We respect and protect the personal privacy of everyone who uses the Platform. Please read this Policy carefully before you register or sign in, and tick the box to agree to it before using the Platform.
What information we collect
Information you provide to us
- Account information: mobile number, email address, password (stored encrypted), and real-name identity information (only where necessary).
- Company information: company name, organizational structure, and your role in relation to the company (if you register on behalf of a law firm or business).
- Business data: contracts, evidence, case materials, collaboration messages, meeting records and other content you create or upload on the Platform.
Information collected automatically
- Device and log information: device model, operating system, browser type, IP address, access times, and how you navigate features.
- Cookies and similar technologies: used to keep you signed in, remember your preferences and record referral sources; not used for advertising or cross-site tracking. See the Cookie Policy.
Sensitive personal information
The following is sensitive personal information; if leaked, it could harm your dignity or your personal or property safety:
- identity document information needed for e-signature identity verification: processed only when you start verification or signing, and only to complete them;
- health, financial, location, minors' and similar information that may appear in case or evidence materials you upload: processed only to provide the service you requested.
Where your materials contain other people's personal information, please make sure you have their lawful authorization or another lawful basis.
How we use this information
- To provide, maintain and improve the Platform's core features (the seven modules: contracts, e-signing, evidence, transactions, collaboration, organization and AI).
- To verify account identity, protect security, and detect unusual activity.
- To offer personalized suggestions based on your usage (such as document template recommendations and risk-alert preferences).
- To communicate with you (notices of service changes, security alerts, and necessary business contact).
- To fulfill obligations under applicable laws and regulations.
How we store and protect it
Stored in China. All of your data is stored within mainland China in compliant data centers, and is processed in accordance with the Data Security Law of the People's Republic of China, the Personal Information Protection Law and other applicable laws and regulations.
Encryption and isolation. Data in transit is encrypted with HTTPS/TLS; sensitive credentials such as mailbox authorization codes are stored encrypted; data belonging to different companies and law firms is kept apart by application-level permission checks and database access controls.
Retention. We keep your personal information only for as long as needed for the purposes of processing: account information is kept while your account exists and anonymized after you delete it; business data you create under a company or law firm account belongs to that organization and is kept with its account; network logs are kept for at least six months as required by law. Where laws or regulations provide otherwise, they prevail.
Not used to train public models. Your business data will not be used to train any third-party or public AI model. The AI capabilities on the Platform are based on pre-trained, compliant domestic Chinese models, which use your own data only for retrieval and personalized inference.
When we share information with third parties
We will not sell your personal information. Data may be shared in the following circumstances:
- With your express consent — for example, if you authorize the use of a third-party e-signature service (such as Fadada or eSignBao) to sign an agreement, the relevant documents will be sent to the signing service provider to complete the process.
- When required by law — when a government authority requests data through legal procedures, we will assist as required by law and, where permitted, make reasonable efforts to notify you.
- Service providers — necessary providers such as cloud computing, SMS, email and identity verification services receive only the minimum information required to perform that specific service, and we require them to protect your information in accordance with law and our agreements.
Third-party service providers
To provide the features below, we share with the corresponding provider only the information necessary for that feature:
- Alibaba Cloud Model Studio / Qwen
Purpose: AI chat and document generation, OCR text recognition, speech transcription and image recognition
Information shared: the questions and conversations you send to the AI, the materials you provide for document generation, and the files, images and recordings you upload for recognition or transcription - Alibaba Cloud Information Query Service (IQS)
Purpose: web search of public pages (such as cases published by courts and procuratorates, and news reports)
Information shared: search queries generated from your questions - Alibaba Cloud Object Storage Service (OSS)
Purpose: storing files you upload and files generated by the Platform
Information shared: contracts, evidence and other files you upload, and documents generated by the Platform - Alibaba Cloud SMS
Purpose: sending sign-in verification codes and service notification text messages
Information shared: mobile number and message content - Alibaba Cloud DirectMail
Purpose: sending sign-in verification codes and service notification emails
Information shared: email address and email content - Tencent Meeting
Purpose: scheduling and holding video meetings on the collaboration platform
Information shared: meeting subject, time and participant names - Easemob Instant Messaging
Purpose: instant messaging on the collaboration platform
Information shared: account identifier, nickname, and the chat messages and files you send - Tianyancha
Purpose: looking up company registration and risk information
Information shared: the company name or unified social credit code you look up - Fadada
Purpose: e-signing, identity verification and signing evidence preservation
Information shared: documents to be signed, signer names, mobile numbers and the identity information required for identity verification - Kingsoft Office WPS
Purpose: Viewing and editing documents online
Information shared: the content of documents you open for editing, and the names and avatars of the people editing - 360 Fangcloud
Purpose: Password-free sign-in with a Fangcloud account (only if you choose that sign-in method)
Information shared: a sign-in token; Fangcloud returns your name, email, phone number and enterprise identifier to us - The mailbox provider you connect yourself (such as QQ Mail, NetEase Mail, Tencent Exmail or Alibaba Mail)
Purpose: Sending email from your mailbox (only after you connect it)
Information shared: the recipients, subject, body and attachments of the email
Your rights
- Right of access: you may view all information in your account at any time.
- Right to rectification: you may correct inaccurate information yourself or contact us for help.
- Copy and transfer: you may contact us for a copy of your personal information, or ask us to transfer it to a processor you designate.
- Right to erasure: when you close your account, we will delete or anonymize your personal information as required by law (some data may need to be retained for a certain period by law).
- Account deletion: you can delete your account yourself under Settings → Security.
- Withdrawal of consent: you may withdraw consent you previously gave for specific processing at any time. Withdrawal does not affect processing already carried out on the basis of your consent; after withdrawal we may be unable to provide features that depend on that information.
- Complaints and reports: if you believe our processing infringes your rights, you may contact privacy@baolvshi.com or file a complaint with the regulatory authorities.
We will respond within 15 working days of receiving your request.
Protection of minors
The Platform is intended mainly for professionals (lawyers and in-house counsel) and adult users with full civil capacity. We do not knowingly provide services to minors under the age of 14, and we do not knowingly collect their information. If we discover that we have collected such information inadvertently, we will delete it as soon as possible.
Changes to this Policy
This Policy may be updated as our business develops or as laws and regulations change. For material changes, we will post a notice on the Platform and show you the updated version the next time you sign in; please tick the box to agree again before continuing to use the Platform.
Contact us
If you have any questions about this Policy or how your personal information is handled, please contact:
- Personal information handler: Hangzhou Fashu Intelligent Technology Co., Ltd.
- Email: privacy@baolvshi.com
- General inquiries: hello@baolvshi.com