PRIVACY POLICY

下载

聚焦模式

字号

最后更新时间： 2026-09-03 12:19:08

本文档由 AI 翻译并辅助审校

1. Introduction
This Privacy Policy Module ("Module") applies if you use Tencent iOA Zero Trust Security Management System ("Feature"). This Module is incorporated into the privacy policy ("Privacy Policy"). Terms used but not defined in this Module shall have the meaning given to them in the Privacy Policy. In the event of any conflict between the Privacy Policy and this Module, this Module shall apply to the extent of the inconsistency.
﻿
For further information on the types of data may be collected and processed under the Feature based on the relevant function, device, permissions and enterprise customer configuration, please see the iOA Data Processing Activities page.
2. Controllership
The controller of the personal data described in this Module is as specified in the Privacy Policy.
3. Personal data we collect
We may collect, receive, store and otherwise process the following personal data about you: 
Data Category
Details
Configuration Data
Configuration and settings including access service domain name, return and target source, rules and parameters, vulnerability classification, network and system attributes, service and security settings for the Features.
Diagnostic and Usage Data
Information of the software or hardware related to performance, users' activities, network connections, business traffic, attack statistics, tasks, scan, server, container, cluster, access, service and operations logs, any problem you experience, error reports, information about your requests and our responses, your settings, connectivity and updates.
Threat Intelligence Information
Data about potential and confirmed cyber security threats and security vulnerabilities such as security vulnerability description, attackers’ techniques, patterns, behaviors, and information used to carry out the attack (for example, phishing emails, malicious or target IP addresses, and compromised credentials or government-issued identifiers), data generated from the use of penetration testing tools, vulnerability match results, port match data.
Authentication and Security Credential Information
Information for user and role management including permission settings, database IP addresses, account number, users identifiers, database password.
User Contact
Information such as contact name, email address provided to us to contact you regarding your use of the Features including to sending you the penetration test report.
User Equipment Information
Data about device and system of the Feature users such as device model, operating system, device identified (e.g. UDID, Android ID).
To provide the Features to you, we may also process the above data through integration with our features as follows:
Cloud Firewall;
Cloud Log Service;
Cloud Object Storage;
Cloud Virtual Machine;
MySQL;
Tencent Cloud Observability Platform;
TencentDB for Redis;
TencentDB for MongoDB; 
TencentDB for MySQL; and
Virtual Private Cloud.
4. Purposes and Legal Basis
We will only use your personal information for the purposes and legal basis set out below:
Purpose
Legal Basis
Provide our Features. We use data including Configuration Data, Diagnostic and Usage Data, Threat Intelligence Information, Authentication and Security Credential Information, User Contact and User Equipment Information to operate and provide you with the Features. 
It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Maintain your configuration settings. We use data including Configuration Data to maintain your configuration settings of the Features and deliver statistics to help you manage the Features.
It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Troubleshooting. We use data including Configuration Data, Diagnostic and Usage Data, Threat Intelligence Information, Authentication and Security Credential Information, User Contact and User Equipment Information to monitor the Feature performance and quality, detect and identify errors, bugs or failures, analyze the reasons and troubleshoot such problems.
It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Billing. We use data including Diagnostic and Usage Data to facilitate our billing process.
It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Improve, optimise and develop our Features. We use data including Configuration Data, Diagnostic and Usage Data, Threat Intelligence Information, Authentication and Security Credential Information, User Contact, and User Equipment Information to analyse and understand our potential customers, and improve and optimise our Features.
It is in our legitimate interests to process this information to understand our potential customers and visiting trend of our Features’ websites, and to improve the Features.
5. How We Store and Share Personal Information
As specified in the Privacy Policy.
6. Data Retention
We will retain personal data in Section 3 for as long as it is necessary for the fulfilment of the purpose(s) as described in this Module and as required or authorized by applicable laws, to resolve disputes and to enforce our terms and conditions, other applicable terms of service, and our policies. The actual retention period can vary for different data categories, depending on the context of your interactions with us, your configuration set up (e.g., the retention periods you have set for the Feature) and your use of the Feature.
﻿
If you have any questions or require additional information relating to the above (including where you require further or more specific information on how long we store data subject personal data), please refer to our Contact Information section in our Privacy Policy.
﻿

帮助和支持

本页内容是否解决了您的问题？

您也可以联系销售或提交工单以寻求帮助。

填写满意度调查问卷，共创更好文档体验。

文档反馈

tencent cloud

腾讯 iOA 零信任安全管理系统 SaaS 版

PRIVACY POLICY

1. Introduction

2. Controllership

3. Personal data we collect

4. Purposes and Legal Basis

5. How We Store and Share Personal Information

6. Data Retention

帮助和支持

Data Category	Details
Configuration Data	Configuration and settings including access service domain name, return and target source, rules and parameters, vulnerability classification, network and system attributes, service and security settings for the Features.
Diagnostic and Usage Data	Information of the software or hardware related to performance, users' activities, network connections, business traffic, attack statistics, tasks, scan, server, container, cluster, access, service and operations logs, any problem you experience, error reports, information about your requests and our responses, your settings, connectivity and updates.
Threat Intelligence Information	Data about potential and confirmed cyber security threats and security vulnerabilities such as security vulnerability description, attackers’ techniques, patterns, behaviors, and information used to carry out the attack (for example, phishing emails, malicious or target IP addresses, and compromised credentials or government-issued identifiers), data generated from the use of penetration testing tools, vulnerability match results, port match data.
Authentication and Security Credential Information	Information for user and role management including permission settings, database IP addresses, account number, users identifiers, database password.
User Contact	Information such as contact name, email address provided to us to contact you regarding your use of the Features including to sending you the penetration test report.
User Equipment Information	Data about device and system of the Feature users such as device model, operating system, device identified (e.g. UDID, Android ID).

Purpose	Legal Basis
Provide our Features. We use data including Configuration Data, Diagnostic and Usage Data, Threat Intelligence Information, Authentication and Security Credential Information, User Contact and User Equipment Information to operate and provide you with the Features.	It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Maintain your configuration settings. We use data including Configuration Data to maintain your configuration settings of the Features and deliver statistics to help you manage the Features.	It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Troubleshooting. We use data including Configuration Data, Diagnostic and Usage Data, Threat Intelligence Information, Authentication and Security Credential Information, User Contact and User Equipment Information to monitor the Feature performance and quality, detect and identify errors, bugs or failures, analyze the reasons and troubleshoot such problems.	It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Billing. We use data including Diagnostic and Usage Data to facilitate our billing process.	It is necessary for us to process this information in order to perform our contract with you, or to take steps at your request prior to entering a contract with you.
Improve, optimise and develop our Features. We use data including Configuration Data, Diagnostic and Usage Data, Threat Intelligence Information, Authentication and Security Credential Information, User Contact, and User Equipment Information to analyse and understand our potential customers, and improve and optimise our Features.	It is in our legitimate interests to process this information to understand our potential customers and visiting trend of our Features’ websites, and to improve the Features.