Privacy Policy
Last updated: May 2026
1. Introduction
This Privacy Policy explains how Nanjing Bigstone Electronic Technology Co., LTD. ("Bigstone", "we", "us") collects, uses, discloses, and protects personal information when you use the Bigstone mobile application and related IoT services (the "Services").
Data Controller:
Nanjing Bigstone Electronic Technology Co., LTD.
Email: [email protected]
2. Information We Collect
• Account information: email address, display name, and authentication credentials.
• Vehicle and device data: device identifiers, binding codes, vehicle names, telemetry (GPS location, speed, battery, mileage, ride mode, lock status), and remote-control logs.
• Usage data: app interactions, crash diagnostics, and connection status.
• Technical data: device model, operating system version, app version, and IP address (for connectivity and security).
We do not knowingly collect sensitive categories of data beyond what is necessary to operate connected e-bike features.
3. How We Use Your Information
We process personal data to:
• Provide account registration, login, and vehicle binding;
• Display real-time vehicle status, maps, ride history, and geofence alerts;
• Enable remote lock, horn, lighting, and other IoT controls you request;
• Maintain service security, prevent fraud, and troubleshoot errors;
• Comply with legal obligations and enforce our Terms.
4. Legal Basis (EEA/UK Users)
Where GDPR applies, we rely on:
• Contract performance (Art. 6(1)(b)) — to deliver the Services you request;
• Legitimate interests (Art. 6(1)(f)) — service improvement, security, and fraud prevention;
• Consent (Art. 6(1)(a)) — where required for optional features or marketing;
• Legal obligation (Art. 6(1)(c)) — where applicable law requires processing.
5. Sharing and Processors
We may share data with:
• Cloud and IoT infrastructure providers hosting our backend (e.g., vehicle connectivity platforms);
• Payment or telecom partners when you renew an IoT data plan (if applicable);
• Authorities when required by law or to protect rights and safety.
We do not sell your personal information. We require processors to implement appropriate safeguards by contract.
6. International Transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
7. Retention
We retain personal data only as long as necessary for the purposes above, including:
• Account data: for the life of your account plus a reasonable period after deletion;
• Ride and telemetry history: according to product settings and legal requirements;
• Security logs: typically up to 12 months unless a longer period is required.
8. Your Rights
Depending on your location, you may have the right to access, rectify, erase, restrict, object to processing, and receive a portable copy of your data. You may withdraw consent at any time where processing is consent-based.
California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of certain sharing (we do not sell personal information).
To exercise your rights, contact [email protected]. You may also lodge a complaint with your local data protection authority.
9. Security
We apply technical and organizational measures including encryption in transit (HTTPS/TLS), access controls, and secure authentication. No method of transmission or storage is 100% secure.
10. Children
The Services are not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.
11. Changes
We may update this Policy. Material changes will be notified in-app or by other appropriate means. Continued use after the effective date constitutes acceptance where permitted by law.
12. Contact
[email protected]
更新日期：2026年5月
1. 引言
本隐私政策说明南京大石电子科技有限公司（「大石」「我们」）在您使用 Bigstone 移动应用及相关 IoT 服务（「服务」）时，如何收集、使用、披露及保护个人信息。
数据控制者：
南京大石电子科技有限公司
邮箱：[email protected]
2. 我们收集的信息
• 账户信息：电子邮箱、显示名称及身份验证凭证。
• 车辆与设备数据：设备标识、绑定码、车辆名称、遥测数据（GPS 位置、速度、电量、里程、骑行模式、锁车状态）及远程控制记录。
• 使用数据：应用交互、崩溃诊断及连接状态。
• 技术数据：设备型号、操作系统版本、应用版本及 IP 地址（用于连接与安全）。
除提供联网电动自行车功能所必需外，我们不会故意收集敏感类别数据。
3. 信息使用目的
我们处理个人数据用于：
• 提供注册、登录及车辆绑定；
• 展示实时车况、地图、骑行记录与围栏告警；
• 应您请求提供远程锁车、鸣笛、灯光等 IoT 控制；
• 维护服务安全、防止欺诈并排查故障；
• 履行法律义务并执行服务条款。
4. 法律依据（适用于 EEA/英国用户）
在适用 GDPR 时，我们依据：
• 合同履行（第6条第1款b项）——提供您请求的服务；
• 合法利益（第6条第1款f项）——服务改进、安全与反欺诈；
• 同意（第6条第1款a项）——可选功能或营销所需时；
• 法律义务（第6条第1款c项）——法律要求时。
5. 共享与处理者
我们可能向以下方共享数据：
• 托管后端与 IoT 的云基础设施服务商；
• 您续费 IoT 流量套餐时的支付或电信合作方（如适用）；
• 法律要求或为保护权利与安全时的主管机关。
我们不出售您的个人信息，并要求处理者通过合同采取适当保护措施。
6. 跨境传输
您的数据可能在您所在国以外处理。法律要求时，我们采用标准合同条款等适当保障措施。
7. 保留期限
我们仅在实现上述目的所需期限内保留数据，包括：
• 账户数据：账户存续期间及删除后合理期限；
• 骑行与遥测历史：按产品设置及法律要求；
• 安全日志：通常不超过12个月，法律另有要求除外。
8. 您的权利
根据所在地区，您可能享有访问、更正、删除、限制处理、反对处理及数据可携带权。基于同意的处理可随时撤回。
加州居民在 CCPA/CPRA 下可能享有额外权利（我们不出售个人信息）。
行使权利请联系 [email protected]，亦可向当地数据保护机构投诉。
9. 安全
我们采取传输加密（HTTPS/TLS）、访问控制及安全认证等技术与组织措施。任何传输或存储方式均无法保证100%安全。
10. 儿童
服务不面向16岁以下（或您所在司法辖区最低年龄）儿童，我们不会有意收集儿童数据。
11. 变更
我们可能更新本政策，重大变更将通过应用内或其他适当方式通知。法律允许时，更新后继续使用视为接受。
12. 联系我们
[email protected]
