Privacy Policy — Parsian Tasvir

I. Introduction

Please read this policy carefully. We fully understand the importance of personal information and strictly comply with applicable data protection laws and regulations, including the Personal Information Protection Law of the People's Republic of China, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and other valid privacy laws in force in the countries/regions where we provide services. When you access or use the services of Parsian Tasvir (the "App"), it means that you agree to the provisions of this policy on how we collect, use, store, transmit and protect your personal information (including sensitive personal information such as facial information). If you do not agree with any content of this Privacy Policy, please immediately stop using our products and services.

If you are under the age of 14, you may only use our services or provide information to us after reading this policy accompanied by a legal guardian and obtaining the explicit consent of the legal guardian.

Key points of this Privacy Policy are as follows:

We explain the types of personal information collected and their purposes in different functional scenarios one by one, and clearly inform you of the collection purposes, scope and methods;
When you use functions involving sensitive personal information such as facial recognition, we will obtain your explicit consent separately. Refusal to provide such information will only prevent you from using the relevant specific functions and will not affect your normal use of other functions;
We will not actively share or transfer your personal information to third parties outside the App. If it is really necessary, we will obtain your explicit consent and conduct a strict risk assessment;
We will not actively obtain your personal information from third parties. If it is necessary to obtain information indirectly, we will clearly inform you of its source, type and scope of use, and obtain your explicit consent if it exceeds the original authorized scope;
In accordance with the laws and regulations of different regions, you may exercise the rights to access, correct and delete personal information, withdraw authorization, cancel your account, and file complaints.

Index:

Personal Information We Collect
How We Use Your Information
Cookies and Similar Technologies
Mobile System Permissions
Data Collection and Storage
Your Rights and How to Exercise Them
How We Protect Your Personal Information
Personal Information of Minors
Sharing, Transfer and Public Disclosure
Cross-border Transmission
Push Service and Information Sharing Rules
Updates to This Policy
Scope of Application
How to Contact Us

II. Personal Information We Collect

When providing services, we collect, store and use the following information according to the functional scenarios you use. All information collection follows the principle of "minimum necessity":

Functional Scenario	Types of Collected Information	Purposes of Collection	Authorization Method
Account registration / login	Mobile phone number or email address, verification code, username, password	Identity verification and account management	Explicit consent during registration
Device binding (QR code / temporary code)	Camera permission, device identification code, binding time	Associate the device with your account and enable device management	System permission authorization (revocable)
Facial recognition	Facial images / feature information (sensitive personal information), verification records	Identity verification for doorbell access and visitor recognition	Separate pop-up for explicit consent (revocable in the App settings)
Call and message push	Call records, message reception status, notification permission	Enable two-way calls between device and user, and push service messages	Default authorization when using the service (revocable via system settings)
Family / co-owner management	Basic information (name, relationship), device sharing permissions	Manage shared access to the device	Voluntarily submitted and agreed by you
Record management	Call records, snapshots, operation logs, facial usage records	Service traceability, troubleshooting, function optimization	Automatically collected during use (records can be deleted in the App)
Core service operation	Device information (model, operating system, device identifier), IP address, usage region	Ensure service stability and network adaptation	Default authorization when using the service

III. How We Use Your Information

We use the collected information for the following purposes:

To provide, process, maintain, improve and develop our products and services, such as account management, device binding, access verification and customer support;
To send service notifications, including important information such as device fault reminders, account security reminders and policy update notices;
For compliance risk control and security protection, such as identifying abnormal logins and preventing device misuse;
To provide necessary information to affiliated companies, third parties or other users when providing specific services as requested by you;
To store and maintain information related to you for business operations or to perform legal obligations;
For other purposes with your consent.

Special Commitments

Facial information is used only for doorbell access identity verification and visitor recognition, and not for any other scenario;
We will not display content or advertisements to you based on sensitive categories (e.g., race, religion, sexual orientation or health status);
We will never sell your personal information to any third party, and only use your information within the scope permitted by law.

Please understand that our functions and services are continuously updated. If a new function or service needs to collect information not covered above, we will separately inform you of the content, scope and purpose of collection and obtain your consent.

IV. Cookies and Similar Technologies

A Cookie is a small file containing a string of characters that is sent to your device when you access the relevant services. When you use the services again, the Cookie enables the system to identify your device and usage preferences. You may reset or reject Cookies through your device browser or system settings, but some service functions may not work properly as a result.

We mainly use Cookies and similar technologies to ensure the safe and efficient operation of services (such as authentication and security checks), to help you obtain a more convenient access experience (such as one-click login), to collect log files (IP address, browser type, operating system, etc.), and to analyze mobile usage. We will not associate automatically collected log data with other personal information.

V. Mobile System Permissions

To provide you with complete services, we will apply for the corresponding system permissions according to the functions you use. We promise that all permission applications are necessary for realizing the corresponding services, and we apply for authorization in a clear manner. You may turn off the relevant permissions in the system settings at any time. Turning off a permission will only affect the use of the corresponding function and will not affect other services.

Camera permission: used only for scanning the QR code to bind the device and for facial recognition enrollment/verification. We will not take irrelevant photos or videos.
Video recording permission: used only for dynamic facial collection and verification of the facial recognition function, invoked only when you actively trigger the function, without background recording.
Photo/album reading permission: used only for the function of selecting photos to improve your profile. We will not read other photos in your album without permission.
Microphone permission: used only for voice communication during calls. It is invoked only when you actively initiate or answer a call, and call voice data is temporarily cached and cleared after the call ends.
Notification permission: used only for pushing important service messages such as device call reminders and account security notices. You may turn it off at any time.

All permissions are optional. You may choose whether to enable them according to your needs. We will not refuse to provide basic services because you refuse non-core permissions.

VI. Data Collection and Storage

(I) Principles of Data Collection

We always abide by the principles of "legality, legitimacy, necessity and good faith" and the principle of "minimum necessity". We will not collect redundant data irrelevant to the services, and for sensitive personal information (such as facial information), we will collect it only after obtaining your separate explicit consent.

(II) Rules for Data Storage

All data is stored in compliant cloud servers and encrypted local storage areas, with multiple protective measures to prevent unauthorized access;
Sensitive personal information such as facial information is stored in an independent encrypted storage module, physically isolated from other non-sensitive information, and encrypted with the AES-256 algorithm;
Some non-sensitive data (such as device binding records) may be temporarily stored locally on your device, encrypted and readable only by the App;
The storage period follows the principle of "necessary shortest duration". When the storage period expires, you cancel your account, or you no longer use the services, we will delete or irreversibly anonymize all your personal data within 30 working days;
We conduct regular encrypted backups of core data, solely to prevent data loss and ensure service stability.

VII. Your Rights and How to Exercise Them

In accordance with applicable laws and regulations, you are entitled to the following rights:

Right to access and correct: you may inquire about and correct your personal information in the App, and change your account password;
Right to delete: you may delete personal-related records such as device call records and snapshots in the App, and apply to delete facial information (after deletion, the facial recognition function will no longer be available);
Right to withdraw authorization: you may withdraw permissions such as camera, notification and facial information usage through the system settings or the App's privacy settings. Withdrawing core permissions may affect the corresponding functions, but will not affect other functions;
Right to cancel account: you may apply to cancel your account in the App. After cancellation, we will stop processing your information and delete or irreversibly anonymize your personal information within 30 days;
Other statutory rights: you may also exercise data rights (such as data portability and the right to object) in accordance with the privacy laws of your country/region;
Right to complain: if you believe that our information processing infringes your rights, you may file a complaint through the methods listed in "How to Contact Us", and we will reply within 15 working days.

VIII. How We Protect Your Personal Information

Technical security measures: we adopt AES-256 encryption, HTTPS encrypted transmission, de-identification or anonymization, network firewalls, intrusion detection and access control. Facial information is separately encrypted, managed separately from other personal information, and transmitted with end-to-end encryption;
Institutional guarantee: we establish a data classification and grading system, sign confidentiality and data processing agreements with all personnel who must access personal information, and clarify confidentiality obligations;
Security system and audit: we conduct regular security audits and risk assessments, strictly restrict the scope of personnel accessing information, and conduct full-process audits of access behavior;
Emergency response: in case of a data breach (especially facial information leakage), we will notify you and the relevant regulatory authorities in accordance with applicable law in a timely manner;
Account security: we store passwords in encrypted form, provide multiple account security functions, and regularly back up data.

Please understand that due to technical limitations, no method of transmission or storage can guarantee 100% security. We strongly recommend that you set complex passwords, change them regularly, do not disclose your password or verification code to others, and log out in a timely manner after using a public terminal.

IX. Personal Information of Minors

We strictly abide by the laws and regulations on the protection of minors' information. If you are a minor under the age of 14, you need to read this Privacy Policy accompanied by a legal guardian and use our services only with the explicit consent of the legal guardian. For the personal information of minors collected with the consent of legal guardians, we will only use or disclose it within the scope permitted by law. The legal guardian of a minor may contact us through the methods listed in "How to Contact Us" to inquire, correct or delete the personal information of the minor.

X. Sharing, Transfer and Public Disclosure

(I) Sharing

We will not sell any personal information to third parties. We share personal information only for legitimate, necessary, specific and clear purposes, including: sharing with your explicit consent or voluntary choice; sharing necessary information with third-party service providers (such as cloud server providers and push service providers), with whom we sign data processing and confidentiality agreements and require them to comply with applicable data protection laws; and sharing under other statutory circumstances (such as legal proceedings or the lawful requirements of public authorities).

(II) Transfer

We will not transfer your personal information except: with your explicit consent; or in the event of a company transaction such as merger, division, acquisition or asset transfer, where the transferee undertakes to abide by this policy and only uses the information for the original service purposes, and we notify you in advance.

(III) Public Disclosure

We will only publicly disclose your personal information with your explicit consent, or based on legal or reasonable grounds, including the requirements of laws, regulations, legal procedures, litigation or competent government authorities.

XI. Cross-border Transmission

Your personal information (including facial information) will be mainly stored on servers in the region where the service is deployed. To provide cross-border services, some data may be transmitted to compliant servers in other regions. The transmission process strictly complies with applicable data protection laws and regulations, and we will separately inform you of the purpose of data outbound and the recipient and obtain your authorized consent. Cross-border stored data is subject to the same storage period rules as described in this policy.

XII. Push Service and Information Sharing Rules

To ensure that you receive service notifications in a timely manner (such as device call reminders and account security notices), we use push services provided by third parties, whose information processing behavior complies with their own privacy policies. The information we collect through the push service only includes device identifiers, network type and operating system version, used only to ensure the stability of the push service, and will not be associated with your personal identity information.

You may actively share device-related information (such as a device binding QR code or call record summary) with designated recipients through the sharing function in the App. Such sharing is initiated by you voluntarily; we only provide technical support and do not actively collect or retain the shared content. Any risks caused by your active sharing shall be borne by you and the recipient.

XIII. Updates to This Policy

We may modify and update this Privacy Policy from time to time according to changes in laws and regulations or business adjustments. After an update, we will notify you in advance through pop-ups or announcements in the App, and you may query the latest version through the App. For major changes, we will inform you in a more prominent way and, where appropriate, re-obtain your explicit consent. Your continued use of our services means that you agree to the updated policy.

XIV. Scope of Application

This Privacy Policy applies to all services provided by Parsian Tasvir, including all functions in the App and related supporting services;
This policy does not apply to products or services provided by third parties linked in the App. The information processing of such services is regulated by their own privacy policies.

XV. How to Contact Us

If you have any questions, opinions or suggestions about this policy, or need to exercise the rights related to personal information or file complaints, you may contact us through the support channels provided in the App.

Under normal circumstances, we will reply to your consultation or process your application within 15 working days. If you are not satisfied with the reply result, you may further file a complaint with the relevant regulatory authorities of your country/region.