Privacy Policy

Last Updated: 07.01.2026

Introduction

This Privacy Policy ("Policy") describes how Beijing Yanfa Technology Co., Ltd., a company organized under the laws of the People's Republic of China with its registered address in Beijing, China ("Company", "Dela AI", "we", "our", or "us"), collects, uses, stores, shares, transfers, and protects your personal information when you access or use our websites, mobile applications, and related services under the product name "Dela AI" (collectively, the "Services").

For the purposes of this Policy, "personal information" means any information relating to an identified or identifiable natural person, recorded electronically or otherwise, in accordance with the Personal Information Protection Law of the People's Republic of China ("PIPL") and other applicable data protection laws.

The Company acts as the personal information processor (as defined under PIPL) with respect to personal information collected through the Services. By using our Services, you acknowledge that you have read and understood this Policy.

In some cases, we may process personal information on behalf of a third-party organization pursuant to an agreement with that organization. In such cases, the terms of that agreement will govern the processing and you should contact that third-party organization directly for questions about how your personal information is handled. This Policy does not apply to any third-party websites, applications, or services that you may access through links in our Services. We encourage you to review the privacy policies of any such third parties before using them.

Please read this Policy carefully. If you do not agree with any part of this Policy, you should not use our Services.

1. Personal Information We Collect

We collect personal information in the following ways:

1.1 Information You Provide Directly

You may provide personal information to us when you:

  • Register or log in to your account (such as email address, username, password);
  • Use the Services (such as text inputs, prompts, uploaded files, or other content you submit through the Services);
  • Create or update your user profile;
  • Contact our customer support through the support ticket system on the Site;
  • Participate in surveys, sponsored events, sweepstakes, or subscribe to newsletters;
  • Post comments or feedback (if applicable);
  • Refer other users (if applicable).

Payments and subscriptions are processed by third-party payment providers. We do not collect or store your full payment card details; we only receive limited transaction information (such as order status and last four digits of the card, where provided) to complete the transaction and manage your account.

1.2 Information Collected Automatically

When you use the Services, we may automatically collect the following categories of information:

  • Device and technical information: IP address, unique device identifiers, operating system, browser type, device model, and language settings.
  • Usage information: pages viewed, features used, time and duration of use, referring and exit URLs, error logs, and interaction patterns.
  • Location information: approximate geolocation derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission on your device.
  • Cookies and similar technologies: as described in Section 10.

1.3 Information From Other Sources

Subject to applicable law, we may receive personal information about you from:

  • Third-party login providers: if you choose to log in using a third-party account (such as a supported social login), we may receive your basic profile information from that provider in accordance with your authorization.
  • Business partners: partners who assist us with authentication, fraud prevention, or analytics.

1.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information (as defined under PIPL, including but not limited to biometric identification, religious beliefs, specific identity, medical health, financial account, and location tracking of minors under 14). If any content you voluntarily submit through the Services contains such information, you are solely responsible for that submission, and we will handle it in accordance with this Policy and applicable law. Where we need to process sensitive personal information for a specific purpose, we will obtain your separate consent as required by PIPL.

2. How We Use Personal Information

2.1 Purposes of Processing

We use your personal information for the following purposes:

  • To provide, maintain, and improve the Services and process your requests;
  • To create and manage your account, including authentication and communications about your account;
  • To process payments and deliver receipts, invoices, and transaction records;
  • To send you service-related notifications (such as security alerts, terms updates, and refund confirmations);
  • To send marketing communications, where permitted by law and subject to your consent (which you may withdraw at any time);
  • To analyze usage patterns and improve product features, security, and performance;
  • To detect, prevent, and respond to fraud, abuse, security incidents, violations of our Terms of Service, or unlawful activities;
  • To comply with legal obligations under applicable laws and regulations;
  • To establish, exercise, or defend legal claims.

2.2 Legal Basis for Processing

We process your personal information based on one or more of the following legal bases under PIPL Article 13:

  • Your consent — where you have voluntarily and clearly consented to a specific processing purpose;
  • Contract performance — where processing is necessary to enter into or perform a contract with you (such as delivering the Services you have purchased);
  • Legal obligation — where we are required to process personal information to comply with a statutory duty;
  • Public interest / emergency — where necessary to respond to a public health emergency or protect the life, health, or property of a natural person;
  • Reasonable processing of publicly disclosed information — as permitted under PIPL Article 13(6);
  • Other circumstances provided by laws and administrative regulations.

Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

2.3 Aggregated and Anonymized Data

We may aggregate or anonymize personal information so that it can no longer be used to identify you. Once information is anonymized in accordance with applicable law, it is no longer considered personal information and this Policy no longer applies to it.

3. How We Share, Entrust, and Disclose Personal Information

3.1 Sharing With Third Parties

We do not sell your personal information. We only share your personal information with third parties in the following limited circumstances, and where required by PIPL, we will obtain your separate consent before sharing:

  • With your consent: where you have specifically consented to sharing (for example, when you connect your account to a third-party integration).
  • Corporate transactions: in the event of a merger, acquisition, reorganization, sale of assets, or similar transaction, your personal information may be transferred to the involved parties. We will notify you in accordance with applicable law and, if the transferee changes the original processing purpose or method, they will re-obtain your consent as required by law.

3.2 Entrusted Processing

We may entrust certain processing activities to third-party service providers who act as entrusted processors (as defined under PIPL Article 21) on our behalf. These may include:

  • Cloud infrastructure and hosting providers;
  • Third-party AI model providers, which process your prompts and inputs to generate responses;
  • Payment service providers;
  • Analytics and product optimization providers;
  • Customer support and communications tools;
  • Fraud prevention and security providers.

We enter into written agreements with entrusted processors specifying the purpose, duration, method of processing, categories of personal information, protection measures, and rights and obligations of both parties. Entrusted processors may not process your personal information for purposes beyond those we have specified, and must delete or return personal information upon termination of the entrustment.

3.3 Disclosure to Public Authorities

We may disclose personal information to public authorities, courts, law enforcement, regulators, or other government bodies where required by law, legal process, or a lawful request, or where necessary to:

  • Comply with a court order, subpoena, or other legal process;
  • Enforce our Terms of Service or investigate potential violations;
  • Protect the rights, property, or safety of the Company, our users, or the public.

4. Cross-Border Data Transfers

Some of the entrusted processors described in Section 3.2 (including third-party AI model providers, cloud infrastructure providers, and payment providers) may be located outside the People's Republic of China. As a result, your personal information may be transferred to, stored in, or processed in jurisdictions other than the one in which it was collected.

Before transferring personal information across borders, we will:

  • Inform you of the recipient's identity, contact information, processing purpose and method, categories of personal information involved, and how you can exercise your PIPL rights against the recipient;
  • Obtain your separate consent where required by PIPL Article 39;
  • Adopt necessary measures to ensure that the recipient's processing meets the standards required by PIPL;
  • Where applicable, complete the security assessment, standard contract filing, or certification required by Chinese law before transfer.

By continuing to use the Services and providing personal information after being informed of the above, you acknowledge and, where applicable, consent to such cross-border transfers.

5. Retention of Personal Information

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, or for a longer period required or permitted by applicable law.

Retention periods depend on the nature of the information and the purpose of processing. For example:

  • Account information is retained for as long as your account remains active, plus a reasonable period after account closure to satisfy legal or operational requirements;
  • Transaction records are retained for the period required by applicable tax and commercial law;
  • Log files and security records are retained for a limited period necessary to detect and investigate incidents.

When personal information is no longer needed and no legal obligation requires further retention, we will delete or anonymize it. Where deletion is not technically feasible, we will stop active processing and take appropriate protection measures.

6. Your Rights

Subject to applicable law, you have the following rights with respect to your personal information:

  • Right to know and to decide: You have the right to be informed about how we process your personal information and to restrict or refuse the processing of your personal information by others.
  • Right to access and copy: You have the right to access the personal information we hold about you and to obtain a copy in a commonly used format.
  • Right to portability: Where required by applicable law and technically feasible, you have the right to request the transfer of your personal information to another personal information processor designated by you.
  • Right to correction: You have the right to correct or complete personal information about you that is inaccurate or incomplete.
  • Right to deletion: You have the right to request deletion of your personal information in the circumstances specified by PIPL Article 47, including where the processing purpose has been achieved or is no longer necessary, or where you withdraw your consent.
  • Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
  • Right to explanation: You have the right to request an explanation of our personal information processing rules.
  • Right to close your account: You may request to close your account, after which we will delete or anonymize your personal information in accordance with applicable law.

6.1 How to Exercise Your Rights

To exercise any of the above rights, please submit a request through the support ticket system on the Site. To protect your information, we may need to verify your identity before responding. We will respond within a reasonable time and in any event within the timeframe required by applicable law.

If we deny your request, we will explain the reasons. If you disagree with our response, you may file a complaint with the competent data protection authority in your jurisdiction.

7. Minors' Personal Information

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

Where we become aware that we have collected personal information from a person under 14 years of age without the verified consent of a parent or legal guardian, we will delete such information as soon as possible, in accordance with PIPL Article 31 and the Provisions on Cyber Protection of Children's Personal Information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us through the support ticket system on the Site and we will take appropriate action.

8. How We Safeguard Your Personal Information

We implement appropriate technical, physical, and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures include:

  • Encryption of personal information in transit and, where appropriate, at rest;
  • Access controls limiting personal information access to authorized personnel with a business need;
  • Confidentiality obligations for all personnel with access to personal information;
  • Regular security assessments and staff training;
  • Incident response procedures to address and mitigate security events.

Despite our efforts, no security measures are perfect or impenetrable. If we become aware of a personal information security incident that affects your rights, we will notify you and the competent authorities as required by applicable law.

9. AI-Related Data Use

Our Services use artificial intelligence technologies, including large language models and other machine learning systems, to generate responses or outputs based on the input you provide.

How your input is processed: When you submit a prompt, upload a file, or otherwise provide input, your input is processed to produce the requested output. This processing may involve transmitting your input to third-party AI model providers acting as entrusted processors on our behalf (see Sections 3.2 and 4).

No training on your content by default: We do not use the content you submit through the Services to train the AI models we offer, unless we obtain your explicit and separate consent. Where third-party AI model providers process your input on our behalf, we require them contractually to use your input only for the purpose of generating the requested output and not to train their models on your input.

Aggregated service improvement: We may use anonymized or aggregated usage patterns (such as error rates, feature adoption, and response times) to improve the Services. Such information does not identify you.

Human review: We do not routinely allow human review of your input or output. Human review may occur only where necessary for security, abuse prevention, safety incident investigation, or legal compliance, and always subject to strict access controls.

AI outputs: AI-generated outputs may be inaccurate, incomplete, or unsuitable for your intended use. You are solely responsible for evaluating outputs before relying on them for any purpose, especially in medical, legal, financial, or other high-stakes contexts.

10. Cookies and Similar Technologies

We use cookies and similar technologies (such as web beacons, local storage, and tracking pixels) to:

  • Maintain your login session;
  • Remember your preferences;
  • Analyze how the Services are used;
  • Detect and prevent fraud and abuse.

You can control cookies through your browser settings. Declining certain cookies may limit your ability to use some features of the Services. We do not respond to browser "Do Not Track" signals at this time, as no industry standard for such signals has been established.

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in law, our business operations, or our data processing practices. When we make material changes, we will notify you through the Services or through other appropriate means before the changes take effect.

Your continued use of the Services after the updated Policy becomes effective constitutes your acknowledgment of the updated Policy. If you do not agree with the changes, you should stop using the Services.

The date at the top of this Policy indicates when it was last updated.

12. How to Contact Us

If you have any questions, comments, or complaints about this Policy or our handling of your personal information, or if you wish to exercise any of your rights under Section 6, please contact us through the support ticket system available on the Site.

We will respond to your inquiry within a reasonable time and in any event within the timeframe required by applicable law.

© 2026 Beijing Yanfa Technology Co., Ltd. All rights reserved.