Privacy Policy

Adhering to the concept of user privacy first and user information security first, Beijing Kingsoft Cloud Network Technology Co., Ltd. (hereinafter referred to as "Kingsoft Cloud" and "we") are committed to providing high-quality cloud services to users around the world. This privacy protection policy aims to explain to you how Kingsoft Cloud collects, uses, stores, and deletes your personal information when providing services, cloud services or products on this website, and reminds you of your personal information rights. Kingsoft Cloud attaches great importance to your privacy, and we will take all measures to protect your privacy and personal information rights.

This privacy policy applies to your login or access to the Kingsoft Cloud website（ https://www.ksyun.com/ ）, as well as purchasing or using all services or products provided by the Kingsoft Cloud website. If our services may contain links to third-party websites, applications or services, this policy does not apply to any products, services, websites or content provided by third parties. If your company and other business entities use our products or services to provide services to your customers, you need to formulate a personal information protection policy that meets the transaction scenario. Kingsoft Cloud would like to remind you that before using the products and services provided by Kingsoft Cloud, please read and understand this "Privacy Policy" (hereinafter referred to as the "Policy").

This policy catalog:

1. What personal information do we collect

2. What is the purpose of collecting your personal information

3. What cookies do we use

4. How do we store, share, transfer and disclose your personal information

5. How do we protect the security of your personal information

6. What kind of personal information rights do you have

7. How do we protect the personal information of minors

8. How is your information transmitted internationally

9. How to update this policy?

10. How to contact us?

1. What personal information do we collect

1.1 Personal information refers to various information related to identified or identifiable natural persons recorded electronically or by other means.

1.2 When you purchase and use Kingsoft Cloud's products and services through the Kingsoft Cloud website (especially by logging in to the console), we will collect and use your personal information as follows:

(1) Registration information. When you register an account with Kingsoft Cloud, you need to provide us with your username, mobile phone number, and create a password. The mobile phone number you submit is used to register, bind your account, receive verification codes (such as retrieving your password), and as contact information you specified to receive related business notifications (such as new product launches, event reminders, service changes, service-related notifications, etc.) . After you register, you can choose to continue to improve your information on the console, including but not limited to: your real name, industry, region, website, detailed address and email. If you do not register, you can continue to browse the web pages or product introductions of Kingsoft Cloud publicly displayed, but you will not be able to obtain further services provided by Kingsoft Cloud. 

(2) Certification information. According to the "Network Security Law of the People's Republic of China", you need to complete real-name authentication before purchasing and using Kingsoft Cloud products and services. In the real-name authentication stage, you need to further improve the information including but not limited to your name, identification document information (identity card or passport information), facial information and bank card number information. We may verify real-name authentication information through services provided by third parties. Currently, we are using Baidu real-name authentication API service，in addition, you can directly withdraw your real name authentication through the following page" https://account.console.ksyun.com/#/manage". After you successfully revoke your real name authentication, we will immediately delete the personal information collected through real name authentication. If you do not perform real-name authentication, it will not affect your browsing of Kingsoft Cloud web pages or product introductions, but you will not be able to purchase Kingsoft Cloud products and services. However, if you are from a country or region other than the mainland of the People's Republic of China, you usually only need to provide your email address when registering. Unless you choose to register with your phone number, we will not collect information such as your phone number. 

(3) Filing service information. When you use Kingsoft Cloud's specific business functions (such as filing services), in order to comply with relevant national regulations and meet the purpose of providing you with the products and services, in addition to the types of information contained in the registration information and real-name authentication information, you also need Further provide us with the name, ID card, mobile phone number, email address, domain name certificate, record photo, etc., including but not limited to the person in charge of your company or website. If you do not provide the above information, you will not be able to use specific business functions, but it will not affect Your use of basic products and services.

(4) Log information. In order to provide you with services and monitor the running status of cloud services, we will collect your ID, IP address, browser type, language used, hardware device information, operating system version, network operator information, you Information such as the date, time, and duration of access to the service.

(5) Customer service information. When you need to use Kingsoft Cloud customer service, you need to provide UID, user name or other information that can verify your identity so that we can respond to your service request. At the same time, you also need to provide your last name and mobile phone number so that we can provide timely feedback on your service request. We may keep your chat records and order information in order to provide you with the various services you wish to obtain. When you create a new message recipient, you need to provide the name, email address, and mobile phone number of the message recipient. 

(6) Operation and support information. Kingsoft Cloud will organize operation activities for newly launched services and functions from time to time. If you participate in related operation activities, we may collect your contact information (such as mobile phone number), contact address and transaction account information through the operation activity interface for your convenience Can successfully participate in activities. If you do not participate in relevant operational activities, you do not need to provide the foregoing information. 

(7) Payment information. Based on the need to pay for the service, you may need to provide payment information (such as WeChat, Alipay or bank card information), value-added tax number and tax identification number, depending on the payment method specified in your service agreement with Kingsoft Cloud. In order to complete the transaction, we may share your name and bank card number with a third-party bank to complete the collection. 

(8) Invoice receipt information. Based on the need to send invoices, we may need you to provide information such as the recipient's name, receiving phone number, region, address, and zip code. 

(9) Other information. Kingsoft Cloud collects other personal information that you authorized to collect or provide during the use of our services. Before Kingsoft Cloud collects it, we will first seek your consent. 

2. What is the purpose of collecting your personal information

Kingsoft Cloud collects your personal information and will use it for the following purposes. When we want to use the collected information for other purposes not specified in this policy, we will seek your consent and authorization in advance. 

(1) Provide you with, maintain, and improve products or services;

(2) Send you important notices about system security, product or service changes, etc.;

(3) Activate or verify products or services;

(4)   In laws and regulations Promote and introduce products to you under the premise of permission; you have the right to opt-out, please refer to section 6.10of this privacy policy

(5) to provide you with personalized products, services or personalized user experience;

(6)  to conduct internal audits, Data analysis and research to improve our products and services; for your rights in automating personal decision-making and user portraits, please refer to section 6.7 of this privacy policy.

(7)  Protect the information technology security of our products, services and users;

(8)  Comply with and implement applicable legal requirements or relevant industry standards. If the law requires real-name authentication, the collected information including bank card numbers They are only used for real-name authentication purposes, and will not be used for other purposes;

(9) Other purposes permitted by you. If you have doubts about the purpose of data processing, or if you want us to stop one or more of the data usage methods, please contact the customer service team. 

3.What cookies do we use

3.1 To ensure the normal operation of the website, we will store small data files called Cookies on your computer or mobile device. Cookies usually contain identifiers, site names, and some numbers and characters. Kingsoft Cloud can only read the cookies provided by Kingsoft Cloud.

 3.2 We enable cookies for the same purpose as most websites or Internet service providers enable cookies, that is, to improve user experience. Specifically, there are the following purposes: (1) With the help of Cookies, the website can save settings, such as computer or mobile device language, font size and other browsing preferences. This means that users do not need to reconfigure user preferences every time they visit. (2) Certification. When you visit the Kingsoft Cloud website, we will generate a separate ID for you to identify you. If the website does not use cookies with this function, then every time a user opens a web page, the website will treat it as a new visitor. (3) Statistical analysis. For example, we use cookies to count the number of user visits and to understand the source of your visits. (4) Security. We use cookies to ensure the safe operation of the website.

3.3 We will not use Cookies for any purpose other than those stated in this policy. You can manage or delete cookies according to your preferences. You can clear all cookies saved on your computer, and most web browsers have a function to block cookies. But if you do this, you need to personally change the user settings every time you visit our website. To learn more about how to change browser settings, please visit the relevant settings page of the browser you are using.

3.4 Please refer to our Cookies Policy for more information about our laws and practices regarding the handling of Cookies. 

4.How do we store, share, transfer and disclose your personal information

4.1 Storage

 During the retention period stipulated by law or the retention period stipulated in the contract, Kingsoft Cloud will store personal information about you so that you can use our products and services smoothly. After the retention period stipulated by law or the contractual retention period ends, we will delete, anonymize or de-identify your personal information. Depending on the scope of your interaction with Kingsoft Cloud products, your personal information may be stored in countries or regions determined in accordance with the user agreement. If we transfer your personal information storage location from China to overseas, we will ask for your consent and ensure that we comply with this privacy policy and relevant personal information protection laws. However, we may need to keep your information or part of your information for a longer period of time under the following circumstances and only for the purposes related to the following circumstances:

(1) Based on the need to comply with laws and regulations.

(2) Comply with the requirements of court judgments, rulings or other legal procedures.

(3) Comply with the requirements of relevant government departments or other competent departments.

(4) We have reason to believe that we need to comply with relevant regulations such as laws and regulations.

(5) Purposes reasonably necessary for the implementation of the relevant service agreement or this privacy statement, safeguarding the public interest, handling complaints/disputes, and protecting the personal and property safety or legal rights and interests of our customers, other users or employees of our affiliated companies . 

4.2 Sharing 

We will not share your personal information with any company, organization or individual other than Kingsoft Cloud, except in the following cases: 

(1) Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with others Parties. (2) We may share your user information with external parties in accordance with laws and regulations, litigation, arbitration and settlement needs, or according to the requirements of administrative and judicial departments in accordance with the law.

 (3) Sharing with our related parties: Your personal information may be shared with Kingsoft Cloud's related companies. We will only share the personal information necessary to provide the service and are bound by the purpose stated in this privacy policy. If related parties want to change the purpose of processing personal information, they will again seek your authorization and consent. If one party controls, jointly controls or exerts significant influence on the other party, and two or more parties are controlled, jointly controlled or significantly influenced by one party, they constitute related parties. Control refers to the power to determine the financial and operating policies of an enterprise and to obtain benefits from the business activities of the enterprise. Joint control refers to the common control of a certain economic activity in accordance with the contract, and it only exists when the investors who share the control right need to unanimously agree on important financial and operating decisions related to the economic activity. Significant influence refers to the power to participate in the decision-making of an enterprise's financial and operating policies, but not the ability to control or jointly control the formulation of these policies with other parties.

 (4) Sharing with authorized partners: Only to achieve the purpose stated in this policy, some of our services, such as real-name verification, will be provided by authorized partners. We will only use your personal information for legal, legitimate, necessary, specific and clear purposes, and will only provide personal information necessary for the service. Our partners have no right to use the personal information obtained for any other purpose. For companies, organizations and individuals with whom we share user information, we will sign strict confidentiality clauses and data processing agreements with them, requiring them to process user information in accordance with our instructions, this privacy policy and any other relevant confidentiality and security measures . In addition, your personal information will be transmitted to the storage space of the data center through the basic network operator. Our services in China will use China's basic network operators and data centers located in China. In this case, these companies (including Kingsoft Cloud’s affiliates, partners and any other entities) will also comply with our data privacy and security requirements and will not use the personal data received from us for any other purpose. With the development of business, Kingsoft Cloud may conduct mergers, acquisitions, asset transfers and other transactions. We will inform you of the relevant circumstances and continue to protect or require new controllers to continue to protect in accordance with laws and regulations and standards not lower than the requirements of this privacy policy. Your personal information. Click to view the list of third-party SDKs and other APIs that collect personal information 

4.3 Transfer 

We will not transfer your personal information to any company, organization or individual, except in the following cases: 

(1) Transfer with explicit consent: After obtaining your explicit consent, we will transfer you to another party Personal information.

(2) Based on your own request.

(3) When it involves a merger, acquisition or bankruptcy liquidation, if it involves the transfer of personal information, we will require the third-party company or organization that intends to hold your personal information to continue to be bound by this privacy policy, otherwise we will require the company, The organization re-seeks authorization and consent from you. For more information about our cross-border transfer policy, please refer to " 8. How to transfer your personal information internationally? " in this policy 

4.4 Information Disclosure

 We will only disclose your personal information to relevant authorities under the following circumstances: 

(1) Disclosure based on explicit consent: With your explicit consent or based on your active choice, we may publicly disclose your user information.

(2) Disclosure based on law: We may publicly disclose your personal information when required by law, legal procedures, litigation, or compulsory government departments. 

4.5 Exceptions to authorization and consent

 In the following situations, sharing, transferring, and publicly disclosing your user information does not require your prior authorization and consent:

(1) Related to national security;

(2) Related to public safety, public health, and public interest;

(3)  Related to criminal investigation, prosecution, trial, and execution of judgments;

(4)  To protect you or other Personal life, property and other legal rights and interests but it is difficult to obtain the consent of the person;

(5)  Personal information that you disclose to the public by yourself;

(6)  Collect personal information from legally publicly disclosed information, such as legal news reports , Government information disclosure and other channels. 

5. How do we protect the security of your personal information

5.1 Kingsoft Cloud takes your information security very seriously. We strive to adopt various reasonable technical and management security measures to protect your user information and prevent unauthorized access, public disclosure, use, modification, damage or loss of user information. Without your permission, we will not access any of your business data. Unless authorized by you and required by laws and regulations, we will not collect your personal data from third parties. We will use encryption technology to improve the security of user information; we will use trusted protection mechanisms to prevent malicious attacks on user information; we will deploy access control mechanisms to ensure that only authorized personnel can access user information; and we will hold Security and privacy protection training courses strengthen employees’ awareness of the importance of protecting user information.

5.2  We will take all reasonable and feasible measures to avoid collecting irrelevant personal information as much as possible. We will only retain your personal information for the period required to achieve the purpose stated in the policy, unless the law provides otherwise or your request requires an extension of the retention period. Based on different scenarios, products and services, the storage period of data may be different. The standards we use to determine the retention period include: the time required to retain personal data to complete the business purpose, including the provision of products and services, and maintenance in accordance with legal requirements Corresponding transaction and business records to ensure the security of systems, products and services, respond to possible user inquiries or complaints, problem positioning, etc.; whether users agree to a longer retention period; whether there are special requirements for data retention in laws and contracts, etc. After the above-mentioned user information retention period is exceeded, we will delete, anonymize or de-identify your personal information.

5.3 In order to more effectively protect the security of your information, we also hope that you can strengthen your self-protection awareness. Please keep your account and password information properly to avoid leakage of your personal information. We are only responsible for the extent that Kingsoft Cloud directly causes your personal information to be leaked. If our physical, technical or management protection facilities are damaged, resulting in unauthorized access, public disclosure, tampering or destruction of information, resulting in your legitimate rights and interests We will bear the corresponding legal responsibility if it is damaged.

5.4 The Internet environment is not 100% secure. We will try our best to ensure or guarantee the security of any information you send to us. In the unfortunate event of personal information security incidents (leakage, tampering, loss, etc.), we will promptly notify you of the following information in accordance with the requirements of relevant laws and regulations: the types, reasons and reasons for the leakage, tampering, and loss of personal information that have occurred or may occur. The possible hazards, the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, the suggestions that you can prevent and reduce risks, and the remedial measures for you. We will promptly inform you about the incident by email, letter, telephone, push notification, etc. If it is difficult to inform the subject of personal information one by one, we will take a reasonable and effective way to publish an announcement. At the same time, we will also proactively report the handling of personal information security incidents in accordance with the requirements of the supervisory department. 

6.What kind of personal information rights do you have

 Kingsoft Cloud's customers come from all over the world, so we will strictly abide by the laws and regulations of the country where the customer is located, and strive to protect the customer's personal information rights. For example, we strictly abide by the Civil Code of the People’s Republic of China, the Personal Information Protection Law of the People’s Republic of Laws and regulations such as CCPA. Generally, you will have the following rights:

 6.1 Right to disagree or revoke consent

 As a principle, we will obtain your consent and authorization in advance before collecting information about you. If you do not agree with the collection of information, or if you think it is necessary to withdraw your consent, we will not continue to collect your personal information. However, this does not affect the legality of your information collection before you withdraw your consent and authorization. 

6.2 Right to access 

Except for exceptions provided by laws and regulations, you can view and copy the personal information or personal information we hold about you by logging in to the https://account.console.ksyun.com/#/manage account settings management page type. If you have difficulty exercising this right, you can also submit applications to us through the contact information provided in this policy. 

6.3 Right to rectification 

If you find that the personal information you provide is incorrect or incomplete, you have the right to update or correct your personal information. 

6.4 Right to erasure 

You have the right to request that we delete the information we have collected about you. For example: (1) The processing purpose has been achieved, cannot be achieved, or is no longer necessary to achieve the processing purpose; (2) Kingsoft Cloud ceases to provide products or services, or the storage period has expired; (3) You withdraw your consent; (4) Violation of the law , Administrative regulations or the handling of personal information in violation of agreements; (5) Other circumstances stipulated by laws and administrative regulations. According to our contract with you, it is no longer necessary to save your personal information; when you cancel your account, we will stop providing you with products or services, and delete, anonymize or de-identify your personal information in accordance with the requirements of applicable laws .

 6.5 Right to object to processing

 You have the right to ask us to stop processing your personal information or stop sending you marketing information. 

6.6 Right to restriction of processing

 You have the right to request us to restrict the processing of your personal information under certain circumstances. For example, you believe that the personal information we keep about you is inaccurate or illegal. 

6.7 Rights related to automated individual decision making and profiling

 When we adopt automated personal decision-making technology or user portraits, we will obtain your consent in advance or make an agreement with you in the contract. If these decisions significantly affect your legal rights, please contact us through the contact information provided in Article 10 of this policy. 

6.8 Right to portability

 Where it complies with laws and regulations and requirements of the Cyberspace Administration of China, if it is technically feasible, you can request the direct transmission of personal information provided by you and collected in accordance with the contract or consent to another authorized data controller. 

6.9 Right to complain to a local data protection authority 

If you are not satisfied with our response, or our handling of your personal information infringes on your legitimate rights and interests, and after you give us feedback, we cannot provide you with a satisfactory response and If you refuse to improve, you can make a complaint and report to the relevant supervisory agency. In particular, if you are from the European Union, the European Economic Area, Singapore and other countries, and you enjoy the types of rights other than those listed above according to the laws of the country where you are located, you have the right to request the exercise of other related rights. If you wish to exercise any of the above rights, please send an email to [email protected] to contact us. 

6.10 Right to opt-out

 If you live in California, we will process your personal information in accordance with the California Consumer Privacy Act (CCPA). We do not sell your personal information. Therefore, we do not provide the option of refusing to sell personal information. However, we provide you with the right to object or restrict the processing of personal information to ensure your basic rights. 

6.11 Right to non-discrimination 

We will not discriminate against you when you exercise your rights under the California Consumer Privacy Act (CCPA). Unless the California Consumer Privacy Act (CCPA) has a clear permission requirement, we will not: refuse to provide you with goods or services. Charge you different prices or rates for goods or services, including granting discounts or other concessions, or imposing fines. Provide you with goods or services of different levels or qualities. Imply that you may get goods or services at different prices or rates or receive goods or services of different levels or quality. If you want to exercise your rights as a data subject, or if you have any questions or questions, please send an email to [email protected] to contact us. 

7.How do we protect the personal information of minors

7.1 We mainly provide products and services to companies or adults. If you are a minor under the age of fourteen, you need to ask your parents or guardians to read this privacy policy carefully, and use our products and services or provide us with information with the consent of your parents or guardians .

7.2 If the parent or guardian agrees to use our products or services, we will only collect, store, use, share or delete information about minors under fourteen when permitted by laws and regulations, agreeded explicitly by parents or guardians, or is necessary to protect minors.

7.3 If you are a minor from the European Union, European Economic Area, Singapore, Russia, the United States and other countries or regions, the protection measures for your personal information will be implemented in accordance with local laws and regulations. 

8.How to transfer your personal information internationally

We will not migrate your content from the region you choose without your consent. This privacy policy only applies to the collection and processing of your personal information. As far as the user business data you store, process, upload, and distribute through the use of our products and services, we will comply with your specific requirements. The processing methods and technical safeguard measures agreed in the user agreement. Of course, as a principle, you can specify the area where your uploaded content or business data is stored. We may back up your content, but the backup will not cause your content to be transferred to other countries or regions. If we need to transfer personal information overseas due to business needs in accordance with applicable laws and regulations, we will obtain your consent in advance and inform you of the name or name of the overseas recipient, contact information, processing purpose, processing method, and the types of information and the methods and procedures for individuals to exercise their rights under this policy to overseas recipients. We process the cross-border transfer of your personal information in accordance with international cross-border data transfer rules. If you are from the European Union (EU), European Economic Area (EEA), Singapore, Russia, the United States and other countries or regions, we will follow the Standard Contract Clauses (SCC) established by the European Commission or sign a "Data Processing Agreement" to fully Protect your personal information security and privacy rights. If you have a special agreement with us, we will comply with that agreement.

9. How to update this policy

9.1 According to legal amendments or changes in business development, our privacy policy will be updated regularly. 9.2 We will post any changes to this policy through the company's official website. 9.3 For major changes, we will also provide more noticeable notifications (including for certain services, we will send notifications by email to explain the specific changes to the privacy policy). 9.4 The major changes referred to in this policy include but are not limited to: (1) A major change in our service model. Such as the purpose of processing personal information, the type of personal information processed, the way in which personal information is used, etc.; (2) Our ownership structure, organizational structure, etc. have undergone major changes. Such as business adjustments, bankruptcy mergers, etc. caused owner changes; (3) The main objects of personal information sharing, transfer or public disclosure have changed; (4) Your right to participate in the processing of personal information and the way in which it is exercised have changed significantly; (5) When the department responsible for handling personal information security, contact information, and complaint channels change; (6) When the personal information security impact assessment report shows that there is a high risk. We strongly recommend that you visit our official website regularly to check the privacy policy. 

10. How to contact us

 If you have any questions or comments on this policy, or have any doubts and questions on exercising your rights under this policy, you can contact us through following ways: (1) You can raise your feedback through the order system in Kingsoft Cloud’s console (login https://workorder.ksyun.com/index.html#!/type), or contact us through customer service telephone (400-1070-808) . (2) We have set up a dedicated personal information protection team and designated a personal in charge of information protection. You can contact them at [email protected]. (3)You can also send a letter to the Legal Department of Kingsoft Cloud: Building E, Xiaomi Campus, No.33 Xierqi Middle Road, Haidian District, Beijing, 100085, China. We will review the issue as soon as possible and respond within 15 days after verifying your user identity. If we need more time considering the complexity of your request,, we will inform you the reason and the additional time (usually 15 days). 

Update time: April 24, 2024

Effective time: April 24, 2024