Privacy Policy for Tencent Cloud Code Analysis

Thank you for choosing and using the Tencent Cloud Code Analysis platform and services!

The Tencent Cloud Code Analysis platform is a cloud-native, distributed, and high-performance comprehensive code analysis and tracking management platform developed by Tencent Cloud Computing (Beijing) Co., Ltd. (hereinafter referred to as "Tencent"). It integrates multiple code analysis tools, with its primary functions including continuous code tracking and analysis, project code quality monitoring, and supporting teams in inheriting code culture (subject to the actual functions and services provided by the platform).

To facilitate your registration, login, and use of related services, and to provide you with more personalized user experiences and services, we may collect and use your relevant information when you use Tencent Cloud Code Analysis services (hereinafter referred to as "TCA Services" or "this Service"). Tencent attaches great importance to the protection of user information and will take corresponding security protection measures in accordance with laws and regulations. Through this "Privacy Policy for Tencent Cloud Code Analysis" (hereinafter referred to as "this Policy"), we aim to explain how we collect, use, store, and share your information when you use products and services provided by TCA, as well as the methods we provide for you to access, update, control, and protect this information.

This Policy is closely related to the TCA Services you use. Clauses and personal sensitive information that are of significant relevance to your rights have been highlighted in bold for your special attention. Please read them carefully. If you confirm acceptance or use TCA Services through online checkmarks or any other means, it will be deemed that you have fully read, understood, and agreed to this Policy, and consent to our collection, use, storage, and sharing of your personal information in accordance with this Policy.

1. Scope of Application of This Policy

1.1 This Policy applies to the products and services provided by Tencent through the TCA official website, unless otherwise specified in this Policy.

1.2 This Policy does not apply to products and services provided by other third parties to you. For example, when a third-party service provider (i.e., a seller) provides products or services to you, you and the service provider shall separately determine the policies on the use of relevant information and data, service agreements, etc.

1.3 This Policy applies to all information and materials you submit when registering or logging into a TCA account, as well as the relevant personal information you submit or that TCA collects to provide you with services (excluding user business data). Such information is collectively referred to as "user personal information," including but not limited to names, contact information, etc.

1.4 User business data refers to various types of data processed by you in any manner (including but not limited to uploading, transmitting, storing, analyzing, or distributing) during your use of TCA Services, including but not limited to information collected or generated in your daily business operations.

1.4.1 You shall ensure that user business data is collected and used (including but not limited to entrusted processing) in compliance with laws. You shall not and have not infringed upon the legitimate rights of any individual or entity in any manner.

1.4.2 You warrant that you have the right to use TCA Services to perform any processing (including but not limited to storage, transmission, analysis, and distribution) on user business data, and we will process your user business data in accordance with your instructions or entrustment.

1.4.3 You understand and agree that China and other countries/regions may have relevant regulations on data storage and cross-border transfer. Before you use TCA Services to store, transmit, or otherwise process user business data, you shall conduct full and necessary assessments and approvals in compliance with the applicable laws and regulations of the relevant regions to ensure compliance.

1.4.4 You may learn more about policies related to user business data by referring to the Tencent Cloud Code Analysis Service Agreement.

1.5 If specific TCA Services you use have additional requirements for user personal information, we will explain such requirements to you through service rules. Please decide whether to use the relevant services based on the content of the service rules.

2. Information We Collect

During your use of Tencent Cloud Code Analysis Services, we will collect information you actively provide or generate through your use of the Services in the following manners to provide you with services, optimize our services, and ensure the security of your account:

2.1 When you log into the TCA platform via QQ, WeChat, or WeCom authorization, we will collect your unique identifier, profile picture, and nickname from QQ, WeChat, or WeCom after obtaining your explicit consent. This information will be used to save your login information and associate it with your unique identity on the TCA platform.

2.2 When you create a team, we require you to actively fill in genuine, lawful, and valid information such as the team name, team leader, contact information, and team business license number to facilitate your use of team management and other TCA platform functions. Failure to provide such information or providing inaccurate or false information may result in your inability to further use relevant TCA platform functions.

Before uploading, authorizing, or managing team-related names, contact information, and other personal information, please ensure that you have obtained the explicit consent of team members in advance and have fully informed the information subjects of the purposes, scope, and methods of collecting their personal information.

If you choose to join a team, the information and data you submit or generate during operations such as team projects fall under the control of the team you belong to. You understand that for data controlled by the team, the team is the controller of the team data, and we will only process such data in accordance with the team's instructions (including operations performed by the team through the management backend) and the agreement between us and your team. If you have any questions or concerns regarding the collection purposes, scope, and methods of the above team-controlled data, you understand and agree that you should contact your team for resolution.

2.3 To effectively analyze your code, we need you to actively register your code repository information and provide valid code repository authorization credentials. Failure to provide such information will result in your inability to further use relevant TCA platform functions.

2.4 After you configure analysis schemes and start code analysis on your registered code repositories, the TCA platform will issue analysis tasks based on the analysis parameters you configured. During the analysis process, we will collect your issue data (including problem line numbers, problem descriptions, etc.) based on tool analysis results. We will not collect your source code or source code snippets.

2.5 When you use the custom tool function, to ensure the normal use of your custom tool within your team, we need you to actively fill in information such as the repository address, authorization credentials, and tool name of your custom tool. Failure to provide such information will only limit your full use of relevant functions but will not affect your normal use of other TCA services.

2.6 When you use Tencent Cloud Code Analysis Services, to ensure your normal use of our services, we need to collect service log information and report and track device information for errors to resolve issues. We will collect log information such as your device model, operating system, unique device identifier (e.g., GUID, IDFV, IMEI, Android ID, IMSI, ICCID), device SN, MAC address, login IP address, software version number, network access method, type and status, network quality data, operation logs, and service logs (such as your usage records and service failure information). This information is basic information required to provide services.

2.7 You understand that the functions and services we provide are continuously updated and developed. If a function or service not mentioned in the foregoing collects your information, we will separately explain the content, scope, and purpose of the information collection to you through page prompts, interactive processes, website announcements, etc., to obtain your consent.

2.8 Please note that currently, we do not actively obtain your personal information from third parties outside the Tencent Group. If we need to indirectly obtain your personal information from third parties in the future for business development, we will inform you of the source, type, and scope of use of the personal information before obtaining it. If the personal information processing activities required for our business exceed the scope of your original authorization to the third party, we will obtain your authorization before processing such personal information. Additionally, we will strictly comply with relevant laws and regulations and require third parties to ensure the legality of the information they provide.

3.1 When you access, log into, or use our services via a website, we may use relevant information through the Cookie caching function on your computer to ensure the normal operation of the website. Cookies typically contain information such as the currently logged-in account, site address, and preferences. Using Cookie technology, we can provide you with more thoughtful personalized services.

3.2 You can refuse or manage Cookies through browser settings. However, please note that disabling Cookies may prevent you from enjoying the best service experience, and the availability of certain functions may be affected.

3.3 Information recorded by TCA Cookies shall be governed by this Policy.

4. How We Use Collected Information

We strictly comply with laws, regulations, and user agreements, and use collected information as described in this Policy to provide you with better services:

4.1 Providing you with services.

4.2 Meeting your personalized needs. For example, language settings, personalized help services and instructions, or responding to you and other users in other aspects.

4.3 Service optimization and development. For example, we will optimize our services based on information generated when the TCA platform responds to your needs.

4.4 Protecting Tencent, TCA users, and Tencent's partners. For example, we may use your information for identity verification, security prevention, fraud monitoring, and assessing the security of your account. For instance, when you use security features or other similar services, we will detect malicious programs or viruses or identify fraudulent information for you. For example, when handling relevant disputes or complaints, we will provide relevant information to the parties involved to better facilitate the resolution of such disputes or complaints.

4.5 Pushing relevant business messages (such as product updates, code analysis results, TCA news, etc.) and commercial advertisements to you. For example, TCA may push commercial advertisements to you via SMS, phone calls, emails, or other means using your mobile phone number, email address, WeChat ID, etc., to promote TCA services or other services on the TCA platform.

4.6 Providing you with more relevant services. For example, based on statistical analysis of your information or other users' business data statistics and analysis from TCA services, we will provide you with functions or services you may be interested in.

4.7 Inviting you to participate in surveys about our products and services.

4.8 We may integrate and analyze data on the use of one or more TCA platform functions by TCA users with data on the use of services by users of other services to form statistical user reports, business analyses, and other materials (collectively referred to as "statistical materials") for internal or external sharing, publication, or display. We will ensure that statistical materials do not involve information that can identify specific users.

4.9 Other scenarios where collected information may be used. If the usage scenario has no reasonable connection with the initial scenario, we will re-obtain your consent before using the information.

4.10 In accordance with relevant laws, regulations, and national standards, we may collect and use your personal information without your authorization in the following circumstances:

Where it is necessary for us to fulfill our legal obligations;
Where it is directly related to national security or national defense security;
Where it is directly related to public security, public health, or major public interests;
Where it is directly related to criminal investigation, prosecution, trial, or enforcement of judgments;
Where it is necessary to protect your or another individual's significant lawful rights and interests (such as life or property) but obtaining your authorization is difficult;
Where the personal information involved has been made public by you to the general public;
Where it is necessary to conclude or perform a contract at your request;
Where personal information is collected from lawfully publicly disclosed sources, such as legitimate news reports or government information disclosures;
Where it is necessary to maintain the secure and stable operation of the provided products or services, such as identifying and resolving product or service malfunctions;
Other circumstances prescribed by laws and regulations.

We may share your information with Tencent, third-party service providers, service vendors, and agents, solely for the following purposes:

5.1.1 To provide the functions or services described in Section 2 ("Information We Collect") and to achieve the purposes specified in Section 4 ("How We Use Collected Information").

5.1.2 To fulfill our obligations or exercise our rights under the Tencent Cloud Code Analysis Service Agreement or this Policy.

5.1.3 To provide better services, we may entrust third-party service providers, service vendors, and agents (collectively referred to as "partners") to provide you with services, including but not limited to consulting services, customer service, product recommendations, and technical services. Therefore, to provide you with services, we may share certain information with partners. For example, to complete identity verification or provide you with more suitable products and services.

5.1.4 For products or services jointly developed or provided by us and partners, we may need to share part of your information with partners to fulfill your purpose of using such products or services.

If we share your information with any of the above third parties, we will only share it with them within the scope necessary to provide services, based on the principles of lawfulness, legitimacy, and necessity. We will endeavor to ensure that third parties comply with this Policy and other appropriate confidentiality and security measures we require them to follow, and they warrant that they will not use your information for any other purposes.

5.2 Public Disclosure of Personal Information

We will not publicly disclose the personal information we collect. If public disclosure is necessary, we will inform you of the purpose of the disclosure, the types of information to be disclosed, and any sensitive information that may be involved, and obtain your explicit consent.

5.3 Transfer of Personal Information

As our business continues to develop, we may engage in transactions such as mergers, acquisitions, or asset transfers. We will notify you of such circumstances and continue to protect your personal information or require the new controller to continue protecting it in compliance with laws, regulations, and standards no less stringent than those required by this Policy.

5.4 Other Circumstances

In accordance with relevant laws, regulations, and national standards, we may share, transfer, or publicly disclose personal information without prior authorization from the personal information subject in the following circumstances:

5.4.1 Where it is directly related to national security or national defense security;

5.4.2 Where it is directly related to public security, public health, or major public interests;

5.4.3 Where it is directly related to criminal investigation, prosecution, trial, or enforcement of judgments;

5.4.4 Where it is necessary to protect the significant lawful rights and interests (such as life or property) of the personal information subject or another individual but obtaining their consent is difficult;

5.4.5 Where the personal information has been made public by the personal information subject to the general public;

5.4.6 Where personal information is collected from lawfully publicly disclosed sources, such as legitimate news reports or government information disclosures.

6. Storage of Information

6.1 Methods and Duration of Information Storage

We will store your information in secure ways. Generally, we will only store your personal information for the period necessary to achieve the purposes of the services or as required by laws and regulations.

6.2 Geographic Location of Information Storage

In compliance with laws and regulations, we will store user personal information collected within China within the territory of China.

Currently, we do not transfer or store your personal information across borders. If cross-border transfer or storage is required in the future, we will inform you of the purpose of the cross-border transfer, the recipient, security safeguards, and security risks, and obtain your consent.

6.3 Notification of Service Termination

If our products or services cease operations, we will notify you via push notifications, announcements, or other forms, and delete your personal information or anonymize it within a reasonable period, unless otherwise required by laws and regulations.

7. Information Security

7.1 Security Protection Measures

7.1.1 We strive to safeguard the security of user information to prevent information leakage, loss, improper use, unauthorized access, and disclosure. We use multi-faceted security protection measures to ensure that user personal information is protected at a reasonable level of security, including technical protection measures, management system controls, security system safeguards, and other aspects.

7.1.2 We use various security technologies to protect information. For example, we will endeavor to implement encryption and other security protection measures to prevent unauthorized access, modification, leakage, damage, or loss of user personal information.

7.1.3 We have established strict management systems and processes to safeguard information. For example, we strictly limit access to information to authorized personnel, conduct audits, and require them to comply with confidentiality obligations.

7.1.4 We attach great importance to information security compliance and fully safeguard your information security using industry-leading solutions.

7.2 Security Incident Response Measures

In the event of a security incident involving personal information leakage, damage, or loss, we will activate emergency response plans to contain the incident, report it to relevant authorities in a timely manner in accordance with the "National Cybersecurity Incident Emergency Response Plan" and other laws and regulations, and promptly notify you of the basic details of the incident, the measures we are taking or have taken to address and remedy the incident, and our recommendations for your response via push notifications, emails, or other means. If individual notification is difficult, we will issue warnings through announcements.

8. Managing Your Information

8.1 You may access, modify, and delete your user personal information. However, please note that different requirements may apply to accessing, modifying, and deleting different types of information to protect your account security and lawful rights. Additionally, due to technical logic, legal requirements, and legitimate reasons such as information security, some of your information may not be accessible, modifiable, or deletable (e.g., information beyond the authorization scope of your team).

8.2 After registration, you may complete or modify your account information.

8.3 We will collect, use, and store your information in compliance with laws, regulations, or our agreement. If we violate laws, regulations, or our agreement in collecting, using, or storing your information, we will correct or delete the information.

8.4 If there are errors in the information we have collected or stored about you and you are unable to correct them yourself, you may request us to make corrections.

8.5 Account Cancellation

8.5.1 If you have not created a team, you may send an email to tca@tencent.com to apply for account cancellation. After verifying your identity, we will provide you with account cancellation services. After successful cancellation, all services and data under the account will be deleted and cannot be recovered.

If you have created a team, you must transfer team permissions to another user or delete the team before sending an email to tca@tencent.com to apply for account cancellation. Please note that after transferring team permissions, data attributed to the team will be controlled and managed by the receiving user (team).

8.5.2 After receiving your cancellation application, we will verify your identity and check if there are any unresolved disputes related to your account. Upon successful verification, we will provide you with account cancellation services. After successful cancellation, all services and data under the account will be deleted and cannot be recovered.

After you cancel your account, we will retain your relevant information in accordance with legal requirements. After the statutory retention period expires, we will delete or anonymize your personal information in accordance with the law.

9. Amendments to This Policy

We may revise the terms of this Policy from time to time, and such revisions shall form part of this Policy. If such revisions may substantially reduce your rights under this Policy or significantly expand the scope of our collection and use of information, or involve other material changes to key rules, we will notify you before the revisions take effect by prominent notices on the TCA website, emails, or other means. In such cases, if you continue to use our services, it will indicate your acceptance of the revised content.

10. Protection of Minors

We attach great importance to the protection of minors' personal information. In accordance with relevant laws and regulations, if you are a minor under 18 years of age, you must obtain prior written consent from your parent or legal guardian before using Tencent Cloud Code Analysis Services. If you are the legal guardian of a minor and have questions about the minor's personal information, please contact us through the contact information provided in Article 12.

Notably, if you are a child under 14 years of age, we have specially formulated the Children's Privacy Protection Policy. Before children under 14 years of age or their guardians use Tencent Cloud Code Analysis Services, they should also carefully read Tencent's specially formulated Children's Privacy Protection Policy. Children under 14 years of age may only use Tencent Cloud Code Analysis Services after obtaining the guardian's consent to the Children's Privacy Protection Policy.

11. Miscellaneous

The Tencent Privacy Policy is a general privacy policy uniformly applied by Tencent, and the user rights and information security protection measures specified therein apply to users of the TCA platform. If there are inconsistencies or conflicts between the Tencent Privacy Policy and this Policy, this Policy shall prevail.

12. Contact Us

We have established a dedicated personal information protection team and a personal information protection officer. If you have any questions, complaints, or suggestions regarding this Policy or personal information protection, or wish to download a copy of your personal information, you may contact us through the following methods:

Send an email to tca@tencent.com;
Contact us via https://kf.qq.com/;
Mail your inquiry to the following address:
Data Privacy Protection Department, Tencent Binhai Mansion, No. 33 Haitian Second Road, Nanshan District, Shenzhen, Guangdong Province, China (for receipt)
Postal Code: 518054

We will review the inquiry as soon as possible and respond within 15 working days or within the time limit specified by laws and regulations.

Tencent Cloud Computing (Beijing) Co., Ltd.