This is a draft for comment and is not yet in effect. If this English text and the Chinese version differ, the Chinese version prevails.
Beijing NEXWING Media Co., Ltd. ("we") provides RENTALWING (the "Service"). This policy explains what personal information we process to run the Service, why, how we protect it, and your rights.
1. What we process
About account users
- Account details: name, phone number, password (stored only as a hash), optional profile photo — to sign you in and show who did what.
- Sign-in and device information: sign-in time, IP address, browser type and a device description — to keep accounts secure, e.g. asking for an SMS code on a new device and limiting simultaneous sign-ins.
- Activity log: who did what and when (such as creating an order or taking a payment) — so the store can review and we can troubleshoot.
- Location (optional): when crew clock in or take photos, with your permission — to record where. Declining doesn't stop you clocking in.
- Push subscriptions: the push address your browser provides when you turn on notifications — to send job and due-date alerts.
Entered by stores
Stores enter their customers' names and phone numbers, orders, payment records, and photos taken at check-out, check-in, damage and expenses. The store decides what to collect and why; we store and process this on the store's instructions and for no other purpose.
2. How we use it
- To provide and maintain the Service: sign-in, calculating order totals, syncing between users, backups and restores.
- To keep it secure: spotting unusual sign-ins and preventing account misuse.
- To improve it: usage statistics with personal details removed.
We do not sell personal information or use it to show you unrelated advertising.
3. Service providers
- Cloud servers and object storage: system data, photos and backups.
- SMS provider (Alibaba Cloud): sign-in codes; processes your phone number.
- Map service (Tianditu): turns clock-in coordinates into an address.
- Browser push services (from your browser's maker): the notifications you turn on.
4. Storage and security
- Data is stored on servers in the People's Republic of China.
- All traffic uses HTTPS; passwords and codes are stored only as hashes; each store's data is kept separate.
- Daily backups, kept in cloud storage separate from the servers.
- Retention: account and store data for as long as the Service is in use; server logs for 90 days; after the Service ends, we hand the data to the store, keep it for at least 30 days, then delete it.
5. Your rights
- Access and correction: view and change your name, photo, phone number and password under "Me".
- Export: stores can ask us for a full copy of their business data (Excel) at any time and receive it within 3 business days; client statements can be exported from the system directly.
- Deletion: staff accounts can be disabled by the owner; stores can ask us to close their account, handled within 15 working days of verification.
- Withdrawing permission: turn off location or notifications in your browser or phone settings at any time.
Customers of a store who want to see, correct or delete their information should contact that store; we will help the store respond.
6. Children
The Service is for stores and their staff and is not intended for anyone under 18.
7. Changes
We may update this policy and will announce changes in the app and on this site; significant changes to purposes or scope will be notified separately, with consent sought where required.
8. Contact
Questions about this policy or your personal information? Reach us through "Book a demo" on this site; we reply within 15 working days.