AIbox Privacy Policy
Effective Date: March 23, 2026
AIbox (as defined below, or "we", "us", "our") attaches great importance to protecting the personal information of our guests. We understand the significance of your personal information to you and will provide protection for your personal information in accordance with laws, regulations, and industry practices. This Personal Information Processing Rule (hereinafter referred to as "this Rule", "this Personal Information Processing Rule") explains how we collect, use, share, store, and protect your personal information, and how you can manage your personal information during your use of AIbox products and/or services (hereinafter referred to as "AIbox Services" or "our Services", as defined below).
This Privacy Policy applies to the AIbox mobile application (hereinafter referred to as "this App" or "AIbox") and related services developed and operated by Guangzhou Soundbox Technology Co., Ltd. (registered address: No. 12 Huashan Road, Shilou Town, Panyu District, Guangzhou City, hereinafter referred to as "we", "us", or "AIbox").
Before you start using our Services, please be sure to carefully read and understand this Rule, paying special attention to the terms marked in bold/bold underlined to ensure you fully understand and agree before using. If you use our Services, it means you agree to and accept this Personal Information Processing Rule. For professional terms involved in this Rule, we try to explain them in a concise and easy-to-understand manner for your comprehension.
It is important to note that this Rule does not apply to products and/or services provided by other third parties to you, nor does it apply to products and/or services for which AIbox has separately established legal notices and personal information processing rules, or products and/or services for which a separate personal information protection agreement has been signed. When you use third-party products and/or services through our Services, your information shall be subject to the third party's personal information processing rules. We strongly recommend that you read and confirm the relevant agreements before accepting the services (especially those involving personal information). This Personal Information Processing Rule will help you understand the following:
1.
Definitions
2.
3.
How We Collect and Use Your Information
4.
5.
How We Use Cookies and Similar Technologies
6.
7.
How We Share, Transfer, and Publicly Disclose Your Information
8.
9.
How We Protect and Store Your Information
10.
11.
How You Manage Your Information
12.
13.
How We Handle Information of Minors
14.
15.
How This Rule is Updated
16.
17.
Comments or Complaints
18.
19.
How to Contact Us
20.
Definitions
AIbox Services: AIbox application services ("AIbox WeChat Mini Program/Website/APP") and AIbox physical pod services applicable to this Rule.
AIbox: Refers to the provider of AIbox Services.
AIbox Service Provider: Guangzhou Soundbox Technology Co., Ltd.;
In order to provide you with our Services, the above AIbox service providers will share and jointly process your personal information. Please note that not all of your personal information will be shared or jointly processed by all service providers; we only share with a limited number of affiliates necessary for providing community services to you, and this is subject to the purposes set forth in this Rule.
Affiliates: Refers to any company, legal entity currently or in the future controlled by, controlling, or under common control with AIbox, and the legal successors of such companies or legal entities. Control means (1) directly or indirectly holding more than half of the voting rights; or (2) directly or indirectly enjoying more than half of the distributable profits; or (3) directly or indirectly controlling the composition of more than half of the members of the board of directors; or (4) directly or indirectly holding more than half of the registered capital.
Personal Information: Personal information is information related to you that can be used, alone or in combination with other information, to identify you personally. Personal information does not include aggregated or anonymized information, i.e., information that cannot identify you or a specific natural person through processing and cannot be restored.
Sensitive Personal Information: Includes email address and communication content (when using services), personal phone number, facial photos, ID cards or government-issued documents, property information (including bank account information), your travel trajectory, precise location information and accommodation information, online identification information, account, password, and password protection answers; and website browsing records, as well as personal information of children under the age of twelve (hereinafter referred to as "children").
"You" in this Rule: The term "you" used in this Rule refers to any person who uses our website, application, or other services. If you are an employee or job applicant, the AIbox HR Personal Information Processing Rule explains how we use your personal information in the context of our employment relationship. If you are both our employee or job applicant and also use our Services, this Rule explains how we handle your personal information when you use our Services.
How We Collect and Use Your Information
When you use our Services, the scenarios in which you need/choose to authorize us to collect and use personal information include:
·
To provide you with the basic functions of our Services, you need to authorize us to collect and use necessary information. If you refuse to provide such necessary information, you will not be able to use our Services normally.
·
·
To provide you with extended functions of our Services, you can choose to authorize us to collect and use information. If you refuse to provide such information, you will not be able to use the relevant additional functions normally or achieve the intended functional effects, but it will not affect your normal use of the basic functions of our Services.
·
(1) Scenarios where you need to authorize us to collect and use personal information
We will collect and use your personal information for the purposes described in this Rule based on the principles of legality, legitimacy, necessity, transparency, and quality.
·
To help you become our user
To comply with laws and regulations and provide more convenient services, when you register as a user of the AIbox website or AIbox Mini Program/APP, you need to provide at least a mobile phone number to create an account and complete the relevant online identification information (such as avatar, nickname). If you are an individual member of AIbox, you need to provide us with your mobile phone number to associate you with your member company, thereby helping you use AIbox pods. If you only need to use browsing, searching, and other functions, you can visit the AIbox official website without registering as our user and providing the above information.
·
·
To provide you with location-based services
(1) Location Information
To help you quickly find the desired pod, with your authorization, we will collect relevant information generated during your use of our Services, including location information.
When you enable the mobile device's location function through system authorization and use the location-based services, we will collect and use your location information to show you nearby pod spaces.
We will use relevant technologies to obtain your location information (accuracy may vary), including IP address, GPS, and WLAN (e.g., Wi-Fi) access points, Bluetooth, and base stations that can provide relevant information. The information you provide while using the service may contain corresponding geographic location information, such as the regional information set in your account profile or the geographic tag information in images or videos you upload. You can turn off location services in your mobile device's system to stop us from collecting your location information, but you may then be unable to use the location-based services we offer, or the expected effects of those services may not be achieved.
·
(2) Log Information
When you use our Services, we will collect information such as your browsing, search, clicks, favorites, likes, communication, follows, shares, posts, etc., and save them as relevant web logs, including your IP address, browser type, language used, operating system version, mobile phone model, access date and time, telecommunications carrier, network requests, etc.
·
·
To help you complete payments
When you make a payment on the AIbox WeChat Mini Program/APP/website, you can choose a third-party payment service provider cooperating with AIbox for payment. We need to share your order information, payment information, and other legally necessary information with these partner institutions to confirm your payment instruction and help you complete the payment. If you refuse to provide delivery information and payment information, we will not be able to provide online ordering services for you.
·
·
To provide you with customer service and after-sales support
When you contact our customer service, our system may record the communication between you and the customer service representative and use your account information to verify your identity; when you require customer service related to your order, we may query your relevant order information to provide appropriate assistance and handling; when you need customer service to help modify relevant information (such as delivery address, contact information, etc.), you may need to provide additional information beyond the above to complete the modification.
·
·
To provide you with security protection
To ensure the security of your account, transactions, and system operation, and to comply with legal requirements and our agreement rules, during your use of our Services, with your authorization, we will collect your device information, including device attributes, connection, and status information, such as device model, device identifiers (e.g., IMEI/androidID/IDFA/OPENUDID/GUID/OAID, SIM card IMSI, ICCID information, etc.), device MAC address, software list, telecommunications carrier, and other software and hardware characteristics.
To enhance the security of the services we provide, more effectively prevent phishing websites and malware, we may use or integrate your personal information with information legitimately shared by our affiliates and partners with your authorization or according to law, based on your usage habits and commonly used software information, to comprehensively assess the risk of your account and transactions, including identity verification, preventing, detecting, and investigating potential fraud, network viruses, network attacks, and other security risks, as well as violations of our or our affiliates' agreements, policies, or rules, to protect your, other users', our, or our affiliates' legitimate rights and interests, and to record some URLs we consider risky.
·
·
To provide you with a secure privacy space
If you visit buildings and facilities cooperating with AIbox. AIbox buildings and facilities have surveillance camera systems installed to protect our legitimate business interests in safeguarding the safety of AIbox employees, members, visitors, and their property. These recordings can be accessed by AIbox. According to relevant laws and regulations, AIbox may also be required to provide surveillance footage to authorized members of AIbox or other third parties, such as competent authorities. Such recordings are generally retained for a limited time, but may be retained longer if AIbox or the relevant member deems it appropriate (e.g., for investigating incidents), or upon request by competent authorities.
·
·
For account security and identity verification
For purposes such as completing identity verification, ensuring account security, confirming transaction status, and providing after-sales service and dispute resolution, with your authorization, we may obtain your personal information from third parties (e.g., collecting information related to transaction progress, such as your transaction, payment, booking details, from the transaction counterparty you select and the third-party information systems, payment institutions, intermediaries directly involved in the transaction, to facilitate processing your order and ensuring successful completion of services, or to better prevent fraud, fake orders, etc.). In accordance with legal requirements and agreements with third parties, we will, with your authorization, obtain relevant information from AIbox's affiliates and partners, and verify the legitimacy of the information source before using such information.
·
·
To enable your participation in our partnership programs
If you participate in partnership programs such as intermediary cooperation or event collaboration through our website, to complete identity verification, we may require you to provide your name, email address, phone number, etc., to contact you. If you intend to provide us with personal information of others, please ensure that you have obtained proper authorization from them and provide them with the relevant link to this Personal Information Processing Rule.
·
(2) Scenarios where you can choose to authorize us to collect and use personal information
To provide you with better services, you can choose to use our extended functions. We will collect and use the following information in compliance with legal requirements and based on your specific authorization. This type of information will be collected in the specific functions and business scenarios you select. If you do not provide this information, it will not affect your use of the basic functions of AIbox Services.
·
Extended functions based on camera authorization
You can choose to enable the system's camera permission to authorize AIbox to access your camera through functions like taking photos, recording videos, scanning codes, etc., so that you can publish content by taking photos or recording videos. If you need to record and publish videos with sound, you also need to enable the microphone permission. We will collect the information you upload and publish. You can disable this function in system permissions. Once disabled, you may not be able to use the code scanning function, or interact by taking photos or videos, but it will not affect your enjoyment of the basic functions of AIbox Services.
·
·
Extended functions based on photo album authorization
You can choose to enable the system's photo album permission to authorize us to access your photo album by actively uploading images, videos, etc., so that you can publish content by uploading photos or videos. We will collect the information you choose to upload and publish. You can disable this function in system permissions. Once disabled, you may not be able to change your avatar, post images or videos, or share needs by uploading photos or videos, but it will not affect your enjoyment of the basic functions of AIbox Services.
·
·
Extended functions based on microphone authorization
You can choose to enable the system's microphone permission to use voice technology for chat and other voice interaction functions. We will collect the voice information you input during the use of intelligent voice technology for machine recognition, online interaction, and to meet your search needs. You can disable this function in system permissions. Once disabled, you may not be able to use online voice interaction functions, but it will not affect your enjoyment of the basic functions of AIbox Services.
·
·
Extended functions based on contacts authorization
You can authorize us to access your mobile phone's contact list and public information (avatar, nickname, etc.), allowing you to quickly complete visitor registration without manual input. You can disable this function in system permissions. Once disabled, you may not be able to use interaction functions based on contacts, but it will not affect your enjoyment of the basic functions of AIbox Services.
·
·
Extended functions based on calendar authorization
You can enable the system's calendar permission to use functions like adding events to integrate with your calendar or corporate email. We will collect the above information to display or provide regular reminders. You can disable this function in system permissions. Once disabled, you may not be able to use calendar recording or reminder functions, but it will not affect your enjoyment of the basic functions of AIbox Services.
·
(3) Other rules for collecting and using personal information
·
If the information you provide contains personal information of other users, before providing such personal information to AIbox, you must ensure that you have obtained the legal authorization to do so.
·
·
If we intend to use the information for purposes not specified in this Rule, or use information collected for a specific purpose for another purpose, we will obtain your consent beforehand.
·
·
If we obtain your information indirectly from a third party, we will, before collection, explicitly require in writing that the third party explain the source of the personal information and whether it has obtained your legal authorization for its collection, processing, and provision of such information to us. Except as explicitly permitted by law, we will only collect your personal information from a third party after confirming that the third party has obtained your authorization. If the scope of the third party's authorization does not cover our processing and usage purposes, we will either obtain your consent for such processing ourselves or require the third party to do so before processing your personal information. Meanwhile, our professional security team will apply security hardening measures to personal information (including sensitive information reporting, sensitive information encrypted storage, access control, etc.). We will protect indirectly obtained personal information with measures no less stringent than those we use to protect our users' own personal information.
·
·
Exceptions to obtaining authorization consent
According to relevant laws and regulations, we may collect and use your personal information without your authorization consent in the following circumstances:
(1) Where it is necessary for fulfilling our obligations under laws and regulations;
(2) Where it is directly related to national security or national defense;
(3) Where it is directly related to public safety, public health, or major public interests;
(4) Where it is directly related to criminal investigations, prosecutions, trials, and judgments, or judicial/administrative enforcement actions;
(5) Where it is necessary to protect your or another individual's vital legitimate rights and interests such as life or property, and it is difficult to obtain your consent;
(6) Where the personal information has been voluntarily disclosed by you to the public or is otherwise legally publicly available;
(7) Where the personal information is collected from legally public disclosed information, such as legal news reports, government information disclosures, or other legal requirements;
(8) Where it is necessary for the performance of a contract or other written agreement with you;
(9) Where it is necessary to maintain the safe and stable operation of the products and/or services provided, such as discovering and addressing faults in the products and/or services;
(10) Where it is necessary to respond to public health emergencies or to protect the life, health, and property safety of natural persons in emergencies;
(11) Other circumstances stipulated by laws and regulations.
·
Please be aware that under applicable law, if we take technical and other necessary measures to process personal information such that the data recipient cannot re-identify a specific individual and the information cannot be restored, or if we de-identify collected information for research, statistical analysis, and prediction to improve AIbox content and layout, support business decision-making regarding products and/or services, and enhance our services (including using anonymized data for machine learning or model training), such processed data usage does not require further notification to you or obtaining your consent.
·
If we cease operating AIbox Services, we will promptly stop the continued collection of your personal information, notify you of the cessation of operations through individual notices or public announcements, and delete or anonymize personal information related to the discontinued services. In the case of children's personal information, we will also notify the child's guardian promptly.
·
How We Use Cookies and Similar Technologies
(1) Use of Cookies
To ensure the normal operation of AIbox and provide you with a more accessible browsing experience, we store Cookies, Flash Cookies, or other local storage provided by browsers (or associated applications) that typically contain identifiers, site names, numbers, and characters (collectively, "Cookies") on your computer or mobile device. With the help of Cookies, AIbox can store your preferences or items in your shopping cart, among other data.
If your browser or browser add-ons allow, you can modify your acceptance of Cookies or reject our Cookies. However, if you perform such actions, it may in some cases affect your secure access to our AIbox services, and you may need to change user settings each time you visit our AIbox.
(2) Use of Cookie-like Technologies
Emails we send may contain links to our website content. If you click on such a link, we will track the click to help us understand your product and/or service preferences, enabling us to proactively improve customer service experiences. A web beacon is typically a transparent image embedded in a website or email. With the help of pixel tags in emails, we can know whether an email has been opened. If you do not want your activities tracked in this way, you can unsubscribe from our mailing list at any time.
ETags (Entity Tags) are HTTP protocol headers transmitted behind the scenes between an internet browser and server, which can act as a substitute for Cookies. ETags help us avoid unnecessary server load, improve service efficiency, save resources and energy, and we may use ETags to record your identity for deeper understanding and service improvement. Most browsers offer users the ability to clear browser cache data; you can perform corresponding data clearing operations in the browser settings. Please note that disabling ETags may prevent you from enjoying a relatively better service experience.
(3) Use of SDKs
To ensure the stable operation of our client application, enable functionality, and allow you to enjoy and use more services and features, our application may embed SDKs or other similar applications from authorized partners. Please refer to the attachment for details on the SDKs we have integrated.
We conduct strict security checks on the Application Programming Interfaces (APIs) and Software Development Kits (SDKs) used by authorized partners to obtain information, and establish strict data protection agreements with them, requiring them to handle personal information in accordance with this Rule and other relevant confidentiality and security measures.
How We Share, Transfer, and Publicly Disclose Your Information
(1) Sharing
We will not share your personal information with companies, organizations, or individuals other than AIbox service providers, except in the following circumstances:
·
Sharing under legal circumstances: We may share your personal information externally according to legal requirements, litigation/dispute resolution needs, or as requested by administrative or judicial authorities.
·
·
Sharing with your explicit consent: With your explicit consent, we will share your personal information with other parties.
·
·
Sharing with affiliates: To facilitate the provision of our products and/or services and ensure the security of our community, based on your geographic location and actual usage, your personal information, including sensitive personal information (name, contact details, and photos), may be shared with our affiliates.
·
·
Sharing with authorized partners: We may entrust authorized partners to provide you with certain services or perform functions on our behalf. We will only share your information for the legitimate, necessary, specific, and clear purposes stated in this Rule. Authorized partners can only access information necessary for their role, and we will use agreements to require them not to use this information for any other purpose.
·
·
Sharing with product and/or service providers: Certain of our products and/or services are provided by third-party providers. We will only share your necessary information with third parties when necessary and with your separate consent.
·
Currently, our authorized partners include the following types:
·
(1) Advertising and analytics service partners: We entrust these partners to process information related to advertising coverage and effectiveness. However, unless we have your permission, we will not share your personal identity information with advertising and analytics service partners, or we will de-identify such information so that authorized partners cannot identify you. These partners may combine the above information with other information they have legally obtained to perform the advertising services or decision-making recommendations entrusted to us.
·
·
(2) Suppliers, service providers, and other partners: We send information to suppliers, service providers, and other partners who support our business, including those providing technical infrastructure services, analyzing service usage, providing customer service, facilitating payments, or conducting academic research and surveys, as entrusted by us.
·
(2) Transfer
We will not transfer your personal information to any company, organization, or individual except in the following circumstances:
·
Transfer with explicit consent: With your explicit consent, we will transfer your personal information to other parties.
·
·
In the event of a merger, acquisition, or bankruptcy: If AIbox service providers undergo a merger, acquisition, or bankruptcy liquidation, or other circumstances involving such changes, and personal information transfer is involved, we will require the new company or organization holding your personal information to continue being bound by this Rule. Otherwise, we will require that company, organization, or individual seek your authorization and consent anew.
·
(3) Public Disclosure
We will only publicly disclose your personal information in the following circumstances:
·
With your explicit consent or based on your active choice, we may publicly disclose your personal information;
·
·
If we determine that you have violated laws and regulations or seriously breached the AIbox Member Agreement and related rules, or to protect the personal safety and property of AIbox members or the public from harm, we may, in accordance with laws and regulations or with your consent, disclose information about you.
·
(4) Exceptions to Obtaining Authorization Consent for Sharing, Transferring, and Publicly Disclosing Personal Information
According to relevant laws and regulations, sharing, transferring, or publicly disclosing your personal information does not require prior authorization consent in the following circumstances:
(1) Where it is necessary for fulfilling our obligations under laws and regulations;
(2) Where it is directly related to national security or national defense;
(3) Where it is directly related to public safety, public health, or major public interests;
(4) Where it is directly related to criminal investigations, prosecutions, trials, and judgments, or judicial/administrative enforcement actions;
(5) Where it is necessary to protect your or another individual's vital legitimate rights and interests such as life or property, and it is difficult to obtain your consent;
(6) Where the personal information has been voluntarily disclosed by you to the public or is otherwise legally publicly available;
(7) Where the personal information is collected from legally public disclosed information, such as legal news reports, government information disclosures, or other legal requirements;
(8) Where it is necessary for the performance of a contract or other written agreement with you;
(9) Where it is necessary to maintain the safe and stable operation of the products and/or services provided, such as discovering and addressing faults in the products and/or services;
(10) Where it is necessary to respond to public health emergencies or to protect the life, health, and property safety of natural persons in emergencies;
(11) Other circumstances stipulated by laws and regulations.
Please be aware that under applicable law, if we take technical and other necessary measures to process personal information such that the data recipient cannot re-identify a specific individual and the information cannot be restored, then the sharing, transfer, or public disclosure of such processed data does not require further notification to you or obtaining your consent.
How We Protect and Store Your Information
(1) Storage Location
Personal information collected and generated during our operations within the People's Republic of China will be stored within the People's Republic of China. We will provide your personal information to overseas entities only under the following circumstances, after fulfilling our legal obligations:
(1) Where applicable laws explicitly stipulate;
(2) Where we obtain your explicit authorization;
(3) Where you engage in cross-border transactions, such as personal active actions through the internet.
In such cases, we will ensure, through contracts and other means, that your personal information is protected at a level no less than that provided by this Rule.
(2) Storage Period
We retain your personal information only for the period necessary to achieve the purposes described in this Rule. We consider the following factors in determining the storage period:
(1) To continue developing, customizing, upgrading, and improving our services;
(2) To maintain business records for analysis and/or audit purposes;
(3) To comply with legal record retention requirements;
(4) To address or respond to any existing or potential legal claims;
(5) To handle any complaints or reports concerning the Services.
(3) Technical Data Protection Measures
We have implemented security measures that comply with industry standards and are reasonably feasible to protect your information, preventing unauthorized access, public disclosure, use, modification, damage, or loss of personal information. For example, we use encryption technology to enhance the security of personal information; data exchanged between your browser and server is protected by SSL protocol encryption; we also provide HTTPS protocol secure browsing for our website; we use trusted protection mechanisms to prevent malicious attacks on personal information; we implement access control mechanisms to ensure that only authorized personnel have access to personal information.
(4) Data Protection Management Measures
We protect personal information by establishing internal management systems and operating procedures, implementing classified management of personal information, adopting appropriate security technologies such as encryption and de-identification, determining reasonable operating permissions for personnel accessing personal information internally, and providing regular security education and training for employees. Additionally, we have formulated and organized the implementation of personal information security incident response plans and other measures required by laws and administrative regulations.
(5) Security Notice
We take the protection of personal information provided to AIbox seriously. AIbox employs reasonable measures and strives to use appropriate technical or organizational measures to protect your personal information, including preventing unauthorized or unlawful processing, as well as accidental loss, destruction, or damage. Unfortunately, no data transmission or storage over the Internet can be guaranteed 100% secure. Therefore, while AIbox strives to protect your personal information, we cannot guarantee or warrant the security of any information you transmit to AIbox; you do so at your own risk. Given this, we ask that you help us enhance security by implementing your own security controls (such as using strong passwords, not sharing credentials with others, logging out when leaving the office, and other security measures).
(6) Personal Information Security Incident Handling
If a security incident occurs, we will notify you and report to the relevant regulatory authorities in accordance with applicable laws.
How You Manage Your Information
We value your attention to your personal information and do our utmost to protect your rights concerning it, empowering you to safeguard your personal information and security. You have the right to (i) access and correct your personal information held by us; (ii) obtain a copy of your personal information held by us, or, where conditions stipulated by applicable law are met, request that we, on a commercially reasonable basis, assist in transferring your personal information to a third party designated by you; (iii) withdraw your consent; (iv) delete your personal information; (v) cancel your account (if an online account has been created); (vi) request explanations regarding this Rule, and other rights granted to you under applicable law. If you wish to exercise any of these rights, AIbox members can log in to AIbox, click "Me", then "Contact Customer Service" for assistance. To protect your personal information, we will verify your identity before responding to your request. We will process your request within a reasonable time (generally within 15 days).
How We Handle Information of Minors
Generally, our Services are not intended for minors. If you are a minor, we require that you ask your parent or other guardian to carefully read this Rule and use our Services or provide information to us only with the consent of your parent or other guardian. If we become aware that a minor has provided personal information, we will delete it from our records or seek parental/guardian consent in accordance with applicable law.
How This Rule is Updated
Any information collected through our Services is subject to the Rule in effect at the time of collection. We reserve the right to modify, change, add, or delete portions of this Rule at any time at our sole discretion.
If we make any material changes to this Rule, we will notify you of these changes by posting them on our Services or by sending you an email or other notice, as required by applicable law, and update the "Effective Date" below to reflect when these changes take effect.
We encourage you to periodically review this Rule to stay informed about how we use and protect your information and to understand any policy changes. Your continued relationship with us signifies your agreement to be bound by such changes. Any changes to this Rule are effective immediately upon posting or otherwise making available by AIbox.
Comments or Complaints
You have the right to submit any questions, comments, or complaints regarding this Rule or our personal information handling practices. Alternatively, you may file a lawsuit with a court of competent jurisdiction in our location (Guangzhou City).
How to Contact Us
If you have any questions, concerns, or complaints regarding AIbox personal information matters, please contact our Personal Information Responsible Team through the following methods, and we will respond within a reasonable time.
Guangzhou Soundbox Technology Co., Ltd.
Headquarters: No. 12 Huashan Road, Shilou Town, Panyu District, Guangzhou City
Service Hotline: 4006-43-4006
Effective Date: March 30, 2026