Privacy Policy

1. Overview

THUP.AI ("we", "our", "the Platform") is committed to protecting your privacy rights and personal information security. This Privacy Policy comprehensively explains how we collect, use, disclose, transfer, store, and protect your personal information.

Platform Mission: THUP.AI is an AI image generation and prompt resource platform built for creators. Our mission is to provide powerful AI creation tools while ensuring the security and privacy of user data.

Scope of Application: This Privacy Policy applies when you access or use our services through:

• THUP.AI website (including all subdomains)
• Mobile applications (if applicable)
• API interfaces and third-party integrations
• Any other related services we provide

Your Consent: By accessing or using this Platform, you acknowledge that you have carefully read, fully understood, and agree to be bound by all terms of this Privacy Policy. If you do not agree to any part of this policy, please stop using this service immediately.

Policy Updates: We reserve the right to modify this policy at any time. When we make material changes to this policy, we will notify you through:

• Posting a notice in a prominent location on the website
• Sending a notification to your registered email (if applicable)
• Displaying a pop-up reminder when you next log in

The modified policy will take effect immediately upon posting. Your continued use of the service after policy modifications constitutes acceptance of the modified policy. We recommend that you review this page regularly to stay informed about our latest practices.

2. Information Collection

We follow the data minimization principle, collecting only the information necessary to provide you with services. The types of information we collect include:

2.1 Account Information

When you register for a THUP.AI account, we collect the following information through third-party authentication services:

• Email address (for account identification and communication)
• User avatar (if you choose to provide one)
• Username or display name
• Account creation time and last login time

2.2 Device and Technical Information

When you access our services, we automatically collect certain technical information:

• IP address (for security and anti-fraud purposes)
• Browser type and version
• Operating system type and version
• Device type and device identifier
• Screen resolution and display settings
• Time zone and language preferences
• Referrer URL

2.3 Usage Data and Service Interaction Information

To improve service quality, we collect information about how you use the platform:

• Access time and date
• Pages browsed and links clicked
• Features and services used (such as image generation, prompt browsing)
• Search queries and filter criteria
• Session duration and frequency
• Error logs and crash reports
• Performance data and response times

2.4 User-Generated Content

When you use our AI image generation service, we temporarily process:

• Text prompts you input
• Reference images you upload (if applicable)
• Generated image results
• Content-related metadata (such as generation parameters, timestamps)

2.5 Communication Records

When you contact or interact with us:

• Customer service communication records (email, online chat)
• Feedback, suggestions, or complaints you submit
• Surveys or evaluations you participate in

2.6 Payment and Transaction Information

When you purchase credits or subscribe to services:

• Transaction history (amount, time, payment method type)
• Credit balance and usage records
• Order numbers and invoice information

Note: We do not directly collect or store your payment card numbers, CVV, or other sensitive payment information. All payment data is securely processed by our third-party payment service providers.

2.7 Automatically Collected Information

We use cookies and similar technologies to automatically collect information. See Section 6 "Cookies and Tracking Technologies" for details.

2.8 Information We Do Not Collect

To protect your privacy, we explicitly commit not to collect the following information:

• Sensitive personal information (such as race, religion, political views, health data)
• Biometric data
• Precise geolocation information (GPS coordinates)
• Other applications or files on your device
• Your social media private messages or non-public content

3. Information Use and Data Flow

We use the information collected to provide, maintain, protect, and improve our services. Below is a detailed explanation of information use:

3.1 Image Generation Process and Data Flow

When you use the Platform's AI image generation feature, data flows as follows:

1. User Input: You input text prompts and/or upload reference images on the THUP.AI platform
2. Transmission to AI Service: Your content is sent via encrypted connection to AI services provided by Google for processing
3. AI Processing: Google's AI models generate images based on your input
4. Result Transmission: Generated images are transmitted through Cloudflare cloud storage infrastructure
5. User Access: You can access and download generated images through the THUP.AI platform

Important Commitment: We do not use your generated content for training AI models, commercial promotion, or other purposes without your authorization. Your creative content belongs to you.

3.2 Legal Basis for Data Processing

Under applicable data protection laws (including GDPR, CCPA, etc.), we process your personal information based on the following legal bases:

• Contract Performance: Necessary to provide you with services (such as account management, image generation, credit transactions)
• Legitimate Interests: To improve services, prevent fraud, ensure platform security
• Your Consent: When you choose to provide optional information or receive marketing communications
• Legal Obligations: Compliance with applicable laws, regulations, legal processes, or law enforcement requirements

3.3 Core Service Operations

We use your information for:

• Account Management: Creating and managing your THUP.AI account, verifying your identity
• Service Provision: Processing your image generation requests, providing prompt library access
• Transaction Processing: Processing credit purchases, maintaining transaction records
• Technical Support: Responding to your inquiries, resolving technical issues, handling complaints
• Security Protection: Detecting and preventing fraud, abuse, security threats, and illegal activities
• Service Notifications: Sending important notifications related to your account (such as credit changes, policy updates)

3.4 Service Improvement and Research

We may use aggregated and anonymized data for:

• Analyzing user behavior patterns to optimize user experience
• Testing new features and improving existing features
• Conducting statistical analysis and research
• Generating usage trend reports

Note: Data used for research has been anonymized and cannot identify your personal identity.

3.5 Automated Decision-Making

We do not use your personal information for fully automated decision-making that would have legal or similar significant effects on you. Certain features (such as content moderation) may use automated tools, but important decisions always have human review.

3.6 Data Aggregation and Analysis

We may aggregate your information with other users' information to create statistical data that cannot identify personal identity:

• Platform usage statistics (such as daily active users, popular features)
• Performance metrics and service quality reports
• Industry trend analysis

This aggregated data may be publicly published or shared with partners, but will not contain information that can identify your personal identity.

4. Third-Party Services

To provide complete service functionality, we integrate carefully selected third-party service providers. We only partner with providers that comply with strict data protection standards.

4.1 Authentication Services

We use third-party authentication service providers to handle user registration and login:

• Service Purpose: Secure user identity verification and account management
• Data Shared: Email address, user avatar, username
• Data Processing: Authentication service providers process your login information according to their privacy policies
• Security Measures: Industry-standard encryption and security protocols are employed

4.2 Cloud Storage Services

We use Cloudflare's cloud storage services to store user-generated content:

• Service Purpose: Secure storage and fast transmission of generated image files
• Storage Location: Global distributed cloud infrastructure
• Encryption Method: Encryption in transit (TLS/SSL) and encryption at rest (AES-256)
• Access Control: Strict access permission management, accessible only by authorized systems
• Data Retention: Retained according to your account status, data will be permanently deleted after account deletion

4.3 AI Service Providers

Our image generation capabilities are powered by AI services provided by Google:

• Service Purpose: Processing your prompts and generating AI images
• Data Transmission: Your prompts and reference images (if applicable) are transmitted via encrypted connection to Google AI services
• Data Processing: Google processes data according to its enterprise service agreements
• Data Retention: Google does not retain your input content for other purposes after processing generation requests
• Privacy Protection: We have signed a Data Processing Agreement (DPA) with Google to ensure compliance with data protection requirements

4.4 Payment Processing Services

Payment transactions are processed by independent third-party payment service providers:

• Service Purpose: Securely processing credit purchases and subscription payments
• PCI DSS Compliance: Payment service providers comply with Payment Card Industry Data Security Standards
• Data Isolation: We do not directly store your payment card numbers, CVV, or complete card information
• Transaction Records: We only keep transaction metadata (amount, time, transaction ID) for account management

4.5 Content Delivery Network (CDN)

We use Cloudflare CDN to optimize content transmission performance:

• Service Purpose: Accelerating static resource loading, improving page response speed
• Data Processing: CDN temporarily caches public content to improve performance
• Security Protection: Provides DDoS protection and Web Application Firewall

4.6 Analytics Services (Optional)

With your consent, we may use analytics tools:

• Service Purpose: Understanding how users use our services to optimize user experience
• Data Type: Anonymized usage statistics, page views, feature usage frequency
• Privacy Protection: IP address anonymization, no personally identifiable information collected
• Opt-Out Option: You can opt out of analytics tracking through browser settings or account preferences

4.7 Security Services

We use security services to protect the platform and users:

• Fraud Detection: Identifying and blocking suspicious activities
• Threat Protection: Defending against DDoS attacks, SQL injection, and other security threats
• Spam Content Filtering: Automatically detecting and filtering inappropriate content
• Data Sharing: Only necessary technical data shared (such as IP addresses, request patterns)

4.8 Communication Services

Used for sending service-related notifications and customer support:

• Email Services: Sending account notifications, transaction confirmations
• Customer Service Tools: Handling user inquiries and technical support requests
• Data Retention: Communication records retained as needed for business purposes, typically not exceeding 3 years

4.9 Third-Party Service Privacy Policies

Each third-party service provider has its own privacy policy. We recommend that you review these policies to understand how they handle your information. We are not responsible for the privacy practices of third parties.

4.10 Data Processing Agreements (DPA)

For key third-party service providers processing your personal information, we have signed Data Processing Agreements to ensure they:

• Process data only according to our instructions
• Implement appropriate technical and organizational security measures
• Do not use data for unauthorized purposes
• Return or delete data upon service termination

5. Data Storage and Security

We understand the importance of data security and have implemented multi-layered security measures to protect your personal information.

5.1 Data Storage Location

Your personal information is stored on secure cloud servers:

• Geographic Location: Data stored in globally distributed cloud infrastructure
• Data Centers: Using data centers that comply with ISO 27001, SOC 2, and other security standards
• Redundant Backup: Critical data redundantly stored in multiple geographic locations

5.2 Encryption Measures

We use industry-standard encryption technologies to protect your data:

• Encryption in Transit: All data transmission uses TLS 1.2 or higher encryption protocols
• Encryption at Rest: Stored sensitive data uses AES-256 encryption algorithm
• Key Management: Encryption keys securely stored using professional key management services
• HTTPS: Entire website enforces HTTPS encrypted connections

5.3 Access Control

We strictly limit access to your personal information:

• Principle of Least Privilege: Only granting employees the minimum permissions needed to perform their work
• Authentication: Multi-factor authentication (MFA) protects system access
• Access Logs: Recording and monitoring all data access activities
• Regular Review: Regularly reviewing and updating access permissions

5.4 Employee Data Access Policy

Our employees must comply with strict data protection regulations:

• Confidentiality Agreements: All employees sign confidentiality agreements
• Security Training: Regular data security and privacy protection training
• Separation of Duties: Critical operations require multi-person approval
• Offboarding Procedures: All access permissions immediately revoked when employees leave

5.5 Security Monitoring and Auditing

We continuously monitor system security:

• Real-time Monitoring: 24/7 security monitoring and anomaly detection
• Intrusion Detection: Deploying Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)
• Vulnerability Scanning: Regular security vulnerability scanning and penetration testing
• Security Audits: Regular third-party security audits and compliance reviews

5.6 Data Backup Strategy

To prevent data loss, we implement comprehensive backup strategies:

• Automatic Backup: Critical data automatically backed up daily
• Offsite Backup: Backup data stored in different geographic locations
• Backup Testing: Regularly testing backup recovery procedures
• Retention Period: Backup data retained according to data retention policy

5.7 Security Incident Response

If a data breach or security incident occurs:

• Rapid Response: We have a dedicated security incident response team
• Timely Notification: After discovering a significant data breach, we will notify you within the time required by applicable laws
• Remedial Measures: Immediately taking action to contain and fix security issues
• Transparent Communication: Providing clear information and recommendations to affected users

5.8 Industry Certifications and Compliance

We strive to meet international data security standards:

• GDPR Compliance: Complying with the European General Data Protection Regulation
• CCPA Compliance: Meeting California Consumer Privacy Act requirements
• Data Processing Agreements: Signing legally compliant data processing agreements with key service providers

Important Reminder: Although we have implemented comprehensive security measures, no system can be 100% secure. Internet transmission and electronic storage methods have inherent risks. We recommend that you also take measures to protect your account, such as using strong passwords and not sharing login information with others.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience. Below is a detailed explanation:

6.1 What are Cookies

Cookies are small text files stored on your device that help websites remember your preferences and activities.

6.2 Cookie Type Classification

We use the following types of cookies:

Essential Cookies (No Consent Required)

These cookies are essential for website operation:

• Session Management: Remembering your login status so you don't have to log in again for each page visit
• Security Cookies: Protecting your account security, preventing Cross-Site Request Forgery (CSRF) attacks
• Load Balancing: Ensuring website requests are correctly distributed to servers
• Validity Period: Usually deleted when browser is closed (session cookies) or retained for 7-30 days

Functional Cookies

These cookies allow us to remember your choices:

• Language Preferences: Remembering your chosen interface language (Chinese/English)
• Theme Settings: Remembering your chosen dark/light mode
• Validity Period: Usually retained for 30 days to 1 year

Analytics Cookies (Consent Required)

These cookies help us understand how users use the website:

• Usage Statistics: Page views, visit duration, bounce rate
• Feature Usage: Which features are most popular
• Performance Data: Page load times, error rates
• Anonymization: Data collected by these cookies has been anonymized
• Validity Period: Usually retained for 13 months

Marketing Cookies (Consent Required)

We currently do not use marketing or advertising cookies. If used in the future, we will seek your explicit consent.

6.3 Third-Party Cookies

In addition to cookies we set ourselves, the following third-party services may set cookies:

• Authentication Services: For secure login and session management
• Analytics Services (if enabled): For anonymous usage statistics
• CDN Services: For content transmission optimization

6.4 Cookie Validity Periods

Different cookies have different retention times:

• Session Cookies: Automatically deleted when browser is closed
• Persistent Cookies: Retained for 7 days to 2 years depending on type
• Your Control: You can clear cookies from your browser at any time

6.5 Managing Cookies

You can manage cookies through:

Browser Settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Options → Privacy & Security → Cookies and site data
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Cookies and site permissions

Account Settings (if applicable):

• Manage analytics cookie preferences in account settings after logging in

Note: Disabling essential cookies may cause parts of the website to malfunction (such as inability to stay logged in).

6.6 Do Not Track (DNT) Signals

We currently do not respond to "Do Not Track" browser signals, as the industry has not yet reached a unified standard for interpreting and responding to DNT signals. We commit to using cookies only to provide and improve services, not for intrusive tracking.

7. User Rights

Under applicable data protection laws (including GDPR, CCPA, China's Personal Information Protection Law, etc.), you have the following rights regarding your personal information:

7.1 Right of Access (Right to Know)

You have the right to know what personal information we hold about you:

• Request Method: Send email to support@thup.ai
• Information Content: Categories of personal information collected, sources, purposes of use, sharing circumstances
• Response Time: We will respond within 30 days of receiving the request
• Free Provision: First request is free, frequent repeated requests may incur reasonable fees

7.2 Right to Rectification (Right to Modify)

You have the right to correct inaccurate or incomplete personal information:

• Self-Service Modification: Log into your account to directly update your profile information
• Request Assistance: If unable to modify yourself, please contact support@thup.ai
• Verification Requirements: We may need to verify your identity before processing correction requests

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information, and we will respond to your request in the following cases:

• Personal information is no longer necessary for the collection purpose
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate reasons to continue processing
• Personal information has been illegally processed
• Law requires deletion

Deletion Process:

1. Send deletion request to support@thup.ai
2. We verify your identity
3. We process your request within 15 business days
4. Send confirmation notice after deletion is complete

Important Notice: If you voluntarily request account deletion, all your data (including remaining credits) will be permanently deleted and cannot be recovered. Please ensure you have used your credits or no longer need them before deletion.

Deletion Exceptions: We may retain some information in the following circumstances:

• Compliance with legal obligations (such as tax record retention requirements)
• Resolution of disputes or enforcement of agreements
• Fraud prevention and security maintenance
• Exercise or defense of legal claims

7.4 Right to Restriction of Processing

In the following cases, you can request that we restrict processing of your personal information:

• You dispute the accuracy of personal information (during our verification period)
• Processing is unlawful but you do not wish to delete the data
• We no longer need the information but you need it for legal claims
• You have objected to processing (during our verification period)

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format:

• Export Format: JSON or CSV format
• Included Content: Personal information you provided to us, not including inferred or derived data
• Direct Transfer: Where technically feasible, we can directly transfer data to other service providers

7.6 Right to Object

You have the right to object to data processing based on legitimate interests:

• Marketing Communications: Unsubscribe from marketing emails at any time
• Analytics and Research: Opt out of non-essential data analysis
• Automated Decision-Making: Request human review of automated decision results

7.7 Right to Withdraw Consent

If we process data based on your consent, you have the right to withdraw consent at any time:

• Withdrawal Method: Through account settings or contact support@thup.ai
• No Effect on Past Processing: Withdrawal does not affect lawful processing based on consent before withdrawal
• Service Impact: Withdrawing certain consents may affect our ability to provide some services

7.8 Right to Complain

If you believe we have violated data protection laws, you have the right to complain to regulatory authorities:

• Chinese Users: Can complain to the Cyberspace Administration of China or local cyberspace departments
• EU Users: Can complain to the data protection supervisory authority in your member state
• US Users (California): Can complain to the California Attorney General's Office

We encourage you to contact us first so we can directly address your concerns.

7.9 Identity Verification Requirements

To protect your privacy and security, we need to verify your identity before processing your requests:

• Verification Methods: Confirmation via registered email, security questions, account information
• Verification Purpose: Ensuring information is only provided to legitimate owners
• Grounds for Refusal: We may refuse requests if we cannot verify your identity

7.10 Authorized Representatives

You can authorize a representative to exercise the above rights on your behalf:

• Authorization Requirements: Provide notarized power of attorney or written authorization
• Representative Identity Verification: We need to verify the representative's identity and authenticity of authorization
• Direct Confirmation: We may directly contact you to confirm authorization

Contact for Exercising Rights: support@thup.ai

8. Information Sharing

We value your privacy and only share your personal information in the following necessary circumstances:

8.1 Service Providers

We share necessary information with the following types of service providers:

• Cloud Infrastructure Providers: Cloudflare (for storage and CDN)
• Authentication Service Providers: For account management and login
• AI Service Providers: Google (for image generation)
• Payment Processors: For processing credit purchase transactions
• Customer Service Tools: For providing technical support

Sharing Conditions: These service providers can only use information according to our instructions and may not use information for their own purposes.

8.2 Legal Requirements

We may be required to disclose your information in the following circumstances:

• Legal Process: Responding to court orders, subpoenas, or other legal processes
• Legal Obligations: Compliance with applicable laws and regulations
• Law Enforcement Requests: Responding to lawful requests from government or law enforcement agencies
• National Security: In emergency situations involving national security

Transparency Commitment: To the extent permitted by law, we will notify you of such requests and challenge excessive or inappropriate requests.

8.3 Business Transfers

If THUP.AI participates in a merger, acquisition, asset sale, or bankruptcy proceeding:

• Transfer Notice: We will notify you before the transfer
• Policy Application: Recipients must comply with this Privacy Policy
• Your Choice: You can choose to delete your information rather than transfer it

8.4 Affiliated Companies

We may share information with affiliated companies under common control:

• Sharing Purpose: Providing coordinated services, improving products
• Equal Protection: Affiliated companies will process information in a manner consistent with this policy
• Sharing Scope: Only necessary information is shared

8.5 Sharing with Your Consent

With your explicit consent, we may share information with other third parties.

8.6 Public and Anonymous Data

We may publicly share or share with partners aggregated, anonymized data:

• Statistical Data: User numbers, feature usage trends
• Industry Reports: Market research and trend analysis
• Cannot Identify: This data cannot be used to identify any individual

9. International Data Transfers

THUP.AI uses globally distributed cloud infrastructure, and your information may be transferred to locations outside your country/region for processing and storage.

9.1 Cross-Border Transfer Mechanisms

When we transfer your personal information to other jurisdictions, we take the following measures to ensure appropriate protection:

• Standard Contractual Clauses (SCC): Signing standard contractual clauses with data recipients that comply with GDPR requirements
• Data Processing Agreements (DPA): Ensuring recipients implement appropriate technical and organizational security measures
• Localization Requirements: Compliance with data localization requirements in countries like China

9.2 EU-US/Switzerland-US Data Transfers

For data transfers from the EU or Switzerland to the US:

• Adequacy Decisions: We rely on adequacy decisions by the European Commission (if applicable)
• Standard Contractual Clauses: Using standard contractual clauses approved by the European Commission
• Additional Safeguards: Implementing supplementary technical measures (such as encryption)

9.3 Special Notice for Chinese Users

Under China's Personal Information Protection Law and related regulations:

• Cross-Border Transfer Assessment: We conduct security assessments for cross-border data transfers
• Necessity Principle: Data transferred only when necessary to provide services
• User Consent: Using this service is deemed your consent to necessary cross-border data transfers

9.4 Your Consent

By using our services, you understand and agree that your information may be transferred to other countries/regions where data protection laws may differ from those in your region.

10. Data Retention

We only retain your personal information for as long as necessary.

10.1 Retention Period Standards

We determine data retention periods based on the following factors:

• Service Provision: Time required to provide services
• Legal Obligations: Retention periods required by law, accounting, or regulatory requirements
• Dispute Resolution: Time needed to resolve potential disputes
• Legitimate Interests: Security, fraud prevention, and business operations needs

10.2 Retention Periods for Different Data Types

Account Data:

• Retention Period: Duration of account existence + 30 days
• After Deletion: Permanently deleted within 30 days of account deletion request

Transaction Records:

• Retention Period: 7 years after transaction occurrence (meeting financial and tax requirements)
• After Deletion: Automatically deleted after retention period expires

Usage Logs and Analytics Data:

• Retention Period: 13 months (anonymized processing)
• After Deletion: Automatically expires and is deleted

Customer Service Records:

• Retention Period: 3 years after last interaction
• After Deletion: Automatically archived and deleted

Generated Image Content:

• Retention Period: Retained according to your account status, deleted after account deletion
• Temporary Files: Available for download after generation, platform does not retain permanently

Backup Data:

• Retention Period: Active backups retained for 30 days
• Deletion: Expired backups automatically overwritten

10.3 Processing After Retention Period Expires

When data reaches retention period:

• Automatic Deletion: System automatically marks and deletes expired data
• Secure Deletion: Using secure deletion methods to prevent data recovery
• Logging: Recording deletion operations for audit purposes

10.4 Legally Required Retention

We may need to retain data for longer periods in the following circumstances:

• Legal Proceedings: When involved in legal proceedings or investigations
• Regulatory Requirements: When regulatory authorities require retention of specific data
• National Security: When involving national security issues

11. Children's Privacy

This Service is not directed to children. Children as defined by internationally recognized standards are not within the target user scope of this Service.

11.1 No Intentional Collection of Children's Information

We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@thup.ai.

11.2 Processing After Discovering Children's Information

If we discover that we have collected personal information from children:

• Immediate Cessation: Immediately stop collection and processing
• Prompt Deletion: Delete collected information as soon as possible
• Parent Notification: Notify parents or guardians when possible

12. Policy Changes

12.1 Change Notification Methods

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update Date: Modify the "Last Updated" date at the top of this page
• Website Notice: Post a notice on the homepage or in a prominent location
• Email Notification (if applicable): Send email to registered users for significant changes
• Login Reminder: Display a summary of policy changes when you next log in

12.2 Special Notice for Significant Changes

If changes will materially reduce your rights or significantly alter how we process information, we will:

• 30-Day Advance Notice: Notify you at least 30 days before changes take effect
• Clear Explanation: Clearly explain the changes and their impact
• Opt-Out Option: If you disagree with the changes, you may choose to delete your account

12.3 Your Choices

• Continued Use: Continued use of the service after the modified policy is published indicates your acceptance of the new policy
• Stop Using: If you disagree with the new policy, please stop using the service and delete your account

We recommend that you review this page regularly to learn how we protect your information.

13. Contact Us

13.1 Privacy-Related Inquiries

If you have any questions, comments, or requests about this Privacy Policy, please contact us through:

• Email: support@thup.ai
• Email Subject: Please indicate "Privacy Policy Inquiry" or "Data Rights Request"

13.2 Data Protection Officer (DPO)

We have not yet designated a formal Data Protection Officer. All privacy and data protection related matters are handled by our operations team.

13.3 Response Time Commitment

We commit to:

• Initial Response: Confirm receipt within 2 business days of receiving your inquiry
• Complete Reply: Provide complete response within 30 days
• Complex Requests: If more time is needed, we will notify you and explain the reason
• Priority Processing: Urgent privacy issues (such as data breach reports) will be prioritized

13.4 Other Contact Methods

• General Customer Service: Submit ticket through website "Contact Us" page
• Complaints and Suggestions: support@thup.ai

Effective Date: January 1, 2025

Thank you for trusting THUP.AI. We are committed to protecting your privacy and providing a quality service experience.