DeepDeep Privacy Policy
Updated: October 9, 2026 · Effective: October 9, 2026
Please carefully read and understand the following content, especially the important provisions shown in bold.
1. Scope and operator
DeepDeep is provided and operated by Dalian Wanfa United Shipping & Trade Technology Co., Ltd. (大连万发联合航贸科技有限公司) (“we”). This policy covers the iOS, Android and HarmonyOS App and its sharing and App-opening pages.
Services include AI conversations and tasks, digital-employee and skill entry points, messaging, personal and company profiles, enterprise applications, seat invitations, logistics publications and office-service entry points. Availability depends on the version, entitlements and actual activation; an entry point or demonstration screen does not establish that a capability is available.
Please pay particular attention to clipboard access, transcription, uploads, chat AI, location, enterprise collaboration and third-party processing. We explain required information for each feature. Refusing optional permissions does not affect unrelated features; this policy does not replace legally required separate consent.
2. Information, purposes and triggers
| Feature and trigger | Information processed | Purpose and necessity |
|---|
| Registration, login and security | Phone number and verification code; the account or email and password entered for enterprise password login; user identifiers, login state and service-issued credentials. | Verify identity, maintain login and check entitlements. Office credentials and App login are used for their respective services. |
| Personal profiles and seats | Name, Chinese company name, phone number; optional English company name, email, region, introduction and avatar; invitation key, company name and seat relationship. | Maintain profiles and verify invitations. Joining requires real name, Chinese company name and phone number. A profile contact number does not change the login number. Profile region is entered or selected, not obtained from GPS. |
| Enterprise applications and profiles | Company name, country, city, company types, WIFFA membership, company email, contact name and phone, and the selected business-license image; other company information you maintain. | Review applications, contact applicants and maintain company records. Provide only company documents and contact details you are authorized to submit, excluding unrelated identity documents. |
| Logistics publications and knowledge retrieval | Published services, freight rates, schedules, publisher and contact details; associated company and entitlement information. | Display and retrieve business information, including synchronization of published content and contacts to the business knowledge base. A new publication may use the provided company name, personal name and phone to establish company information and update membership under service rules; this is not a purchase. |
| AI conversations, files and tasks | Text, selected images and files, file names, types, sizes, upload status, conversation context, task instructions and results, feedback and usage. | Upload and process content, answer requests and recover tasks. Selecting an AI conversation attachment can start its upload before you send the text. Upload or parsing success does not establish task completion. Remove uploaded material through available deletion controls or contact us. |
| Messaging, friends and groups | Chat identifiers, names, avatars, friend and group relationships, messages and attachments, delivery/read state; a phone number you enter to find a user. | Provide messaging, lookup, groups, search and history. A chat connection starts after privacy consent and login to receive messages and update unread status. Lookup does not read the device address book. Recipients may save or forward messages. |
| Chat AI summaries, suggestions and automatic replies | Authorized message context, participant identifiers, unread range, synchronization state, selected AI employee and results; automatic-reply conversation, time window, intents, expiry and execution records. | AI services obtain authorized conversation context when you use summaries or suggestions; you confirm sending a suggested reply. Where automatic replies are available, they operate in the current conversation only after you enable them and the service confirms the configuration. You can stop them in the corresponding settings. Login or reading this policy alone does not authorize automatic replies. |
| Voice input, voice messages and transcription | Recorded audio and duration; sent or received voice messages you select for transcription, message identifiers and resulting text. | Voice input is uploaded for recognition after recording; you decide whether to send the returned text. Chat audio is uploaded when sent. Selecting transcription of a sent or received message also submits that audio or message for processing and may include another person’s voice. |
| Chat locations and contact cards | Selected place name, address and coordinates; a selected card’s chat identifier, name and avatar. | Location is delivered to the selected conversation after selection and confirmation. Precise location can reveal where you are; choose recipients carefully. This feature does not continuously track you. Cards exclude phone numbers and login credentials and do not use the device address book. Unconfigured or unauthorized map capability does not provide a location result. |
| Office services and external apps | Office account/password and returned office credentials; device platform, brand and target app information used when opening an external app or store. | Opening OA/CRM passes office credentials to the DeepDeep office site to maintain login, rather than passing App credentials to arbitrary links. A selected native app is opened, or an appropriate store if unavailable; this entry point does not read the full installed-app list. |
| Feedback, updates and operation | Submitted feedback, screenshots and optional contacts; app version, device model/brand, OS and network state, IP address and necessary diagnostic records. | Handle feedback, select updates and diagnose faults. Selected screenshots may upload before the form is submitted. See the service disclosures for relevant SDK processing. |
| Sharing and opening pages | Page or invitation parameters, browser User Agent, platform and browser-provided brand information; IP and request information generated when visiting. | Choose opening, download or browser guidance. Desktop seat links pass invitation parameters to DeepDeep’s PC page. Web and download-configuration requests may create access records; this does not mean sharing information is used for advertising attribution. |
Sensitive information: precise location and sensitive information contained in audio, licenses, images, files or messages are processed only for a specified, necessary purpose, with appropriate safeguards and required consent. Submit only information necessary for the task that you may lawfully provide.
AI purposes: data serves your requested conversations, retrieval, summaries or tasks. This policy is not blanket authorization to train models on identifiable personal information for unrelated purposes. New training or other purposes require specific disclosure and any consent required by law.
3. Clipboard access and returning from shared links
Purpose: return to a shared App page or show an enterprise seat invitation. Clipboard recovery supplements links that cannot directly pass their parameters to the App.
- When: after privacy consent and initial setup, when starting or returning to the foreground, the App first handles links received from the system and reads the clipboard when fallback recovery is needed. It does not read the clipboard for sharing before consent or continuously monitor changes.
- Scope: the system returns the current clipboard text. The App locally checks for the dedicated DeepDeep sharing marker, then parses the page and parameters or invitation key and company name. Unrelated text is not used for business processing, persistently stored or uploaded.
- Use: recognized valid content supports navigation, invitation display and subsequent actions. The App attempts to clear a consumed DeepDeep sharing token to avoid repeat prompts. A target page may request its business data. An invitation key is submitted with your signed-in identity to the seat service only after you confirm joining. Creating, copying or opening a link does not itself establish membership.
- Writing: copying invitations, messages or contact details writes the selected content to the clipboard. A sharing page may write recovery information when you click open or download. The system or other apps you authorize may read clipboard content; do not publicly disclose invitation keys.
- Declining: you may decline the system prompt or revoke access in device settings where supported. Other features remain available, though automatic recovery may fail. Return to the original sharing page and open the App again. Recovery after installation is not guaranteed.
Unrelated clipboard text is not used for advertising, profiling or channel attribution. Content you deliberately paste into an input and send is handled according to the relevant conversation, messaging or form feature.
4. Device permissions and choices
| Capability | Trigger and purpose | Effect of refusal |
|---|
| Clipboard | Read as a sharing fallback after consent and initialization. iOS handles paste confirmation; HarmonyOS uses its clipboard-read permission; Android controls vary by OS and manufacturer. | Automatic recovery may fail; reopen the original sharing page. |
| Microphone | Requested when you start voice input or record a voice message, for that recording only. Transcribing an existing voice message does not require a new recording. | Recording is unavailable; text remains available. |
| Camera | Used when you choose to photograph an avatar, company license, feedback image or conversation/chat attachment. | Photography is unavailable; other permitted selection methods may remain available. |
| Photos, media, files and saving | System selectors or OS-specific permission requests support selected images, videos, files and saved images. Only selected/saved content is handled. Saving images on Android 9 or earlier may use storage-write permission. | The corresponding selection, upload or saving action is limited, without affecting text input. |
| Location and maps | Location may be requested for map selection from the chat location entry point where supported. The selected position is sent only after confirmation. | Current-location features may be unavailable; ordinary chat remains available. No continuous background tracking. |
| Network and network state | Online content, authentication, chat connections, uploads and update information. | Online services cannot operate without connectivity. |
Manage available permissions in device settings or through Me → Privacy & Security → Privacy & Permissions, which opens system settings. Display and readable status vary by OS. Withdrawal does not affect earlier lawful processing.
Current business features do not provide device-contact import or advertising-tracking authorization. In-App unread indicators do not establish that offline system push is enabled. New push, payment or other materially different processing requires the relevant disclosure and authorization.
5. Providers, enterprise collaboration and disclosure
Some features use the following SDKs or cloud services. We must limit processing according to the actual entrusted or independent role. Disclosure to an independent personal-information processor requires the relevant notice and consent. Provider rules supplement, rather than replace, our duties.
| Service and provider | Purpose and information | Further information |
|---|
DCloud App engine
DCloud (Beijing) Network Technology Co., Ltd. | App runtime and diagnostics: device/model, CPU, display, OS, locale/timezone, network/IP, User Agent, emulator/root state, anonymous device ID; app/package/version/AppId/SDK information and performance/errors. Video orientation may use accelerometer and gravity data locally. | DCloud engine privacy policy |
Tencent Cloud IM and media upload plugin
Tencent Cloud Computing (Beijing) Co., Ltd. | Chat connection after consent and login; profiles, friends/groups and messages. Sending can process text, images, video, files, audio, selected locations or cards. Some transcription uses IM services. Network state, device model and OS support communication. | IM personal information rules |
Tencent Cloud COS
Tencent Cloud Computing (Beijing) Co., Ltd. | Related resource storage/access processes uploaded content, file metadata and access requests. Use and disclosure depend on the business purpose; uploading does not itself authorize public disclosure. | Tencent Cloud privacy statement |
Alibaba Cloud Model Studio (Bailian)
通义云启（杭州）信息技术有限公司 | Called through DeepDeep servers to process prompts, relevant conversation context, retrieved material, file content and generated results needed for the selected AI feature, including answers, summaries and tasks. Only necessary context supports the corresponding feature; accepting this policy is not blanket authorization to process every historical message. | Model Studio privacy notice · Service agreement |
Alibaba Cloud SMS
阿里巴巴云计算（北京）有限公司 (technical service)
阿里云计算有限公司 (related consulting) | When you request a verification code, DeepDeep servers submit the recipient number, message template and code parameters, and process delivery status/receipts for identity verification and delivery troubleshooting. This does not read the SMS inbox on your phone. | SMS service agreement · Alibaba Cloud privacy policy |
Tencent Cloud ASR
Tencent Cloud Computing (Beijing) Co., Ltd. | DeepDeep servers process recorded voice input or selected chat audio through ASR, using audio, format, duration and recognized text for transcription. The App records through its own recording capability and calls ASR through the server; this does not directly integrate a Tencent recording SDK. Some chat transcription separately uses IM. | Tencent Cloud privacy statement |
Model Studio, SMS and ASR operate through the server; IM and its upload plugin support App messaging. Cloud services are not all device SDKs. Only information needed for the corresponding feature is provided; provider notices do not authorize unrelated uses.
Enterprise collaboration: application information supports review and contact. Seat administrators manage member identification and relationships within granted authority. Seat access does not automatically extend to all personal conversations or private chats. Office services process information under their own login and business permissions.
Publications and knowledge retrieval: published logistics content, publisher and contact details may support display and knowledge retrieval. Updates/deletions initiate corresponding synchronization; a reported synchronization failure can temporarily leave the main record and retrieval content inconsistent. Contact us for resolution.
Messages and sharing: messages, locations and cards go to selected recipients. Invitation-link holders can read its parameters. Review scope before sending or publishing. Deleting your local record does not automatically erase copies held by recipients.
We do not sell personal information. Transfers due to mergers or restructuring require notice and continued protection by recipients. Other public disclosure requires the applicable consent or legal basis.
6. Local storage, retention and cross-border processing
Storage location: DeepDeep server data is stored within the People’s Republic of China, and any new overseas recipient or cross-border processing requires the notice and legal procedures below before it begins.
On-device information: the App stores login credentials, space/interface preferences and privacy choices, with drafts, chat delivery state and task-recovery caches. Logout/cancellation attempts to remove state attributable to the current account, not every cache on the device. Device preferences and privacy choices may remain. “Clear local cache” removes regenerable interface cache, not cloud accounts, conversations or chat records.
Web storage: these Privacy Policy and User Agreement pages set no analytics cookies and do not persist language preferences. Sharing pages use browser/device information for opening guidance. Office pages and other separate services may use cookies or local storage for login under their own disclosures; clearing them may require signing in again.
Server retention: information is retained for the shortest time needed for its purpose. Profiles support accounts and services; conversations, chat, tasks and uploads support their history/business functions; feedback supports handling and follow-up; required security records are retained by law. At expiry, completion of purpose or a legal deletion trigger, information is deleted or anonymized. Where retention is legally required or deletion is temporarily technically impossible, processing is restricted to storage and necessary security.
Deletion scope: AI-conversation deletion, attachment deletion, chat-message deletion and removing a chat from the list are different operations. Removing a chat can preserve history; deleting your side of a message does not erase recipient copies. Contact us for requests involving submitted information, cloud copies or backups.
Temporary sharing and recordings: sharing intents serve current handling/deduplication, without persisting the recognized invitation key in long-term account storage; unrelated clipboard text is not stored. Local voice-input recordings are cleaned up on recognition completion or cancellation of the related flow. This does not promise immediate deletion of server copies or already-sent voice messages.
Cross-border processing: before providing personal information abroad, we must disclose the overseas recipient, purpose, method, categories and rights channels, and complete required procedures and consent. This policy is not blanket permission for undisclosed cross-border processing.
7. Your rights
- Access and correction: view or edit information you may maintain in Me and the relevant profile/business screens. Editing a profile contact number does not directly change SMS login.
- Copies, portability and explanations: use section 10 for copies, legally applicable portability or explanations.
- Deletion: use available conversation, attachment, message or publication controls, noting section 6’s scope. Contact us where controls are missing, deletion fails or cloud/backup handling is needed.
- Withdrawal and restriction: manage OS permissions or contact us to withdraw consent-based processing or request restriction. Stop available automatic replies in their settings and check the service-confirmed state. Refusing optional processing affects its related feature.
- Account cancellation: use Me → Account & Security → Cancel Account. The current flow cancels the entire phone-number account: as the confirmation screen states, successful cancellation prevents that number from logging in again, ends personal/enterprise access and cannot restore the account. Preserve needed information first. A failed server response is not successful cancellation. Information is deleted, anonymized or retained as legally required.
- Complaints and automated decisions: request explanations, object to or appeal processing or automated decisions affecting your rights, and complain to competent authorities or seek legal remedies.
Necessary identity checks prevent impersonation and must not collect unrelated information. We impose no unreasonable conditions and explain lawful refusals and remedies.
8. Security and minors
We must apply transmission safeguards, access controls, identity checks and isolation appropriate to the risk, and restrict staff/provider access. Protect credentials, codes and invitations. Do not publicly forward office links containing login information, private file links or others’ information.
Absolute security cannot be guaranteed. For actual or likely disclosure, alteration or loss, we will take remedial measures and notify affected users and authorities as required.
DeepDeep primarily serves adults with logistics and workplace needs. Minors should use it with guardian guidance. Processing information about children under 14 requires prior guardian consent and specific protection rules; this policy does not replace those requirements. Contact us about suspected unauthorized processing of minors’ information.
9. Changes to this policy
We update this policy and its date when services, processing or legal requirements change. Material changes affecting purposes, methods, categories or your rights are highlighted in the App or through an appropriate notice. Where fresh consent is required, processing starts only after that consent; continued use is not substituted for required consent.
You can review the policy through Me → About DeepDeep → Privacy Policy. The English version assists reading. If interpretations differ, the Chinese version prevails without limiting rights under applicable law.