Privacy Policy | Compliance Rules for Cross-Border Data Segregation

Effective Date: October 5, 2026 | Entity: UPHOTO PTE. LTD. (Singapore). This policy explains how UPhoto (hereinafter referred to as “we”) collects, stores, uses, and protects your information when providing the Photo Livestream SaaS Platform and Corporate Event Imaging Service.

I. Information We Collect

1. Minimum Required Fields for WeChat Authorized Login

When you log in to our service via WeChat authorization, we collect only the following minimum required fields:

openid	WeChat Open Platform user unique identifier, used for account identification and maintaining login status
unionid	WeChat Open Platform unified account identifier (if applicable), used for cross-app account integration
nickname	WeChat nickname, displayed in the photo album
avatar	WeChat profile picture, displayed in the photo album
platform	Platform login ID, used for technical troubleshooting and statistics
status	Account Status, used for account management

We do not collect your cell phone number or email address.; Please take the initiative to contact us regarding business matters through official channels (see the “Contact Us” page).

2. Video Data

To provide the “On-site Instant Photo Delivery” service, we will store photos taken at the event, album access logs, and guest information uploaded by the event organizer (if any).

II. Data Storage and Cross-Border Regulations

Domestic customers' image data is stored on servers located within mainland China;
Video footage from overseas clients is stored in separate data regions to meet compliance requirements under Chinese regulations, the GDPR, and Singapore’s PDPA. The storage region depends on the event location and can be confirmed in writing prior to signing the contract;
WeChat authorization fields and the associated activity albums are stored in the same data partition, and no unrelated cross-border data transfers take place.

III. Use of Information

We use your information only to the extent necessary to provide Photo Livestream services, manage photo albums, and provide customer support. We do not sell personal information or share it with unrelated third parties.

IV. Your Rights

In accordance with the GDPR, Singapore’s PDPA, and relevant Chinese laws and regulations, you have the right to access, correct, or delete your personal information, as well as the right to withdraw your consent. Please exercise these rights through the following channels:

Email:liuhongtao@uphoto.cn
For official contact information for both China and Singapore, please see the "Contact Us" page.

V. Policy Updates

We may update this policy from time to time. Updated versions will be posted on this page and will include the effective date.

Privacy Policy: Compliance Rules for Cross-Border Data Segregation and Storage