WIFFA Expo App Privacy Policy
Scope: This Policy applies to the services offered through the WIFFA Expo App on HarmonyOS and other mobile platforms, as well as through H5 pages and related mini programs. These services include browsing exhibition information, account registration and login, event registration and ticket purchases, exhibitor profile management, notifications, venue address display, saving images, and AI-powered search and chat.
1. Who We Are
The WIFFA Expo App serves participants in the China International Freight Industry Chain Expo by providing exhibition information, attendee registration, exhibitor services, event updates, ticketing and order management, and related tools.
Operator: Dalian Wanfa United Shipping & Trade Technology Co., Ltd.
If you have any questions, comments, or suggestions regarding this Policy, you may contact us using the contact information provided at the end of this Policy.
2. How We Collect and Use Your Personal Information
We process personal information lawfully, fairly, in good faith, and only to the extent necessary for the features you use. Refusing to provide non-essential information will not affect basic browsing, although certain features may become unavailable.
2.1 Account Registration, Login, and Identity Verification
- When you log in or register using your mobile phone number, we collect your phone number and SMS verification code to complete identity verification, login, and account security management.
- When you log in using email or recover your password, we collect your email address and related information you voluntarily submit for login verification, password reset, and notification delivery.
- When you use WeChat-related login features, after you actively choose to do so, we obtain identity-related information from the WeChat login result to complete third-party account login or binding.
- After successful login, we process account identifiers, login session tokens, user IDs, and similar information to maintain session status and provide account services.
2.2 Event Registration, Ticketing, Exhibitor Profiles, and Event Services
- When you register for an event as a general visitor, trade visitor, or exhibitor, we may collect your name, mobile number, email address, country, city, company name and type, primary business activities, key service offerings, business card image, and related information.
- When you manage an exhibitor profile, company details, or contact details, we may collect the contact person's name and phone number, company email address, postal address, website, logo, abbreviated name, event service requirements, and related information.
- When you purchase a ticket, review an order, submit proof of payment, or redeem a benefit, we may process order details, product or ticket type, payment status, proof-of-payment images, and information necessary to provide after-sales support.
2.3 Image Upload, Saving, and Sharing
- When you upload images such as business cards, company logos, or proof of payment, we process the files you select for information extraction, display, or business review.
- When you choose an action such as "Save Image to Photos," we use the relevant system feature to save the selected image to your device.
- When you actively use sharing features, we invoke third-party sharing capabilities such as WeChat to share pages, posters, or links you specify. To enable recipients to open the corresponding page, shared links may contain necessary parameters such as page path, exhibitor identifier, exhibition year, sharing source, or campaign parameters.
2.4 Shared Links, Clipboard Reading, and Source Parameter Identification
- When you or another person opens an App page through a WeChat contact card, shared link, copied link, or similar method, we may process the page path, exhibitor identifier, exhibition year, referral source, campaign parameters, and other information contained in the link. We use this information to open the relevant exhibitor or event page, measure visits generated by sharing, and identify the referral channel.
- When you open this App via a copied shared link, or use in-app features such as "Copy Link" or "Identify Link from Clipboard," we may, after obtaining system authorization, read text or link content from the clipboard solely to determine whether it is a link related to this App, parse page parameters therein, and complete redirection.
- If you enter this App via a link containing sharing source or campaign parameters and then log in, register, inquire, register for an event, purchase a booth, or submit an order, we may associate the relevant sharing source or campaign parameters with your account, registration records, inquiry records, or order information for campaign performance statistics, source attribution, service follow-up, and business settlement verification.
- We do not continuously monitor your clipboard, nor do we read clipboard content unrelated to the above features; unless you actively submit it or it is used to complete a corresponding business operation, clipboard content will not be stored long-term as standalone information.
- If you decline to authorize clipboard reading, you may be unable to use features such as automatic identification of copied links and redirection, but this will not affect your use of basic browsing features via WeChat cards, in-page links, or manual operation.
2.5 Venue Address Display and Usage Prompts
- This App may display publicly available venue names, venue addresses, and related usage prompts for your reference and use. Any action you take after leaving this App is at your own discretion.
2.6 Message Notifications and Push
- To deliver event notices, order reminders, and service messages, we may use UniPush, GeTui, and push channels provided by mobile device manufacturers. We may obtain a push client identifier (CID), device messaging channel identifiers, and similar information, and associate them with your account.
- To complete push device identification, message delivery, channel adaptation, anomaly troubleshooting, and security risk control, push SDKs or manufacturer channels may, within the necessary scope, process device information and device identifier information through on-device collection, reading system interfaces, and interaction with push servers or manufacturer channel interfaces, including device brand, model, system version, network status, Wi-Fi SSID, Wi-Fi BSSID, IP address, device MAC address or alternative identifiers, Android ID, OAID, IMEI, IMSI, SIM card serial number, as well as app package name, installed app list, running process information, and the like. The types of information actually processed may vary depending on device system version, push channel, and SDK version.
- Push notifications in this App are primarily used for necessary conference and event notifications, order status reminders, service messages, and other notifications related to services you have used. We do not send differentiated recommendation-style notifications based on user profiling or automated decision-making.
- You may disable notification permissions in your device system settings; after doing so, you may still use the App, but may not receive message reminders in a timely manner.
2.7 AI Search and Chat Processing
- When you actively use AI search, AI chat, or similar features, we process your input questions, search content, chat history, and system responses to provide intelligent Q&A, exhibition information queries, and related auxiliary services.
- To provide AI services, your input may be processed through our business servers or third-party AI service interfaces. Please avoid entering sensitive personal information unrelated to the current service in conversations.
2.8 Customer Service, Feedback, and Operations Support
- When you contact conference, sponsorship, advertising, or customer service staff, we may process inquiry content, contact information, and communication records you voluntarily submit in order to respond to your questions.
- To ensure stable service operation, we may process necessary log information, error information, and operation records for troubleshooting, security protection, and service improvement.
3. Device Permissions We Request and Use
To ensure the normal operation of related features, we may request necessary system permissions on terminals such as iOS, Android, and HarmonyOS based on your device system and specific feature scenarios, and request your authorization when you actually use the corresponding feature. Permission names displayed may differ across systems; the actual permission prompts and system settings on your device shall prevail.
| Permission |
Use Case |
Required? |
Impact if Denied |
| Notifications / Message Alerts |
Receiving push content such as event notifications, order reminders, and service messages |
Required for feature |
May be unable to receive app notifications, message alerts, or certain push services in a timely manner |
| Clipboard / Pasteboard Reading |
Identifying share links, exhibitor page links, or event links you actively copy from this App, parsing page parameters, sharing source or campaign parameters, and completing redirection |
Required for feature |
Unable to automatically identify copied links and redirect; basic features remain available via WeChat cards, in-page links, or manual operation |
| Storage / File Read & Write |
Saving images, downloading materials, caching business files |
Required for feature |
Unable to save locally, download, or read specified files |
| Photo Album / Photo Access |
Uploading business cards, company logos, payment proof, avatars, and enterprise exhibition qualifications; reading local album images for business form submission; also supports saving images to the local device |
Required for feature |
Unable to select local images for upload or save images |
| Camera |
When users actively upload avatars, enterprise exhibition qualifications, or exhibition payment proof, capturing images for business form submission; authorization is requested only after the user taps the upload button — there is no silent background camera access |
Required for feature |
Unable to take photos to upload image materials; does not affect all basic features such as App browsing, AI search, and text-based registration |
| Network |
Accessing page content, submitting forms, syncing orders, uploading files, and calling third-party services; in necessary scenarios, identifying network status, Wi-Fi SSID, and Wi-Fi BSSID for push channel adaptation, anomaly troubleshooting, and security risk control |
Essential |
Core online features of the App cannot be used |
| Tracking Authorization or Device Identifier Authorization |
On applicable systems and feature scenarios, used for message push, service security, device association, or statistical analysis |
Required only on applicable platforms and for related features |
May affect the experience of certain services that rely on device identifiers, but will not affect basic browsing features |
If you decline to authorize a non-essential permission, only the corresponding feature will be affected; you may still use other services that do not depend on that permission.
4. How We Use Cookies, Cache, and Similar Technologies
To ensure smooth use of our services, we may locally store login session status, language preferences, theme settings, temporary order information, deep link parameters, push reporting status, and other necessary cached data on your device. This information is primarily used to:
- Maintain login status and reduce repeated logins;
- Remember your page preferences and operation status;
- Improve image loading, page navigation, and message processing efficiency;
- Help identify abnormal requests and ensure service security.
5. How We Share, Transfer, and Publicly Disclose Your Personal Information
5.1 Sharing
We do not sell your personal information to unrelated third parties. We may share necessary information only in the following circumstances:
- To enable features you actively choose, such as message push, WeChat login/sharing/payment, Alipay payment, file upload and storage, AI search and chat, and the like;
- To fulfill legal obligations, respond to regulatory requirements, or handle disputes;
- Where we have obtained your separate consent.
5.2 Transfer
In principle, we do not transfer your personal information. If transfer is necessary due to merger, division, asset transfer, or similar reasons, we will inform you as required by law and require the recipient to remain bound by this Policy.
5.3 Public Disclosure
Unless we have obtained your separate consent or laws and regulations provide otherwise, we will not publicly disclose your personal information.
6. Third-Party Services We Integrate
To enable certain features, we may integrate third-party SDKs, open platforms, or service interfaces. Integration may vary across versions and terminals; the version you actually use shall prevail.
| Third-Party Service |
Purpose |
Information That May Be Processed |
Notes |
| Alipay App Payment Client SDK |
In-app order payment and checkout settlement via Alipay |
Device identifiers (Android ID, OAID), device brand/model/system version, IP address, carrier, Wi-Fi information, sensor list, network information, order and payment-related parameters |
Developer: Alipay (Hangzhou) Information Technology Co., Ltd.; invoked only when you actively use Alipay payment Privacy Policy: https://opendocs.alipay.com/open/54/01g6qm#%E6%94%AF%E4%BB%98%E5%AE%9D%20App%20%E6%94%AF%E4%BB%98%E5%AE%A2%E6%88%B7%E7%AB%AF%20SDK%20%E9%9A%90%E7%A7%81%E6%94%BF%E7%AD%96 |
| WeChat OpenSDK Android |
WeChat quick login, content sharing, and invoking WeChat Pay |
User WeChat OpenID, nickname and avatar, shared content, device identifiers, device system information, IP, Wi-Fi network information |
Developer: Shenzhen Tencent Computer Systems Co., Ltd.; invoked only when you actively use WeChat-related features Privacy Policy: https://support.weixin.qq.com/cgi-bin/mmsupportacctnodeweb-bin/pages/RYiYJkLOrQwu0nb8 |
| Message Push SDK Android |
Push notifications for app orders, event news, and conference notices |
Device brand and model, system version, OAID/Android ID, carrier, IP, Wi-Fi information; optionally IMEI/MAC/location information, installed app list |
Developer: Zhejiang Merit Interactive Network Technology Co., Ltd. (GeTui); enabled after user grants push permission Privacy Policy: https://docs.getui.com/privacy/ |
| Mobile Intelligent Terminal Supplementary Device Identifier System Unified Invocation SDK |
MIIT-compliant acquisition of device identifiers, risk control security verification, device identification |
Device brand, model, carrier, app package name and signature, OAID; data processed locally and not uploaded to the cloud |
Developer: China Academy of Information and Communications Technology (CAICT); invoked during app startup compliance verification Privacy Policy: https://www.msa-alliance.cn/col.jsp?id=122 |
| Tencent Cloud Object Storage (COS) |
Image file upload and storage |
Image files you actively upload, file paths, upload time |
Used for business file processing such as business cards, logos, and payment proof |
| SMS / Email Service |
Sending login verification codes, password reset emails, and business notifications |
Mobile phone number, email address, verification code delivery records |
Used to complete identity verification and notification delivery |
| Coze / AI Service Interface |
Providing AI search, AI chat, and auxiliary exhibition information queries |
User input questions, search content, chat history, session identifiers, AI responses |
Invoked only when you actively use AI features |
Third-party services process information in accordance with their own privacy policies or service agreements. Please review them carefully before using related features.
7. How We Store and Protect Your Personal Information
- We retain your personal information for the shortest period necessary to fulfill the purposes described in this Policy, except where laws and regulations require otherwise.
- We adopt reasonable and feasible security measures to protect your information, including but not limited to access control, authentication verification, transmission encryption, log auditing, and least-privilege access control.
- The Internet is not an absolutely secure environment. We will make every effort to protect information security, but cannot guarantee that any measure is 100% risk-free.
- If a personal information security incident occurs or may occur, we will take remedial measures as required by laws and regulations and promptly inform you of the incident, its impact, and recommended responses.
8. How You Can Manage Your Personal Information
Within the scope permitted by laws and regulations, you generally have the following rights:
- Access, correct, and supplement your account information, registration information, and exhibitor profiles;
- Delete materials you actively uploaded or request deletion of related information;
- Withdraw certain permission authorizations, such as location, notifications, and photo album access;
- Delete your account. You may initiate an account deletion request through the account settings supported by the App; after deletion, we will handle your related information in accordance with laws and regulations.
8.1 Account Deletion Process and Rules
- In-app deletion entry: After logging in, go to the "My / Personal Center" page, tap "Delete Account" at the bottom of the page, read the deletion notice, confirm, and submit your deletion request.
- Identity verification: To protect account security, you must be logged in before submitting a deletion request; we may verify your mobile phone number, email, or other verifiable real-name information as necessary based on account status, operational risk, or legal requirements.
- Deletion processing: After your deletion request is approved, your account will no longer be able to log in or be used; personal information, registration data, chat records, and similar information associated with the account will be deleted or anonymized as required by laws and regulations, but transaction, order, financial, audit, security log, and similar information that must be retained by law will be kept for the statutory retention period.
- Deletion restrictions: If your account has incomplete orders, outstanding payments, complaints or disputes under processing, information required to be retained by laws and regulations, or other circumstances affecting deletion, we may be temporarily unable to complete deletion immediately and will explain the reason to you.
- Other deletion methods: If you cannot complete deletion through the in-app entry, you may submit a deletion request to us via the contact phone number or email at the end of this Policy. We will process it in accordance with the law after verifying your identity.
If you cannot complete an operation on your own through the product pages, you may contact us using the contact information at the end of this Policy. We will process your request in accordance with the law after verifying your identity.
9. Protection of Minors
This App primarily provides event and exhibition services to users who have the legal capacity required to use them. If you are a minor, please read this Policy with your guardian and use the services only with your guardian's consent. If we discover that we have collected a minor's personal information without the consent required by law, we will promptly take appropriate action in accordance with applicable law.
10. How This Policy Is Updated
We may update this Privacy Policy based on business changes, legal and regulatory requirements, or product feature adjustments. Updated policies will be communicated to you through in-app pages, pop-ups, in-app announcements, or other reasonable means. If an update involves material changes to your significant rights and interests, we will notify you in a more prominent manner.