致：尊敬的客户
更新日期：2026年9月28日　生效日期：2026年10月1日

北京轻网智能科技股份有限公司（以下简称“轻网”或“我们”）充分尊重您的隐私权。请仔细阅读本隐私政策（以下简称“本政策”），以便您了解我们如何通过与您互动或您对我们服务的使用来收集、使用和存储您的个人数据及您享有何种权利。

本政策适用于实际使用 LightWAN 服务的个人。采购或管理服务的企业、组织（以下简称“您的组织”）应依法向其员工、合作伙伴及访客履行告知义务，并在依法需要时取得相应同意。

1.我们收集的个人信息
当您使用LightWAN服务时，我们会收集提供服务所必须收集的基础信息。我们收集的数据包括：

• 设备信息：您的操作系统、设备绑定标识（本政策统称“UDID”，具体标识因操作系统而异，用于设备绑定）、设备名称、设备型号和版本、MAC 地址、登录 IP 地址。
• 应用信息：LightWAN版本号、网络访问方式、类型与状态、网络质量、操作日志（如登录、连接、断开连接、服务故障、密码变更等信息）。
• 账户资料：为创建和管理客户端账户，我们处理您的组织或其授权人员提供的必要账户资料。

收集上述信息是为了保障您正常使用我们的服务，维护服务的正常运行，改进及优化服务体验以及保障您的帐号安全。
网络审计功能由您的组织根据其网络安全及合规管理需要决定是否开启。开启后，我们会记录您通过 LightWAN 访问的目标服务器的域名和 IP 地址。审计日志仅向您的组织授权的管理员及获得授权的我方受托技术支持人员开放。您的组织作为该项活动的个人信息处理者，负责履行告知义务并具备合法处理依据；我们仅按其指示和委托约定处理上述信息。
当您选择主动复制、粘贴相关文字时，我们会调用您的剪切板，但我们并不会存储您剪切板的其他信息。

2.我们如何使用您的个人信息
我们使用个人信息的目的包括：

• 提供服务统计信息：我们会处理您的IP地址和流量信息，用以提供我们服务的统计信息。
• 网络服务优化：您的网络数据会用于优化您的网络访问质量以及保障网络访问安全。
• 提供网络审计服务：我们会使用您访问的目标服务器的域名和IP地址，用以向您的组织提供其委托的网络审计服务。

3.披露
我们不会公开披露您的个人信息，除非获得您的明确同意。但依据适用法律或响应有效的法律程序，我们可能向执法机构或其他政府机构披露您的个人数据。我们也可能在其他适当的时候披露您的数据，例如，为了执行《用户服务协议》，当我们认为为了防止人身伤害或经济损失而有必要披露个人信息时，或者与调查可疑或实际的非法活动有关时。

4.我们如何保留和保护您的个人数据

• 信息存储的地点
  我们会按照法律法规的规定，将在中国收集的用户个人信息存储于中国境内。如后续确需向境外提供个人信息，我们将依法告知境外接收方、处理事项及行使权利的方式，在依法需要时取得您的单独同意，并履行适用的出境程序。
• 信息存储的期限
  我们只会在达成本政策所述目的所必要的最短期限内保留您的个人信息，法律、行政法规另有规定的除外。配置应遵守适用的法定留存要求，依法应留存的网络安全日志不少于六个月。
  账户及设备绑定信息在提供相应服务所必需的期间内保存，删除账户或解除设备绑定关系后立即删除相应信息。审计数据不随账户删除或设备解绑而删除，在租户删除时删除；法律、行政法规另有规定的除外。保存期限届满或依法应删除时，我们将删除或匿名化处理相关信息；受托处理的信息依法依约返还或删除。
• 信息的安全
  我们努力为用户的信息安全提供保障，以防止信息的丢失、不当使用、未经授权的访问或披露。
  我们在合理的安全水平内使用各种安全保护措施以保障信息的安全。例如，我们会使用加密技术、脱敏处理等手段来保护您的个人信息。
  我们通过不断提升的技术手段加强安装在您设备端的软件的安全能力，以防止您的个人信息泄露。例如，我们为了安全传输，会在您的设备本地完成部分信息加密的工作；为了进行安全检查并预防诈骗、盗号、仿冒他人等不法行为，我们可能会分析利用登录IP地址、操作日志等数据，以便于采取安全措施或对用户进行安全提醒等。
  我们建立专门的管理制度、流程和组织以保障信息的安全。例如，我们严格限制访问信息的人员范围，要求其遵守保密义务，并进行安全审计。
  若发生或可能发生个人信息泄露、篡改、丢失等安全事件，我们将及时采取补救措施，依法向主管部门报告，并向您告知事件影响、防范及补救措施和联系方式；难以逐一告知时，通过公告等合理有效方式告知。
  

5.本政策的更新
我们可能根据服务变化或法律要求更新本政策。如果有任何更改，我们将在此页面上发布最新的隐私政策，并在适用法律要求时重新取得您的同意。如果对隐私政策进行了重大更改，我们将在变更生效前通过登录提示、推送通知、弹窗或其他适当形式向您展示变更内容。对于基于同意的处理活动，处理目的、方式或个人信息种类发生变化时，我们将在实施变更前重新取得您的同意，不以您继续使用服务视为同意。

6.账号的注册和注销
我们会为使用LightWAN服务的用户创建客户端账户。账户的注册和注销将由使用LightWAN的企业、组织的IT管理员或经授权的轻网技术支持人员负责操作，并确保在1-2个工作日内完成相关账户的注册或注销流程。

7.第三方SDK
为保障LightWAN稳定运行或者实现相关功能，我们会接入第三方提供的软件开发包（SDK）以实现相关目的。我们接入的部分第三方SDK可能会收集用户信息，用于向用户提供相关服务。
我们接入的SDK如下：

我们会对第三方提供的SDK进行严格的安全监测，以保护用户信息安全。

8.如何联系我们
如果您有任何隐私投诉或问题要联系我们，请点击此处与我们联系并提供详尽的说明，我们将尽力为您解决问题。

To Our Valued Customers
Last Updated: September 28, 2026    Effective Date: October 1, 2026

Beijing Qingwang Intelligent Technology Co., Ltd. (hereinafter referred to as "LightWAN", "we", "us", or "our") respects your privacy. Please read this Privacy Policy (hereinafter referred to as "this Policy") carefully to learn how we collect, use, and store your personal data during your interactions with us or use of our services, as well as what rights you have.

This Policy applies to individuals who actually use LightWAN services. Enterprises and organizations that purchase or manage the services (hereinafter referred to as "your organization") shall fulfill their notification obligations to their employees, partners, and visitors in accordance with law and obtain the relevant consent where required by law.

1. Personal Information We Collect
When you use LightWAN services, we collect the basic information necessary to provide the services. The data we collect includes:

• Device information includes your OS, device binding identifier (collectively referred to as "UDID" in this Policy; the specific identifier varies by operating system and is used for device binding), device name, device model and version, MAC address, and login IP address.
• App Information includes LightWAN version number, network access mode, type and status, network quality, operation logs (such as information about login, connection, disconnection, service failure, and change of password, etc.).
• Account information: To create and manage client accounts, we process the necessary account information provided by your organization or its authorized personnel.

The above information is collected for the purpose of ensuring your normal use of our services, maintaining normal service operation, improving and optimizing user experience, and protecting account security.
Your organization decides whether to enable the network auditing feature based on its network security and compliance management needs. Once the feature is enabled, we record the domain names and IP addresses of the target servers you access through LightWAN. Audit logs are accessible only to administrators authorized by your organization and our authorized technical support personnel entrusted to provide support. As the personal information handler for this activity, your organization is responsible for fulfilling its notification obligations and having a lawful basis for processing; we process the above information only in accordance with its instructions and the terms of the entrusted processing arrangement.
When you choose to copy and paste relevant text, we access your clipboard, but we do not store any other information in your clipboard.

2. How We Use Personal Information
Our purposes for using personal information include:

• Provide service statistics: We use your IP address and traffic information to provide service statistics.
• Network service optimization: Your network data will be used to optimize the quality of your network access and ensure network access security.
• Provide network auditing services: We use the domain names and IP addresses of the target servers you access to provide your organization with the network auditing services it has entrusted to us.

3. Disclosure of Personal Information
We will not publicly disclose your personal information without your explicit consent. However, we may disclose your personal data to law enforcement or other government agencies pursuant to applicable laws or in response to valid legal procedures. We may also disclose your data in other appropriate circumstances, for example, to enforce the User Service Agreement, when we believe disclosure of personal information is necessary to prevent physical harm or financial loss, or in connection with investigations of suspected or actual illegal activities.

4. How We Retain and Protect Your Personal Data

• Where Your Information Is Stored
  We comply with applicable laws and regulations to store users' personal information collected in China within Chinese territory. If it becomes necessary to provide personal information overseas in the future, we will, in accordance with law, inform you of the overseas recipient, the details of the processing, and how to exercise your rights, obtain your separate consent where required by law, and complete the applicable cross-border transfer procedures.
• How Long Your Personal Information Is Stored
  We will retain your personal information for the shortest period necessary to achieve the purposes stated in this Policy, unless otherwise provided by laws or administrative regulations. Retention settings must comply with applicable statutory retention requirements, and network security logs subject to statutory retention requirements must be retained for at least six months.
  Account information and device binding information are retained for as long as necessary to provide the corresponding services. The corresponding information is deleted immediately after the account is deleted or the device binding is removed. Audit data is not deleted when an account is deleted or a device binding is removed; it is deleted when the tenant is deleted, unless otherwise provided by laws or administrative regulations. When the retention period expires or deletion is required by law, we will delete or anonymize the relevant information; information processed on behalf of another party will be returned or deleted in accordance with law and the applicable agreement.
• Information Security
  We strive to protect users' information against loss, improper use, unauthorized access, or disclosure.
  We use a variety of security measures within reasonable security standards to ensure the security of your personal information. For example, we use encryption technologies, data desensitization, and other means to protect your personal information.
  We continually improve the technology used to enhance the security of the software installed on your device and prevent leakage of your personal information. For example, we encrypt certain information locally on your device for secure transmission. To carry out security checks and prevent illegal acts such as fraud, account theft, and impersonation, we may analyze and use data such as login IP addresses and operation logs to adopt security measures or send security reminders to users.
  We have set up dedicated management systems, processes, and organizational structures to ensure information security. For example, we strictly limit the personnel who may access the information, require them to comply with confidentiality obligations, and conduct security audits.
  If a security incident involving the leakage, alteration, or loss of personal information occurs or may occur, we will promptly take remedial measures, report the incident to the competent authorities in accordance with law, and inform you of its impact, preventive and remedial measures, and contact details. If individual notification is difficult, we will notify you through announcements or other reasonable and effective means.
  

5. Updates to This Policy
We may update this Policy in response to changes in our services or legal requirements. If any changes are made, we will publish the latest Privacy Policy on this page and obtain your consent again where required by applicable law. If major changes are made to this Policy, we will present the changes to you before they take effect through login prompts, push notifications, pop-up windows, or other appropriate means. For processing activities based on consent, if the purpose or method of processing or the types of personal information change, we will obtain your consent again before implementing the changes; we will not treat your continued use of the services as consent.

6. How We Register and Delete Your LightWAN Accounts
We create client accounts for users of LightWAN services. Account registration and deletion are handled by the IT administrators of the enterprises or organizations using LightWAN, or by authorized LightWAN technical support personnel. We ensure that the relevant account registration or deletion process is completed within 1-2 working days.

7. Third-Party SDK
To ensure the stable operation of LightWAN or enable related functions, we integrate software development kits (SDKs) provided by third parties for the relevant purposes. Some of the third-party SDKs we integrate may collect user information to provide related services to users.
The SDK we integrate is as follows:

We conduct strict security monitoring of third-party SDKs to protect user information security.

8. Contact Us
If you have any concerns about privacy at LightWAN, please click here to contact us with a thorough description, and we will try to resolve the issue for you.