Sigmob SDK 开发者使用规范 Developer Usage Guidelines
为帮助使用 Sigmob SDK 的开发者和运营者（以下简称“您”）在符合相关法律法规、政策及标准的规定下开展第三方SDK业务，更好地落实用户个人信息保护相关要求以及了解Sigmob如何使用合规使用数据，特制定《Sigmob SDK开发者使用规范》（以下称“本规范”），便于您使用Sigmob SDK 过程中符合相应的合规要求。
To help developers and operators of Sigmob SDK (hereinafter referred to as "you") carry out third-party SDK business in compliance with relevant laws, regulations, policies and standards, better implement relevant requirements for the protection of users' personal information and understand how Sigmob uses compliance usage data, The Sigmob SDK Developer Usage Specification (hereinafter referred to as the "Specification") is hereby formulated to facilitate your use of the Sigmob SDK to meet the corresponding compliance requirements.
一、开发者个人信息保护的合规要求
以下内容为您在使用Sigmob SDK的过程中，有关个人信息收集及使用的合规要求的解读。
1. Compliance Requirements for Developers' Personal Information protection
The following is your interpretation of the compliance requirements regarding the collection and use of personal information by using the Sigmob SDK.
1、APP需制定一份独立的隐私政策， 该隐私政策应当符合数据安全、个人信息保护相关的国家法律法规、相关监管要求及您与Sigmob的约定，并将Sigmob SDK的采集、使用相关信息类型及用途在您应用的隐私政策中向您的用户进行充分告知。
| SDK 名称 | 合作方式 | 个人信息类型 | 用途和目的 |
|---|---|---|---|
| Sigmob Android SDK (SDK内部会被com.sigmob、com.czhj 两个组件功能使用，建议开发者在隐私声明处将上述两个包名依次列举) | 广告变现合作 | 【广告业务必要信息】 **设备信息：**设备品牌、型号、操作系统版本、OAID、GAID、IMEI、Android ID、分辨率等基础设备信息 **应用信息：**应用名称、应用包名、应用版本号等 **其他：**运营商信息、时区 | 广告投放、广告主归因、反作弊 |
| Sigmob iOS SDK | 广告变现合作 | 【广告业务必要信息】 设备信息： 设备品牌、型号、操作系统版本、分辨率等基础设备信息 应用信息：应用名称、应用包名、应用版本号等 其他：运营商信息、国家/时区、手机系统重启时间、磁盘空间、内存空间等 【可选信息】（开发者可以基于优化广告效果的目的选择授权给Sigmob读取） 地理位置、IDFA 【仅iOS 2.21.0以上版本】 手机系统重启时间、系统更新时间、磁盘空间、内存空间、设备名称等 | 广告投放、广告主归因、反作弊 |
| SDK name | Cooperation method | Type of personal information | Use and purpose |
|---|---|---|---|
| Sigmob Android SDK (SDK internal will be used by com.sigmob, com.czhj two component functions, It is recommended that the developer list the above two package names in the Privacy Statement) | Advertising realization cooperation | 【 Necessary Information for advertising business 】 ** Equipment information: ** Device brand, model, OS version, OAID, GAID, IMEI, Android ID, resolution and other basic device information ** Application information: ** Application name, application package name, application version number, etc ** Others: ** Operator information, time zone | AD delivery, attribution, anti-cheating |
| Sigmob iOS SDK | Advertising cooperation | ** [Necessary information for advertising business] Device information: ** Device brand, model, operating system version, resolution and other basic device information ** Application information: ** app name, app package name, app version, etc. ** Others ** : Carrier information, country/time zone, phone system restart time, disk space, memory space, etc. ** [Optional information] ** (developers can authorize Sigmob to read for AD optimization purposes) Geollocation, IDFA ** [iOS only 2.21.0 or later 】** Mobile phone system restart time, system update time, disk space, memory space, device name, etc. | advertising, attribution, anti-cheating |
由于业务场景变更，不同版本Sigmob SDK获取的字段信息会有差异，以上提到的信息均加密传输并且不会传递给第三方。（需要确认的地方）
为了保护用户的信息安全和提升服务稳定性，Sigmob会不断更新SDK版本以提升安全性，请您及时更新SDK版本，因更新不及时产生的任何问题，由您自行解决并承担全部责任。
Due to the change of business scenarios, the field information obtained by different versions of Sigmob SDK will be different, and the information mentioned above will be encrypted and transmitted to no third party. (Need to confirm)
In order to protect users' information security and improve service stability, Sigmob will constantly update the SDK version to improve security. Please update the SDK version in time. Any problems caused by not updating in time will be solved by you and you shall bear all responsibilities.
2、您应遵从国家法律法规、政策及标准的要求，在应用上展示《隐私政策》展示，包括但不限于： 您应当保证《隐私政策》单独成文，应用首次安装运行时应通过弹窗等明显方式提示用户阅读《隐私政策》，用户确认同意《隐私政策》后，再启用Sigmob SDK等三方SDK进行个人信息的收集与处理。 您应向用户明示收集使用个人信息的目的、方式和范围，《隐私政策》应由用户自主选择是否同意，请勿以默认勾选同意的方式或是以欺骗诱导的方式取得用户授权。
**2. You shall comply with the requirements of national laws, regulations, policies and standards, and display the Privacy Policy on the application, including but not limited to: ** You should ensure that the Privacy Policy is written separately, and users should be prompted to read the Privacy Policy by obvious means such as a pop-up window when the application is installed and run for the first time. After users confirm and agree to the Privacy Policy, they can then use the Sigmob SDK and other third-party SDKS to collect and process personal information. You should express the purpose, method and scope of collecting and using personal information to users. Users should choose whether to consent to the Privacy Policy independently, and do not obtain authorization from users by default or by deception.以上翻译结果来自有道神经网络翻译（YNMT）· 计算机
二、您使用Sigmob SDK服务时的合规注意事项
您接入Sigmob SDK前，应当仔细阅读Sigmob的协议约定、本合规规范等内容，并依据相关内容对您APP的《隐私政策》及您APP收集、存储、使用、共享等处理个人信息的情况进行合规自查。 1、您知悉并认可Sigmob SDK具备收集个人信息的功能，并认可该信息的收集均为双方广告投放合作之必要目的所需。 2、您承诺已制定并按照相关要求公示您APP的《隐私政策》，并已清晰明确地说明有关Sigmob通过SDK收集个人信息的必要性、收集数据的范围、方式以及用途。同时，您应确保在APP首次运行时以弹窗等合规方式显著提示用户阅读您APP的《隐私政策》并取得用户的合法授权，经过合法授权后再启用Sigmob SDK进行个人信息的收集与处理。 3、您已认真阅读并理解Sigmob 的协议约定、本合规规范等约定，并承诺针对Sigmob SDK收集、使用、处理、共享、转让相关个人信息，您已取得了用户的授权和同意，并保证您不会违反国家相关法律法规、相关国家标准以及双方约定的目的。 4、您承诺遵守未成年人保护及儿童个人信息保护的相关法律法规，如果您的APP可能会对不满十四周岁的儿童用户提供服务，需承诺已采取相关措施并保证已获得其监护人的授权同意。 5、您保证已在APP的隐私政策中明确告知用户已选择Sigmob作为合作方进行广告变现合作，并向您的用户告知Sigmob SDK收集使用个人信息的目的、方式和范围等情况。 6、如因您违反Sigmob的协议约定、本合规规范等约定，导致您的用户或第三方对Sigmob提出任何形式的索赔或权利要求，或导致Sigmob因此产生任何法律纠纷的，您将负责解决并承担全部责任，如因此给Sigmob及其关联主体造成损失的，您应赔偿因此给Sigmob及其关联主体造成的全部损失。 7、您保证对于您从Sigmob获取的数据，无论是在与Sigmob合作期间或是合作停止后，均承担保密义务，不擅自提供、泄露、透露给任何第三方，并应采取一切合法措施以使上述数据免于散发、传播、披露、复制、滥用及被无关人员接触，避免导致相关数据被超出双方合作目的使用。 8、在双方订立合作协议前，Sigmob有权对您进行数据合规尽职调查的风险评估，并审查您所提供的关于所共享的个人信息的合法来源证明及相关文件，以及您的应用公开的《用户协议》与《隐私政策》，如Sigmob发现存在不合规的情形，则有权要求您修订《用户协议》与《隐私政策》的内容或完善相应的授权机制及其他合规机制。您在Sigmob隐私政策、开发者协议、本合规规范、信息发布协议下的全部义务、责任不因本条款下的Sigmob风险评估权利而构成任何形式的豁免，您仍应根据上述内容履行相应义务并承担法律责任。
2. Compliance Considerations when you use Sigmob SDK Services
Before accessing the Sigmob SDK, you should carefully read the agreement of Sigmob, this compliance Specification and other contents, and conduct compliance self-inspection of your APP's Privacy Policy and your APP's collection, storage, use, sharing and other processing of personal information according to the relevant contents.
(1) You acknowledge and acknowledge that Sigmob SDK has the function of collecting personal information, and acknowledge that the collection of such information is necessary for the purpose of advertising cooperation between the parties.
(2) You promise that you have formulated and published the Privacy Policy of your APP in accordance with relevant requirements, and that you have clearly and unambiguously explained the necessity, scope, method and purpose of the personal information collected by Sigmob through the SDK. At the same time, you should ensure that the user is prominently prompted to read the Privacy Policy of your APP in a compliant manner such as a pop-up window when the APP is running for the first time and obtain the user's legal authorization, and then use Sigmob SDK to collect and process personal information after legal authorization.
(3) You have carefully read and understood Sigmob's agreement, this Compliance Specification and other provisions, and promise that you have obtained authorization and consent from users for the collection, use, processing, sharing and transfer of relevant personal information by Sigmob SDK, and guarantee that you will not violate relevant national laws and regulations, relevant national standards and the purposes agreed by both parties.
(4) You promise to abide by the relevant laws and regulations on the protection of minors and the protection of children's personal information. If your APP may provide services to children users under the age of 14, you need to promise that you have taken relevant measures and obtained the authorization and consent of their guardians.
(5) You guarantee that you have clearly informed users in the APP's privacy policy that you have selected Sigmob as a partner for advertising and moneying cooperation, and informed your users of the purpose, method and scope of personal information collected and used by Sigmob SDK.
(6) If you violate the agreement of Sigmob, this compliance Code and other provisions, resulting in any form of claims or claims against Sigmob by your users or a third party, or any legal disputes resulting from Sigmob, you will be responsible for resolving and assume full responsibility, such as loss caused to Sigmob and its associated subjects, You shall compensate for all losses caused to Sigmob and its affiliated subjects.
(7) You guarantee that the data you obtain from Sigmob will be kept confidential and will not be provided, disclosed or disclosed to any third party without authorization, and you shall take all legal measures to prevent the above data from being distributed, transmitted, disclosed, copied, abused and contacted by unrelated personnel, no matter during the period of cooperation with Sigmob or after the termination of cooperation. Avoid the use of relevant data beyond the purpose of cooperation between the two parties.
(8) Before the parties enter into the cooperation agreement, Sigmob has the right to conduct a risk assessment of data compliance due diligence, and review the legal source proof and related documents provided by you about the shared personal information, as well as the User Agreement and Privacy Policy disclosed by your application. If Sigmob finds any non-compliance, We have the right to ask you to revise the content of the User Agreement and the Privacy Policy or improve the corresponding authorization mechanism and other compliance mechanisms. All your obligations and responsibilities under the Sigmob Privacy Policy, Developer Agreement, this Compliance Specification, and Information Release Agreement do not constitute any waiver of Sigmob's risk assessment rights under this clause, and you shall still perform the corresponding obligations and bear legal responsibilities in accordance with the above content.
三、Sigmob的数据安全保护能力
Sigmob非常重视数据安全，将努力采取合理的安全措施（包括技术方面和管理方面）来保护数据安全，防止您提供的数据信息被不当使用或未经授权的情况下被访问、公开披露、使用、修改、损坏、丢失或泄漏。我们会使用不低于行业同行的加密技术、匿名化处理及相关合理可行的手段保护数据安全，并使用安全保护机制防止您的数据信息遭到恶意攻击，并建立安全管理制度保障您的个人信息安全。我们采取严格的数据使用和访问制度，确保只有授权人员才可访问您的个人信息。尽管已经采取了上述合理有效措施，并已经遵守了相关法律规定要求的标准，但请您理解，由于技术的限制以及可能存在的各种恶意手段，在互联网行业，即便竭尽所能加强安全措施，也不可能始终保证信息百分之百的安全，我们将尽力确保您提供给我们的数据信息的安全性。 您知悉并理解，您接入我们的服务所用的系统和通讯网络，有可能因我们可控范围外的因素而出现问题。因此，我们强烈建议您采取积极措施保护数据信息的安全，包括但不限于使用复杂密码、定期修改密码、不将自己的帐号密码及相关数据信息透露给他人。一旦发生数据安全事件（泄露、丢失）后，我们将按照法律法规的要求，及时向您告知：安全事件的基本情况和可能的影响、我们已经采取或将要采取的处置措施、您可自主防范和降低风险的建议、对您的补救措施。我们将及时将事件相关情况以推送通知、邮件、信函、短信及相关形式告知您，难以逐一告知时，我们会采取合理、有效的方式发布公告。同时，我们还将按照相关监管部门要求，上报用户信息安全事件的处置情况。但一旦您离开Sigmob及相关服务，浏览或使用其他网站、服务及内容资源，我们将没有能力和直接义务保护您在Sigmob及相关服务之外的软件、网站提交的任何数据信息，无论您登录、浏览或使用上述软件、网站是否基于“Sigmob”的链接或引导。 如有任何问题，请与Sigmob联系。
3. Sigmob's data security capabilities
Sigmob attaches great importance to data security, and will strive to take reasonable security measures (including technical and management aspects) to protect data security and prevent the data information provided by you from being improperly used or unauthorized access, public disclosure, use, modification, damage, loss or leakage. We will use encryption technology, anonymization processing and relevant reasonable and feasible means not lower than industry peers to protect data security, and use security protection mechanisms to prevent your data information from malicious attacks, and establish a security management system to protect your personal information security. We adopt strict data use and access policies to ensure that only authorized personnel have access to your personal information. Although the above reasonable and effective measures have been taken and the standards required by the relevant laws and regulations have been complied with, please understand that due to the limitation of technology and the possible existence of various malicious means, in the Internet industry, even if we do our best to strengthen security measures, it is impossible to always guarantee 100% security of information. We will do our best to ensure the security of the data you provide to us. You acknowledge and understand that the systems and communication networks you use to access our Services may have problems due to factors beyond our control. Therefore, we strongly recommend that you take active measures to protect the security of data information, including but not limited to using complex passwords, regularly changing passwords, and not disclosing your account passwords and related data information to others. Once a data security incident (leakage, loss) occurs, we will, in accordance with the requirements of laws and regulations, promptly inform you of the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, the suggestions for you to prevent and reduce the risk on your own, and the remedial measures for you. We will promptly inform you of the relevant information of the incident in the form of push notifications, emails, letters, SMS and other relevant forms. When it is difficult to inform you one by one, we will take a reasonable and effective way to publish the announcement. At the same time, we will also report the handling of user information security incidents in accordance with the requirements of relevant regulatory authorities. However, once you leave Sigmob and related services, browse or use other websites, services and content resources, we will have no ability and direct obligation to protect any data information submitted by you in the software and websites outside Sigmob and related services, regardless of whether you login, browse or use the above software and websites based on the link or guide of "Sigmob". Please contact Sigmob for any questions.