Yinso AI Privacy Policy

Thank you for using Yinso AI (yinso.ai). Yinso AI is operated by Wylynk (HK) Limited ("we," "us," or "our").

We recognize the importance of personal information and creative freedom, and we are committed to protecting your personal information and privacy.

Yinso AI is currently at an early stage of product development. We may provide both free and paid services, such as Pro membership and credit purchases, and may integrate third-party services where necessary to support core functionality, including payment services, cloud services, and algorithm services. We process your personal information in accordance with the principles of lawfulness, fairness, necessity, and good faith.

This Privacy Policy (the "Policy") explains how we collect, use, store, protect, and otherwise process your personal information when you use Yinso AI products and services, including our website and other features (collectively, the "Service"). It also explains the rights available to you. Please read this Policy carefully before using the Service, especially any terms highlighted in bold. By using the Service, you agree that we may process your personal information in accordance with this Policy.

1. How We Collect and Use Information

We collect and use your personal information only as necessary to provide the Service, and in accordance with the principles of lawfulness, fairness, necessity, and good faith.

1.1 Account Registration and Identity Verification

Purpose of processing:

To create and manage your Yinso AI account, verify your identity, and provide the Service to you.

Types of information:

When you register for an account, we may collect your email address or mobile phone number so that you can receive a verification code and complete registration. If you register through an invitation code, we may record the invitation relationship for operational statistics, distribution of promotional benefits, and risk control.

Necessity:

This information is necessary to create your account, provide the Service, and comply with applicable legal and regulatory requirements.

1.2 Core AI Music Creation Features

Purpose of processing:

To receive and process your creative instructions and generate music works for you using artificial intelligence technology.

Types of information:

To provide this core functionality, we need to collect and process the content you submit, including text prompts and similar input.

Necessity:

Your input is the direct basis for generating AI outputs and is necessary for us to provide the core Service. Except as required to provide the current Service to you, conduct necessary safety review, evaluate quality, and optimize our systems, we will not use your input content or generated content for model training. If we plan in the future to use such content for model training, research, or other purposes beyond the scope described above, we will provide a separate notice and obtain your separate consent as required by law.

Special notice:

Please do not include or upload another person's personal information in your creative instructions or uploaded content, including names, contact details, identification numbers, addresses, precise location data, facial images, voice data, or similar information. If you need to use content involving another person's personal information, you must ensure that you have obtained lawful authorization or consent from the relevant person and that the purpose and scope of use are lawful, proper, and necessary. Otherwise, you will be responsible for any disputes or liabilities arising from such use, and we may take necessary action in accordance with applicable laws, regulations, and platform rules, including blocking, deleting, or restricting the relevant content.

1.3 Service Operations and Security

Purpose of processing:

To keep the Service secure, stable, and efficient, and to support product optimization and troubleshooting.

Types of information:

We may collect device information, such as device model and operating system version; network information, such as IP address and network type; and service logs, such as operation records and error information.

Necessity:

This information is necessary to maintain basic service security and diagnose technical issues.

1.4 Access Restrictions for Certain Countries and Regions

Purpose of processing:

Due to differences in compliance risks and regulatory environments in certain jurisdictions, we restrict access from higher-risk regions.

Types of information:

IP address.

Processing logic:

When you attempt to access or use the Service, the system automatically identifies your IP address. If the system detects that your access originates from the United States, Denmark, or Germany, it will automatically block access and display the message: "Not available in your region at this time." In such restricted regions, the platform will not further collect or process other personal information from you.

1.5 Payment and Order Management

Purpose of processing:

When you purchase credits, subscribe to or renew a Pro membership, redeem a code, or use other paid or entitlement-based services, we need to create orders, process payments, reconcile transactions, deliver benefits, handle disputes, and comply with applicable legal and regulatory obligations.

Types of information:

Order information:

order number or transaction number, purchased package or product, amount, payment time, payment status, refund status, and similar information.

Information returned by payment channels:

payment result notifications and related identifiers necessary for payment verification and reconciliation, such as the payment channel transaction number and channel-side user identifier, depending on the payment integration actually used.

Necessity:

This processing is necessary to enter into and perform a contract with you, and may also be necessary for us to comply with legal obligations.

1.6 Circumstances Where Authorization or Consent Is Not Required

In accordance with applicable laws and regulations, we may collect and use your personal information without separately obtaining your authorization or consent in the following circumstances:

• Where necessary for us to perform legal obligations or statutory duties.
• Where necessary to enter into or perform a contract to which you are a party.
• Where necessary to respond to public health emergencies or, in an emergency, to protect the life, health, or property safety of individuals.
• Where personal information is processed within a reasonable scope for news reporting, public opinion supervision, or similar activities carried out in the public interest.
• Where personal information that you have disclosed yourself, or that has otherwise been lawfully disclosed, is processed within a reasonable scope.
• Other circumstances provided by laws or administrative regulations.

Where any of the above circumstances applies, we will continue to follow the principle of minimum necessity and will make reasonable efforts to ensure that the processing does not improperly affect your lawful rights and interests.

1.7 Avatar Uploads, Cover Images, and Image Selection

When you set an avatar or upload or replace a cover image for a work, we may process the image information that you actively select or upload. We will not access your local upload channel without your authorization. If you refuse to provide such information, you will not be able to use the corresponding image selection or upload feature, but this will not affect your use of other basic features.

If you set your avatar, cover image, or work to public, the relevant information may be displayed to other users on your profile page, work detail pages, community pages, or similar locations.

1.8 Web Analytics and Security Risk Control

To protect account security, identify abnormal devices, analyze website traffic, diagnose anomalies, maintain service stability, and optimize product experience, we may, after you agree to this Privacy Policy, collect and use basic network characteristic information such as browser type, browser language settings, network type, network status, system operation logs, and crash logs.

The information above will be used only for statistical analysis, cybersecurity, risk control, and experience optimization, and will not be used for purposes unrelated to the Service.

2. Storage and Protection of Information

2.1 Storage Location

Personal information collected and generated in the course of our operations will be stored on servers of trusted cloud service providers located in [ ].

2.2 Retention Period

We retain your personal information only for the shortest period necessary to achieve the purposes described in this Policy, and for any period required by applicable laws and regulations. Unless otherwise required by law, we generally determine retention periods as follows:

• Account information, such as email address, mobile phone number, and login credentials: up to three years from the date you last used the Service. After that period, if you have not logged in again, we will delete or anonymize the relevant information.
• Created works and related log information: To provide work management, cloud storage, dispute handling, and compliance support, we may retain such information while your account remains active or for the period you choose to retain it. You may also request deletion or anonymization of such information by deleting works or closing your account, except where otherwise required by law or necessary to handle disputes. Cloud storage and archiving rules under different packages or features are subject to the product page or relevant rules.
• Subject to the Terms of Service and the Credits and Membership Rules, for generated works and related files, we will not actively delete the relevant data during the protection period or while the data is archived. We may, however, restrict access, download, or usage capabilities. Access may be restored after you renew or satisfy the applicable rule conditions.
• Order and transaction information: For contract performance, reconciliation, tax, and dispute handling purposes, we will retain necessary transaction information as required by applicable laws and regulations. The retention of order and transaction information does not change the nature of credits and membership services as virtual usage entitlements rather than stored-value funds.
• Other information collected for a one-time service purpose will be deleted or anonymized promptly after the purpose has been achieved or the retention period has expired.

You may also request early deletion of specific information or account closure as described in the "Your Rights" section of this Policy.

2.3 Security Measures

We have adopted industry-standard technical and organizational measures appropriate to our current business scale to protect your personal information from unauthorized access, use, disclosure, damage, or loss. These measures include:

• Using encryption protocols such as HTTPS/TLS during data transmission.
• Applying access controls, de-identification, encryption, or similar measures for data storage.
• Establishing tiered data access controls, approving and authorizing access based on the minimum necessary principle, and regularly reviewing access permissions.
• Recording and retaining logs of important operations and security events, and conducting security audits.
• Conducting regular security risk assessments and necessary security testing or hardening.
• Providing regular information security and privacy protection training to employees and requiring confidentiality undertakings.

2.4 Special Notice: Data Risks During Service Operation

We have adopted backup and disaster recovery measures. However, due to the inherent uncertainty of internet services and technical environments, a very small risk of data loss remains. We strongly recommend that you independently back up important works and related content to avoid losses caused by unforeseeable technical failures.

3. Sharing, Transfer, and Public Disclosure of Information

We attach great importance to the security of your personal information and take a strict and cautious approach to sharing, transferring, and publicly disclosing personal information. Unless otherwise provided in this Policy or required by applicable laws and regulations, we will not provide your personal information to any third party.

3.1 No Sharing as a General Rule

We will not share or transfer your personal information with any company, organization, or individual unless:

• We have obtained your explicit separate consent.
• Disclosure is required by mandatory laws or regulations.
• The processing is necessary to enter into or perform a contract to which you are a party, and we have taken necessary measures to protect your personal information, such as engaging third-party service providers as processors to provide payment, cloud, or similar capabilities.

3.2 Processing by Service Providers

To provide the Service, we may engage trusted third-party service providers to process information on our behalf, such as cloud service providers, overseas algorithm service providers, overseas payment gateways, and SMS or email service providers. We will conduct necessary security assessments and enter into strict data processing agreements with them, requiring them to process information in accordance with this Policy and applicable confidentiality and security measures.

Details of relevant third-party service providers are set out in Appendix 2 to this Policy or in the third-party list displayed in the product.

3.3 Disclosure Required by Law

We may publicly disclose your personal information only where permitted or required by laws and regulations, or where necessary to respond to a public health emergency or protect your or another person's life, property, or safety.

3.4 Transfer

As a general rule, we will not transfer your personal information to any company, organization, or individual unless:

• We have provided you with prior clear notice and obtained your separate consent.
• A transfer of personal information is required due to a merger, division, acquisition, asset transfer, bankruptcy liquidation, or similar transaction.

If any of the above occurs, we will require the new holder of the personal information to continue to be bound by this Policy. If there is a material change to the processing purpose, processing method, or type of personal information after the transfer, we will provide a separate notice and, where necessary, obtain your authorization or consent again.

4. Your Rights

You may manage your personal information in the following ways:

4.1 Access and Correction

You may access and modify the account information you provided through the "Profile" page in the product.

4.2 Deletion and Account Closure

You may contact us to request deletion of specific information or closure of your account. Account closure is irreversible. Once your account is closed, you will not be able to retrieve any content or information in the account, except for information that must be retained under laws and regulations or that is necessary to handle disputes or perform legal obligations, which may continue to be retained for the statutory period.

4.3 Responding to Your Requests

To protect security, you may need to submit a written request or otherwise verify your identity. We will respond and assist you with exporting works or data within 30 days after receiving your request, or within any shorter mandatory period required by applicable law. We generally do not charge fees for reasonable requests.

4.4 Withdrawal of Consent

Where we process personal information based on your consent, you have the right to withdraw that consent at any time. You may disable the relevant feature through the product settings page or submit a withdrawal request through the contact method described in "Contact Us." Please understand that after you withdraw consent, we will no longer process the corresponding personal information, but this will not affect the validity of processing activities carried out before withdrawal based on your authorization. Some services may become unavailable or limited as a result.

4.5 Obtaining a Copy of Personal Information

To the extent permitted by applicable laws and regulations, you have the right to request a copy of the personal information we process based on your use of the Service. After verifying your identity, we will provide it to you by data export, screenshot, or another reasonable method, provided that it is technically feasible and does not adversely affect the lawful rights and interests of others.

5. Cookies and Similar Technologies

To ensure the normal operation of the product, provide a more convenient access experience, and improve our services, we may use cookies or similar technologies on your device.

5.1 How We May Use Cookies

We may use cookies for the following functions or services:

• Remembering your login status or basic settings so you do not need to re-enter them frequently.
• Protecting service security, such as identity verification and preventing fraud or abuse.
• Measuring and analyzing traffic and understanding product usage so that we can improve the product.

5.2 How to Manage Cookies

You may clear or disable cookies through your browser or device settings. Different browsers manage cookies differently, so please refer to the relevant help documentation. Please note that disabling cookies may affect your ability to use some cookie-dependent features or may otherwise affect your service experience.

At present, we do not use information in cookies to deliver targeted advertising to you. If this use changes in the future, we will provide a prominent separate notice and, where necessary, obtain your authorization or consent again.

6. Protection of Minors

Yinso AI is primarily intended for adult creators. If you are under 18, please read this Policy carefully under the guidance of your guardian and use the Service only after obtaining your guardian's explicit consent.

We especially remind you that if you are a child under 14, your guardian should read this Policy on your behalf, and you should register for or use the Service through your guardian or under your guardian's supervision only after your guardian has given explicit consent. We do not actively target children as the primary audience of our business, and we will not knowingly request personal information unrelated to the Service from children under 14.

If we discover that we have collected a child's personal information without first obtaining verifiable guardian consent, we will take steps to delete or anonymize the information as soon as possible. If you are the guardian of a child and have questions about the child's personal information or need to exercise relevant rights, please contact us using the methods listed in the "Contact Us" section of this Policy.

7. Updates to This Policy

We may update this Policy from time to time as our product evolves and applicable laws and regulations change.

Notice:

We will notify you of the updated Policy through reasonable methods, such as platform announcements, in-app messages, or email.

Continued use means acceptance:

If you continue to use Yinso AI after this Policy is updated, you will be deemed to have read, understood, and accepted the updated Policy.

Material changes:

If this Policy undergoes material changes, including material changes to processing purposes, processing methods, types of personal information processed, or recipients of shared or entrusted processing, we will provide a prominent notice and, where necessary, obtain your consent again.

8. Contact Us

If you have any questions, comments, suggestions, or requests regarding this Policy or our processing of your personal information, please contact us at:

Email: yinshume888@gmail.com

Please include "Privacy Policy Inquiry" in the email subject line.