PIPL Compliance

1. Introduction

Wilby.ai is committed to complying with the Personal Information Protection Law (PIPL) of the People's Republic of China. This page outlines how we handle personal information of individuals in China in accordance with PIPL requirements.

2. Legal Basis for Processing

Under PIPL, we process personal information based on:

• Your informed consent
• Necessity for contract performance
• Compliance with legal obligations
• Protection of vital interests
• Public interest activities
• Processing publicly available information

3. Your Rights Under PIPL

As a data subject under PIPL, you have the right to:

• Right to Know: Be informed about how your personal information is processed
• Right to Decide: Restrict or refuse the processing of your personal information
• Right to Access: Access and obtain copies of your personal information
• Right to Portability: Request transfer of your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of your personal information
• Right to Explanation: Request explanation of processing rules

4. Sensitive Personal Information

We recognize that certain categories of personal information require enhanced protection under PIPL, including biometric data, religious beliefs, medical and health information, financial accounts, and location tracking data. We obtain separate consent before processing such sensitive information and implement additional security measures.

5. Cross-Border Data Transfers

When transferring personal information outside of China, we comply with PIPL requirements including conducting security assessments, obtaining necessary certifications, and ensuring adequate protection measures are in place. We inform you of the transfer details and obtain your separate consent where required.

6. Data Retention

We retain personal information only for the minimum period necessary to achieve the purposes for which it was collected. When retention is no longer necessary, we will delete or anonymize your personal information in accordance with PIPL requirements.

7. Security Measures

We implement technical and organizational measures to protect personal information, including encryption, access controls, and regular security audits. In the event of a data breach, we will notify affected individuals and relevant authorities as required by PIPL.

8. Contact Us

To exercise your rights under PIPL or for any inquiries regarding our data processing practices, please contact us: