AI-TokenHub

Console

Model Plaza

Playground

Product Documentation

Privacy Policy

Updated: June 30, 2026

Effective Date: July 7, 2026

Introduction

Welcome to the "Tianshu AI-TokenHub" platform! As the operator of the "Tianshu AI-TokenHub" platform, we are fully aware of the importance of personal information to you and will do our utmost to keep your personal information safe and secure. We are committed to maintaining your trust, adhering to the principles of lawfulness, legitimacy, necessity and good faith, and protecting your personal information. At the same time, we undertake to strictly comply with laws and regulations and to take corresponding security measures in accordance with mature industry security standards to protect your personal information.

To this end, we have formulated the "Tianshu AI-TokenHub" Privacy Policy (the "Policy") to help you fully understand how we collect, use, share, store and protect your personal information, and how you can manage your personal information, during your use of our products and services, so that you can make appropriate choices. Please be sure to read prudently and fully understand each clause of this Policy, especially those marked in bold or bold underline, and make sure you fully understand and agree before you start using it. If you do not agree to any clause of this Policy, you should immediately stop accessing or using our products. When you confirm this Policy by checking a box, clicking to confirm, agreeing to authorize or otherwise, you are deemed to have agreed to be bound by this Policy and to allow us to lawfully use and protect your personal information in accordance with this Policy.

Before you start using our products and services, please be sure to read and understand this Policy carefully first, and read with priority the clauses we have marked in bold or bold underline, making sure you fully understand and agree before you start using them. For the professional terms involved in this Policy, we try to explain them in plain and simple language for your ease of understanding.

If you have any questions, comments or suggestions about this Policy, you can contact us through the following contact information:

Company name: Sichuan Huakun Zhenyu Intelligent Technology Co., Ltd.

Tel: 400-855-0189

Email: help@mail.ai-tokenhub.com

Address: Floor 9, F6, AI Innovation Center, No. 19 Xincheng South 1st Road, High-tech Zone, Chengdu

This Policy will help you understand the following contents:

I. Definitions

II. Purposes and Scope of Collecting and Using Personal Information

III. How We Collect Your Personal Information

IV. How We Use Cookies

V. How We Entrust Processing, Share, Transfer and Publicly Disclose Personal Information

VI. How We Store Personal Information

VII. How We Protect Personal Information

VIII. Your Rights

IX. How We Handle Minors' Personal Information

X. How This Policy Is Updated

XI. How to Contact Us

I. Definitions

We: refers to Beijing Huakun Zhenyu Intelligent Technology Co., Ltd.

The Platform: refers to the "Tianshu AI-TokenHub" website (domain: https://ai-tokenhub.com).

User/You: refers to any natural person, legal person or other organization that uses the platform services. Users include individual users and enterprise users.

Personal information: refers to all kinds of information, recorded in electronic or any other form, relating to identified or identifiable natural persons, excluding information after anonymization.

Sensitive personal information: refers to personal information that, once leaked or illegally used, could easily cause harm to the dignity of a natural person or to the personal or property safety of a natural person, including biometric information, religious beliefs, specific identities, medical health, financial accounts, whereabouts and trajectories, as well as the personal information of minors under the age of fourteen (we will prominently mark the specific sensitive personal information in bold in this Privacy Policy).

Minors: refer to natural persons under the age of 18.

Third-party model service provider: refers to an entity that develops and provides specific artificial intelligence models and related technical services.

Platform services: refer to the third-party AI model API invocation services and related technical services provided by the platform to users over the Internet.

API services: refer to the application programming interface services provided by us through the platform, through which users can invoke the capabilities of AI models and obtain AI content generation related services.

Input information: refers to the content you transmit to the platform through the API or otherwise during your use of the services, and which the platform synchronously transmits to the AI model you choose, including text, images, documents, audio, video and code.

Output information: refers to the content output by the AI model you choose based on the input, specifically including text, images, documents, audio, video and code.

SDK (Software Development Kit): a software library that assists software development, usually including a collection of related binary files, documents, samples and tools.

Affiliates: refer to entities directly or indirectly controlled by us, entities that directly or indirectly control us, or entities directly or indirectly under the common control of the same entity as us. "Control" means the power, directly or indirectly, to direct or cause the direction of the management and policies of an entity, whether through ownership of voting securities, contracts or otherwise, or any relationship that in fact constitutes actual control.

II. Purposes and Scope of Collecting and Using Personal Information

To comply with national laws and regulations and to realize the business functions described below in this Policy, we will collect and use, under the principles of lawfulness, legitimacy, necessity and good faith, the following personal information that you proactively provide in the course of using our services and that is generated from your use of our services or needs to be collected from third parties.

(1) Basic business functions

1. Account registration/login

To complete account registration and/or login, and to fulfill the statutory real-name registration obligation, you need to provide us with your mobile phone number, password and SMS verification code. The foregoing is necessary information; if you do not provide it, you will not be able to complete registration and/or login and can only use the browsing service.

2. Recharge and fee management

When you make a recharge, we need to collect your payment information (order number, recharge time, recharge account, recharge amount, payment amount, credited amount, payment method, order status, invoicing status), and generate and display billing logs for you based on your recharge and usage, including request time, request ID, API Key, request feasibility, model, upstream, success status, time consumed, video information (whether the input contains video, video duration, output resolution, aspect ratio, frame rate), estimated fees, actual fees, pre-freeze status, settlement time, consumed tokens, settlement status, as well as balance information. The foregoing is necessary information for recharge and fee management; if you refuse to provide it, the platform will be unable to provide you with recharge and fee management services.

3. API services

When you use the API services provided by the platform, we need to collect your input information (including text, images, documents, audio, video and code) and output information (including text, images, documents, audio, video and code). The foregoing is necessary information for providing API services; if you refuse to provide it, the platform will be unable to provide you with API services.

(2) Extended business functions

To provide you with complete services, we will collect your specific personal information for specific purposes. If you refuse to provide it, we will be unable to provide you with the corresponding services, but this will not affect your use of the basic business functions of the platform.

1. Identity verification

When you use certain extended functions (such as issuing invoices), we may need to further verify your identity. To this end, we need to collect your real identity information (for individual users: name, ID card number; for enterprise users: enterprise name, enterprise certificates and information, and legal representative's name).

2. Two-factor authentication

To further protect the security of your account, where supported by the platform, you may choose to enable two-factor authentication. If you enable two-factor authentication, we need to collect your two-factor authentication method and key.

3. Organization management

When you choose to join one or more organizations, we need to collect the invitation code and your organization information.

4. Model management

To facilitate model management, we need to collect and display to you the model name, model ID, provider, tags, status and enabled status.

5. Token management

To facilitate token management, we need to collect and display to you token information, including token name, secret key, token ID, owner member ID, creation time, expiration time, total quota, allowed models, IP whitelist, status, last used time and rotation time.

6. Member management

To facilitate member management, we need to collect and display to you member name, mobile phone number, role, status, creation time and update time; if you are an administrator, we provide you with functions to adjust roles, adjust quotas, disable and remove members, and set member quotas. On the member quota setting page, we need to collect and display to you the current member, quota strategy and total quota.

7. Role management

To facilitate member management, we need to collect and display to you role name, role key, status and tenant permission information.

8. Asset management

To facilitate asset management, we need to collect your asset information, including asset name, asset preview, asset ID, owning asset group, asset type, status, and upload time.

It should be specially noted that when you use the Seedance 2.0 model (or other models with similar functions supported by the platform), if you upload face-related assets, you need to pass the real-person verification of the third-party model service provider (Beijing Volcano Engine Technology Co., Ltd. or other service providers of models with similar functions), and the face information subject needs to complete real-person verification and face information authorization by scanning a QR code. Where authorization of face information is completed by scanning a QR code, it is deemed that the face information subject has personally agreed to authorize providing his/her face information to you as your digital human asset, and agrees to the relevant terms of the third-party model service provider on the use of face information. You shall ensure that the face information subject knows and understands the foregoing terms and completes the authorization on a completely voluntary basis; otherwise, you shall bear all liabilities arising therefrom. You understand and acknowledge that the relevant real-person verification is provided by the third-party model service provider, and the platform only receives and displays the verification result to you.

9. Data dashboard

To facilitate your data analysis and data management, we need to collect and display to you through the "Data Dashboard" function information related to your account operation, including financial information (account balance, today's consumption), traffic information (today's number of requests, today's tokens), operating resources (today's average TTFT, today's cache hit rate), stability (today's average latency, today's success rate), and call trend analysis information (latency trends, overall call trends, stability trends, model call analysis, token consumption distribution, cost composition, error distribution, API Key call rankings).

10. Invoice issuance

To issue invoices to you, in accordance with relevant national tax laws and regulations, we need to collect your invoice issuance information (for individual users: name, ID card number, application time, invoice type, invoice amount, invoicing status, associated recharge records; for enterprise users: enterprise name, taxpayer identification number, receiving email, invoice type, invoice amount, invoicing status, associated recharge records) as well as invoice delivery information (for paper invoices: recipient name, address, mobile phone number). If you do not provide the foregoing information, we may be unable to assist you in completing invoice issuance or delivery.

11. Browsing and search

To help you quickly find suitable products or services, when you use the browsing and search functions, we will collect your browsing or search records, including browsing/search time, browsing/search content and browsing/search frequency. To improve search efficiency, some search records will be temporarily stored on your local device and displayed to you as search history.

Please understand that standalone search terms cannot identify your personal identity and do not constitute your personal information, so we have the right to make reasonable use of them for legitimate purposes.

12. Customer service and complaint handling

To provide you with customer service in a timely manner and respond to your questions, suggestions, opinions and complaints, and to protect user rights and prevent fraud, our staff may collect your name, ID card number and mobile phone number to verify your identity. When you need us to provide customer service and after-sales service related to your transaction information, in order to confirm the accuracy of the information you provide, our customer service staff will query your order information. Meanwhile, to ensure service quality, we may record your calls with our customer service staff, and record the requests, questions, suggestions, opinions and complaints you raise.

13. Security assurance

To accurately identify and prevent attacks and to protect the security of your account and transactions, during your use of the platform we will automatically collect some device information or software information, specifically including: the user's IP address, login method, model/version/storage space of the mobile device used and device identifiers (such as IDFA/IMEI/IMSI/OAID/Android ID/OPENUDID/GUID/ serial number), SIM card information, process information, device MAC address, network type/network status, information about the wireless network the device is connected to (such as SSID/BSSID/status/list/MAC), sensor information, MEID (only for CDMA mobile phones), and configuration information used to access the services.

14. Personalized analysis, display and push

To display and recommend asset content or service information you may be interested in, we will collect and use your browsing, search, transaction, sharing and favorite records when you access or use the platform, combined with service logs collected in accordance with the law and other information for which you have authorized us, to predict your preference characteristics through algorithm models. The personalized recommendation and retrieval algorithms will predict your preference characteristics based on models, match products, services or other information you may be interested in, and rank the assets or other information displayed to you. We will provide real-time feedback to the recommendation model based on your browsing behavior when using our products, and continuously adjust and optimize the recommendation results.

We may provide you, based on the foregoing information, with marketing activity notices, commercial electronic information or content and advertisements you may be interested in. If you do not wish to receive such information, you may opt out or turn off recommendations according to the methods we provide.

15. Legal compliance

To meet the requirements of laws and regulations such as the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law of the People's Republic of China and the E-Commerce Law of the People's Republic of China, we will collect your network access logs, transaction information, comment information and other information required by laws and regulations. Please note that the specific types of the foregoing information we collect are subject to the requirements of relevant laws and regulations, and this is to meet the mandatory requirements of laws and regulations and does not require your consent.

III. How We Collect Your Personal Information

We collect your personal information through the following channels:

1. Information you provide directly: we may collect the information you fill in when logging in, applying for or using our services, the information you provide when contacting us by phone or otherwise, as well as information related to you generated in the course of your use of our services.

2. Information we collect proactively: we will collect your device information and log information related to our services through automatic collection tools such as Cookies.

3. Information collected through third-party model service providers: we will collect your output information and verification result information through third-party model service providers, subject to the third-party model service provider corresponding to the AI model you choose.

4. Where permitted by laws and regulations, we may collect and use your personal information in the following circumstances without obtaining your authorization or consent:

(1) Related to our performance of obligations prescribed by laws and regulations;

(2) Directly related to national security or defense security;

(3) Directly related to public security, public health or major public interests;

(4) Necessary for concluding or performing a contract to which you are a party at your request;

(5) Directly related to criminal investigation, prosecution, trial and judgment enforcement;

(6) For the major legitimate interests such as life and property of you or other individuals, where it is difficult to obtain your consent;

(7) Collecting your personal information from legally and publicly disclosed information;

(8) Necessary for maintaining the safe and stable operation of the products or services provided, such as discovering and handling failures of products or services;

(9) Other circumstances prescribed by laws, regulations or national standards.

IV. How We Use Cookies

To ensure the normal operation of the product, we will store small data files called Cookies or similar files on your mobile device. Cookies usually contain identifiers, site names, and some numbers and characters. With the help of Cookies, the product can store your preference data. We will not use Cookies for any purpose other than those described in this Policy. You may manage or delete Cookies according to your own preferences. You can clear all Cookies saved on your mobile device, and most web browsers or mobile devices have settings to block Cookies. However, if you do so, you may not be able to experience certain convenient and secure features.

V. How We Entrust Processing, Share, Transfer and Publicly Disclose Personal Information

1. Entrusted processing

To serve you better, we may entrust affiliates within our group or third party professional service providers to process some personal information.

Please rest assured that we will sign written contracts or agreements with the entrusted parties, requiring them to commit to processing your personal information only within the agreed purposes and scope, and to safeguard the security of your personal information.

2. Sharing

We will not share your personal information with any company, organization or individual, except in the following circumstances:

(1) With your explicit consent obtained in advance;

(2) Where sharing is required by laws and regulations, or by mandatory requirements of government authorities or judicial organs;

(3) To realize certain business functions described in this Policy, we may share some of your personal information with specific partners, as shown in the table below:

For institutions with which we share personal information, we will sign strict confidentiality agreements/clauses with them, requiring them to process the shared personal information in accordance with our requirements and to take relevant confidentiality and security measures. Where sensitive personal information is involved, we require such institutions to protect personal information using desensitization and encryption technologies, so as to better protect your personal information.

3. Transfer

Except in the following circumstances, we will not transfer your personal information to any company, organization or individual:

(1) With your explicit consent obtained in advance;

(2) Where transfer is required by laws and regulations, or by mandatory requirements of government authorities or judicial organs;

(3) In case of mergers, divisions, dissolution, asset or business transfers, bankruptcy liquidation or similar transactions, where the transfer of your personal information is involved, we will require the new company, organization or individual holding your personal information to continue to be bound by this Policy; otherwise, we will require such company, organization or individual to obtain your authorization and consent again.

4. Public disclosure

Except in the following circumstances, we will not publicly disclose your personal information:

(1) With your explicit consent obtained in advance;

(2) Where disclosure is required by laws and regulations, or by mandatory requirements of government authorities or judicial organs.

On the premise of complying with laws and regulations, when we receive the above-mentioned request for disclosure, we will require that the corresponding legal documents, such as a subpoena or investigation letter, must be issued. We firmly believe that, for the information we are asked to provide, we should be as transparent as possible within the scope permitted by law. We will carefully review all requests to ensure that they have a legal basis and are limited to data that law enforcement departments are legally entitled to obtain for specific investigation purposes.

VI. How We Store Personal Information

1. Storage location and cross-border transfer

In principle, all your personal information will be stored within the People's Republic of China; under this Privacy Policy, your personal information does not involve cross-border transfer. If cross-border transfer becomes necessary in the future and your personal information indeed needs to be transmitted to overseas institutions, we will act in accordance with laws, administrative regulations and the provisions of relevant regulatory authorities, and will seek your consent and permission again before cross-border data transmission or perform anonymization. Meanwhile, we will ensure that the location and purpose of data transmission are described in detail in the privacy policy so that you can keep informed of the storage location of your personal information at any time, and, to ensure that your personal information is adequately protected, we will take security technical measures such as encrypted transmission for your personal information before cross-border data transfer.

2. Retention period

We will only retain your personal information within the period required by laws, regulations and regulatory provisions, and for the period necessary to achieve the purposes stated in this Policy (pursuant to the E-Commerce Law of the People's Republic of China, commodity and service information and transaction information shall be retained for no less than three years from the date of transaction completion). After your personal information exceeds our retention period, we will delete or anonymize your personal information.

VII. How We Protect Your Personal Information

1. We have used security protection measures that meet industry standards to protect the personal information you provide, to prevent your personal information from unauthorized access, use, modification, public disclosure, damage or loss. We will take all reasonable and feasible measures to protect your personal information, for example:

(1) Our network services have adopted encryption technology to ensure the security of user data during transmission;

(2) We adopt data access permission control and identity authentication technologies to protect personal information and prevent data from being used in violation of regulations;

(3) We adopt code security inspection and data access log analysis technologies to conduct personal information security audits;

(4) We have established a series of management systems to regulate the storage and use of personal information;

(5) We regularly hold information security and personal information protection training courses to strengthen employees' awareness of the importance of personal information protection;

(6) We sign confidentiality agreements or dedicated data protection clauses with partners who may have access to users' personal information, and require all personnel who may have access to your personal information to fulfill corresponding confidentiality and data protection obligations. If a third-party partner fails to fulfill its confidentiality and data protection obligations, it may be held legally liable by us and have its cooperation terminated by us.

2. We will take all reasonable and feasible measures to ensure that no irrelevant personal information is collected. We will only retain your personal information for the period required to achieve the purposes stated in this Policy, unless retention needs to be extended or is permitted by law.

3. The Internet is not an absolutely secure environment, and communication methods among users such as email, instant messaging and social software cannot be determined to be fully encrypted. We strongly recommend that you do not send personal information through such means. If it is truly necessary, please use complex passwords when using such tools and pay attention to protecting the security of your personal information. We will do our best to safeguard the security of your personal information. If our physical, technical or management safeguards are damaged, resulting in unauthorized access to, public disclosure, tampering with or destruction of information and damage to your legitimate rights and interests, we will fully cooperate to protect your rights and interests and bear the compensation liability we should bear according to law.

4. In the unfortunate event of a personal information security incident, we will, in accordance with the requirements of laws and regulations, promptly inform you of the basic situation and possible impact of the incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedies for you. We will inform you of the relevant circumstances of the incident in a timely manner by email, letter, telephone, push notification, etc.; where it is difficult to notify one by one, we will make an announcement in a reasonable and effective manner. At the same time, we will proactively report the handling of the personal information security incident to regulatory authorities as required.

VIII. Your Rights

In accordance with relevant national laws, regulations and standards, we ensure that you can exercise the following rights over your personal information:

1. Access your personal information

Except for exceptions prescribed by laws and regulations, you have the right to access your personal information through the "Account Information - Personal Settings" interface set up by the platform.

For other information you provide to us or that is generated in the course of your use of our products or services, as long as it does not require excessive effort on our part, we will provide it to you. You can submit a request by contacting customer service, and we will respond to your request within 15 days.

2. Correct your personal information

When you find that the personal information we process about you is incorrect or you need to correct such information, you can contact customer service through platform settings or by calling the customer service hotline for modification or correction.

3. Delete your personal information

In the following circumstances, you may request us to delete your personal information:

(1) If our processing of personal information violates mandatory provisions of laws and regulations;

(2) If we collect or use your personal information without obtaining your consent, except where consent is not required by law;

(3) If our processing of personal information violates our agreement with you;

(4) If you no longer use our products or services, or you have cancelled your account;

(5) If we no longer provide products or services to you.

After receiving your deletion request, we will carry out subsequent deletion processing in accordance with your requirements and relevant laws and regulations, and provide you with feedback on the results. If we decide to respond to your deletion request, we will also notify the entities that obtained your personal information from us and require them to delete it promptly, unless otherwise provided by laws and regulations, or unless these entities have obtained your separate authorization.

After you delete information from our services, we may not immediately delete the corresponding information from the backup system, but will delete such information when the backup is updated.

4. Change the scope of your authorization and consent

(1) Each business function requires some basic personal information to be completed. For the collection and use of additionally collected personal information, you may grant or withdraw your authorization and consent at any time.

After you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect personal information processing activities previously carried out based on your authorization.

(2) You can withdraw your previous authorization by turning off system permissions. However, please note that this withdrawal does not affect the personal information previously collected based on your authorization. Meanwhile, since some of your authorizations are necessary for us to realize certain business functions, withdrawing the corresponding authorization may affect your use of the corresponding business functions.

5. Cancel your account

When you confirm that you no longer use our services, meet the cancellation conditions and need to cancel your account, you can submit an account cancellation request to us through the "Account Cancellation" function set up by the platform or by contacting customer service.

After your account is cancelled, we will stop providing products or services to you, and delete or anonymize your personal information, unless otherwise provided by laws and regulations. Once the account is cancelled, the balance and services in the account will become invalid and cannot be recovered. Please consider carefully whether to cancel your account.

6. Obtain a copy of your personal information

You have the right to obtain a copy of your personal information, and you can submit a request by taking a screenshot of the account page or by calling the customer service hotline.

Where technically feasible and the data interface is matched, we can also directly transfer a copy of your personal information to a third party designated by you at your request.

7. Constrain automated decision-making by information systems

In certain business functions, we may make decisions solely based on non-human automatic decision-making mechanisms including information systems and algorithms. If these decisions significantly affect your legitimate rights and interests, you have the right to request an explanation from us, and we will also provide appropriate remedies.

8. Report and complain

If you find that your personal information may have been leaked, or our staff or partners have any illegal or irregular behavior in processing your personal information, you can report and complain to us by calling the customer service hotline.

9. Responding to your above requests

To ensure that the above requests are made by you in person and to protect the security of your personal information, we will verify your identity (where necessary, you may be required to provide a written request), and will process your request after identity verification passes.

We will verify and process your above requests within 15 days.

For your reasonable requests, we will in principle not charge fees, but for repeated requests beyond a reasonable scope, we will charge a certain cost fee as appropriate. For requests that are groundlessly repeated, require excessive technical means (for example, developing a new system or fundamentally changing current practices), bring risks to the legitimate rights and interests of others, or are highly impractical (for example, involving information stored on backup tapes), we may refuse them.

Please be aware that we will be unable to respond to your requests in the following circumstances:

(1) Related to our performance of obligations prescribed by laws and regulations;

(2) Directly related to national security or defense security;

(3) Directly related to public security, public health or major public interests;

(4) Directly related to criminal investigation, prosecution, judicial investigation, trial and judgment enforcement;

(5) Where there is sufficient evidence of your subjective malice or abuse of rights;

(6) For the major legitimate interests such as life and property of you or other individuals, where it is difficult to obtain your consent;

(7) Where responding to your request would cause serious damage to the legitimate rights and interests of you or other individuals or organizations;

(8) Involving trade secrets.

10. Protection of deceased users' personal information

If a user of the platform passes away, his/her close relatives may, for their own lawful and legitimate rights and interests, exercise rights such as access, copying, correction and deletion over the deceased user's relevant personal information through the contact information provided in Article XI "How to Contact Us" of this Policy, unless the deceased user made other arrangements before death.

You understand and confirm that, in order to fully protect the personal information rights and interests of deceased users, close relatives applying to exercise the rights under this article need to submit, in accordance with the process designated by the platform, the deceased user's identity documents, death-related documents, the applicant's identity documents and proof of kinship, and clearly specify the types and purposes of the rights to be exercised.

IX. How We Handle Minors' Personal Information

We attach great importance to the protection of minors' personal information. Our products and services are in principle oriented to adults, and we do not target minors as customers. We will not intentionally collect any personal information of minors, unless certain information you proactively provide inevitably contains information of minors.

If we discover that we have collected any personal information of minors without obtaining verifiable consent from their guardians in advance, we will try to delete such information as soon as possible.

X. How This Policy Is Updated

Our privacy policy may be updated.

When this Policy is updated, we will not reduce your rights under this Policy without your explicit consent. We will publish any changes made to this Policy on this page.

For major changes, we will also provide more prominent notices (such as platform announcements, push notifications, SMS or emails), and obtain your explicit consent again when you log in for the first time after this Policy is updated. If, after this Policy is updated and we have notified you, you click agree or proceed to the next step, it means that you have fully read, understood and accepted the revised Policy.

Major changes referred to in this Policy include but are not limited to:

1. Major changes in our service model, such as the types, purposes and methods of processing personal information;

2. Major changes in our ownership structure or organizational structure, such as changes of owners caused by business adjustments, mergers and acquisitions, bankruptcy, etc.;

3. Changes in the main parties involved in the sharing, transfer or public disclosure of personal information;

4. Major changes in your rights to participate in the processing of personal information and the way you exercise them;

5. Changes in the responsible department, contact information and complaint channels for personal information security;

6. When the personal information security impact assessment report indicates a high risk.

We will also archive the previous versions of this Policy for your review.

XI. How to Contact Us

1. If you have any questions, comments or suggestions about this Policy, you can contact us in the following ways:

(1) Call the customer service hotline: 400-855-0189

(2) Email: help@mail.ai-tokenhub.com

(3) Mailing address: Floor 9, F6, AI Innovation Center, No. 19 Xincheng South 1st Road, High-tech Zone, Chengdu, Attn: Tianshu AI-TokenHub

Our customer service department will, together with the personal information protection department, reply within 15 days and assist in resolving your issues.

2. If you are not satisfied with our reply, especially if our personal information processing has damaged your legitimate rights and interests, you can also seek solutions through the following external channels: apply for mediation through consumer associations or other lawfully established mediation organizations, file a lawsuit with the people's court at the domicile of Sichuan Huakun Zhenyu Intelligent Technology Co., Ltd., or complain to or report to regulatory authorities such as cyberspace, market regulation and public security departments.