MeCust Privacy Policy

I. Introduction and Scope

上海壹零四景科技有限公司 (hereinafter "we", "us" or "our") is the developer and operator of the "MeCust" membership management system. We understand the importance of your personal information and will, in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China and other applicable laws and regulations, adopt appropriate security protection measures and use our best efforts to protect the security of your personal information.

The Services support the following types of accounts: store operator and store staff accounts (registered and used by the individual or by the store to which they belong), and customer membership information entered by stores. Our role differs between these two scenarios:

• Store account information: we act as the personal information processor and process such information in accordance with this Policy.
• Customer membership information: the store is the personal information processor, and we act only as an entrusted processor, processing such information in accordance with the store's instructions (that is, the purposes and methods of the store's use of the Services). The store shall obtain the customer's consent for the collection and entry of the customer's personal information. If you are a customer of a store, please contact that store first to exercise your rights; we will cooperate in the processing within the scope of the store's instructions.

II. Information We Collect

We follow the principle of "minimum necessity" and collect only the information necessary to provide the functions of the Services. You may choose not to provide certain non-essential information, but this may affect the use of the corresponding functions.

1. Registration and Login Information

• Mobile phone number: used for account registration, SMS verification code login, password recovery and account security verification.
• Password: stored only in irreversible encrypted form; we cannot recover your original password.
• WeChat authorization information: when you log in with WeChat, we obtain the account identifier (openid/unionid) returned by WeChat and the avatar and nickname you authorize, in order to identify your account, display your profile information and link different login methods of the same user.

2. Store Business Information

• Business information such as store name, store address, contact person and contact details, and industry (entered by the store owner or store staff).
• Store staff account information (name/appellation, mobile phone number, role permissions), used to assign system permissions to store staff.

3. Customer Membership Information (Entered by Stores)

• Basic information of the customer such as appellation/name, mobile phone number and date of birth (optional).
• Membership card information and transaction records: membership card type, discount benefits, card balance, top-up/consumption/refund/adjustment transaction records, store visit and follow-up records, and remarks entered by the store.

4. Transaction and Payment Information

• Order number, order amount, product (service item or membership card) information, payment channel transaction number, payment status and payment time.
• We do not collect or store your bank card number, bank card password, payment password, full ID card number or other payment-sensitive information; the payment process is completed by third-party payment institutions with the requisite legal qualifications.

5. Device and Log Information

• Device model, operating system and version, browser type, IP address, access time, operation records and error logs, used to ensure the secure and stable operation of the Services, troubleshoot faults and prevent risks.

6. System Permission Requests

When you use the relevant functions, we may request the following system permissions. If you refuse authorization, only the corresponding function will be affected, and the use of other functions will not be affected:

III. How We Use Information

1. Providing the core functions of the Services: membership card management, cashier and bookkeeping, balance and transaction queries, business reports and follow-up reminders.
2. Account identification and security verification: registration and login, password recovery, login protection and detection of abnormal operations.
3. Message notifications: sending SMS or in-app notifications to store operators in connection with accounts, orders, subscription expiry and similar matters.
4. Business data statistics: generating statistical reports for stores on revenue, membership growth, repeat purchases and similar metrics (statistical results are displayed within the scope of a single store).
5. Customer service and after-sales support: responding to your enquiries, complaints and requests for resolution.
6. Compliance and security: fulfilling obligations under laws and regulations, cooperating with regulatory requirements, and preventing fraud, attacks and other unlawful or non-compliant conduct.

If we intend to use information for other purposes not stated in this Policy, or to change the original purpose of use, we will notify you in a prominent manner and obtain your consent again.

IV. Local Storage and Similar Technologies

In order to maintain your login status and remember your interface preferences (such as theme and language), the Services use local storage (LocalStorage and similar technologies) on your device or browser to save necessary identifiers. This information is not used for advertising tracking. You may delete this content by clearing your browser or application data, but you will need to log in again afterwards.

V. Storage of Information

• Storage location: your personal information is stored on servers located within the territory of the People's Republic of China; we will not transfer your personal information outside the territory.
• Storage period: account information is retained for the duration of the account; store business and transaction information is retained for the period during which the store uses the Services. After you cancel your account or a store ceases to use the Services, we will delete or anonymize the relevant information; where laws or regulations provide otherwise (for example, transaction information that must be retained under the E-Commerce Law of the People's Republic of China) or where retention is necessary to resolve disputes, we will continue to retain the information for the statutory period and use it only for such purposes.
• Handling upon expiry: after the above periods expire, we will delete or anonymize the information.

VI. Sharing, Transfer and Public Disclosure of Information

We do not sell your personal information. We share necessary information only in the following circumstances:

1. Where necessary to provide the functions of the Services: engaging third-party service providers for login, payment, SMS notifications and similar steps, providing only the minimal information necessary to provide the relevant function.
2. As required by law or by competent authorities: providing information in accordance with laws and regulations, or upon requests lawfully made by administrative or judicial authorities.
3. Business changes: in the event of a merger, division, acquisition or similar transaction, we will inform you of the recipient and require it to remain bound by this Policy.

The third-party services currently integrated into the Services are as follows (subject to the actual integrations):

VII. How We Protect Information

• HTTPS encrypted transmission is used to prevent data from being stolen or tampered with during transmission.
• Sensitive fields such as passwords are stored in irreversible encrypted form; database access is controlled on a least-privilege basis.
• System permissions are divided by role (store owner / store staff / operations), limiting the scope of data viewing and operations, and key operations are logged.
• Data is backed up regularly for fault recovery.

Although we have taken the above measures, the internet environment is not absolutely secure. If a personal information security incident occurs, we will promptly activate our emergency response plan in accordance with the requirements of laws and regulations, and notify you of the impact you may suffer and the remedial measures we have taken by way of push notifications, announcements or other means.

VIII. Your Rights

1. Access and copy: you may view your account profile and store data in the application or console; if you need a copy, you may contact us.
2. Correction and supplementation: if you find that information is inaccurate, you may amend it yourself on the page, or contact us for assistance in correcting it.
3. Deletion: under statutory circumstances, you may request the deletion of your personal information.
4. Withdrawal of consent: you may withdraw the relevant authorization by turning off system permissions, unbinding WeChat or other means; withdrawal does not affect processing already carried out on the basis of consent before the withdrawal.
5. Account cancellation: you may apply for cancellation under "My - Account Security", or contact us to do so. After cancellation, the account can no longer be logged into, and the relevant information will be handled in accordance with Section V of this Policy.
6. Complaints and reports: if you believe that your personal information rights and interests have been infringed, you may send an email to support@104j.com, and we will reply within 15 working days of receipt.

If you are a customer member of a store, your information is entered and managed by that store. For requests concerning access, correction or deletion, please contact that store first; you may also contact us, and after verification we will forward the request and cooperate with the store in handling it.

IX. Protection of Minors

The Services are primarily intended for operators and store staff and are not intended for children under the age of 14. If a store needs to enter information of a minor (including a child) in the course of its business, the store shall obtain the consent of the minor's guardian. If we discover that we have collected a child's personal information without first obtaining the guardian's consent, we will make every effort to delete it as soon as possible.

X. Changes to This Policy

We may update this Policy in response to changes in laws and regulations or business adjustments. After an update, we will publish the latest version on this page and update the "Last Updated" date; in the case of material changes concerning processing purposes, types of information, sharing recipients or similar matters, we will notify you in a prominent manner such as an in-app pop-up or announcement and, where necessary, obtain your consent again. We recommend that you review this page periodically.

XI. Contact Us

If you have any questions, comments or complaints about this Policy or the protection of personal information, you may contact us in the following ways:

• Operator: 上海壹零四景科技有限公司
• Contact email: support@104j.com
• Official website: www.mecust.com