POSTEK Privacy Policy (China Entity English Version)

1. Who We Are

This Privacy Policy applies to the POSTEK App and related smart assistant, printer connection, printer status monitoring, troubleshooting, account, and support services provided by POSTEK ELECTRONICS CO., LTD.

Company: POSTEK ELECTRONICS CO., LTD.

Website: www.postek.com.cn/

Privacy contact email: privacy@postek.com.cn

2. Information We Collect

Depending on the features you use, we may collect the following categories of information.

2.1 Account Information

When you register, log in, verify your account, or use account-related features, we may collect your email address, user ID, account status, verification code sending records, and security verification records.

We use your email address only to help you register, log in, verify your account, reset your password, delete your account, and use the smart assistant service. We do not charge users for account registration, and we do not send marketing emails or promotional emails. Emails sent by us are limited to verification codes, account security, or necessary service-related notices.

2.2 Device, Printer, and Connection Information

When you connect or manage POSTEK barcode and label printers, we may process printer serial number, printer model, device identifier, connection status, Bluetooth or NFC connection information, printer status, error status, parameter settings, and related device information.

Some information may be processed locally on your device and may not be uploaded to our servers unless it is necessary to provide cloud services, troubleshooting, customer support, log sharing, or service improvement.

2.3 Diagnostic, Log, and Usage Information

To provide printer status monitoring, troubleshooting, smart diagnosis, service stability, and customer support, we may collect fault logs, diagnostic logs, crash logs, performance data, operation records, App usage records, IP address, request time, device type, operating system version, and network request information.

2.4 User Content and Support Materials

When you contact us or submit a technical support request, we may collect the contact information you provide, issue description, screenshots, logs, or other support materials, as well as information related to technical support communications.

3. How We Use Your Information and Legal Bases

We may use the collected information for the following purposes:

• Creating and managing your POSTEK account
• Sending registration, login, account deletion, or account security verification codes to your email address
• Verifying user identity and protecting account security
• Providing, maintaining, and improving App features
• Connecting and managing POSTEK printers
• Monitoring printer status and providing common issue diagnosis
• Providing image, video, or step-by-step tutorial guidance
• Handling technical support requests and fault analysis
• Maintaining system security and preventing fraud, abuse, or unauthorized access
• Analyzing and improving App stability, performance, and service quality
• Complying with applicable laws and regulations

Our legal bases for processing personal information may include your consent, necessity for entering into or performing a service with you, necessity for complying with legal obligations, necessity for network security, product security, or account security, and other circumstances permitted by applicable laws and regulations.

We do not use your email address for advertising or marketing emails. We do not sell your personal information.

4. No Tracking, Advertising, or Sale of Personal Information

We do not use personal information collected through the App to track you across other companies' apps or websites, and we do not use such information for advertising or data broker purposes.

If App Store privacy labels apply, the data types declared in App Store Connect should match this Privacy Policy, including email address, user ID, device identifier, IP address, diagnostics, usage data, and support logs where applicable. If the App does not perform advertising tracking, the App Store Connect declaration should remain consistent with "Data Not Used to Track You."

5. How We Share, Entrust Processing, and Disclose Information

We share, entrust processing of, or disclose information only where necessary.

5.1 Service Providers, Third-Party SDKs, and Cloud Services

We may use third-party service providers to help us provide cloud services, account systems, verification email delivery, data storage, fault diagnosis, technical support, or service maintenance. These service providers may process your information only as necessary to provide services to us and should take appropriate protective measures.

The current version may involve the following service providers, third-party SDKs, or cloud services. The specific list will be updated based on the final released version, backend configuration, and actually enabled features:

• Supabase / POSTEK Supabase backend, including https://backend.postek.com.cn: used for account authentication, verification codes, user profiles, databases, real-time messages, chat/service records, and related backend functions. Possible data may include email address, user ID, account status, printer serial number or device identifier, chat records, support records, IP address, and network request information.
• Supabase project ncqpiryntqxrsmefqjge.supabase.co: if this project is still used in the released version, it may be used for AVA/printer tokens, messages, user submissions, or feedback processing. Possible data may include printer serial number, user ID, message content, feedback content, and contact information.
• Email verification service provider: used to send registration, login, password reset, account deletion, and account security verification codes. Possible data may include email address, verification code delivery records, security logs, IP address, and timestamp. The specific provider name should be confirmed and supplemented by the backend or operations team before official publication.
• Volcengine Ark (ark.cn-beijing.volces.com): if the released version enables AVA smart assistant chat responses, it may be used to generate troubleshooting or usage guidance responses. Possible data may include your chat input, chat context, language preference, and printer model, fault description, or diagnostic information that you choose to provide.
• Alibaba Cloud OSS (oss-cn-hongkong.aliyuncs.com): if you submit support logs, screenshots, images, videos, or other issue materials, it may be used for file storage and transmission. Possible data may include file content, logs, images/videos, file paths, and upload time.
• Apple and iOS system services: used for system permissions, device-level privacy controls, notifications, App Store distribution, and platform diagnostics enabled by the user or the system. Whether such data is collected by us depends on whether the data is received by us or our service providers.
• Local feature plugins or SDKs: the App may use plugins related to Bluetooth, NFC, scanning, photos/files, network information, device information, and local notifications, such as flutter_blue_plus, flutter_nfc_kit, mobile_scanner, image_picker, file_picker, gal, network_info_plus, device_info_plus, and flutter_local_notifications. These plugins are mainly used to implement local features. If related data is processed only on your device and is not uploaded, we do not treat that data as collected by us.

If the App is released in Mainland China, we will provide or update a "Third-Party SDK and Service Provider List" on our website or in the App, listing the name, operator, purpose of use, types of information collected, processing method, and privacy policy link for each SDK or service. SDKs that are not enabled in the final released version or not included in the final installation package will not be included in the official list.

5.2 Affiliates

Where reasonably necessary, we may share information with POSTEK US INC. or other affiliates for cross-region technical support, after-sales service, fault analysis, customer request handling, or internal service management. We will require affiliates to process the information in accordance with this Privacy Policy or protection standards no less protective than this Privacy Policy.

5.3 Legal Requirements and Business Changes

We may disclose necessary information where required by laws and regulations, courts, government authorities, or regulatory agencies. If a merger, reorganization, asset transfer, or similar transaction occurs, your information may be transferred as part of the relevant transaction, and we will notify you where required by applicable law.

6. Data Retention

We retain personal information only for the period necessary to achieve the purposes described in this Privacy Policy, unless laws and regulations require or permit a longer retention period.

• Account information is generally retained while your account exists.
• Verification codes expire within a short period. Email delivery logs and security logs related to verification code delivery and security verification may be retained for up to 90 days, unless a longer period is needed for security, dispute resolution, or legal compliance.
• Fault logs, diagnostic logs, crash logs, and support records are generally retained for up to 24 months after the relevant issue is resolved, unless a longer period is needed for security, product improvement, legal compliance, or dispute resolution.
• Backup copies may continue to be retained for a limited backup cycle after deletion and will then be overwritten or securely deleted.
• When you delete your account or request deletion of personal information, we will delete or anonymize relevant information unless retention is required or permitted by law.

7. Account Deletion and Your Rights

If you create an account in the App, you can delete your account inside the App through the "Delete Account" function on the account or account information page. To protect account security, the App may require you to verify your email address or enter a verification code before deletion.

If you cannot access your account or need our assistance to delete your account, you may contact us using the contact information in this Privacy Policy.

Depending on applicable law, you may have the rights to access, copy, correct, supplement, delete, withdraw consent, restrict or object to processing, cancel your account, and request an explanation of personal information processing rules.

8. Cross-Border Provision and International Transfers

Because POSTEK has companies or affiliated service entities in both China and the United States, and because some cloud services, account services, email delivery, or technical support services may involve overseas service providers or POSTEK US INC., some of your information may be transferred outside Mainland China.

Possible overseas recipient:

• POSTEK US INC.
• Address: 13809 Research Blvd, STE 500, Austin Texas 78750, United States
• Contact email: privacy@postekus.com
• Processing purpose: U.S. and international customer service, technical support, fault analysis, after-sales service coordination, and account and service security support
• Possible categories of information: email address, user ID, device identifier, printer status, fault logs, diagnostic logs, and support request materials

Where required by applicable law, before providing personal information overseas, we will fulfill notification obligations, obtain separate consent, sign standard contracts, conduct personal information protection impact assessments, or take other lawful cross-border transfer mechanisms.

Before official publication, the actual server regions, cloud service providers, and email service providers should be confirmed. If other overseas recipients exist, their names, contact information, processing purposes, processing methods, and personal information categories should be supplemented.

9. Mainland China User Rights and Protection of Minors

If you are located in Mainland China, you may exercise rights under applicable laws, including access, copy, correction, supplementation, deletion, account cancellation, withdrawal of consent, restriction or objection to processing, and explanation of processing rules.

The App is not directed to minors under the age of 14. We do not knowingly collect personal information from minors under the age of 14. If we discover such a situation, we will take deletion or other necessary measures in accordance with law. If we need to process personal information of minors under the age of 14, we will obtain guardian consent and take special protection measures as required by law.

10. EEA and UK Users

If the App is offered to users in the European Economic Area or the United Kingdom, you may have additional rights under applicable data protection laws, including the rights to access, correct, delete, restrict or object to processing, withdraw consent, and request data portability.

You also have the right to lodge a complaint with your local data protection supervisory authority.

EU Representative: To be confirmed before publication in the European Economic Area. If Article 27 of the GDPR applies, the representative's name, address, and contact email should be inserted here.

11. Data Security

We value the security of your personal information and will take reasonable technical and organizational measures to protect your information against unauthorized access, use, disclosure, modification, or loss. However, Internet transmission and electronic storage methods cannot be guaranteed to be 100% secure.

12. Third-Party Websites and Services

The App or our support pages may contain links to third-party websites or services. We cannot control the privacy practices of third-party websites or services. We recommend that you read their privacy policies before using third-party websites or services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. After an update, we will publish the new Privacy Policy on the relevant page and update the "Last updated" date. If the change materially affects your rights or our information processing practices, we will notify you where reasonable through in-App notices, website announcements, or other appropriate means.

14. Governing Law

This Privacy Policy is governed by the laws applicable to POSTEK ELECTRONICS CO., LTD., without limiting any mandatory privacy rights you may have under the laws of your country, state, or region.

15. Contact Us

If you have any questions, requests, or complaints about this Privacy Policy or your personal information, you may contact us through the following methods:

Company: POSTEK ELECTRONICS CO., LTD.

Address: Wisdom Plaza, Block B, Tower 2, 18 Floor, Qiaoxiang Road, Nanshan District, 518052 Shenzhen, Guangdong, China

Website: www.postek.com.cn/

Privacy contact email: privacy@postek.com.cn