1. How We Collect Your Personal Information

• Methods of collection and types of personal information

  “Personal Information” (also referred to as “personal data”) refers to information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). Specifically, special attention should be paid to the personal information indicated in italics, which may constitute sensitive personal information in certain countries/regions and could have a greater impact on your rights and interests.

  Depending on how and to what extent you utilize our services, we may collect the following personal information of yours in the following ways.

  1. （1）Information you voluntarily provide:

     When utilizing our services, you may voluntarily provide us with the necessary personal information for specific features or services. Special Notice: If your input content, AI-created content, and user-published content and interactive information contains such content as the personal information (especially facial features, vocal prints, etc.), trade secrets, intellectual property rights of others, you should undertake that you have obtained explicit lawful authorization from the relevant right holders to avoid the illegal use, disclosure, or infringement of any lawful rights and interests of others such as personal information, trade secrets, and intellectual property rights.

     • Personal Profile Information: When registering for a NadouPro account, you need to provide us with your personal information, including your email/phone number, and account verification information (password or verification code). As we provide a unified account system (as detailed in Section 3.1), if you set up an account nickname and avatar when using the IQIYI App or other IQIYI products and/or services, we will synchronize your avatar and nickname information to NadouPro.
     • AI-created Content: In AI content generation, you can interact with our services by inputting various types of task instructions, including but not limited to providing text, images, audios/videos, files and other content information as well as relevant prompts (hereinafter referred to as "input content"). We will respond to and generate AI-created content based on your input content, and your input content may be reflected in the AI-created content.
     • User-published Content and Interactive Information: When you publish text, images, audios/videos and other contents (including AI-created content generated through our services, content from other sources, etc.) and comment on the contents or use the private messaging function, you need to provide text, images, audios/videos and other content information and interactive information (comments, private messages, etc.).
     • Project Creation and Project Personnel Information: When you create a project as the project creator, you need to provide project-related information such as the project name. In addition, when you invite project members as the project creator or as an authorized administrator, you need to provide us with the phone numbers or email information of the invited members. Please ensure that you obtain the authorization and consent of the invited members before submitting their phone numbers or email information.
     • Please note: personal profile information of project team members, project creation content, collaboration records and other contents are shared within the project team. Project team members may download, save, take screenshots, forward, or otherwise process all the project member and content information mentioned above in other possible ways. As a project team member, you must carefully submit input content to avoid uploading sensitive personal information that could lead to personal information leakage, misuse, or infringement. As the project team creator or authorized administrator, please prudently take security management measures such as member access control, permission control, and behavior control to prevent the leakage of trade secrets or other risks. Any consequences resulting from violations of laws or regulations by project team members shall be borne solely by the project team members, which shall not concern iQIYI.
     • Communication Information: When communicating with us (through online feedback, instant messaging or customer service email, which is subject to actual support), you need to provide us with communication content information, including text, images, audio/video information, as well as other communication information. Additionally, we will automatically collect the time of sending and receiving information, location information (approximate location inferred from the IP address), customer service agents you communicate with, and other attribute-descriptive information.
     • Activity Information: When participating in our surveys, research, marketing or other activities, you need to provide us with the relevant information for such activities. For example, the shipping address and contact information you provided during the marketing activity.
  2. （2）Information we automatically collect:

     When you use our services, our platform may automatically collect and generate personal information related to your use of these services.

     • Usage Information: We will automatically collect information about your interactions with our services and other related usage information, including your generated content, project operations, management, collaboration information, downloads, browsing, playback, favorites, likes, shares, and related log recording information (e.g., access date, time, and other attribute-descriptive information), usage (e.g., duration and frequency of use), crash situations and performance data, as well as other information related to your interactions with our services.
     • Payment Information: When you purchase our paid rights and interests, we will automatically collect your transaction-related information, such as the transaction order number, transaction time, transaction amount, and transaction items.
     • Right and Interest Information: When you purchase paid rights and interests, we will record your balance of recharge beans, recharge history and consumption history (i.e., the number of beans consumed for generating AI-created content each time).
     • Device Information: We will automatically collect information relating to your device, including:
       • Device or other identifiers: Device ID, Android ID;
       • IP address, Bluetooth address, DHCP;
       • Device parameter information: Device model, system version, resolution, network details, network operator, date and time, time zone, country and region, language, network status, signal strength, disk/memory capacity, CPU information, device name, battery status and level, browser details (including: browser model, language, time zone, screen height and width);
     • Location Information: We will automatically collect information about your approximate location, which is primarily inferred from your IP address, so as to achieve product language adaptation, payment channel optimization and other purposes, and provide you with a better service experience.
     • Cookie Information: We use cookies and similar technologies to implement the management and operation of our products and/or services, and automatically collect cookie-related information. For details, please refer to the Cookie Policy.

     Guest Users (only in countries/regions where our products and/or services can be used by guest users): If you use our services but have not become our registered user, we will still collect your usage information, device information, location information, and cookie information.

  3. （3）Information obtained from third parties:
     • Personal Profile Information: When you log into our services with a third-party platform account (e.g., Facebook, Google), we will obtain the personal profile information of your third-party platform account from such platforms, including:
     • Payment Information: When you purchase our paid rights and interests, we will obtain your payment information and updates from our third-party payment service partners (e.g., MasterCard, Dlocal), including payment time, payment amount, payment method, and payment transaction ID.
• Legal bases for processing personal information

  In some countries or regions, under applicable data protection laws, we are required to satisfy a statutory condition (hereinafter referred to as "legal bases") for collecting, using, disclosing, or otherwise processing your personal information. The legal bases recognized by different countries and regions are different. The common types include:

  （1） Obtaining your (i.e., the data subject’s) consent: For situations that cannot be justified by the following legal bases, we will seek your consent.

  （2） Being necessary for the conclusion or performance of a contract between you and us: For instance, processing relevant personal information is required to perform contracts such as the NadouPro Service Agreement and the NadouPro Paid Service Agreement in order to provide you with our services.

  （3） Being necessary for fulfilling our legal obligations: For example, when required by applicable laws and regulations, or by administrative or judicial authorities, processing relevant personal information is required to fulfill our legal obligations.

  （4） Being necessary for realizing legitimate interests for us or third parties: For example, processing relevant personal information is required to maintain the security and reliability of our services, as well as legitimate interests such as carrying out marketing activities.

2. How We Use Your Personal Information

• Purpose of utilizing personal information

  We typically utilize your personal information for the following purposes. You are not legally or contractually obligated to provide us with your personal information. However, if you do not provide personal information required for certain features or services, you may not be able to use the corresponding features or services, but this will not affect your use of other features or services.

  （1） Account registration

  You can create a NadouPro account within our products and/or services. We will utilize your personal profile information (explanations of specific data types are detailed in Section 1.1 of this Policy; explanations or other data types mentioned in the following part of this Policy are also detailed in Section 1.1 of this Policy) to help you complete the account registration process.

  （2） AI content generation

  We collect your text, images, audios/videos, files and other content information, as well as input content instructions such as related prompts, in order to respond to and generate AI-created content. Rest assured, any of your input content, including possible facial information and voice information, will only be used for necessary AI-created content generation services. It will not be used for verification of real identity, extraction of biological features, biological recognition, or any other purposes.

  （3） Content publishing

  We collect text, images, audios/videos and other content information you provide to help you publish, share and transfer text, images, audios/videos and other content in our services.

  （4） Project creation and collaboration

  We collect project team member information, project creation, creation, management and collaboration information to help you and project team members achieve project management, collaboration, and output.

  （5） Exchange and interaction

  To allow you to engage with platform interactive features (e.g., commenting on content, bookmarking, liking, and private messaging) and to display your evaluations, likes, bookmarks or other interactions toward audio/video content to other users, we need to use your interactive information and part of your personal profile information (avatar, nickname, where applicable).

  （6） Provision of paid and value-added services

  Part of our services are free, and part are paid and value-added. We use your payment information to facilitate the purchase of rights and interests and ensure the security of transactions. At the same time, we record your right and interest information to provide paid and value-added services (e.g., using various premium models and agents) for you.

  （7） Customer service

  Typically, we need to use your communication information and query your personal profile information, usage information, and other necessary information in the system backstage to process and respond to your requests, questions, inquiries, feedback, or disputes.

  To manage the relationship between you and us and send you support messages related to our services (e.g., right and interest credit notifications, account security tips), we need to use your personal profile information (email address, phone number).

  （8） Marketing

  For the purpose of promoting and marketing our services, we may send you marketing information and conduct marketing activities by ourselves or through third-party partners. For example, we use personal profile information (email address, phone number) to send promotional emails or SMS messages about our services, new features and promotions, inviting you to participate in our activities. Based on your activity information, we may distribute prizes/gifts to you in marketing activities.

  We may also use your personal profile information (gender, date of birth, age) and information we automatically collect to provide you with a personalized experience in marketing.

  （9） Operation management and security risk control

  We need to use your personal profile information (email address, phone number), payment information, usage information, location information, cookie information, and location information (approximate location inferred from the IP address) to achieve the operational management of our products and/or services (e.g., adapted language versions), maintain the security and reliability of our services, detect potential security technology risks, and prevent, monitor and investigate possible illegal activities.

  （10） Statistical analysis, improvement, and optimization of our services

  We may utilize information you voluntarily provide, information we automatically collect, and information obtained from third parties for research, analysis and statistical purposes. Based on this, we will carry out product development and improve our platform and technology, so as to continually enhance and optimize our services.

  Please be advised that apart from the aforementioned purposes, iQIYI will not utilize your input content for any large model training. Moreover, we prohibit large model service providers and their agents from utilizing your input content for any large model training or optimization.

  （11） Compliance with applicable laws and regulations, and implementation of the NadouPro Service Agreement and the NadouPro Paid Service Agreement

  To comply with applicable laws and regulations, legal procedures, or requirements from government authorities, and protect the rights, property, or safety of iQIYI, you, or the public from damage within the extent permitted by applicable laws and regulations, we may use information you voluntarily provide, information we automatically collect, information obtained from third parties, or information from legally public sources (where applicable).

  Furthermore, in order to execute our NadouPro Service Agreement, NadouPro Paid Service Agreement, and other terms or guidelines, we may utilize information you voluntarily provide, information we automatically collect, information obtained from third parties, and information from legally public sources (where applicable).

  （12） Miscellaneous

  If we wish to use your personal information for purposes not disclosed in this Policy, we will inform you of the new purpose by updating our privacy policy or other means, and obtain your consent or meet other legal bases for such purposes.

• Retention period of personal information

  The retention of personal information is subject to various factors, such as the type and purpose of the personal data we process, our statutory obligations, and the necessity to defend against current or anticipated legal proceedings.

  Generally, within the scope permitted by applicable laws and regulations, we retain your personal information only for the period necessary to provide our services and achieve the aforementioned purposes. We may also retain your personal information as necessary to fulfill contractual and legal obligations, safeguard our legitimate business interests, and assert, defend, or establish legal claims or rights.

  If you violate our agreement, terms or guidelines, we may immediately remove your personal profile information (including avatar, nickname), input content, AI-created content, user-published content, interactive information and other related content from public view. However, we may retain such information in the backstage to handle your violation.

  Upon expiration of the retention period, we will promptly delete or anonymize your personal information unless otherwise stipulated by applicable laws and regulations. If restricted by legal requirements or technical limitations that prevent the immediate deletion or anonymization of your personal information, we will securely store such data, cease all other forms of processing, and promptly delete or anonymize it once the restricting conditions are lifted.

3. How We Disclose Your Personal Information to Third Parties

We will not sell your personal information. In the following scenarios, we may share, entrust others to process, transfer, or otherwise disclose your personal information to external parties within the necessary scope.

• Sharing within iQIYI Group or its affiliated parties

  （1） Sharing with the project team

  Project team member information (avatar, nickname and other personal profile information) and all project-related content, including project creation, creation, management and collaboration information, will be shared among project team members. Any project team member can, within their authorized scope, browse, create, operate, download, and utilize these contents.

  （2） Unified account system

  To provide you with a consistent service experience and enable purposes such as security risk control, iQIYI and its affiliated companies use a unified account system for certain products and/or services, and share the account ID, nickname and avatar information. "Unified Account System" refers to the creation of a unified string for your phone number/email address/third-party account bound to certain products and/or services in iQIYI and its affiliated companies, enabling unified account login and the experience and use of related products and/or services. The associated products and/or services that use a unified account system include IQIYI, NadouPro and others.

  （3） Unified operation support from the Group

  As an international group, our services may be provided or facilitated by affiliated companies under the iQIYI Group, so as to achieve our commercial operation. They process the information you voluntarily provide, information we automatically collect, and information obtained from third parties for us, to provide certain essential features such as research and development, storage, security, content delivery, analysis and statistics, customer and technical support, and service optimization and improvement.

• Sharing with third-party partners

  To the extent necessary for providing the corresponding services, we may share your personal information with the following types of third-party partners.

  （1） Third-party platform partners

  Some services from third-party platform partners may be integrated into our platform, such as account registration/login and content sharing. When you utilize services from third-party platform partners that are integrated into our platform while utilizing our services, we will share information we automatically collect (e.g., device information and cookie information) with these third-party platform partners to ensure your seamless and smooth experience.

  （2） Payment service partners

  When you purchase our paid rights and interests and utilize the third-party payment services, we will share your payment information and information we automatically collect (e.g., device information, cookie information) with payment service providers, so as to process your order, complete your payment process and ensure the security of the transaction.

  （3） Operating activity partners

  We may conduct joint marketing activities with third parties and share activity information (e.g., contact details, shipping address) from the joint marketing activities with the operating activity partners, so that they can promptly distribute prizes/gifts to you.

• Entrust a third party with processing

  The large model features in our products and/or services are provided by third-party large model service providers or their agents (e.g., GPT-Image-2, Seedance, HappyHorse). In addition, we may entrust service providers to represent or assist us in delivering services to you, thereby supporting the development, operation, and improvement of our products and/or services, such as SMS message sending. The service provider only acts as a data processor, entrusted with processing the personal information necessary for providing its services.

  Rest assured, if we entrust a third party with processing your personal information, we will evaluate the personal information protection impact beforehand and take effective technical protection measures for the output format, transfer, and usage. At the cooperation agreement level, we strictly require partners to fulfill their information protection obligations and responsibilities. Prior to collaboration, we sign data security protection agreements with business partners, clearly defining the purpose, duration, processing methods, types of personal information, protection measures, rights and obligations of both parties, and right protection for personal information subjects. Besides, we supervise the trustee's personal information processing activities accordingly. We explicitly require that third-party large model service providers and their agents may only utilize your input content to respond to your current generation instruction request, and may not utilize it for any other purposes, including but not limited to training or optimization of large models.

• Change in the company entity or similar transactions

  If we engage in mergers, acquisitions, reorganizations, demergers, bankruptcies, asset transfers or similar transactions, and your personal information may be transferred as part of such transactions, we will notify you in accordance with applicable laws and regulations, and will make every effort to require the new data controller to continue to observe and fulfill all contents of this Policy.

• Disclosure to public authorities

  Under certain circumstances, in accordance with applicable laws and regulations or requirements from public authorities (including administrative agencies, judicial authorities, other regulatory authorities, and designated third party), we may disclose your relevant personal information to public authorities to observe and fulfill obligations and procedures under applicable laws and regulations, and protect the legitimate rights and interests of you, us, our users, the public, or other third parties. In compliance with applicable laws and regulations, subpoenas, court orders, search warrants or other valid legal process documents, such disclosures may be made with or without your consent, with or without prior notice, and we are generally prohibited from notifying you of any such disclosures.

• Publicly displayed within the platform

  We are dedicated to enhancing the interactive experience between users while utilizing our services. Your personal profile information (avatar, nickname), content published by users and interactive information (e.g., comments) will be publicly displayed within our platform and visible to other users, including guest users.

4. Cross-border transfer of personal information

At present, our data center is located in Singapore, to which we transfer the collected personal information of yours for centralized storage and subsequent processing. Only for the purpose of supporting business operations or facilitating third-party cooperation, affiliated companies under iQIYI Group may be granted remote access to part of your personal information, or iQIYI may transfer part of your personal information to countries/regions where the data centers of affiliated companies under iQIYI Group and third-party partners are located (e.g., countries/regions where the servers of large model service providers or their agents are deployed).

The aforementioned entities, or some of them, may be located outside your country/region, and the local applicable data protection laws may differ from those in your country/region. However, we will ensure that the transfers of such personal information comply with applicable data protection laws and this Policy. Meanwhile, we will implement organizational, technical, and contractual measures to ensure the security of such transfers and guarantee that personal information receives adequate protection following cross-border transfers.

5. Personal Information Security

We have implemented multi-layered protection measures, including security technologies compliant with applicable data protection laws and industry standards, as well as supporting organizational structures and management systems, to safeguard your personal information. These measures are designed to minimize risks associated with personal information breaches, damage, misuse, unauthorized access, unauthorized disclosure, and alteration (collectively referred to as "Data Security Incidents"). The information security management system for iQIYI services has been certified by ISO/IEC 27001, ISO/IEC 29151, ISO/IEC 27701, and PCI DSS. Our specific protection measures include:

6. Your Personal Information Rights and Methods for Exercising Such Rights

• Your rights over personal information

  You have the rights stipulated by applicable laws and regulations over your personal information, generally including the following types. However, the provisions of different countries/regions may be different, and the types of rights you have under applicable laws and regulations and the applicable conditions may be different.

  （1） Right to know

  You have the right to understand how we process your personal information.

  We have specifically formulated and published this Policy to inform you of how we process and protect your personal information. You are also welcome to contact us for further information or explanations.

  （2） Right to access

  You have the right to confirm with us whether we have processed your personal information, and you also have the right to access, inquire, and copy your personal information held by us.

  You can always log into your NadouPro account to access and inquire some of your personal information. You may also contact us, requesting to access, inquire or copy more of your personal information. We will provide you with copies of your personal information in electronic form.

  （3） Right to rectification

  You have the right to request us to correct, supplement or update inaccurate, incomplete or outdated personal information relating to you.

  You can always log into your NadouPro account to correct some of your personal information (e.g., your account information). You may also contact us to request corrections, additions or updates to more of your personal information.

  （4） Right to portability

  Under the specific circumstances stipulated by applicable laws and regulations (e.g., where the legal basis for processing personal information is your consent or is necessary for the conclusion or performance of a contract between you and us), you have the right to request us to provide your personal information in a structured, commonly used, and machine-readable format and transmit it to another data controller designated by you.

  You can contact us to request the exercise of the right to portability.

  （5） Right to erasure

  Under the specific circumstances stipulated by applicable laws and regulations, you have the right to request us to delete your personal information, including: when the processing purpose has been achieved, when you withdraw your consent and there is no other legal basis, when processing of activities is illegal. However, if under applicable laws and regulations, we must or have legitimate reasons to retain your personal information, we may continue to retain such personal information.

  You may contact us to request the deletion of more of your personal information, including account deactivation. Please note that deleting personal information may affect our normal provision of corresponding features or services.

  In accordance with applicable laws and regulations, we will promptly delete or anonymize your personal information. If restricted by legal requirements or technical limitations that prevent the immediate deletion of your personal information, we will securely store such data, cease all other forms of processing, and promptly delete it once the restricting conditions are lifted.

  （6） Right to restriction of processing

  Under the specific circumstances stipulated by applicable laws and regulations, you have the right to restrict our processing of part or all of your personal information, including: when there is a dispute regarding the accuracy of personal information.

  You may contact us to request a pause in the processing of your personal information.

  （7） Right to object

  Under the specific circumstances stipulated by applicable laws and regulations, you have the right to object to our processing of your personal information, including: when the legal basis for processing personal information is legitimate interests or public interests.

  You may contact us, requesting us to stop processing your personal information for a specific purpose.

  You have the right to decline our marketing information, as detailed in Section 6.1(10) of this Privacy Policy.

  （8） Consent and withdraw consent

  For processing activities that rely on your consent as the legal basis, you have the right to decide whether to given consent to our processing of your personal information in accordance with this Policy and to withdraw your consent at any time.

  You can always log into your IQIYI account to withdraw your consent to certain processing activities. You may also contact us to withdraw your consent. After you withdraw your consent, we will no longer continue processing your personal information, and may therefore not be able to continue providing you with the corresponding services. Furthermore, before you withdraw your consent, any processing activities that we have carried out based on your consent remain valid and unaffected.

  （9） Right not to be subject to automated decision-making

  You have the right not to be subject to a decision based solely on automated processing, including user portrait, if such decision has a legal effect or similarly significant impact on you. You can contact us to request not to be subject to automated decision-making.

  （10） Unsubscribe from marketing information

  You have the right to opt out of receiving our marketing information at any time.

  For marketing emails or SMS messages received from us, you may unsubscribe from our market promotion and marketing information by clicking the "unsubscribe" link or following other instructions provided by us. For other forms of marketing information, please contact us at privacy@iq.com to unsubscribe.

  （11） Cookie settings

  For the cookies and similar technologies we use, please refer to the Cookie Policy to learn how to change your cookie settings.

  （12） Complaints and lawsuits

  If you believe that we have violated applicable laws and regulations in the processing of your personal information, you shall have the right to lodge a complaint with the data protection authority, or file a lawsuit in court.

• Exercise and response of rights

  You will not face any discrimination for exercising your rights.

  You may contact us via privacy@iq.com to exercise your rights or inquire about the exercise of such rights. In addition, you may exercise your rights more conveniently through the online features we provide, as detailed in the explanations above.

  We will respond to your exercise of rights requests in a timely manner within a reasonable period as required by applicable laws and regulations. To ensure security, we may need to verify your identity prior to responding to your exercise of rights requests. For your reasonable requests, we generally do not charge fees. However, for excessive, repetitive, or unreasonable requests, we may charge fees or deny your requests at our discretion.

  Please be advised that the rights granted to you are not absolute. At times, your rights may be subject to certain conditions or restrictions as stipulated by applicable laws and regulations, such as national security, public security and interests, crime prevention and investigation, or the protection of others' lawful rights and interests. If we are unable to fully or partially respond to your exercise of rights requests, we will provide an explanation of the reasons to you. If the applicable laws and regulations of the country/region in which you are located do not support specific types of rights, or impose additional applicable conditions or restrictions, we will also provide corresponding clarifications for you.

7. Protection of Minors

Our services are only available to adults, not minors. You must be at least 18 years old or have reached the age of majority in your country or region to use our services.

8. Updates to This Policy

In accordance with applicable laws and regulations and the evolution of our services, we may update and publish this Policy from time to time and provide notice as required by applicable data protection laws, including but not limited to issuing notifications, push messages, pop-ups, emails, either individually or in combination.

If you continue to use our services after the updated version of this Policy takes effect, it shall constitute your acceptance of such updates. If you do not accept or agree to the updates of this Policy, you may cease using our services, including deactivating your NadouPro account.

For the latest update date of this Policy, please refer to the "Last Released/Updated" date at the beginning of this document.

You can always view the latest version of this Policy via the following path: Click on "Your Account Avatar - Agreements".

9. Contact Us

If you encounter any issues related to personal information and privacy protection while using our services, or if you have any questions, complaints, or suggestions regarding this Policy, you may contact us in the following ways:

10. Data Protection Officer

Name: Frank;

Email: privacy@iq.com;

Address: 71 Robinson Road #06-01/04, Singapore 068895.

In a specific country/region, we may appoint a local representative or a dedicated Data Protection Officer in accordance with applicable data protection laws, as further detailed in the "Supplementary Provisions Applicable to Specific Countries/Regions".

11. Supplementary Provisions Applicable to Specific Countries/Regions

• Singapore

  (1) Protection of minors

  In Singapore, you must be at least 18 years old to use our services.

  (2) Cross-border transfer of personal information

  We will conduct cross-border transfers of personal information in accordance with Chapter 5 of this Policy, including transfers to countries/regions outside of Singapore.

• Brazil

  (1) Protection of minors

  In Brazil, you must be at least 18 years old to use our services.

  (2) Legal bases

  Legal Bases. Depending on the specific purpose of the processing, we may rely on different grounds than those listed under section 1, where permitted by and in accordance with the Brazilian General Data Protection Law (LGPD). For example, we may rely on the "exercise of legal rights" basis to process personal data associated with customer complaints and to enforce our Terms of Service and similar terms and agreements, including our Usage Policy.

  (3) Data subject’s rights

  Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 6. We will respond to your requests to exercise your rights below in accordance with applicable law:

  • Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether IQIYI processes your data.Access to your data. You have the right to know what personal data IQIYI processes about you.
  • Correction of incomplete, inaccurate or outdated data. You have the right to request the correction of your data that is incomplete, inaccurate, or outdated.
  • Anonymization, blocking or erasure of data. You have the right to request the anonymisation, blocking or erasure of data that is unnecessary, excessive or processed in non-compliance with the provisions of the law.
  • Portability of personal data to a third party. You have the right to request portability of your data to a third-party, as long as this does not infringe on our trade secrets.
  • Information of public and private entities with which we shared data. You have the right to request information of public and private entities with which we have shared your data.
  • Information about the possibility to refuse to provide consent and the respective consequences, when applicable.
  • Withdrawal of your consent. You have the right to withdraw your consent.
  • Request a review of decisions made solely based on automated processing of personal data.

  Please keep in mind that these rights are not absolute and may not apply in certain circumstances. For example, in certain cases we may continue to process and retain data regardless of your request for deletion, objection, blocking or anonymisation, in order to comply with legal, contractual and regulatory obligations, safeguard and exercise rights, including in judicial, administrative and arbitration proceedings and in other cases provided for by law.

  (4) Cross-border transfer of personal information

  International Data Transfers. You acknowledge that IQIYI is a company based and headquartered in the Singapore. Any information we hold about you will be transferred to, used, processed, and stored in the Singapore and other countries and territories. For the proper operation of the Services, IQIYI needs to carry out international transfers of personal data. In the case of Brazil, we will rely on standard contractual clauses (SCCs) for our data transfers where required and in instances where they are not cov3ered by an adequacy decision. These SCCs have been approved by the Brazilian Data Protection Authority (ANPD), which is the "competent supervisory authority" for these transfers, as governed by Brazilian Data Protection Laws. You can view the SCCs adopted by the ANPD here.

• Canada

  (1) Protection of minors

  In Canada, you must be at least 18 or 19 years old (depending on the specific regulations of the province or region where you are actually located) to use our services.

  (2) Legal bases

  Consent. By expressly consenting to this Privacy Policy, you confirm you have read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy and understand that, in jurisdictions where it is available, IQIYI also relies on other lawful bases for the foregoing as more fully set out in this policy. We will only collect, use and disclose your personal data with your consent, unless otherwise permitted or required by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.

  (3) Cross-border transfer of personal information

  Cross-jurisdictional Transfers. By providing us with personal data, you acknowledge and agree that your personal data may be transferred or disclosed to other jurisdictions for processing and storage outside of Canada, including to the Singapore and The country or region where our partners (including large model collaborators) is located. Furthermore, we may disclose your personal data to the extent necessary for product functionality, or when we reasonably believe in good faith that such disclosure is required or permitted by applicable law.