AVC Privacy Policy

Updated date of this version: March 22, 2022

Effective date of this version: March 22, 2022

We appreciate your concern for AGORA (hereinafter referred to as “we” or “our”), and thank you for using our software of AGORA VIDEO CALL (hereinafter referred to as “AGORA VIDEO CALL”) and the online audio and video interactive services (collectively referred to as the “services”) provided by us.

The Privacy Policy of AGORA VIDEO CALL (hereinafter referred to as “this Privacy Policy”) is applicable to the online audio and video interactive services provided by us. When you use our online interactive service, you are deemed to have agreed to accept this Privacy Policy.

We are well aware of the importance of personal information to you and will do our best to protect your personal information in a secure and reliable manner. We are committed to maintaining your trust in us and abide by the following principles:

Integration of rights and responsibilities

Clearly defined objectives

Minimum necessity

Open and transparent

Ensured security

Subjective participation

Special Prompts: Please carefully read (minors should be accompanied by their guardians when reading) and understand this Privacy Policy (especially the contents in bold or underlined) before using the services, so as to make appropriate choices. Once you use our products or services or continue to use the same after we update this Privacy Policy, you are deemed to have agreed to this Privacy Policy and agreed us to collect, use, store, share, transfer and disclose your relevant personal information in accordance with this Privacy Policy.

This Privacy Policy will help you understand the following contents:

I. What personal information we collect about you

II. How we use your personal information

III. How we use Cookie and the similar technologies

IV. How we share, transfer and disclose your personal information

V. Your right of information protection

VI. How we deal with children’s personal information

VII. How we protect your information security

VIII. How long we will keep your personal information

IX. How your personal information is transferred around the world

X. How this policy is updated

XI. How to contact us

I. What personal information we collect about you

We collect your personal information mainly to make it easier and more satisfactory for you and other users to use the Services. Such personal information will help us achieve this goal.

In terms of this policy, "personal information" refers to all kinds of information recorded electronically or otherwise that can identify the identity of a specific natural person or reflect the activities of a natural person alone or in combination with other information.

In order to provide you with our services, we will take the initiative to collect the personal information requisite for providing the services from you. You have the right to refuse to provide such personal information. If so, we may not be able to provide you with some services, or you may not be able to enjoy some functions, but it will not affect your use of services or functions that do not require personal information. Click to view Notes to Application and Use of Application Permissions of AGORA VIDEO CALL.

We only collect the necessary personal information for clear, legal and disclosed purposes, and guarantee that we will not process the information in a way inconsistent with such purposes. We obtain personal information relating to you from the following sources:

1.1 The information we directly collect from you

When you use our AGORA VIDEO CALL and services, you are deemed to have understood and agreed that you may be required to enable specific access permissions in your device to realize the collection and use of personal information involved with these permissions:

(1) When you use our services, in order to ensure the normal provision and safe operation of the services, we will obtain your device model, system version, system language, IP address (used to infer the approximate location at the city or country/territory level), network status permission and WiFi status permission according to your authorization, so as to collect the mode and type of your network access and the operation log, as well as other device information (for example, your Bluetooth information will be collected when you connect the device with a Bluetooth headset). We collect such information to ensure the safe operation of the network or operation. In the meantime, we will also make corresponding version adaptation for you based on such information to ensure the normal and safe operation of the software.

(2) When you log in or sign up, we will collect the mobile phone number or email address and user name provided by you. We promise that the above information is collected to provide you with account login service, protect your account security and prevent security risks.

(3) When you log in with a third-party platform account (WeChat, Apple ID, WeWork), we will obtain the user name, avatar, user account and authentication information under the third-party account according to your authorization. We promise that the above information is collected to provide you with account login service, protect your account security and prevent security risks.

(4) When you use the online audio interactive function, we will obtain the microphone function according to your authorization. The authorization enables us to collect your IP address, mobile device model, system version, system language and region, and may also include audio contents and message contents in the room; the contents may include your voices, depending on your settings and the operations you perform in the services;

(5) When you use the online video interactive function, we will obtain the camera functions according to your authorization. The authorization enables us to collect your IP address and mobile device model, and may also include videos and message contents in the room; the contents may include your images, depending on your settings and the operations you perform in the services.

(6) When you use the recording function, we will store the online audio and video interactive contents according to your authorization; if you refuse to grant the authorization, you will not be able to use the recording function, but it will not affect the use of other services provided by us.

(7) When you use the screen share function, we will obtain the screen recording permission according to your authorization, which enables us to collect the contents you actively share; if you refuse to grant the authorization, you will not be able to use the screen share function, but it will not affect the use of other services provided by us.

(8) When you use the meeting reservation function, we will obtain the calendar write data according to your authorization; if you refuse to grant the authorization, you will not be able to use the meeting reservation function, but it will not affect the use of other services provided by us.

(9) When you use our services, we will collect the information about the interaction of you and your device with Agora Video Call, including the time when you join and leave the room, whether you have sent any message and the objects of the sent messages, all functions (such as screen share, video on/off, microphone on/off).

If you no longer use the services, we also provide cancellation of registered account on the premise of meeting the conditions agreed in the service agreement and the provisions of relevant national laws and regulations, you can find and follow the guidelines at Agora Video Call "Setting - Personal Center - Cancellation” to complete the account cancellation, or apply for cancellation according to the contact information agreed in Article 11 [How to contact us] of this Privacy Policy. When your account is canceled or deleted, all service materials and data relating to this account will be deleted or anonymized, unless otherwise stipulated by laws and regulations of People's Republic of China(“PRC”).

1.2 Other circumstances

In accordance with relevant laws, regulations and national standards of PRC, we may collect and use your relevant personal information under the following circumstances without your authorization or consent:

In direct connection with national security, national defense security and other national interests; in direct connection with major public interests such as public security, public health and public right to know;
In direct connection with criminal investigation, prosecution, trial and judgment execution;
For the purpose of safeguarding your or other individuals’ life, property, reputation and other major legitimate rights and interests, but it is difficult to obtain your consent;
The personal information collected is disclosed to the public by yourself;
The personal information is collected from legally disclosed information, such as legal news reports, government information disclosure and other channels;
Requisite for signing and performing contracts according to your requirements;
Requisite for maintaining the safe and stable operation of the products or services provided, such as detecting and handling the faults of products or services;
Requisite for legal news reports;
It is necessary to carry out statistical or academic research in the public interest, and when the results of academic researches or descriptions are provided to the public, the personal information contained in the results are de-identified;
Other circumstances provided by laws and regulations of PRC.

II. How we use your personal information

2.1. We may use your personal information collected under Section 1 “what personal information we collect about you” in this policy for the following purposes:

(1) To perform the agreement with you: when you choose to accept our “User Service Agreement” and continue to use our services, we are deemed to have reached an agreement. In order to perform this agreement and provide you with the services you choose, we will use your requisite personal information.

(2) To maintain the security, quality and stable operation of our services: we will use your personal information to ensure the security and stability of our services and provide you with better service quality.

(3) To fulfill legal obligations: we may use your personal information in order to comply with the provisions of laws and regulations of PRC.

(4) To safeguard legitimate rights and interests: we may use your personal information in order to safeguard your or other individuals’ life, property and other major legitimate rights and interests, or safeguard our legitimate rights and interests.

(5) Other purposes: if it is necessary to use the user’s personal information beyond the purposes or scope of this policy, we will obtain your consent separately.

III. How we use Cookie and the similar technologies

3.1 What is Cookie

Cookies are small files containing strings (usually encrypted) that are sent to and stored in your computer, mobile device or other devices when you log in to and use websites or other network contents. The similar technologies as Cookie are other technologies that can be used for similar purposes as Cookie, such as Web Beacon, Proxy, embedded scripts, etc.

At present, we mainly use Cookies to collect your personal information. You have understood and agreed that with the development of technology and the further improvement of our products and services, we may also use the similar technologies as Cookie.

3.2 How to use Cookie

(1) When you use our products and/or services, we may use Cookies and the similar technologies to collect some of your personal information. Specifically, we may collect your information as follows:

Your browsing history
Your login information

(2) Cookies and the similar technologies collect the above information to necessarily simplify your repeated operation steps when you use our products and/or services, which may be specifically applied to the following scenarios:

To simplify your repeated operation steps (such as sign-up, login)
To protect your information and account security
To improve our products and services and other necessary scenarios

We promise to use Cookies and the similar technologies only for the purposes set forth in this Privacy Policy.

3.3 How to manage Cookie in browser

If your browser allows, the specific management methods are as follows:

(1) You can manage and (in part or in whole) reject Cookies and/or the similar technologies in settings of your browser;

(2) You can delete Cookies and/or the similar technologies that have been stored in your computer, mobile device or other devices, so that we cannot track all or part of your personal information.

If you need to know more about how to change the browser settings, please check the relevant settings page of the browser you use.

IV. How we share, transfer and disclose your personal information

4.1. Unless as stated in this policy or otherwise specified when collecting your information, we will not share your information with any third party without your express consent. We may share your information with third parties under the following circumstances:

(1) Our affiliates: we may disclose your personal information to our affiliates. “Affiliate” refers to any other entity that directly or indirectly controls, is controlled by or is under common control with us.

(2) Other users: if you publish your information in an area accessible to the public or share your information in the process of using the services, other users may obtain, read and use the information you publish and share, including your pictures, portraits, voices, videos, audios, texts, views, etc.

(3) To fulfill legal responsibilities: if required by laws and regulations, or in order to implement court judgments and rulings, or to comply with the requirements of relevant government authorities, we do not need to obtain your prior authorization and consent for retaining, saving, sharing, transferring or disclosing your information.

(4) To protect and exercise our rights: based on good faith, we also reserve the right to disclose your information if we consider it reasonable or necessary, so as to (i) take precautions to prevent liability for damages; (ii) protect ourselves or others from fraud or illegal use or activities; (iii) investigate and defend any third party’s claims or allegations; (iv) protect the security or integrity of the services and any facilities or equipment required for the services, or (v) protect our property or other legal rights (including but not limited to performance of our agreements) and protect the rights, property or security of others.

(5) With your consent: we can also explain the way we will disclose the collected information via notices when collecting the information, or disclose such information in any other way with your express consent.

(6) In order to enable you to enjoy the services and functions listed in the table below, third-party software development kits (SDK) provided by our partners, code plug-ins or other similar applications will be embedded in the application. We will conduct security inspection on the application program interface (API) and software development kit (SDK) used by partners to obtain relevant information, and stipulate strict data protection measures with the authorized partners to enable them to process personal information in accordance with our entrustment purpose, service description, this Privacy Policy and any other relevant confidentiality and security measures.

List of Third-party SDKs Accessed to AGORA

4.2. We will not transfer your personal information to any company, organization or individual, except the following circumstances:

(1) Transfer upon express consent:

We will transfer your personal information to other parties upon your express consent;

(2) In case of merger, acquisition or bankruptcy liquidation:

If the transfer of personal information is involved, we will require the new company or organization holding your personal information to continue to be bound by this policy; otherwise we will require the company or organization to obtain your authorization or consent.

(3) We will only disclose your personal information under the following circumstances:

With your express consent;
Law-based disclosure: we may disclose your personal information when required by laws, legal procedures, litigations or government authorities in a mandatory manner.

V. Your right of information protection

5.1. Account management:

You may refuse to share some personal information with us, and under such circumstances, we may not be able to provide you with some functions of the services. You can visit your account setting page in the services at any time to query, update, correct or delete your personal information or cancel your user account. If you hope to access or modify any other personal information about you held by us, or require us to delete any information about you obtained through corporate customers, you can contact us at privacy@agora.io. Please note that although any changes you make will be reflected in the valid user database immediately or within a reasonable time, we may retain all information you submit to the extent permitted by applicable laws for backup, archiving, fraud and abuse prevention, analysis and performance of legal obligations.

5.2. Privacy setting:

(1) Although we may allow you to adjust your privacy settings to restrict access to certain personal information, it should be noted that no security measures are perfect or impregnable. We are not liable for circumventing privacy settings or security measures in the services. In addition, we have no control over the operations of other users with whom you choose to share information. Furthermore, even after the information published in the services is deleted, the caches and archive service may have saved the information, and other users or third parties may have copied or stored the information available in the services. We cannot and do not guarantee that the information you have published or transmitted to the services will not be viewed by unauthorized personnel.

(2) You are also entitled to the following rights to protect personal information:

The right to withdraw consent: in scenarios where we rely on your consent to collect and process your personal information, you have the right to withdraw your consent by sending a written notice at any time, and we will process your request within 15 days after verifying your identity.
The right to access personal information: you have the right to access your personal information collected by us and to require us to explain to you how we use and with whom we share your personal information.
The right to correct personal information: you have the right to correct your personal information to ensure the accuracy and integrity of your personal information.
The right to delete personal information: you have the right to require us to delete your personal information. In general, we will respect your right of deletion, but if the applicable laws and regulations of PRC have clear provisions on saving your personal information, or we have legitimate rights to retain your personal information, and such rights are superior to your personal rights, we will retain the requisite information.
The right to constrain information system automatic decision: In some business functions, we may make decisions only based on non-human automatic decision mechanisms such as information system and algorithm. If these decisions have material impacts on your legitimate rights and interests, you have the right to require us to explain, and we will provide appropriate remedies.
The right to obtain a copy of personal information: In scenarios where we collect your personal information based on your consent or agreement with you, you have the right to require us to provide you with a copy of your personal information that is presented in a reasonable structure and common form and machine-readable, or require us to transfer your personal information to any third party designated by you.
Respond to your above requests

In order to ensure security, you need to provide a request in writing or prove your identity by other means. We may require you to verify your identity before processing your request.
We will reply within fifteen days. If you are not satisfied, you can also complain through the following channel: reporting to the Office of the Central Cyberspace Affairs Commission (website of the complaint center: http://www.12377.cn, complaint hotline: 12377).
In principle, we will not charge you for your reasonable requests. However, for your repeated requests that exceed the reasonable limit, we will charge some costs as appropriate. Please understand that we will not be able to respond to requests that are unreasonably repeated, require too many technical means (for example, new systems need to be developed or the existing management needs to be fundamentally changed), pose risks to the legitimate rights and interests of others, or are quite impractical (for example, involving backing up information stored in tapes).
We will not be able to respond to your request under the following circumstances:

a) In connection with the personal information controller’s performance of obligations stipulated by laws and regulations of PRC;

b) In direct connection with national security and national defense security;

c) In direct connection with major public interests such as public security and public health;

d) In direct connection with criminal investigation, prosecution, trial and judgment execution;

e) The personal information controller has due proof to show that the personal information subject has subjective malice or abuses rights;

f) For the purpose of safeguarding the lives, property and other major legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain your consent;

g) Responding to requests of the personal information subject will cause serious losses to the legitimate rights and interests of the personal information subject or other individuals and organizations;

h) Trade secrets are involved.

VI. How we deal with children’s personal information

Our Service is not directed to children under the age of 18, and we do not knowingly collect Personal Information from children under the age of 18 without obtaining parental consent. If you are under 18 years of age, then please do not use or access the Service at any time or in any manner. If we learn that Personal Information has been collected on the Service from persons under 18 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 18 years of age has obtained an account on the Service, then you may alert us at privacy@agora.io and request that we delete that child’s Personal Information from our systems.

VII. How we protect your information security

7.1. We promise to take necessary and appropriate security technical measures in strict accordance with the relevant laws and regulations of the People’s Republic of China, so as to ensure the accuracy and integrity of the user’s personal information, and prevent personal information from being tampered with, disclosed or lost.

7.2. We take the security of your personal information very seriously. We adopt specific physical, management and technical safeguards, for example, encryption technologies such as transport layer security protocols are adopted to ensure data security during network transmission, to protect the personal identity information collected by us from accidental or illegal damage, loss, unauthorized alteration, disclosure or access, abuse and processing by any other illegal means.

7.3. Despite the above security measures, please understand that the Internet environment is not 100% secure and we will do our best to ensure the security of the personal information you provided to us. Please understand that no security measure can be perfect.

In case of any accident of personal information security, we will timely inform you as required by laws and regulations of PRC, so that you can take appropriate protective measures. When it is difficult to inform the personal information subjects one by one, we will publish an announcement in a reasonable and effective manner. In the meantime, we will also take the initiative to report the disposal of personal information security accidents as required by PRC’s regulatory authorities.

VIII. How we store your personal information

8.1. Data Retention: different information storage periods may apply to information collected for different purposes. We only retain your personal information for the minimum period for the purposes or for the period required by laws. When you stop using our services and cancel your account, we will delete your personal information within 15 days in principle, unless a longer period is required in accordance with applicable laws or for other legitimate purposes.

8.2. Territory of storage: in principle, the personal information we collect and generatewill be stored in China, except the following circumstances:

(1) There are clear provisions in laws and regulations; or

(2) Your authorization has been obtained separately.

Under the above circumstances, we will require the data receiver to process personal information in accordance with this Privacy Policy and other relevant security and confidentiality measures.

IX. How your personal information is transferred around the world

In accordance with laws and regulations of PRC, your personal information collected by us in China is stored in the Territory of the People's Republic of China. We will not transfer your personal information abroad. If we transferred overseas, we will follow relevant national regulations or seek your consent.

X. How this policy is updated

10.1. This policy may be updated from time to time and published on the website. Please visit this page regularly to understand any changes to this policy. If you continue to use the services provided by us after this policy is updated and published, you are deemed to have agreed to the relevant changes or updates.

10.2. We will also provide more prominent notices for major changes (for some services, we will send notices by email or other means, or generate pop-up windows or notice-like forms when you access the services for the first time after such changes, so as to explain the specific changes in this policy).

XI. How to contact us

AGORA is the entity that is responsible for processing personal information as described in this policy. If you have any questions, comments or suggestions on this policy or related matters, or intend to exercise your rights, please contact us according to the following contact information. In general, we will reply within 15 days:

Address: 8/F, Building 12, No. 333, Songhu Road, Yangpu District, Shanghai Legal Affairs Department of AGORA

Email: privacy@agora.io

If you are not satisfied with our reply, or consider the way we deal with your requests has damaged your legitimate rights and interests, you can also seek a solution through the following external channel: reporting to the Office of the Central Cyberspace Affairs Commission (website of the complaint center: http://www.12377.cn, complaint hotline: 12377).