Privacy Policy
Version 1, published 2026-10-12
KunYun Privacy Policy
This is the first version drafted by the platform. Items in 【】 will be completed after legal review.
【Operator Legal Name】 ("we" or "us") takes the protection of your personal information seriously. This policy explains how we collect, use, store, share and protect your personal information when you use KunYun (the "Platform"), and the rights you have.
1. Information we collect
| Category | Information | Purpose |
|---|---|---|
| Account information | Email address, phone number, password (only a salted one-way hash is stored), interface language | Sign-up and sign-in, account security, notifications |
| Third-party sign-in | Your Google user ID and email address when you sign in with Google | Linking and signing in to your account |
| Identity verification | Name or company name, document type and number, document photos, contact person and phone number | Verifying your identity as required by law and enabling services that require it |
| Service data | Accelerated domains and their configuration, certificates, buckets and their objects, access keys | Providing the services you use |
| Logs and statistics | Access logs of your domains and buckets (including visitor IP addresses, request URLs and user agents), traffic and request statistics | Statistics and log downloads, usage metering, troubleshooting, security |
| Device and activity records | IP address and browser information at sign-up and sign-in, and your activities in the console | Account security, activity logs, auditing |
We do not collect personal information unrelated to the services.
2. Cookies and similar technologies
We only use cookies that are necessary to provide the services: the sign-in session cookie and the cross-site request forgery (CSRF) protection cookie. Your interface language preference is stored locally in your browser. We do not use advertising or cross-site tracking cookies.
3. How we use your information
We use your information only to:
- provide, maintain and improve the services;
- authenticate you and keep your account secure, including preventing fraud, abuse and attacks;
- perform identity verification, ICP filing checks and content compliance as required by law and the competent authorities;
- send you service notifications, such as verification codes, domain status changes and certificate expiry reminders;
- meter usage and settle fees.
4. Sharing and processing by service providers
4.1 We do not sell your personal information.
4.2 To provide the services, we engage the following types of service providers to process some of your information on our instructions and under appropriate security standards:
- CDN, object storage and DNS providers: your domains, configuration, content and access logs;
- certificate authorities: your domains, when certificates are issued;
- ICP filing lookup providers: your domains, when their filing status is checked;
- email delivery providers: your email address and the email content, when we send you email;
- third-party sign-in providers: the information needed for sign-in, when you choose to use them.
4.3 We may disclose information when required by law or by the competent authorities, or when necessary to protect the legitimate rights of us, our users or the public.
5. Storage locations and cross-border transfers
The Platform's servers are located in 【Country or Region of the Servers】, and the infrastructure we use is located in mainland China, Hong Kong (China), Singapore, the United States and other countries and regions. Your information may be stored and processed in these places. Where personal information is transferred across borders, we fulfil the obligations required by applicable law.
6. Retention
- Account and identity verification information: for as long as your account exists, and for any period required by law;
- access logs: 7 days; statistics at 5-minute granularity: 35 days; daily and monthly usage summaries: kept long term for reconciliation;
- console activity logs: 180 days; security audit logs: 1 year.
Information past its retention period is deleted or anonymized.
7. Security
We take reasonable technical and organizational measures to protect your information: HTTPS across the Platform; passwords stored only as salted one-way hashes; document numbers, secret keys and certificate private keys encrypted at rest; identity document photos kept in private storage, viewable only by authorized reviewers, with every view recorded in the audit log; and internal access granted on a least-privilege basis. If a personal information security incident occurs, we will notify you and take remedial measures as required by law.
8. Your rights
You can view and correct your account information in the console. You can also contact us to access, copy, correct or delete your personal information, withdraw your consent, or close your account. We will handle your request within the period required by law after verifying your identity. After your account is closed, we delete or anonymize your personal information unless otherwise required by law.
9. Minors
The Platform serves businesses and adults. Persons under 18 should not register for or use the Platform.
10. Updates to this policy
We may update this policy. Updated versions are published as new versions and announced through the console, in-app messages or email.
11. Contact us
If you have any questions about this policy or your personal information, contact us through the channels listed on the "Contact us" page of the console, or by email at 【Contact Email】.