Superun Privacy Statement

First published: October 1, 2025

Introduction

Welcome to use our products and services! We understand the importance of personal information to you, and your trust is very important to us. We will provide full protection for your personal information security in accordance with laws and regulations and referring to industry best practices. In view of this, UXArts has formulated this "Superun Privacy Statement" (hereinafter referred to as "this Statement/this Privacy Statement") to help you fully understand how we collect, use, save, share and transfer this information when you use our products and/or services, as well as the ways we provide for you to access, update, delete and protect this information.

This Privacy Statement will help you understand the following:

I. How we collect and use your personal information

II. How we use Cookies and similar technologies

III. How we "share", "transfer" and "publicly disclose" your personal information

IV. How we protect and save your personal information

V. How you manage your personal information

VI. Protection of minors' personal information

VII. Notification and Revision

VIII. How to contact us

This statement applies to Superun products and services provided by UXArts.

Before using Superun products or services, please be sure to carefully read and understand the corresponding privacy statement, especially the terms marked in bold/bold underline. You should read them with emphasis and confirm that you fully understand and agree before starting to use.

If you have any questions, comments or suggestions about the content of this statement, you can contact us.

We will act as the "Personal Information Processor", which means we will decide "why" and "how" to collect and use your personal information.

To provide our products and services to you, we need to share your personal information with our "Personal Information Entrusted Processors", namely recognized business partners or our affiliated partners. They are all obliged to adopt appropriate security measures to protect the personal information held, are regulated by strict confidentiality obligations, and "why" and "how" they can process your personal information on our behalf are bound by relevant contract terms.

Please note that some recognized business partners, such as licensees or social media, may also decide "why" and "how" to use your personal information. They have their own privacy and cookies policies, so please remember that the way they use any personal information you provide to them should be subject to their regulations, not ours.

To understand our role, please note "why" and "how" we collect and use your personal information to decide the purpose and method of processing your personal information. Our "Personal Information Entrusted Processors" are organizations instructed by us on "why" and "how" they can process your personal information on our behalf.

Part I Definitions

I. 【UXArts】 UXArts refers to Hangzhou UXArts Technology Co., Ltd. (Registered Address: Room 105, Building 7, No. 698 Xixi Road, Xihu District, Hangzhou, Zhejiang Province) which develops and provides Superun products and services, and the single or collective name of related affiliated companies established now or in the future.

II. 【Superun】 Superun refers to intelligent products developed and served by UXArts.

III. 【Personal Information Deletion】 Personal information deletion refers to the act of removing personal information from the system involved in realizing daily business functions, making it in a state that cannot be retrieved or accessed.

IV. Unless otherwise agreed, the definitions used in this statement have the same meaning as those in the "User Agreement".

Part II Privacy Statement

I. How we collect and use your personal information

Personal information refers to various information recorded electronically or in other ways that can identify a specific natural person alone or in combination with other information or reflect the activities of a specific natural person. Sensitive personal information refers to personal information that, once leaked, illegally provided or abused, may endanger personal and property safety, and easily lead to damage to personal reputation, physical and mental health, or discriminatory treatment.

We will obtain your personal information through the following three channels, where the bold part is the sensitive personal information involved:

• Personal information provided directly by you and collected by us

• Please note that if you provide personal information of others, please ensure that you have obtained legal authorization from the relevant subjects.

When you use Superun's products for business activities, your user role is a merchant.

(II) Information we collect from third parties

(III) Exceptions to obtaining consent

You should be fully aware that in the following circumstances, we do not need to obtain your authorization and consent to collect and use personal information:

1. Related to national security and national defense security;

2. Related to public safety, public health, and major public interests;

3. Related to criminal investigation, prosecution, trial, and execution of judgments;

4. Necessary to protect the life, property, and other major legitimate rights and interests of the personal information subject or other individuals but it is difficult to obtain the consent of the person;

5. The collected personal information is disclosed to the public by the personal information subject themselves;

6. Collecting your personal information from legally publicly disclosed information, such as legal news reports, government information disclosure, and other channels; unless you explicitly refuse or the processing of such information infringes on your major interests.

7. Necessary for signing a contract according to your requirements;

8. Necessary for maintaining the safe and stable operation of the products and/or services provided, such as discovering and handling product and/or service failures;

9. Necessary for legal news reporting;

10. Necessary for academic research institutions to carry out statistics or academic research based on public interests, and when providing academic research or description results externally, the personal information contained in the results is de-identified;

11. Other circumstances stipulated by laws and regulations.

(V) Rules for using personal information

1. We will use the collected personal information in accordance with the agreement of this Privacy Statement to realize our product and/or service functions.

2. After collecting your personal information, we will de-identify the information through technical means, and the de-identified information will not be able to identify the subject. Please understand and agree that in this case, we have the right to use the information that has been de-identified; and without revealing your personal information, we have the right to analyze the user database and use it commercially.

3. Please understand and agree that all personal information you provide when using our products and/or services will be deemed as your continuous authorization for us to use during your use of our products and/or services unless you delete it or refuse our collection through system settings. If you wish to cancel your account, please contact UXArts, and we will assist you in cancellation.

4. We will use the personal information collected in the business for technological transformation, network maintenance, troubleshooting, formulation of internal policies and processes, generation of internal reports, and use the information that has been de-identified and cannot identify you and cannot be restored to establish a database and use it commercially. But these statistical information do not contain any of your identifying information.

5. When we display your personal information, we will use methods including content replacement and generalization to desensitize your information to protect your information security.

6. When we want to use your personal information for other purposes not specified in this Privacy Statement, or when personal information collected based on specific purposes is used for other purposes, we will seek your explicit consent in advance. Please understand that the products and/or services we provide to you will be constantly updated and changed. If you choose to use other products and/or services not yet listed in this Privacy Statement, we will explain the purpose, method, and scope of information collection to you in detail through agreements, page prompts, etc. before collecting your personal information and seek your consent. If you do not agree to provide the aforementioned information, you will not be able to use that product and/or service, but it does not affect your use of existing products and/or services.

II. How we use Cookies and similar technologies

For services provided by UXArts, we work with advertising partners and vendors to use various technologies to understand how people use relevant services. Please read below to learn more about these technologies and how to control them. Please refer to "Cookies and Tracking Technologies Policy"

III. How we share, transfer, and publicly disclose your personal information

(I) Sharing

We will not share your personal information with companies, organizations, and individuals other than UXArts service providers, except in the following circumstances:

1. Sharing with explicit consent: After obtaining your explicit consent, we will share your personal information with other parties. For example, if we entrust a third party to provide products or services to you, we will share the above information with the third party after obtaining your consent. If you refuse to provide such information, we will not be able to complete the relevant delivery service.

2. Sharing under statutory circumstances: We will share your personal information externally in accordance with laws and regulations, litigation dispute resolution needs, or requirements lawfully raised by administrative and judicial organs.

3. Sharing with affiliated companies: In order to facilitate us to provide services to you based on the UXArts account and protect the personal and property safety of UXArts affiliated companies or other users or the public from infringement, your personal information will be shared with our affiliated companies with your consent. We will only share necessary personal information and are bound by the purposes stated in this Privacy Statement. If we share your sensitive personal information or the affiliated company changes the purpose of using and processing personal information, we will seek your authorization and consent again.

4. Sharing with authorized partners: We will entrust authorized partners to provide certain services for you or perform functions on our behalf. Before that, we will agree on the rights and obligations of both parties with them by means including but not limited to signing agreements. We will only process your information for legal, legitimate, necessary, specific, and clear purposes. Authorized partners can only access the information required for performing their duties and cannot use this information for any other purpose.

Currently, our authorized partners include the following types:

(1) Authorized partners for advertising and analysis services. Unless permitted by you, we will not share your personal identity information (referring to information that can identify you, such as name or email address, through which you can be contacted or identified) with partners providing advertising and analysis services.

(2) Suppliers, service providers, and other partners. We send information to suppliers, service providers, and other partners who support our business. These supports include providing technical infrastructure services, analyzing how our services are used, measuring the effectiveness of services, providing customer service, facilitating payments, or conducting academic research and surveys.

Other forms of sharing

(1) Based on reasonable business practices: for example, when we plan to conduct capital market activities (including but not limited to IPOs, bond issuances) with other companies and accept due diligence.

Please be aware that for companies, organizations, and individuals with whom we share personal information, we will sign strict data protection agreements with them, requiring them to process personal information in accordance with our instructions, this Privacy Statement, and any other relevant confidentiality and security measures.

(II) Transfer

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

1. Obtain your explicit consent or authorization in advance;

2. Provide in accordance with applicable laws and regulations, legal procedures, mandatory administrative or judicial requirements;

3. Provide in accordance with relevant agreements signed with you (including online signed electronic agreements and corresponding platform rules) or other legal documents;

4. With the development of our business, we and our affiliates may conduct mergers, acquisitions, asset transfers, or similar transactions. If the transfer of personal information is involved, we will require the company or organization that receives your personal information to continue to be bound by this Privacy Statement, otherwise, we will require that company or organization to re-seek your authorization and consent.

(III) Public Disclosure

We will only publicly disclose your personal information in the following circumstances:

1. Obtain your explicit consent or based on your active choice, we will publicly disclose your personal information;

2. In the case where it is necessary to provide your personal information according to the requirements of laws, regulations, mandatory administrative law enforcement or judicial requirements, we will publicly disclose your personal information according to the required personal information type and disclosure method. Under the premise of complying with laws and regulations, when we receive the above request for disclosure of information, we will require the issuance of corresponding legal documents, such as subpoenas or investigation letters, and the documents we disclose are provided after encryption.

(IV) Exceptions to obtaining prior authorization and consent when sharing, transferring, or publicly disclosing personal information

In the following circumstances, sharing, transferring, and publicly disclosing your personal information does not require your prior authorization and consent:

1. Related to our fulfillment of obligations stipulated by laws and regulations;

2. Provided in accordance with laws and regulations or the requirements of administrative, judicial agencies, national departments, and other competent authorities;

3. Necessary to protect the life, property, and other major legitimate rights and interests of you or other individuals but it is difficult to obtain the consent of the person;

4. Personal information that you disclose to the public yourself;

5. Directly related to national security and national defense security;

6. Collecting personal information from legally publicly disclosed information, such as legal news reports, government information disclosure, and other channels.

According to legal regulations, sharing and transferring de-identified personal information, and ensuring that the data recipient cannot restore and re-identify the personal information subject, does not belong to the external sharing, transfer, and public disclosure of personal information. The storage and processing of such data will not require separate notification to you and obtaining your consent.

IV. How we protect and save your personal information

(I) Technologies and measures we use to protect your personal information

We attach great importance to personal information security and take all reasonable and feasible measures to protect the personal information of UXArts consumers, merchants, and merchant consumers.

1. Data security technical measures

To protect your information security, we strive to take various security protection measures that comply with industry standards, including establishing reasonable institutional norms and implementing appropriate security technologies to prevent your personal information from unauthorized access, public disclosure, use, modification, damage, or loss.

We will use trusted protection mechanisms to prevent data from malicious attacks, such as using SSL encryption technology when exchanging data (such as credit card information) between your browser and the "Service", and providing https secure browsing for the website itself to ensure the security of your data during transmission.

Use encryption technology to encrypt and save personal information to ensure data confidentiality. We will adopt strict data access control permission control and multi-factor authentication mechanisms to ensure that only authorized personnel can access personal information. At the same time, during data use, we provide data security audits to avoid data misuse.

2. Other security measures taken by UXArts to protect personal information

We have established a dedicated personal information protection team to promote and guarantee personal information security.

We will take all reasonable and feasible measures to ensure that irrelevant personal information is not collected.

We regularly conduct security and privacy protection training courses to strengthen employees' awareness of the importance of protecting personal information.

The Internet is not an absolutely secure environment, and communication methods with other users such as email, instant messaging, and social software cannot be determined to be completely encrypted. We recommend that you use complex passwords when using such tools and pay attention to protecting your personal information security. When conducting online product and/or service transactions with a third party through UXArts, you inevitably have to disclose your personal information, such as contact information or postal address, to the counterparty or potential counterparty of the transaction. Please properly protect your personal information and provide it to others only when necessary.

If you find that your personal information, especially your account or password, has been leaked, please contact us immediately through the contact information agreed in [VIII. How to contact us] of this Privacy Statement so that we can take appropriate measures.

3. Security incident handling

To deal with potential risks such as personal information leakage, damage, and loss, UXArts has formulated a number of systems clarifying the classification and grading standards of security incidents and security vulnerabilities and corresponding handling processes. UXArts has also established a dedicated emergency response team for security incidents. In accordance with the requirements of security incident handling specifications, it launches security plans for different security incidents to stop losses, analyze, locate, formulate remedial measures, and jointly trace and crack down with relevant departments.

If our physical, technical, or management protection facilities are damaged, resulting in information being accessed, publicly disclosed, tampered with, or destroyed without authorization, causing damage to your legitimate rights and interests, we will promptly activate the emergency plan and take reasonable remedial measures to minimize the impact on your personal information and other rights and interests.

Once a personal information security incident occurs, we will promptly inform you in accordance with the requirements of laws and regulations: the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to prevent and reduce risks independently, remedial measures for you, etc. We will also promptly inform you of the relevant situation of the incident by email, letter, telephone, push notification, etc. When it is difficult to inform the personal information subject one by one, we will take reasonable and effective ways to issue an announcement.

At the same time, we will also actively report the disposal of personal information security incidents in accordance with the requirements of the regulatory authorities. The Internet environment is not 100% secure, and we will try our best to ensure or guarantee the security of any information you send to us. If our physical, technical, or management protection facilities are damaged, resulting in information being accessed, publicly disclosed, tampered with, or destroyed without authorization, causing damage to your legitimate rights and interests, we will assume corresponding legal responsibilities.

(II) Preservation of your personal information

1. Storage location: Your personal information will be stored within the territory of the People's Republic of China.

2. Storage period: We will only retain your personal information for the period necessary to achieve the purposes stated in this statement, unless there is a mandatory retention requirement by law. Our criteria for judging the aforementioned period include:

(1) Complete the transaction purposes related to you, maintain corresponding transaction and business records, and respond to your possible inquiries or complaints;

(2) Ensure the safety and quality of the services we provide to you;

(3) Whether you agree to a longer retention period;

(4) Whether there are other special agreements on the retention period.

After your personal information exceeds the retention period, we will delete your personal information or anonymize it according to the requirements of applicable laws.

Please note that after you successfully cancel your UXArts account, we will delete or anonymize your personal information.

Due to applicable legal and security technical limitations, we cannot immediately delete the corresponding information from the backup system. We will securely store your personal information and limit any further processing of it until the backup can be deleted or anonymized.

If we terminate the service or operation, we will notify you at least thirty days in advance and delete or anonymize your personal information after terminating the service or operation.

V. How you manage personal information

(I) Access and correct your personal information

Please contact us via email at support@superun.com to assist you in querying, correcting, or supplementing your information.

(II) Delete your personal information

In the following circumstances, you can make a request to us to delete personal information:

1. If our handling of personal information violates laws and regulations;

2. If we collect and use your personal information without your explicit consent;

3. If our handling of personal information seriously violates the agreement with you;

4. If you no longer use our products or services, or you actively cancel your account;

5. If we stop providing products or services to you.

If we decide to respond to your deletion request, we will also notify the subjects who obtained your personal information from us as much as possible and require them to delete it promptly (unless otherwise stipulated by laws and regulations, or these subjects have independently obtained your authorization).

After you or we assist you in deleting relevant information, due to applicable laws and security technologies, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and isolate it from any further processing until the backup can be cleared or anonymized.

(III) Change the scope of your authorized consent or withdraw your authorization

Each business function requires some basic personal information to be completed (see "Part I" of this Privacy Statement). Apart from this, you can contact us via email at support@superun.com to withdraw your authorization.

Please understand that each business function requires some basic personal information to be completed. After you withdraw your consent or authorization, we cannot continue to provide you with the services corresponding to the withdrawal of consent or authorization, nor will we process your corresponding personal information. However, your decision to withdraw consent or authorization will not affect the personal information processing previously carried out based on your authorization.

(IV) Cancel account

You can contact us via email at support@superun.com to cancel your account.

After you cancel your account, we will stop providing products and/or services to you, and delete your personal information according to your request, unless otherwise stipulated by laws and regulations.

(V) Reject automated decision-making

In some business functions, we will make decisions based on non-artificial automatic decision-making mechanisms including information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to ask us for an explanation, and we will also provide appeal methods under the premise of not infringing on UXArts' trade secrets or other user rights and interests and social public interests.

(VI) Obtain a copy of your personal information

You have the right to obtain a copy of your personal information. If you need to obtain a copy of your personal information collected by us, you can contact us via email at support@superun.com to assist you in obtaining it. Under the premise of complying with relevant legal regulations and technical feasibility, we will provide you with a copy of your personal information upon your request.

(VII) Others

If, for your legitimate and justified interests, you need to exercise the aforementioned rights regarding the personal information of a deceased user, you need to provide us with proof that you are their close relative or executor. We will support your request as much as possible in accordance with relevant laws on personal information protection.

(VIII) Respond to your request

To ensure security, you may need to provide a written request or prove your identity in other ways. We will verify your identity first and then process your request.

We will reply within 15 days. If you are not satisfied, you can also initiate a complaint to UXArts.

For your reasonable requests, we generally do not charge fees, but for repeated requests that exceed reasonable limits, we will charge a certain fee as appropriate. For requests that are not directly related to your identity, unwarranted repeated information, or require excessive technical means (for example, requiring the development of new systems or fundamentally changing current practices), posing risks to the legitimate rights and interests of others, or impractical requests, we may refuse them.

In the following circumstances, according to the requirements of laws and regulations, we will not be able to respond to your request:

1. Related to our fulfillment of obligations stipulated by laws and regulations;

2. Related to national security and national defense security;

3. Related to public safety, public health, and major public interests;

4. Related to criminal investigation, prosecution, trial, and execution of judgments;

5. There is sufficient evidence that the personal information subject has subjective malice or abuse of rights;

6. Responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals and organizations;

7. Involving trade secrets.

VI. Protection of Minors' Personal Information

Children referred to in this statement refer to individuals under the age of 14. Children are not allowed to create their own user accounts without the consent of their parents or guardians. If you are a minor, it is recommended that you ask your parents or guardians to read this Privacy Statement carefully, and use our services or provide information to us with the consent of your parents or guardians.

For the collection of personal information of minors with the consent of parents or guardians to use our products or services, we will only use, share, transfer or disclose this information when permitted by laws and regulations, with the explicit consent of parents or guardians, or when necessary to protect minors. If we find that we have collected personal information of children without obtaining verifiable parental consent in advance, we will try to delete the relevant data as soon as possible.

VII. Notification and Revision

Our privacy statement may change. If there are changes, we will publicly announce them in advance in accordance with legal regulations.

Without your explicit consent, we will not limit the rights you should enjoy under this privacy statement.

If you continue to use our services after the update of this statement takes effect, it means that you have fully read, understood and accepted the updated statement and are willing to be bound by the updated statement. We encourage you to check this statement every time you use our services.

Major changes referred to in this statement include but are not limited to:

1. Major changes in our service model. Such as the purpose of processing personal information, the type of personal information processed, the way of using personal information, etc.;

2. Major changes in our control rights, etc. Such as changes in information controllers caused by mergers and acquisitions, reorganizations, etc.;

3. Changes in the main objects of personal information sharing, transfer or public disclosure;

4. Major changes in your rights regarding personal information processing and how to exercise them;

5. Changes in the responsible department, contact information and complaint channels for handling personal information security;

6. The personal information security impact assessment report indicates that there is a high risk.

VIII. How to Contact Us

We have established a personal information protection department. If you have any questions, comments or suggestions about the content of this statement, or find that your personal information may be leaked or you feel that you need to withdraw, correct or delete your personal information authorization, you can contact us by email at support@superun.com, and we will reply to your request within 15 days. You can also mail your complaint or reporting materials to us. Our mailing address is: Superun, Room 105, Building 7, No. 740 Xixi Road, Xihu District, Hangzhou.

If you are not satisfied with our reply, especially if you believe that our personal information processing behavior has damaged your legitimate rights and interests, you can also file a lawsuit in the court with jurisdiction where the defendant is domiciled to seek a solution.