Privacy Policy

1. How We Collect and Use Your Information

1.1 User Information We Actively Collect

To ensure your normal use of the GPUNexus platform (https://gpunexus.com/en), we will collect information that you actively provide when using the services, or information we obtain through automated means (collectively referred to as "User Information") in the following scenarios:

1.1.1 Registration, Authentication, and Login

• (1) You may register/log in to this platform account using a mobile phone number, third-party platforms (such as WeChat, etc.), or internationally common third-party platforms. If you use third-party login, we will obtain your public information on that platform (such as nickname, profile picture, and other information displayed on the third-party authorization page, etc.).
• (2) If you are an individual user, you may need to provide legal identification information (such as passport number, ID number issued by the local government, etc.), contact information, and bank card/credit card information that complies with local payment rules to complete real-name verification.
• (3) If you are an enterprise user, you may need to provide the company name, legal proof of registration (such as a local business registration certificate, company registration certificate, etc.), the company's unique identification code, identity information of the legal representative/authorized representative, corporate bank account information, and valid contact information for the company.
• (4) During the real-name authentication process, we may need to entrust cooperative third-party certification agencies to verify your true identity information. You may need to submit your corresponding ID document information and/or facial information as required by the authentication to complete the real-name authentication. This third-party certification agency will feedback the verification results to us. If you do not provide this, you will be unable to use our services normally.

1.1.2 During Service Usage

• (1) To ensure the secure and stable operation of the services, we may collect your device information (such as device model, operating system, IP address, time zone, language), network access method, log information, frequency of use, crash records, usage data, and related performance data information, etc.
• (2) When you participate in platform activities (such as questionnaires, lotteries, etc.), we may collect your account information, contact details, address, etc., to contact you and distribute rewards.
• (3) Consultation records, fault reports, service tickets, and troubleshooting processes generated when you use platform services will be used for service optimization and issue response.
• (4) If you apply for offline delivery, product testing, domain name services, or certificate authority services, we will collect and use the necessary information in accordance with applicable laws, regulations, and industry regulatory requirements.

1.1.3 Obtaining User Information from Third Parties

We may obtain some of your information from affiliated companies and partners, but only under the premise of legality, necessity, and security, and for legitimate purposes such as enhancing service experience and preventing fraud.

1.2 To Provide You with Better, More Convenient, and Secure Services

Subject to compliance with applicable laws and regulations, we may use the collected information for the following purposes:

• (1) To provide you with services.
• (2) Service optimization and development. For example, we optimize our services based on the information generated when the GPUNexus platform system responds to your requests.
• (3) To protect the GPUNexus platform, its users and partners. For example, we will use your information for identity verification, security protection, complaint handling, dispute mediation, fraud monitoring, etc.; when you use security features or similar services, we will detect malicious programs or viruses, or identify fraudulent information for you.
• (4) To invite you to participate in surveys regarding our products and services.
• (5) Other related scenarios that may require the use of collected information. If the usage scenario is not reasonably related to the initial scenario, we will seek your consent again before using the information.
• (6) After collecting your personal information, we may anonymize part of the data through technical means. Anonymized information cannot identify the subject. Please understand and agree that in such cases, we have the right to use the anonymized information; and without disclosing your personal information, we have the right to analyze the user database and utilize it commercially.
• (7) Please note that all personal information you provide while using our products and services will be subject to our continued use during your use of our products and services, unless you delete it, withdraw your consent through system settings, or contact us. When you delete your account, we will stop using and delete your personal information.
• (8) Subject to compliance with laws and regulations, we may process your personal information through anonymization, aggregation, desensitization, and encryption to form statistical information for academic research and statistical reports related to the system. Simultaneously, we will conduct statistics on the usage of our products and services and may share these statistics with the public or third parties to demonstrate the overall usage trends of our products and services. These statistics do not contain any of your identity identification information.
• (9) When we display your personal information, we will desensitize your information using methods including content replacement and de-identification to protect your information security.

1.3 Changes in the Purpose of Collecting and Using User Information

If business development necessitates adjustment of the purposes for collecting and using user information, we will re-obtain your consent through prominent methods such as page prompts, interactive processes, and agreement confirmations, unless the change is directly and reasonably related to the original purpose.

1.4 Business and Interaction Data

• 1.4.1 Data generated through your interaction with open-source models, third-party websites, software, applications, or services via this platform (such as text, images, audio, video, etc.) constitute your business and customer data ("Interaction Data"), over which you have full ownership.
• 1.4.2 We act solely as a neutral technical service provider, processing Interaction Data strictly according to your instructions, and will not access, use, or disclose it without authorization, unless otherwise required by laws and regulations or necessary for troubleshooting.
• 1.4.3 You shall ensure that the source of interactive data is legal and compliant. If the interactive data involves personal data of third parties, you must have obtained clear authorization from the relevant data subjects in accordance with the law and in compliance with the applicable laws and regulations on data protection. If the interactive data you provide violates applicable laws, regulations, regulatory requirements, or infringes upon the legitimate rights and interests of third parties, you shall bear all resulting consequences and liabilities, and we have the right to demand compensation from you for all losses we suffer as a result.

2. How We Store Your Information

2.1 Storage Location

In accordance with the provisions of laws and regulations, the user information collected and generated during the operation of this website and related services within the territory of China will be stored within the territory of the People's Republic of China. Under the following circumstances, we will ensure that, after fulfilling the obligations stipulated by law, your personal information is provided to entities outside the territory of the People's Republic of China: (1) There are explicit legal provisions permitting it; (2) We have obtained your explicit authorization; (3) It is a result of your own proactive actions, such as conducting cross-border transactions via the internet. Regarding the above circumstances, we will protect your personal information in accordance with the provisions of this policy.

2.2 Storage Period

We retain your information only for the period necessary to achieve the service purposes, including completing transactions, fulfilling legal obligations, and responding to complaints, etc. After you delete your account or your authorization expires, we will delete or anonymize the information, except where otherwise mandatory required by laws and regulations.

3. How We Share, Transfer, and Publicly Disclose Your Information

3.1 Sharing

We will not share your user information with third parties, except in the following circumstances:

• (1) With your explicit consent;
• (2) To fulfill statutory obligations or to cooperate with the lawful requirements of relevant judicial authorities, administrative organs, or regulatory agencies (such as court judgments, subpoenas, regulatory investigations, etc.);
• (3) Sharing necessary information with affiliated companies or authorized partners to realize service functions (such as payment, real-name authentication, customer service, etc.), and only sharing personal information necessary for providing the product or service. Partners are bound by strict data protection agreements;
• (4) Sharing partial non-sensitive information with necessary institutions for purposes such as security risk control and anti-fraud.

3.2 Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

• (1) With your explicit consent or authorization;
• (2) In circumstances where it is necessary according to the requirements of applicable laws, regulations, legal procedures, or mandatory administrative or judicial orders;
• (3) Due to reasons such as change of the platform's operating entity, merger, acquisition, or bankruptcy liquidation, etc., and the new entity undertakes to continue fulfilling this Privacy Policy or providing equivalent protection. If the new entity changes the original purpose or method of processing, it will seek your authorization and consent again. In the event of bankruptcy with no data successor, we will delete your information.

3.3 Public Disclosure

We will only publicly disclose your information under the following circumstances:

• (1) With your explicit consent or based on your active choice;
• (2) To protect the personal and property safety of you or the public from harm, we may disclose your user information in accordance with applicable legal provisions or the relevant agreements and rules of this platform;
• (3) Where it is necessary to provide your personal information in accordance with legal, regulatory requirements, mandatory administrative law enforcement, or judicial requirements, we may publicly disclose your personal information according to the required type and method of disclosure;
• (4) Other circumstances where disclosure is permitted by law or agreed upon by both parties. If you seriously violate laws, regulations, or relevant agreements/rules, we may disclose your related violations and the measures we have taken against you.

3.4 Exceptions Not Requiring Authorization

Under the following circumstances, in accordance with applicable legal provisions and relevant national standards, we may collect and use your personal information without obtaining your prior authorization and consent:

• (1) Involving national security or for law enforcement purposes, as required by applicable laws or mandatory government requirements;
• (2) Related to public security, public health, and significant public interests;
• (3) Related to criminal investigation, prosecution, trial, and execution of judgments, etc.;
• (4) Where it is necessary to protect the life, property, and other significant legitimate rights and interests of you or other individuals, but it is difficult to obtain consent from the individual;
• (5) Personal information that you have made public on your own;
• (6) Collecting personal information from legally publicly disclosed information, such as legal news reports, government information disclosure channels, etc.;
• (7) Necessary for entering into and performing a contract as requested by the information subject;
• (8) Necessary for maintaining the safe and stable operation of the software and related services, such as discovering and handling faults in the software and related services;
• (9) Necessary for legitimate news reporting;
• (10) Other circumstances stipulated by laws and regulations. According to legal provisions, sharing or transferring de-identified personal information, ensuring that the data recipient cannot restore and re-identify the personal information subject, does not constitute external sharing, transfer, or public disclosure of personal information. The preservation and processing of such data will not require separate notification to you or seeking your consent.

4. How We Protect Your Information Security

We employ encryption, anonymization, access control, and other technical measures that comply with international industry standards to protect your information. We have established internal security management systems and emergency response plans, and strictly restrict data access permissions. In the event of a security incident such as an information leak, we will notify you promptly in accordance with the law and take reasonable remedial measures. However, please understand that in the internet environment, due to technological limitations and the potential existence of various malicious activities, information security inherently carries risks. You should also take reasonable measures (such as setting complex passwords, changing them regularly, and not disclosing your account passwords to others) to protect the security of your own account.

5. How We Manage Your User Information

We strictly comply with applicable laws and regulations concerning data protection, safeguard all your statutory rights as a data subject over your personal data, and ensure the effective protection of personal privacy and information security.

5.1 Your Rights in the Processing of User Information

• 5.1.1 Generally, you can view, copy, correct, access, modify, or delete the user information you actively provide at any time.
• 5.1.2 If you find that our collection or use of your personal information violates laws, administrative regulations, or agreements with you, you can contact us and request the deletion of your personal information collected under such violations.

5.1.3 Requests for Information Deletion in Specific Circumstances

You may submit a request to us to delete user information under any of the following circumstances:

• (1) The purpose of information processing has been achieved, cannot be achieved, or is no longer necessary;
• (2) Our processing of user information violates laws, regulations, or agreements with you;
• (3) We collected or used your information without your consent;
• (4) We cease providing products or services, or the storage period for user information has expired;
• (5) You withdraw your consent/authorization;
• (6) If we no longer provide services to you;
• (7) Other circumstances provided for by applicable laws and regulations.

After you or we, upon your request, delete the relevant information, due to the limitations of applicable laws and security technology, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and restrict any further processing of it until the backup can be purged or anonymized.

5.2 Flexible Adjustment of Authorization Scope

Apart from the basic user information necessary for business functions, for additionally collected user information, you can choose to withdraw authorization or adjust the authorization scope. You can also withdraw our authorization to continue collecting all information at once by deleting your account. However, please note that after withdrawing consent or authorization, the corresponding service functions may become unavailable, and we will no longer process your personal information, but user information previously processed based on authorization will not be affected.

5.3 Response to Requests

• 5.3.1 You have the right to delete your account, report, or complain. To ensure security, you may need to provide a written request and prove your identity by other means. We generally do not charge a fee for your reasonable requests. However, for repeated requests exceeding a reasonable limit, we may charge a certain cost fee depending on the specific circumstances. We may refuse requests that are groundlessly repetitive, require excessive technical means, pose risks to the legitimate rights and interests of others, or are impractical.
• 5.3.2 Under the following circumstances, we will be unable to fulfill your request:

• (1) Involving national security or for law enforcement purposes, as required by applicable laws or mandatory government requirements;
• (2) Directly related to public security, public health, and significant public interests;
• (3) Directly related to criminal investigation, prosecution, trial, and execution of judgments, etc.;
• (4) There is sufficient evidence indicating your subjective malice or abuse of rights;
• (5) Necessary for protecting the life, property, and other significant legitimate rights and interests of you or other individuals, but it is difficult to obtain consent from the individual;
• (6) Responding to your request would seriously harm the legitimate rights and interests of you or other individuals or organizations;
• (7) Involving trade secrets.

5.4 Handling Upon Cessation of Operations

If we cease operations due to business adjustments or other reasons, we will notify you in advance through announcements, notices, etc., immediately stop collecting your information, and delete or anonymize the held user information.

6. Protection of Minors

This platform primarily targets enterprises and professional users. If you are under 18 years of age or have not reached the minimum age required to use this platform in your place of residence, or if you otherwise do not meet the legal requirements corresponding to the conduct of a user, please, in accordance with local legal requirements, (1) do not use this platform, or (2) read this policy under the guidance and in the company of your guardian, and use our products and services only after ensuring that your guardian agrees to the contents of this policy. If we discover that information regarding a minor has been collected without the guardian's consent, we will promptly delete the relevant information upon the guardian's request.

7. Use of Cookies and Similar Technologies

We may use Cookies and similar technologies to optimize the access experience, understand user habits, analyze usage preferences, etc. During this process, we may send one or more Cookies or anonymous identifiers to your device. You can manage or disable Cookies through your browser settings, but disabling them may affect the optimal service experience. We promise not to use the information collected by such technologies for purposes other than those described in this policy.

8. Updates to This Privacy Policy

We may revise this policy based on business development, legal and regulatory requirements, etc. Such revisions constitute part of this policy. The revised policy will be notified to you via platform announcements, SMS push notifications, or other appropriate means. If you continue to use GPUNexus platform products or services after the revision of this Privacy Policy, it indicates that you have fully read, understood, and accepted the revised Privacy Policy and are willing to be bound by it.

9. Scope of Application

This Privacy Policy applies to all products, services, features, and solutions already provided or that may be launched from time to time in the future on this platform. If you use third-party services through this platform, your information will be subject to that third party's privacy policy, not this Privacy Policy. If you use the technical services of this platform to provide services to your users, the data generated from your business cooperation with your customers belongs to you, and this Privacy Policy does not serve as a substitute for the privacy policy between you and your users. The entire content of this Privacy Policy applies to all users of the overseas version of this platform. If your jurisdiction has more stringent mandatory data protection regulations, such regulations shall take precedence.

10. Independence of Clauses

If any term or any part of a term in this policy is deemed invalid, illegal, or unenforceable under applicable laws and regulations, such invalidity, illegality, or unenforceability shall not affect the validity of any other term or any other part of these terms in this policy. The titles or summaries of the clauses in this Privacy Policy are for reference only and do not define, affect, or limit the meaning, description, and interpretation of the clause contents. In case of any inconsistency between the title/summary and the corresponding clause, the content of the clause shall prevail.

11. Contact Information

If you have any questions about this Privacy Policy, please contact the GPUNexus platform through the following channels. We will strive to reply to and handle your questions within a reasonable time. Please note that we may not reply to questions unrelated to this policy or your personal information rights.

• Company Full Name: Chengfang Technology (Beijing) Co., Ltd.
• Company Email: support@gpunexus.com