StoriaShort Privacy Policy

This Privacy Policy explains how One Smart Technology Company Limited, a company incorporated in Hong Kong ("OneSmart", "we", "us" or "our") collects, uses, discloses and otherwise processes information about you when you access or use the StoriaShort mini drama service made available through TikTok Minis and related services, content, features and functionality (collectively, the "Services").

Before using StoriaShort or submitting any Personal Information to OneSmart, please review this Privacy Policy carefully and contact us if you have any questions. By using StoriaShort, you acknowledge the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access or use the Services.

Your use of TikTok and TikTok Minis is also subject to TikTok's applicable terms, privacy policies and other applicable rules. This Privacy Policy applies to information processed by OneSmart in connection with StoriaShort and does not describe TikTok's independent processing of your information.

Note to Residents of the European Union: In order to comply with the requirements of the European General Data Protection Regulation (GDPR) for our European consumers and users, this Privacy Policy outlines the legal bases on which we process your Personal Information and provides other information required by the GDPR.

PERSONAL INFORMATION WE COLLECT

The categories of personal information we collect depend on how you use our Services and the requirements of applicable law. We collect information that you provide to us, information we obtain automatically when you use our Services, and information from other sources such as TikTok and other third-party services, as described below.

1.1 Information You Provide to Us

You may provide information about yourself when you use StoriaShort or contact us. The information you may provide includes your name, email address, customer-service communications, feedback, and other information you choose to provide through the Services.

If the Services provide features that allow you to create a profile, submit content, or otherwise provide information directly to us, we may collect the information you choose to submit for those features.

1.2 Information We Receive Through TikTok

When you access StoriaShort through TikTok Minis or use TikTok authentication, we may receive certain information made available by TikTok in accordance with the authorization you provide, the applicable TikTok platform functionality, and applicable law.

Depending on the functionality used, this may include a TikTok OpenID or other platform-specific identifier, profile information that you authorize or that TikTok makes available to us, and information necessary to provide and secure the Services.

We do not receive your TikTok password through the Services.

1.3 Information Collected Automatically

We may collect certain information automatically when you use StoriaShort, such as your Internet Protocol (IP) address, user settings, device information, operating system, browser or runtime information, mobile carrier, advertising or other unique identifiers where permitted, general location information (including approximate location derived from your IP address), time zone, language, network information, usage information and diagnostic information.

We may also collect information about your interactions with the Services, such as pages or screens viewed, dramas or episodes accessed, viewing activity, session information, purchase or subscription status, and technical events needed to operate, maintain and improve the Services.

1.4 Cookies and Similar Tracking Technologies

We may use cookies, local storage, SDKs, pixels, web beacons and similar technologies to operate, secure, analyze and improve the Services, where permitted by applicable law.

1.5 Information We Collect from Other Sources

We may obtain information about you from third-party services and organizations, including TikTok, payment providers, analytics providers, hosting providers, customer-service providers, advertising or marketing partners, and other service providers, to the extent permitted by applicable law.

HOW WE USE YOUR INFORMATION

We may use your information for the following purposes:

2.1 Provide and Operate Our Services

We use your information to:

Create and manage your StoriaShort account or user profile;

Authenticate and identify users;

Provide access to dramas, episodes, features and other Services;

Maintain your viewing history, preferences and other service-related information;

Process subscriptions, purchases and other transactions;

Provide customer and technical support;

Communicate with you about your account, transactions, Services and policy changes; and

Provide and maintain the functionality requested by you.

2.2 Administrative and Security Purposes

We may use your information to:

Detect, investigate and prevent security incidents, fraud, abuse and other unlawful activity;

Protect the security and integrity of the Services;

Measure interest and engagement in our Services;

Improve, upgrade or enhance our Services;

Develop new products and Services;

Perform internal quality control and safety activities;

Debug and repair errors;

Conduct audits and compliance activities;

Enforce our agreements and policies; and

Comply with applicable legal obligations.

2.3 Marketing and Advertising

Where permitted by applicable law, we may use personal information to communicate with you about our products and Services and to provide relevant promotional content.

Where required by applicable law, we will provide appropriate choices or mechanisms to opt out of certain marketing communications.

We do not sell your Personal Information.

2.4 Other Purposes

We may also use your information:

With your consent, where consent is required;

To create de-identified or aggregated information that cannot reasonably be used to identify you;

To protect the rights, property and safety of OneSmart, our users or others; and

For other purposes disclosed to you at the time information is collected or otherwise permitted by applicable law.

LEGAL BASES FOR PROCESSING

Where the GDPR or another applicable law requires a legal basis for processing personal information, we may rely on one or more of the following legal bases:

Performance of a contract with you;

Compliance with a legal obligation;

Our legitimate interests, where those interests are not overridden by your rights and interests;

Your consent, where required; and

Other lawful bases available under applicable law.

HOW WE DISCLOSE YOUR INFORMATION

OneSmart does not sell your Personal Information. In certain circumstances, we disclose information to third parties for business and legal purposes, including to provide the Services, protect users and our business, process transactions, or complete a corporate transaction.

4.1 Vendors and Service Providers

We may share Personal Information with vendors and service providers that perform services on our behalf, including providers of hosting, cloud infrastructure, analytics, payment processing, customer service, security, fraud prevention, communications and technical support.

These parties may access, process or store Personal Information only as reasonably necessary to perform services for us and subject to appropriate contractual or other safeguards where required by applicable law.

4.2 TikTok

Because StoriaShort is made available through TikTok Minis, certain information may be exchanged with TikTok or processed through TikTok's platform in order to authenticate users, operate the Mini Drama, support platform functionality, maintain security and comply with applicable platform requirements.

TikTok's own collection and use of information is governed by TikTok's applicable privacy policies and terms.

4.3 Payment Providers

If you purchase a subscription or other Paid Service, transaction-related information may be processed by TikTok, its designated payment systems, or other authorized payment providers. We may receive transaction information necessary to confirm and provide the purchased Services, such as transaction identifiers, purchase status, product or subscription information and related billing information.

4.4 Business Transfers

If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively, a "Transaction"), your Personal Information and other information may be shared in the diligence process and transferred to a successor, affiliate or other relevant party as part of that Transaction, subject to applicable law.

4.5 Legal Requirements

We may disclose your information if required or permitted by law or if we have a good-faith belief that such action is necessary to:

(i) comply with a legal obligation, including lawful requests from law enforcement or government authorities;

(ii) protect and defend our rights or property;

(iii) prevent or investigate fraud, abuse or other unlawful activity;

(iv) protect the personal safety of users or the public; or

(v) protect against legal liability.

DATA RETENTION

We retain Personal Information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and protect our legitimate business interests.

The retention period may vary depending on the type of information and the purpose for which it was collected. When Personal Information is no longer required, we will delete, anonymize or otherwise dispose of it in accordance with applicable law and our applicable retention practices.

DATA SECURITY

We use reasonable administrative, technical and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of your information.

INTERNATIONAL DATA TRANSFERS

OneSmart and our service providers may process or store Personal Information in countries other than the country in which you reside.

Where required by applicable law, we will implement appropriate safeguards for international transfers of Personal Information, including applicable contractual, organizational or other legally recognized safeguards.

YOUR PRIVACY RIGHTS

Depending on your jurisdiction and applicable law, you may have rights regarding your Personal Information, including the right to:

Request access to Personal Information we hold about you;

Request correction of inaccurate or incomplete Personal Information;

Request deletion of your Personal Information;

Request restriction of certain processing;

Object to certain processing;

Request portability of certain information;

Withdraw consent where processing is based on consent; and

Lodge a complaint with a competent data protection authority.

To exercise applicable rights, please contact us using the contact information below. We may need to verify your identity or request additional information before completing a request, as permitted or required by law.

CHILDREN'S PRIVACY

The Services are not intended for children under 16 years of age, or such higher minimum age as may be required by applicable law. We do not knowingly collect Personal Information from children below the applicable minimum age without appropriate authorization.

If you believe that a child has provided Personal Information to us in violation of this Privacy Policy or applicable law, please contact us so that we can take appropriate action.

THIRD-PARTY SERVICES

The Services may contain or depend on third-party services, including TikTok and third-party payment, analytics, hosting, security and other service providers.

Examples of third-party services used in connection with our Services may include:

Facebook: https://www.facebook.com/privacy/explanation

Firebase: https://policies.google.com/privacy

Google: https://policies.google.com/privacy

The use of third-party services may be subject to their own privacy policies and terms. We encourage you to review those policies where applicable.

YOUR CHOICES

You may choose not to provide certain information. However, some information may be necessary to authenticate your account, provide specific features, process purchases, provide customer support, or comply with legal requirements. If you do not provide such information, some Services or features may not be available to you.

You may also manage certain privacy, notification, advertising or platform permissions through TikTok, your device, or the relevant third-party service, where those controls are available.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, platform requirements or other circumstances.

When we make material changes, we will provide notice as required by applicable law. The updated Privacy Policy will become effective on the date stated at the beginning of the updated policy.

CONTACT US

If you have any questions about this Privacy Policy, our privacy practices, or your Personal Information, please contact us at:

Email: artu_developer@ujumedia.com

Company:

One Smart Technology Company Limited

Service:

StoriaShort Mini Drama