# AI-LABA Privacy Policy
Publication Date: August 26, 2026
Last Updated: August 26, 2026
Effective Date: August 26, 2026
Introduction
AI-LABA (hereinafter referred to as "the Platform" or "we") respect and protect the privacy rights of every user. This Privacy Policy is designed to clearly explain how we collect, use, store, share, and protect your personal information, as well as the rights you are entitled to under applicable laws.
Note on Product Name and Operating Entity: The operating entity referred to in this Policy (i.e., "we" under this Policy) is Shanghai Laba Information Technology Co., Ltd., which belongs to the Weichaishi (微差事) group together with the "AI·LABA" product brand. The developer information "Weichaishi Information Technology (Shanghai) Co., Ltd." displayed on third-party app distribution platforms refers to a related legal entity within the Weichaishi (微差事) group to which the platform's operating entity belongs. It and "Shanghai Laba Information Technology Co., Ltd." referenced in this Policy are distinct legal entities under the common control of the same group, and together provide product, technology, and operational support for the platform. If you have any questions about the operating entity or the affiliated relationship, you may contact us through the in-platform "Me — Customer Service & Help" channel for verification.
Please read this Privacy Policy carefully before using our services. By using our services, you indicate that you agree to our collection, use, and protection of your personal information in accordance with this Privacy Policy.
1. How We Collect and Use Your Personal Information
1.1 Registration and Account Information
To provide you with services, we need to collect the following information:
| Information Type | Specific Content | Purpose | Required |
|---|---|---|---|
| Basic Info | Phone number, email | Account registration and login verification | Yes |
| Identity Info | Name, ID number | KYC real-name verification (upon withdrawal) | No (withdrawal only) |
| Business Verification | Company name, Unified Social Credit Code | Enterprise user verification | No (enterprise verification only) |
| Security Info | Login password, SMS verification code | Account security | Yes |
Progressive Verification Strategy: We adopt an L0→L1→L2 progressive verification approach:
- L0: Login stage — phone number/email only
- L1: First task stage — create anonymous profile
- L2: Withdrawal stage — complete real-name/KYC verification
1.2 Task Publishing and Execution Information
| Information Type | Specific Content | Purpose |
|---|---|---|
| Task Info | Task description, delivery standards, acceptance criteria, compensation | Task publishing and matching |
| Location Info | Task location (province/city/district/POI), GPS coordinates | Task matching and nearby recommendations |
| Evidence Info | Photos, audio recordings, videos, location check-ins | Task acceptance and quality assurance |
| Time Info | Task creation time, execution time, acceptance time | Task process management |
Location Information Handling:
- Location information collected is bucketed at 100-meter distance granularity; precise GPS coordinates are not recorded
- Task locations are displayed at the province/city/district three-level administrative level
- Location information of performers is used solely for task matching and will not be used for other purposes
1.3 Transaction and Payment Information
| Information Type | Specific Content | Purpose |
|---|---|---|
| Payment Info | Payment channels (WeChat Pay / Alipay / bank card) | Fund escrow and settlement |
| Account Info | Withdrawal account, payment receipt information | Task settlement |
| Transaction Records | Order number, transaction amount, transaction time | Accounting management and reconciliation |
Important Notice:
- We do not handle user funds directly; funds are held by licensed payment/settlement institutions
- We do not collect bank card numbers, payment passwords, or other sensitive financial information
- All payment operations are completed by licensed institutions such as WeChat Pay and Alipay
1.4 Usage Behavior Information
| Information Type | Specific Content | Purpose |
|---|---|---|
| Device Info | Device model, operating system | Service optimization and security risk control |
| Advertising Identifier | Open Anonymous Device Identifier (OAID) | Advertising delivery, advertising performance measurement, and conversion attribution |
| Log Info | IP address, browser type, access time | Service analytics and troubleshooting |
| Browsing Records | Pages viewed, click behavior | User experience optimization |
| Cookie | Session Cookie, preference-setting Cookie | Service functionality and user experience |
Log Information Handling:
- Our log system uses zero PII design and does not record personal identity information
- IP addresses are only partially masked (first 3 octets); full IP is not recorded
- Log retention period does not exceed 6 months
1.5 Communications and Notifications
| Information Type | Specific Content | Purpose |
|---|---|---|
| Customer Service Communication | Consultation records, complaints and suggestions | Customer service and improvement |
| Notification Messages | System notifications, task reminders, settlement notices | Service delivery |
| Marketing Information | Promotional offers, event notifications | Marketing promotions with your consent |
2. How We Use Your Personal Information
2.1 Core Purposes
The information we collect will be used for the following purposes:
- Identity Verification: Registration, login, real-name authentication, anti-fraud verification
- Task Matching: Recommend tasks based on your location, capabilities, and time preferences
- Task Execution: Create tasks, submit evidence, perform acceptance
- Fund Settlement: Escrow, allocation, withdrawal, invoicing
- Platform Operations: Customer support, complaint handling, dispute resolution
- Security Assurance: Security audits, anomaly detection, risk prevention
- Product Optimization: Feature improvements, user experience enhancement
- Compliance: Adherence to laws, regulations, and regulatory requirements
2.2 Special Processing
Sensitive Personal Information: We will separately obtain your consent before processing the following sensitive information:
- Biometric information (face recognition, fingerprints)
- ID numbers, bank card numbers
- Trajectory/location information
- Personal information of minors under the age of fourteen
AI-Assisted Services: The platform\'s AI co-pilot service processes your task descriptions, execution records, and other information to generate drafts, recommend matches, and assist decision-making. AI does not retain the original content of your tasks beyond the necessary period.
3. How We Share, Transfer, and Disclose Your Personal Information
3.1 Sharing
We will not sell your personal information to any third party. We may share your personal information only under the following circumstances:
| Recipient | Information Shared | Purpose |
|---|---|---|
| Requester ↔ Performer | Task-related information, evaluation information | Task execution and acceptance |
| Payment Institutions | Transaction information, account information | Fund escrow and settlement |
| Real-Name Authentication Providers | Identity information, certification information | KYC compliance |
| Cloud Service Providers | Stored data (encrypted) | Technical support |
| Insurance Companies | Transaction records, risk information | Insurance services (if applicable) |
| Regulatory Authorities | Information required by law | Compliance obligations |
Sharing Principles:
- Minimum Necessary: Only share information essential for completing the task
- Purpose Limitation: Recipients may use information solely for agreed purposes
- Security Protection: Confidentiality agreements are signed with recipients to ensure information security
3.2 Transfer
We will not transfer your personal information to any third party, except:
- With your explicit consent
- In the event of merger, acquisition, or bankruptcy, where we will require the new controlling party to be bound by this Policy
3.3 Public Disclosure
We will only publicly disclose your personal information under the following circumstances:
- With your explicit consent
- Pursuant to laws, regulations, legal procedures, or mandatory government requirements
- When necessary to protect the legitimate rights and interests of the Platform, users, or the public
4. How We Store and Protect Your Personal Information
4.1 Storage
- Storage Location: All personal information is stored on servers within the People\'s Republic of China
- Storage Period:
- Account information: Isolated immediately after account closure and deleted or anonymized by default after 30 calendar days, except where continued retention is required by law or an applicable legal hold
- Transaction records: As required by laws and regulations (generally not less than 5 years)
- Task data: 2 years after task completion
- Log data: Not exceeding 6 months
- Encryption: Sensitive information (e.g., ID numbers, bank card numbers) is stored using AES-256 encryption
4.2 Security Protection
We implement the following measures to protect your personal information:
-
Technical Measures:
- HTTPS/TLS encryption for data transmission
- Encrypted storage of sensitive data
- Access control and permission management
- Firewall and intrusion detection
- Regular security audits -
Administrative Measures:
- Employee privacy protection training
- Minimum privilege access principle
- Security incident emergency response mechanism
- Third-party service provider security assessment -
On-site Evidence Protection:
- Location information is desensitized with 100-meter distance bucketing
- Face and license plate information is blurred first, then visible upon confirmation
- Evidence is used solely for task acceptance and not for other purposes
5. Your Rights
Under the Personal Information Protection Law of the People\'s Republic of China (PIPL) and other applicable laws, you have the following rights:
5.1 Right of Access
You have the right to access your personal information. You can view and edit your personal information in account settings.
5.2 Right to Correction
You have the right to correct inaccurate personal information. If you find information is incorrect, you may modify it in account settings or contact customer service.
5.3 Right to Deletion
You have the right to request deletion of your personal information under the following circumstances:
- The purpose for processing your personal information has been achieved, cannot be achieved, or is no longer necessary
- We have stopped providing services and no longer have a need to retain the information
- You withdraw your consent and we have no other legal basis for processing
- We have processed your personal information in violation of laws, regulations, or agreements with you
5.4 Right to Withdraw Consent
You may withdraw consent through the following methods:
- Manage privacy preferences in account settings
- Contact customer service to withdraw consent for specific processing
- Cancel your account
Note: Withdrawing consent does not affect the validity of personal information processing activities conducted based on your consent prior to withdrawal.
5.5 Right to Account Cancellation
You may request account closure through the in-app account closure function as follows:
- Sign in to the app and go to “Me” → “Settings” → “Account Closure.”
- Review the consequences of closure and any account balance, unfinished tasks, pending settlements, disputes, or other outstanding matters shown by the system.
- Enter your current account password to verify your identity, select “I understand that the account cannot be recovered after closure,” and tap “Request Account Closure.”
- After submitting the request, you can return to “Account Closure” to view its status, latest completion time, and any outstanding matters. Outstanding matters do not prevent you from submitting a request, but closure will be completed only after those matters have been resolved.
Account closure rules and processing time:
- A closure request will be completed within a maximum of 15 calendar days after acceptance and may be completed earlier if there are no outstanding matters.
- Before the account service is actually closed, you may return to “Account Closure,” verify your identity, and cancel the request.
- Once closure is completed, the original account is permanently closed and cannot be recovered. Its login credentials and account permissions will be revoked.
- Account data is isolated immediately after closure and, by default, deleted or irreversibly anonymized after 30 calendar days. Data that must be retained under applicable law or an active legal hold is excluded and will be retained with restricted access only for the required purpose and period. It will no longer be used for marketing, recommendations, or profiling.
- Until isolation and credential cleanup are complete, the same phone number, email address, WeChat account, or other login credential may not be available for registration. If registration later becomes available, it creates a new account and does not restore or inherit data from the former account.
- An organization-managed account cannot be closed through the personal closure entry. Please contact the relevant organization administrator for account handoff or closure.
If you cannot sign in, cannot use the in-app entry, or need assistance, you may submit an account closure request through service@laba.cn, by calling +86-21-33909378, or through the in-app “Contact Customer Service” entry. To protect your account, we will assist after verifying your identity.
5.6 Right Regarding Automated Decision-Making
If you have objections to decisions made solely through automated decision-making (including AI-assisted decisions), you have the right to request an explanation from us and to refuse decisions made solely through automated decision-making.
5.7 Right to Complaint
If you believe our personal information processing activities have infringed upon your legitimate rights and interests, you have the right to file complaints with relevant regulatory authorities including cyberspace administration, communications administration, and public security departments.
How to Exercise Your Rights
To exercise the above rights, please contact us through:
- Email: service@laba.cn
- Phone: +86-21-33909378
- Online: "Contact Customer Service" in-platform entry
We will respond to your request within 15 business days.
6. Cookies and Similar Technologies
6.1 How We Use Cookies
- Necessary Cookies: Used to implement basic functions (such as login status retention)
- Performance Cookies: Used to understand how users use the website (such as number of pages visited)
- Functionality Cookies: Used to remember your preference settings
- Analytics Cookies: Used to analyze user behavior and optimize services
6.2 How You Can Manage Cookies
- You can manage or delete cookies in your browser settings
- Disabling cookies may affect the use of some functions
- We will not use cookies to collect your sensitive personal information
7. Third-Party Services
7.1 Third-Party SDKs
We may integrate third-party SDKs to provide services, including but not limited to:
| Third Party | Purpose | Information Collected |
|---|---|---|
| WeChat Pay | Payment function | Transaction information, account information |
| Alipay | Payment function | Transaction information, account information |
| Real-name Authentication Service Provider | KYC certification | Identity information, certification information |
| Cloud Storage Service | Evidence storage | File data |
| SMS Service Provider | Verification code sending | Phone number |
| Map Service Provider | Location matching | Location information |
Petal Ads SDK Disclosure
| SDK and Provider | Purpose and Scenario | Personal Information Processed | Processing Method | Third-Party Privacy Notice |
|---|---|---|---|---|
| Petal Ads SDK (鲸鸿动能 SDK) Huawei Software Technologies Co., Ltd. |
To display advertisements on Huawei devices and measure advertising performance and conversion attribution | Open Anonymous Device Identifier (OAID), a resettable, non-permanent device identifier | After you consent to this Privacy Policy, the SDK automatically reads the OAID locally by calling the device system's advertising identifier service and transmits and processes it over the network in accordance with its privacy notice. We do not obtain your name, phone number, or ID number through this SDK. | Petal Ads SDK Privacy Notice |
Your choices and controls: The Petal Ads SDK processes the information above only after you consent to this Privacy Policy. On Huawei devices, you can disable personalized ads, limit ad tracking, or reset the OAID under “Ads and privacy” or a similar system setting (the exact path may vary by system version). You may also withdraw consent through the channels listed in “How to Contact Us.” Withdrawal does not affect processing performed before withdrawal based on your consent.
7.2 Third-Party Links
Our services may contain links to third-party websites. We are not responsible for the privacy policies of third parties. We recommend that you read the privacy policies of third parties.
8. Protection of Minors
- We will not intentionally collect personal information of minors under the age of fourteen
- If you are a minor under the age of fourteen, please use our services under the guidance of your guardian
- If you believe we have inadvertently collected a minor\'s personal information, please contact us immediately
- Upon discovering inadvertent collection of minors\' information, we will delete the relevant information as soon as possible
9. Disclosure of Information
9.1 Legal Requirements
We may disclose your personal information under the following circumstances:
- To fulfill obligations at your request
- Pursuant to provisions of laws and regulations or mandatory requirements of government competent departments
- To protect the legitimate rights and interests of the platform from harm
- As required by judicial organs or administrative organs in accordance with the law
9.2 Commercial Purposes
We will not use your personal information for any other purposes not specified in this Policy, and will not use your personal information for marketing purposes unless we obtain your explicit consent.
10. Updates to This Privacy Policy
10.1 Circumstances for Updates
We may revise the terms of this Privacy Policy from time to time. When the Privacy Policy is changed, we will announce the change information on the homepage, this page, or other appropriate locations.
10.2 Notification Method
- Major changes: Notified through in-site messages, emails, or SMS
- General changes: Updated on this page
10.3 Continued Use
If you do not agree to the revised Privacy Policy, you should stop using our services immediately. If you continue to use our services, you indicate that you agree to accept the updated Privacy Policy.
11. How to Contact Us
If you have any questions, opinions, or suggestions about this Privacy Policy, or wish to exercise your rights, please contact us through the following methods:
| Contact Method | Information |
|---|---|
| Customer Service Email | service@laba.cn |
| Customer Service Phone | +86-21-33909378 |
| Business Hours | 9:30-18:30 |
| Operating Entity | Shanghai Laba Information Technology Co., Ltd. |
| Registered Address | Room 216B, Building 11, No. 613 Eshan Road, China (Shanghai) Pilot Free Trade Zone, Shanghai, China |
| Unified Social Credit Code | 913101155680297624 |
| ICP Filing Number | Hu ICP Bei 11008428号-1 |
| Public Security Filing | Hu Internet Security Bei 31010102007660号 |
We will respond to your request within 15 business days.
12. Definitions
- Personal Information: Various information recorded electronically or in other forms that is related to identified or identifiable natural persons, excluding information after anonymization processing.
- Sensitive Personal Information: Personal information that, if leaked or illegally used, is likely to cause infringement of the personal dignity of natural persons or harm to personal and property security, including biometric, religious belief, specific identity, medical health, financial account, trajectory information, and personal information of minors under the age of fourteen.
- De-identification: The process of processing personal information so that it cannot identify a specific natural person without additional information.
- Anonymization: The process of processing personal information so that it cannot identify a specific natural person and cannot be restored.
- Automated Decision-Making: Activities through which computer programs automatically analyze, evaluate a person\'s behavioral habits, interests and hobbies, or economic, health, credit status, etc., and make decisions.
- Deletion: Processing of personal information under conditions that ensure the output information cannot be retrieved and restored.