MaxVen Privacy Policy

MaxVen (hereinafter referred to as the "Platform" or "we," "us," or "our") is provided by AUTOWORLD LIMITED, a company incorporated in Hong Kong (hereinafter referred to as "AUTOWORLD"). This Privacy Policy describes how we collect, use, store, transfer, and protect your personal information in connection with your use of the MaxVen AI Global Marketing Platform (available at https://maxvenai.com/ and its associated services).

This Policy applies to all products and services provided by the Platform, including but not limited to advertising operations, social media management, influencer marketing, industry insights, and AIGC (Artificial Intelligence Generated Content) functional modules.

I. Information We Collect

1.1 Account Registration Information

When you or your enterprise establishes a Platform account pursuant to an annual framework service agreement, we collect the following information:

• Name, job title, and contact information (mobile phone number, email address)
• Enterprise name, business license, or commercial registration information
• Account login credentials (username and encrypted password)

1.2 Information Generated During Use of Services

In the course of your use of the Platform's services, we may collect the following information:

• Configuration information of advertising accounts and social media accounts that you create and manage on the Platform
• Customer data, marketing materials, and campaign data that you upload or import
• Platform operation logs (including login timestamps, feature usage records, and audit logs)
• Data obtained through your authorization when you connect the Platform to third-party advertising platforms (such as Google Ads, Meta Ads, TikTok Ads, etc.)

1.3 Publicly Available Social Media Data

To provide influencer marketing and social media management services, the Platform may collect publicly available information from third-party social media platforms such as Facebook, Instagram, X (formerly Twitter), YouTube, TikTok, and LinkedIn, including but not limited to:

• Publicly displayed names, usernames, and account identifiers
• Publicly posted content (posts, comments, engagement data, etc.)
• Publicly available profile information (profile pictures, biographies, follower counts, etc.)
• Publicly accessible engagement metrics and data analytics

We only collect and process information that is publicly accessible on the aforementioned platforms, in compliance with each platform's terms of service and data use policies.

1.4 Technical Information

We may automatically collect the following technical information:

• Device information (device type, operating system, browser type and version)
• Network information (IP address, Internet service provider)
• Information collected through cookies and similar technologies (see Section IV of this Policy for details)

II. How We Use the Information We Collect

2.1 Provision and Improvement of Services

• To provide, maintain, and optimize the various features and services of the Platform
• To process your service requests and customer support needs
• To improve product experience and system performance based on usage data
• To utilize AI technology for marketing data analysis, optimization recommendations, and automated processing

2.2 Account and Security Management

• To verify user identity and manage account access permissions
• To monitor and prevent security risks, fraudulent activities, and technical abuse
• To conduct operational audits and ensure data security

2.3 Business Operations

• To fulfill service obligations under the annual framework service agreement
• To send service notifications, system update announcements, and security alerts
• To send product updates and marketing communications, with your consent

2.4 Influencer Marketing and Social Media Analytics

• To generate influencer profile analyses, brand sentiment monitoring, and competitive analyses for clients
• To conduct aggregated analysis of publicly available social media data and provide industry insight reports
• To assist clients in evaluating the effectiveness of influencer marketing campaigns and optimizing advertising strategies

III. Legal Basis for Data Processing (GDPR)

In accordance with the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Performance of a Contract: Processing data as necessary to perform the annual framework service agreement
• Legitimate Interests: Processing data in pursuit of legitimate interests, such as providing influencer marketing analytics, improving services, and safeguarding network security
• Consent: Processing specific data with your explicit consent (e.g., sending marketing emails)
• Legal Obligation: Processing data to comply with applicable laws and regulations

With respect to publicly available data collected from social media platforms, we process such data on the basis of legitimate interests while respecting the rights of data subjects.

IV. Cookies and Similar Technologies

The Platform uses cookies and similar technologies to enhance user experience and service quality:

• Strictly Necessary Cookies: Essential for the proper functioning of the Platform and maintaining user login sessions
• Functionality Cookies: Remember your preference settings and provide a personalized experience
• Analytics Cookies: Help us understand how the Platform is used and improve our services

You may manage or decline cookies through your browser settings. However, please note that disabling certain cookies may affect the normal use of the Platform.

V. Data Storage and Cross-Border Transfers

5.1 Storage Location

The Platform's cloud servers are deployed in Germany. Your data (including personal data) will be transferred to and stored on servers located within the European Union.

5.2 Cross-Border Transfer Safeguards

The Platform provides services to global markets, and your data may be transferred between the following regions: the region where you are located, Hong Kong (AUTOWORLD's place of incorporation), and the European Union (Germany, where the servers are located). When conducting cross-border data transfers, we will:

• Implement appropriate safeguards pursuant to Article 46 of the GDPR (such as EU Standard Contractual Clauses (SCCs)) to ensure adequate protection when transferring data from the EU to other regions
• Comply with the relevant requirements of the Hong Kong Personal Data (Privacy) Ordinance (PDPO)
• Comply with the cross-border transfer provisions of applicable data protection laws in the country/region where you are located
• Implement security measures such as encryption and access controls for data in transit

5.3 Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected. The specific retention periods are as follows:

• Account Information: Retained during the term of the account and for 24 months after account termination
• Service Usage Data: Retained during the term of the account and for 12 months after account termination
• Publicly Available Social Media Data: Retained as necessary for business purposes; data subjects may request deletion at any time
• Data Required by Laws and Regulations: Retained for the period prescribed by applicable laws

VI. Data Sharing and Disclosure

6.1 No Sale of Data

We do not sell, trade, or rent your personally identifiable information to third parties.

6.2 Limited Sharing

We may share your information with third parties under the following circumstances:

• Service Providers: Sharing necessary data with providers of cloud computing, data storage, payment processing, and similar services in connection with the performance of the service agreement (subject to confidentiality obligations)
• Third-Party Platform Integration: Exchanging data with advertising platforms and social media platforms to provide Platform functionality, with your authorization
• Legal Requirements: Disclosing necessary information as required by laws and regulations, judicial proceedings, or governmental investigations
• Corporate Transactions: Potentially transferring relevant data in connection with a merger, acquisition, or asset transfer

6.3 Sub-Processors

We engage the following categories of sub-processors to provide services:

• Cloud service providers (servers hosted in Germany)
• Third-party advertising platform API services
• Social media platform data interface services

We will ensure that all sub-processors comply with data protection obligations no less stringent than those set forth in this Policy.

VII. Data Security

We implement the following measures to protect the security of your information:

• Sensitive user information (mobile phone numbers, email addresses, etc.) is encrypted at rest in our databases
• Data in transit is encrypted using HTTPS/TLS protocols
• Strict access controls and authentication mechanisms are enforced
• Regular security assessments and vulnerability remediation are conducted
• A data breach incident response plan is in place

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will, in accordance with Articles 33 and 34 of the GDPR, report the breach to the supervisory authority within 72 hours of becoming aware of it and, where necessary, notify affected users.

VIII. Your Rights

Under applicable laws and regulations, you are entitled to the following data rights:

8.1 Rights Under the GDPR

The Platform's servers are located within the European Union, and the GDPR applies to the Platform's processing of personal data. Regardless of your location, you are entitled to the following rights:

• Right of Access: To obtain a copy of the personal data we hold about you
• Right to Rectification: To request correction of inaccurate or incomplete personal data
• Right to Erasure (Right to Be Forgotten): To request deletion of your personal data under certain circumstances
• Right to Restriction of Processing: To request restriction of processing of your data under certain circumstances
• Right to Data Portability: To obtain your data in a structured, commonly used format
• Right to Object: To object to data processing based on legitimate interests
• Right to Withdraw Consent: To withdraw consent previously given at any time

8.2 Rights of Hong Kong Users (Under the PDPO)

• Right of access, right of correction, and right to request cessation of direct marketing

8.3 Other Jurisdictions

If the laws of your country/region grant you additional data protection rights, we likewise respect and safeguard such rights. The specific scope of rights shall be determined by reference to the applicable laws of your jurisdiction.

To exercise any of the above rights, please contact us through the contact information set forth in Section IX of this Policy. We will respond to your request within 30 days (which may be extended to 60 days in complex cases).

IX. Protection of Minors

The Platform's services are directed toward enterprise customers and are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will promptly delete such information.

X. Changes to This Policy

We reserve the right to revise this Privacy Policy at any time. Upon any changes, we will update the "Last Updated" date on the Platform page and notify you via Platform notification or email. For material changes, we will obtain your explicit consent where required. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the revised Policy.

XI. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy, please contact us through the following channels:

Service Providers:

• AUTOWORLD LIMITED (incorporated in Hong Kong; principal service provider and data controller)

Contact Information:

• Email: support@maxvenai.com

EU Data Protection Representative (where applicable):

• We will appoint an EU representative pursuant to Article 27 of the GDPR; specific details will be provided as necessary