SecNova.ai AI-SIEM Privacy Policy
1. Introduction
This Privacy Policy describes how data may be processed in connection with the SecNova.ai AI-SIEM platform (the "Service").
本隐私政策描述了与 SecNova.ai AI-SIEM 平台（"服务"）相关的数据处理方式。
This Policy applies to information processed by SecNova.ai when providing the Service to its customers.
本政策适用于 SecNova.ai 在向客户提供服务时处理的信息。
2. Role of SecNova.ai
SecNova.ai generally acts as a data processor in relation to Customer Data processed through the Service.
SecNova.ai 通常作为通过服务处理的客户数据的数据处理方。
Customers are responsible for determining the purposes and legal basis for processing such data, and for ensuring compliance with applicable laws.
客户负责确定处理此类数据的目的和法律依据，并确保遵守适用法律。
3. Categories of Data
The Service may process the following categories of data, as provided by or on behalf of Customers:
服务可能处理以下类别的数据，这些数据由客户或代表客户提供：
- Log and event data
- IP addresses and device identifiers
- System and security-related metadata
- Account and access-related information
- 日志和事件数据
- IP 地址和设备标识符
- 系统和安全相关元数据
- 账户和访问相关信息
SecNova.ai does not control the specific content of Customer Data.
SecNova.ai 不控制客户数据的具体内容。
4. How Data is Used
Customer Data may be processed as necessary to:
客户数据可能在必要时处理，用于：
- Operate, maintain, and provide the Service
- Analyze data and generate alerts or insights
- Support system performance and functionality
- 运营、维护和提供服务
- 分析数据并生成告警或洞察
- 支持系统性能和功能
5. Data Storage and Retention
- Customer Data may be stored and processed using third-party infrastructure providers, including Alibaba Cloud (international regions).
- Retention periods may vary depending on system configuration, service settings, and operational requirements.
- Customer Data is typically retained for a limited period (for example, approximately 90 days by default), unless otherwise configured by the Customer or required for operational purposes.
- SecNova.ai does not guarantee data retention, availability, or recoverability.
- 客户数据可能使用第三方基础设施提供商（包括阿里云国际区域）进行存储和处理。
- 保留期限可能因系统配置、服务设置和运营需求而有所不同。
- 客户数据通常保留有限时间（例如，默认约 90 天），除非客户另行配置或运营需要。
- SecNova.ai 不保证数据保留、可用性或可恢复性。
7. Cross-Border Processing
Customer Data may be transferred to and processed in jurisdictions outside the Customer's location.
客户数据可能被传输至客户所在地以外的司法管辖区并在那里处理。
Customers are responsible for ensuring that such transfers comply with applicable data protection laws.
客户负责确保此类传输符合适用的数据保护法律。
8. Data Security
SecNova.ai implements reasonable technical and organizational measures designed to protect data processed through the Service.
SecNova.ai 实施合理的技术和组织措施，旨在保护通过服务处理的数据。
However, no method of transmission or storage is completely secure, and SecNova.ai does not guarantee absolute security.
但是，没有任何传输或存储方法是完全安全的，SecNova.ai 不保证绝对安全。
9. Customer Responsibilities
Customers are responsible for:
客户负责：
- Ensuring lawful collection and use of data
- Providing required notices and obtaining necessary consents
- Managing access controls and permissions
- 确保合法收集和使用数据
- 提供必要通知并获得必要同意
- 管理访问控制和权限
Customers remain responsible for compliance with applicable data protection laws.
客户仍负责遵守适用的数据保护法律。
10. Data Subject Rights
To the extent applicable, requests relating to personal data should be directed to the relevant Customer, who controls such data.
在适用范围内，与个人数据相关的请求应提交给控制此类数据的相关客户。
SecNova.ai does not directly respond to data subject requests except as instructed by the Customer.
除非客户指示，SecNova.ai 不直接回应数据主体请求。
11. Regional Use
The Service may be used across multiple jurisdictions, including Indonesia, Malaysia, Singapore, Hong Kong, and the Philippines.
本服务可在多个司法管辖区使用，包括印度尼西亚、马来西亚、新加坡、香港和菲律宾。
Customers are responsible for ensuring that their use of the Service complies with applicable local data protection laws in these jurisdictions.
客户负责确保其使用本服务符合这些司法管辖区适用的当地数据保护法律。
12. Changes to this Policy
SecNova.ai may update this Privacy Policy from time to time.
SecNova.ai 可能会不时更新本隐私政策。
Continued use of the Service constitutes acceptance of the updated Policy.
继续使用本服务即表示接受更新后的政策。
13. Contact
For inquiries regarding this Privacy Policy, please contact:
如有关于本隐私政策的咨询，请联系：
service@secnova.ai