Guide to Exercising Data Subject Rights

Last updated: 2026-06-05

This guide helps you understand and exercise the rights granted to you under Chapter IV of the Personal Information Protection Law of the People's Republic of China (PIPL). Xuzhou Mangxu Software Technology Co., Ltd. respects and safeguards each of your rights.

I. List of Your Rights

1.1 Right to Know and Decide (PIPL Article 44)

You have the right to know how we process your personal information, including the purpose, methods, scope, and retention period of processing. You have the right to restrict or refuse others' processing of your personal information (except as otherwise provided by laws and regulations).

1.2 Right to Access and Copy (PIPL Article 45)

You have the right to request access to and copies of the personal information we hold about you. We will provide you with a copy of the following information in a readable format:

Basic account information (name, contact details, etc.)
Your service usage records
Your consultation and communication records
Device and log information we collect

1.3 Right to Rectification and Supplementation (PIPL Article 46)

When you discover that your personal information is inaccurate or incomplete, you have the right to request that we correct or supplement it. Self-service operation: Log in to your account → Personal settings → Modify information.

1.4 Right to Deletion (PIPL Article 47)

You have the right to request deletion of your personal information under the following circumstances:

The processing purpose has been achieved, cannot be achieved, or is no longer necessary
We cease providing products or services
The retention period has expired
You withdraw your consent
We process personal information in violation of laws, regulations, or agreements

Exceptions: Information required to be retained by laws and regulations (e.g., financial records with a retention period of 5 years) is not subject to deletion.

1.5 Right to Data Portability (PIPL Article 45, Paragraph 3)

Where conditions prescribed by the national cyberspace administration are met, you have the right to request that your personal information be transferred to another personal information processor designated by you. We will provide the data in a structured, commonly used format.

For personal information processed based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing activities conducted prior to the withdrawal. How to withdraw: Account settings → Privacy management → Withdraw authorization.

1.7 Right to Cancel Account

You have the right to cancel your account. After cancellation, we will delete or anonymize your personal information within 15 working days, unless otherwise provided by law. Cancellation path: Account settings → Account management → Cancel account.

II. Process for Exercising Rights

Submit a request: Submit a rights exercise request via email (privacy@example.com) or online form
Identity verification: We will verify your identity to ensure the request is made by you
Process the request: We will respond within 15 working days of receiving the request
Notification of result: We will notify you of the result via the contact details you provided
If you have any objections: You may file a complaint through the appeals channel or report to the regulatory authority

III. Special Circumstances

Some requests may not be executed immediately due to legal obligations (e.g., anti-money laundering, tax record retention)
For repeated or manifestly unreasonable requests, we may charge a reasonable fee or refuse to process them
Requests involving third-party information require the consent of the third party

IV. Regulation and Remedies

If you believe that we have failed to properly handle your rights request, you have the right to file a complaint with the following authorities:

The local cyberspace administration
The personal information protection authority
A people's court with jurisdiction (to initiate civil litigation)

数据主体权利