in a timely manner), it shall be deemed that you agree to this Privacy Policy and allow us to collect, use, save and share your personal information according to this Privacy Policy. If you disagree with this Privacy Policy or any part thereof, please immediately stop using our related services (but the services that can still be provided without using your personal information will not be affected).

Please note that the official website of VOYAH may contain links to other websites, and we cannot guarantee that sufficient privacy protection measures are taken for these other websites. We recommend that you read the privacy policies or statements of other websites carefully before browsing their pages.

The Privacy Policy was last updated on December 7, 2024, and will officially take effect on December 7, 2024.

Text

Please refer to the following index to read the corresponding chapters:
1. How We Collect and Use Your Personal Information;
2. How We Use Cookies and Similar Technologies;
3. How We Entrust to Process, Share, Transfer, and Publicly Disclose Your Personal Information;
4. How You Manage Your Personal Information;
6. Data Protection
7. Protection of Minors' Personal Information;
8. Information Preservation;
9. Update of Privacy Statement;
10. How to Contact Us.

I. How We Collect and Use Your Personal Information

1. Personal information we collect

When you contact us through the official website, we will provide a template for you to enter your request. In this process, we may copy your surname, residential area, vehicle model, VIN, and request.

2. How do we use your personal information

When you visit the official website of VOYAH, the personal information we collect will be used for the following purposes:

Contacting or communicating with you

• Confirm the information related to the application service with you, such as appointment time and location;
• For replying to your consultation and customer return visit;

Providing our products or services

• Help with real-name authentication, service registration, login, and account binding on our platform;
• Complete product transactions, such as vehicle ordering;
• Provide customer service support, such as remote maintenance, technical support, and roadside assistance;

Improve or research and develop our products or services

• For improving existing products or services;
• For research and development of new products and services;

3. You fully understand that we do not need your authorization or consent to collect and use personal information in the following circumstances:

1) Information related to the obligations of the personal information controller under laws and regulations;
2) Information related to national security and defence;
3) Information related to public safety, public health, and major public interests;
4) Information related to criminal investigations, prosecutions, trials, and the execution of judgments;
5) When it is difficult to obtain the consent of the individual for safeguarding significant legal rights and interests, such as the life and property of the personal information subject or other individuals;
6) When personal information is disclosed to the public by the personal information subject;
7) It is necessary to sign and perform the contract as required by the personal information subject;
8) When the personal information collected is from legally disclosed information, such as legal news reports and government information disclosed;
9) Information necessary for maintaining the safe and stable operation of products and/or services, such as identifying and resolving product and/or service faults;
10) It is necessary to conduct statistical or academic research for public interests by the personal information controller as an academic research institution, and it is necessary to de-identify the personal information contained in the results when it provides the results of academic research or description.
11) Other circumstances stipulated by laws and regulations.

II. How We Use Cookies and Similar Technologies

1. Use of Cookies

This website does not use any Cookies to remember you and customize your visit.

2. Use of web beacon

This website does not use other similar technologies such as web beacon.

III. How We Entrust to Process, Share, Transfer, and Publicly Disclose Your Personal Information

We are committed to earning and maintaining your trust in us, so we use commercially reasonable technologies and other measures to help prevent the loss, misappropriation, or alteration of your personal data. At the same time, please understand that we will only disclose your personal information to specific subjects under the following circumstances:

1. Entrusted processing and sharing

We will not entrust other parties to process and share your personal information collected from this website, nor will we use third-party SDKs to process your personal information.

2. Transfer

We will not transfer your personal information to any company, organization, or individual except for the following circumstances:
1) After obtaining your express consent, we will transfer your personal information to other parties;
2) The information is required to be provided under the requirements of applicable laws and regulations, legal procedures, and mandatory administrative or judicial requirements;
3) In cases of merger, acquisition, asset transfer, bankruptcy liquidation, or similar transactions, if the transfer of personal information is involved, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require that company or organization to seek your authorization and consent again.

3. Public disclosure

We will only publicly disclose your personal information under the following circumstances:
1) With your explicit consent;
2) If your personal information is required to be provided according to laws, regulations, mandatory administrative enforcement, or judicial requirements, we may publicly disclose your personal information based on the type and disclosure method of personal information required. On the premise of complying with laws and regulations, when we receive the above request for disclosure of information, we will require it to issue corresponding legal documents, such as subpoenas or letters of investigation. We will carefully review all requests to ensure that they have a legitimate basis and are limited to data that law enforcement has the legal right to obtain for specific investigation purposes.

4. Exceptions to consent in sharing, transferring, and public disclosure

Please be fully aware that according to laws and regulations, we do not need to obtain your prior authorization and consent when sharing, transferring, or publicly disclosing your personal information for the following legitimate reasons:
1) The personal information is necessary for the conclusion and performance of the contract with you as one party;
2) The personal information is necessary to perform statutory duties or obligations, such as those directly related to national security, national defence security, public safety and judicial investigation, prosecution, trial, and execution of judgments;
3) The personal information is necessary to protect the life, health, and property of natural persons in response to public health emergencies or emergencies;
4) The personal information is processed to a reasonable extent for acts such as news reporting and media supervision in the public interest;
5) The personal information disclosed by individuals or other legally disclosed personal information is processed within a reasonable scope under the Personal Information Protection Law of the People's Republic of China;
6) Other circumstances stipulated by laws and administrative regulations.

Please understand that there is no 100% security in the transmission and storage of information data. We promise to try our best to protect your personal information. We will use various measures such as information security systems, security technologies, and procedures to protect your personal information from unauthorized access, use, or disclosure.

IV. How You Manage Your Personal Information

We guarantee you to exercise the following rights on your personal information according to relevant laws, regulations and standards in China, as well as common practices in other countries and regions:

1. Access and correct your personal information

You have the right to access and correct your personal information, except for exceptions provided by laws and regulations. You can contact us and submit an access request at any time using the contact information provided in "How to Contact Us" of this Privacy Policy:
We will reply to your access request within 15 working days or within the time limit stipulated by relevant local privacy protection laws. Please be reminded that after receiving your access request, we will verify your identity and provide you with the information we have about you once the verification is successful.

2. Delete your personal information

You may request us to delete your personal information under the following circumstances:
1) The way we process personal information violates related laws and regulations;
2) We collect and use your personal information without your consent;
3) If our processing of personal information violates the relevant terms of this Privacy Policy;
4) If you no longer use our products or services, or you have written off your account;
5) If we terminate our services and operations.
You can contact us and submit a deletion request at any time using the contact information provided in "How to Contact Us" of this Privacy Policy. If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us and require them to delete it in a timely manner, unless otherwise stipulated by laws and regulations or these entities obtain your independent authorization. When you delete information from our service, the corresponding information in the backup system may not be deleted immediately but will be deleted when the backup is updated.

3. Constraint on automatic decision-making by the information system

In this website service, we will not make decisions based on non-manual automatic decision-making mechanisms such as information systems and algorithms.

4. Respond to your request

To ensure security, we may require you to provide a written request or prove your identity in other ways. We will reply to your request within 15 working days or within the time limit stipulated by relevant local privacy protection laws after receiving your feedback and verifying your identity. We will process your reasonable request for free in principle, but for repeated requests that exceed the reasonable limit, we will charge a certain cost as the case may be. We may refuse the requests that are unreasonably repetitive, require excessive technical means (e.g., need to develop a new system or fundamentally change existing practices), pose risks to the legitimate rights and interests of others, or are highly impractical (e.g., involve backup of information stored on tape).
We will not be able to respond to your request by laws and regulations under the following circumstances:
1) Related to national security and defence;
2) Related to public safety, public health, and major public interests;
3) Related to criminal investigation, prosecution and trial;
4) There is sufficient evidence to demonstrate that you have subjective malice or abuse your rights;
5) Seriously prejudicial to your, other individuals' or organizations' legitimate rights and interests if your requests are responded;
6) Situations involving trade secrets.

V. Data Protection

1. Data protection measures

We endeavor to provide for the security of our users' information against loss, misuse, alteration, and unauthorized visit or disclosure. We will use a variety of security measures to safeguard information within reasonable levels of security. For example, we will use encryption technology (such as SSL), de-identification, anonymization, and other means to protect your personal information.
We enhance the security capabilities of the software installed on your device through continually upgraded technological means to prevent the disclosure of your personal information. For example, we encrypt some information locally on your device for secure transmission.
We establish special management systems, operating procedures and organizations to safeguard information. For example, we strictly limit the range of people who have access to information, require them to comply with confidentiality obligations, and conduct audits.

2. Response to security incidents

In the event of a security incident, such as the leakage of personal information, we will activate our emergency response plan and remedial measures to prevent the security incident from expanding and fulfill the relevant reporting and notification obligations under the law.

3. Security authentication

At present, VOYAH Automobile Technology Co., Ltd. has obtained the grading of China Classified Protection of Cybersecurity (Level III) and has met the requirements of international authoritative certification standards such as ISO27001 and ISO27701 in terms of information security.

4. Safety reminders

The Internet is not an absolutely safe environment, and communications with other users by means such as e-mail and instant messaging is not encrypted. We strongly recommend that you avoid sending personal information through such means. Please use complex passwords to help us ensure your account security. We will do our utmost to ensure the security of your personal information by employing technical measures to prevent unauthorized access, use, or disclosure. Please be aware that the system and communication network you use to access the VOYAH Auto APP, in-vehicle application platform, and supporting IVI terminal equipment may encounter issues due to factors beyond our control.

Note: Do not dispose, repair, or sell vehicles or parts on your own. If you choose to do so rather than recycling through OEM sales points, you must process and delete the sensitive data in the products to protect your legal rights. When recycling through OEM sales points, please ensure your sensitive data is protected and deleted in advance, or contact us for better solutions. If you are using a vehicle that is not your own, please delete the sensitive data after use to protect your legal rights.

VI. Protection of Minors' Personal Information

Our products, websites and services are mainly designed for adults. Children are not allowed to create their own personal information accounts without the consent of their parents or guardians.

If we have collected children's personal information legally, we will only use or publicly disclose such information that is permitted by law, explicitly agreed by parents or guardians, or necessary for the protection of children. Regardless of the age of a child stipulated by local laws and customs, we regard anyone under the age of 14 as a child.

The child or his/her guardian is entitled to access and correct the child's personal information at any time, and can also request us to correct and delete it. If you have any comments, suggestions, complaints, or reports on matters related to children's personal information, please contact us. We are always available.

VIII. International Transmission

In principle, the personal data we collect is processed in the country where you reside, but under certain necessary circumstances, your personal data may be processed outside your country of residence. For example, when you contact us through our contact email address, the personal data generated by email exchanges between both parties, such as email address, name, and VIN code, may be cross-border due to that the mailbox server location is not in your country of residence. Regardless of where your personal data is processed, we apply the same protection measures as described in this statement. We transmit your personal data according to the legal framework required by different jurisdictions. Recipients of your personal data must observe the same privacy protection measures stipulated by the applicable data protection laws.

Storage period

We will store your personal data within a reasonable period under relevant laws and regulations as well as industry practices. In addition to the mandatory provisions of laws and regulations, our criteria for judging the reasonable storage period are as follows:

1. The purpose to be achieved for your products or services;
2. The necessary time period for you to exercise relevant rights;
3. Whether you agree to prolong the time period of storage;
4. Other reasonable conditions for storage.
Upon expiry of the time period, given the cost and operability of data management, we will, within a reasonable period, delete or anonymize your personal data in batches.
We will stop storing and delete or anonymize your personal information within a reasonable period of time after completing the purposes described in the Privacy Policy, or after we confirm your application for service cancellation or withdrawal of privacy policy consent, or after we terminate the operation of corresponding products or services.

IX. Update of Privacy Statement

We will update the Privacy Policy from time to time to reflect changes in our operating practices, related services, and laws and regulations. We will update the "Update Date" stated at the beginning of the Privacy Policy when revising it. Please check regularly.

The Privacy Policy is subject to changes. Without your explicit consent, we will not reduce the rights you are entitled to under the Privacy Policy.

For major changes, we will provide more significant notifications. For some services, we will send notices by e-mail to explain the specific changes in the Privacy Policy.

The major changes referred to in this Privacy Policy include but are not limited to

1) Major changes in our service mode, such as the purpose of processing personal information, the type of personal information processed, and how personal information is used;
2) Major changes have taken place in our ownership structure and organizational structure.
such as changes in owners caused by business adjustments, bankruptcies, mergers, and acquisitions;
3) Changes in main targets for sharing, transfer of control, or public disclosure of personal information;
4) Significant changes in your right to participate in personal information processing and the way you exercise it;
5) Changes in departments in charge, contact methods and complaint channels responsible for processing personal information;
6) When the personal information security impact assessment report indicates high risks, we will also archive the old version of this Privacy Policy for your reference.

X. How to Contact Us

You can contact us at

1. VOYAH Auto Official E-mail: [email protected]
2. Contact address: No. 1118, Yongfeng Ring Road, Hanyang District, Wuhan City, Hubei Province
We have established a dedicated department for personal information protection. You can contact this team through the following ways:
1. Contact person for user rights and interests affairs: Data Security Team
2. Email address of the Data Protection Commissioner: [email protected]
We attach great importance to your privacy and will respond within 15 days or within the time frame stipulated by relevant local privacy protection laws. We would be grateful if you could cooperate with the necessary procedures during the contact process.
If you are dissatisfied with our response, particularly if you believe our processing of your personal information infringes upon your lawful rights, you may seek resolution through external channels, such as filing a lawsuit to people's court with jurisdiction, complaining to the industry self-discipline association or relevant government regulatory agencies.