KiwiCloud Privacy Policy

Effective Date: [May 30, 2025]

Published Date: [May 30, 2025]

KiwiCloud PTE. LTD. ("KiwiCloud" , "we" , "us" or "our") is committed to protecting the privacy and security of the data generated and managed by the KiwiCloud UEM platform (the "Services"). This Privacy Policy explains (1) what data we collect, (2) how we use, store, and share it, and (3) the rights and choices available to you. This policy applies only to device-generated data processed through the Services and does not cover any personal data collected outside the Services or by third-party sites.

1. Data We Collect

Note: We do not collect personal user data (e.g., names, email addresses, personal documents, GPS location).

2. How We Use Your Data

We process device data for the following legitimate business purposes:

3. Legal Basis & Regulatory Compliance

EU GDPR

Lawful Basis: Art. 6(1)(f) – processing is necessary for our legitimate interests in providing and improving device-management services, balanced against your rights.

Data Subject Rights: Access, rectification, erasure, and restriction of processing. Contact us (see Section 13) to exercise your rights.

California CCPA/CPRA

Our processing of device data typically falls outside the definition of "personal information" under CCPA, but if you believe any data we hold is subject to CCPA, please contact us.

4. Data Storage & Retention

Storage Locations: Secure cloud servers in multiple global regions. All in-transit and at-rest data are encrypted.

Retention Period: By default, we retain device data for 24 months. Customers may request extensions for compliance or audit purposes.

Deletion: After the retention period, data are permanently deleted. You may also request immediate deletion via your admin console or by contacting us.

5. Data Security Measures

Encryption: TLS 1.2+ for data in transit; AES-256 for data at rest.

Access Controls: Role-based access (RBAC) and strong password policies.

Account Protection: Support for multi-factor authentication (2FA) and single sign-on (SSO).

Monitoring & Audit: Real-time security event detection and comprehensive logging.

6. Third-Party Service Providers

We may engage trusted subprocessors (e.g., cloud hosting, security audit firms) to perform services on our behalf. They are contractually bound to use device data only to provide those services and to maintain equivalent privacy and security standards.

We may disclose device data if required by law, regulation, or valid legal process (e.g., court order, government request).

7. Your Rights & Choices

Access & Correction: Administrators can view and correct device data via the UEM console.

Deletion Requests: Submit deletion or export requests through your admin console or by emailing us.

Policy Withdrawal: If you object to our processing, you may stop using the Services; upon request, we will delete all device data (unless retention is legally required).

8. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal data from minors. If you believe we have collected such data, please contact us for removal.

9. Cookies & Similar Technologies

Our web console may use cookies or local storage for session management, security, and performance. These technologies are not used to track you across third-party sites. You may disable them via your browser settings, but some functionality may be impacted.

10. International Data Transfers

Where device data is transferred outside Singapore (e.g., to EU or US data centers), we rely on appropriate safeguards such as Standard Contractual Clauses under GDPR to ensure lawful cross-border transfers.

11. Updates to This Policy

We may update this Privacy Policy periodically. We will post the revised version at https://kiwi.cloud/privacy with a new "Effective Date". For material changes, we will also provide notice via the platform or email.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your device data, please contact: contact@kiwi.cloud

KiwiCloud 用户隐私政策

生效日期： [2025年5月30日]

发布日期： [2025年5月30日]

KiwiCloud PTE. LTD.（以下简称“KiwiCloud”或“我们”）非常重视您的隐私和设备数据的安全。我们依据中华人民共和国《个人信息保护法》《网络安全法》《数据安全法》等相关法律法规，制定本隐私政策，明确说明我们如何收集、使用、存储和共享您通过 KiwiCloud UEM 平台（以下简称“本服务”）所生成的设备数据，并说明您享有的权利。 请您在使用我们的产品或服务前，务必仔细阅读并充分理解本政策，特别是以加粗形式标识的条款。

一、我们收集哪些数据

我们仅在提供设备管理服务过程中收集以下与设备运行相关的数据：

1.设备元数据 2. 配置信息与应用数据 3. 性能与分析数据
  • 资源使用情况（CPU、内存）
  • 网络连接与流量日志
  • 汇总后的设备行为数据与报表指标 特别说明：我们不会收集与设备使用者直接相关的个人身份信息，如姓名、手机号码、邮箱、文档内容、照片、GPS 定位等。

    • 二、我们如何使用这些数据

    我们基于合法、正当、必要原则，仅将设备数据用于以下用途：

    三、我们的数据处理合规依据

    1. 中国法律框架下的数据处理原则

    我们依照《个人信息保护法》第十三条规定的合法处理情形收集并处理数据，主要包括：

    2. 针对跨境数据传输

    如设备数据需传输至境外服务器（如新加坡、欧洲或美国），我们将严格遵守中国数据出境相关规定，如安全评估、标准合同备案或其他合规程序，并确保数据在跨境传输过程中加密及受保护。

    四、数据存储与保留期限

    五、数据安全保障措施

    我们采用行业领先的技术与管理手段，确保数据安全：

    六、第三方服务提供商说明

    为提升服务质量，我们可能委托部分受信赖的第三方服务商（如云服务提供商、安全审计机构）处理数据。这些第三方仅可在服务必要范围内使用相关数据，且必须遵守与本政策等同的数据保护标准。 如根据法律、行政或司法机关的有效要求，我们将依法配合提供相应数据。

    七、用户的权利

    您及您的组织（即 KiwiCloud 管理平台的管理员）享有以下数据处理相关权利：

    八、未成年人保护

    本服务不面向不满14周岁的未成年人。如我们发现错误采集了该类数据，将立即予以删除。

    九、Cookies 和本地存储技术说明

    为了提升服务体验，我们的网页端管理控制台可能使用 Cookies 或浏览器本地存储，用于会话保持、安全控制和性能优化。这些技术不会用于跨站点跟踪。用户可根据浏览器设置禁用相关技术，但可能影响部分功能的正常使用。

    十、政策的更新与通知

    我们可能不定期修订本隐私政策。一旦修订，我们将在官网 https://kiwi.cloud/privacy 发布最新版，并通过平台通知或电子邮件方式提醒您关注。如涉及重大变更，我们将征得您的再次同意。

    十一、联系我们

    如您对本隐私政策、数据使用或您的权利有任何疑问或需求，可通过以下方式联系我们：