Privacy policy

Page 1: Preface and Scope of Application
These Privacy Terms (hereinafter referred to as the “Terms”) describe how Eqitou collects, uses, stores, and protects user information in the course of providing financial services, asset management tools, and digital currency-related services. Users should carefully read and understand these Terms before accessing or using Eqitou’s services. By registering for, accessing, or using Eqitou’s services, users are deemed to have fully understood and agreed to all of these Terms.
These Terms apply to all users of the Eqitou platform and related services, regardless of whether they access the platform via the website, mobile application, or other means. Regardless of the user’s jurisdiction, these Terms are binding on the user and Eqitou regarding privacy matters.
Eqitou reserves the right to modify or update these Terms as necessary. Updates will be published through appropriate channels and will take effect from the date of publication. Your continued use of the services constitutes your acceptance of the modified Privacy Terms. If you disagree, you should immediately cease using all services provided by Eqitou.
These Terms, together with the Terms of Service, constitute the entire agreement between you and Eqitou regarding privacy protection and service use.

Page 2: Information Collection Principles
In the course of providing services, Eqitou collects user information based on legality, propriety, and necessity to ensure operational compliance and service quality. All information collection activities strictly comply with applicable laws and regulations and are premised on protecting user rights.
The primary purposes of information collection include:
Compliance requirements: Meeting legal and regulatory requirements such as Anti-Money Laundering (AML), Counter-Terrorism Financing (CFT), and Know Your Customer (KYC).
Service Optimization: Improving product functionality and user experience, and designing and adjusting products based on user needs.
Risk Control: Identifying potential risks, ensuring transaction and fund security, and preventing fraud, hacking, and other misconduct.

The information collected by Eqitou includes necessary information generated during user registration, authentication, transactions, and daily service use. The platform does not collect sensitive information unrelated to the service, nor does it obtain user data beyond reasonable business needs.
Users understand and agree that, in some cases, refusing to provide necessary information may result in the inability to complete account registration or access certain features. Eqitou will always adhere to the principle of minimizing collection, collecting only the data necessary to provide the service.

Page 3: User-Provided Information
During registration, authentication, and use of Eqitou services, users are required to proactively provide necessary information to facilitate the platform’s identity verification and compliance management. This information includes, but is not limited to, name, date of birth, nationality, identification documents, financial information, and other relevant documentation.
User-submitted information must be true, accurate, and complete, and promptly updated when changes occur. Users are solely responsible for any account restrictions, transaction failures, or other losses resulting from false or incomplete information provided.
For some services, users may be required to provide additional information such as their source of funds, investment experience, and risk tolerance to assist Eqitou in evaluating and providing appropriate services. By providing this information, users consent to Eqitou’s use of such information within the scope of compliance and service.

Page 4: Automatically Collected Information
In addition to information proactively provided by users, Eqitou may automatically collect certain technical and usage data during users’ access and use of the services. This information is collected to ensure platform security, optimize the service experience, and meet regulatory requirements.
Automatically collected information may include:
Device information: such as device model, operating system, browser type, and language settings, used to improve compatibility and service stability. Network Information: This includes IP addresses, access times, pages visited, and network service provider information for security audits and risk management. Usage Data: This includes user click history, feature usage frequency, and error logs, used to improve platform performance and user experience. Cookies and Tracking Technologies: Eqitou may use cookies or similar tools to identify user preferences, save login status, and conduct behavioral analysis. Users can manage or limit the use of cookies through browser or application settings, but this may affect the normal operation of some features.

All automatically collected information will be used only for legitimate service-related purposes and will not be used for unauthorized commercial purposes. Eqitou will implement strict technical measures to ensure data security and confidentiality.

Page 5: Information Use
User information collected by Eqitou will be used strictly for legitimate, reasonable, and necessary business purposes to ensure the security, compliance, and effectiveness of the service. Users agree that Eqitou may use the relevant information within the following scope:
Account Management: This is used to complete registration, identity verification, permission allocation, and account maintenance to ensure that users can use the platform features normally. Compliance Review: Meet Anti-Money Laundering (AML), Counter-Terrorism Financing (CFT), and other regulatory requirements, and fulfill customer identification and risk monitoring obligations.
Service Improvement: Optimize product functionality and user experience through data analysis, and develop new services based on demand.
Security: Used to identify unusual activity, prevent fraud and cyberattacks, and maintain the security of platform transactions and funds.
Information Disclosure: Provide necessary data to auditing agencies, partners, or regulatory authorities within the scope of user authorization or legal requirements.

Eqitou promises not to use user information for commercial activities unrelated to the service, nor to sell or rent user data without the user’s explicit consent. All use is based on the protection of user rights.

Page 6: Information Sharing and Disclosure
Eqitou respects and protects user privacy and will not share or disclose user information without authorization. However, Eqitou may share user data in accordance with the law or within the necessary scope in the following circumstances:
Compliance and Legal Requirements: To comply with applicable laws, regulations, regulatory requirements, or lawful requests from judicial authorities, Eqitou may provide necessary information to relevant organizations.
Partner Support: In the course of providing services, it may be necessary to share certain data with vetted third-party partners for payment settlement, custody, risk control, or technical support.
Audit and Risk Control: To ensure the security of user assets and transactions, Eqitou may provide information to independent auditing firms or risk management service providers for necessary verification and testing.
User Authorization: With the user’s explicit consent, Eqitou may share relevant information with designated third parties upon the user’s request.
Eqitou will strictly limit the scope of information sharing to only legitimate, necessary, and specific purposes. All third parties must commit to implementing reasonable data protection measures and not use information for unauthorized purposes.
Eqitou will not sell users’ personal information or use it for commercial activities unrelated to the service.

Page 7: Data Storage and Protection Measures
Eqitou will implement reasonable technical and management measures to ensure the security of user information during storage and processing. All user data will be managed in accordance with laws, regulations, and industry standards to prevent unauthorized access, disclosure, alteration, or loss.
Data Storage Period: User information will be retained for the purpose stated in these Terms, unless longer retention is required by law or regulatory requirements. After the retention period expires or when the information is no longer necessary for business purposes, Eqitou will securely delete or anonymize it.
Security Technical Measures: These include encrypted transmission, multi-layer firewalls, access control, hot and cold data separation, and regular vulnerability testing to ensure the integrity and confidentiality of data during transmission and storage.
Internal Management Measures: Only authorized personnel have necessary access to user data and are required to receive regular compliance and security training. Any violations of internal regulations will be strictly dealt with.
Emergency Response Mechanism: Eqitou has established an information security incident response process. In the event of a data breach or potential risk, timely remedial measures will be taken and notification will be made as required by law.

While Eqitou has implemented multiple layers of protection, users understand and agree that security risks cannot be completely eliminated in any online environment.

Page 8: User Rights
Eqitou respects and protects the legal rights of users regarding the processing of their personal information. Users enjoy the following rights while using the service:
Right to Inquire and Access: Users have the right to learn whether Eqitou is processing their personal information and, within legal limits, request a copy of the relevant information.
Right to Correct and Update: If users discover that the information they provide is incorrect or outdated, they have the right to request correction or updating to ensure the accuracy and completeness of the information.
Right to Deletion: Users may request the deletion of their personal information, subject to compliance with laws, regulations, or contractual agreements. However, please note that some data may need to be retained for a specified period for compliance, audit, or security reasons.
Right to Restrict Processing: Users may request the restriction of the processing of their information in certain circumstances, such as when they question the accuracy or legality of the processing.
Right to Withdraw Consent: Where data processing is based on user consent, users have the right to withdraw that consent at any time. However, withdrawal may affect the normal provision of the relevant services. Right to Data Portability: Within the scope permitted by law, users may request that their personal information be transferred to another legitimate service provider.

Eqitou will make reasonable efforts to respond to user requests within a reasonable period of time, but reserves the right to deny certain requests due to compliance or legal requirements.

Page 9: Protection of Minors
Eqitou attaches great importance to the privacy protection of minors and strictly abides by relevant laws and regulations. Unless otherwise provided by law, Eqitou’s services are, in principle, only available to adults with full civil capacity. Minors should use the services of this platform with the guidance and consent of their guardians.
Eqitou will not knowingly collect the personal information of minors. If it is discovered that a minor has registered or used the service without the consent of their guardian, Eqitou reserves the right to take immediate action, including restricting account use, deleting relevant information, or terminating the service.
To the extent permitted by law, if it is necessary to collect information about minors (for example, in educational or specific compliance scenarios), Eqitou will obtain the explicit consent of the guardian and will only use and store the relevant data to the extent necessary to achieve the service objectives. Guardians should actively fulfill their supervisory responsibilities for minors, help them correctly understand the importance of privacy protection, and avoid providing unnecessary information to the platform. Eqitou recommends that guardians regularly review minors’ use of services to ensure their information security.

If a guardian fails to fulfill their supervisory obligations and results in the leakage or improper use of a minor’s information, the guardian will bear the relevant liability. Eqitou will make reasonable efforts to protect the legitimate rights and interests of minors, but this cannot replace guardianship responsibilities.

Page 10: Terms Updates and Dispute Resolution
Eqitou reserves the right to amend and update this Privacy Policy based on business developments, changes in laws, regulations, or regulatory policies. Updated terms will be published through appropriate channels and will take effect from the date of publication. Users should review these terms regularly to ensure they are aware of the latest content. Continued use of Eqitou services after these terms have been updated will be deemed to indicate that the user has read and agreed to the revised terms. If the user disagrees, the user should immediately cease using the relevant services.

During the implementation of this Privacy Policy, if a user has questions or disputes regarding the collection, use, or protection of personal information, the parties should first engage in friendly negotiations through reasonable channels to reach an agreement. If negotiations fail, the dispute will be submitted to an arbitration institution with jurisdiction. The arbitration award will be final and binding on both parties.
If any provision of these Terms is found to be invalid or unenforceable, the validity of the remaining provisions will not be affected. When using the Services, users must comply with applicable laws and regulations and properly exercise their rights. Eqitou reserves the right of final interpretation of this Privacy Policy within the scope of legal requirements.