Eigenteam Privacy Policy

Introduction and Important Notice

Eigenteam values your personal information and privacy. This Policy explains how we process personal information when we provide the mobile app, connection and management of the Eigenteam AI Band and Eigenteam AI Card, cloud sync, speech-to-text, AI summaries and sales analysis, and CRM, and how you can exercise your rights.

Personal information protection contact email: business@eigenteam.ai

Please read and fully understand this Policy before you log in or use the service, especially the parts highlighted in bold on the rights of people who are recorded, sensitive personal information, third-party services, AI processing, data retention and deletion, and personal information rights. Use the relevant service only after you understand and agree. If you do not agree to this Policy, do not log in or use the corresponding service.

Please note in particular:

1. Recording, transcription, and AI analysis may involve personal information about you and about third parties such as customers, colleagues, store staff, and the other party to a call. The content may also include sensitive content such as health, financial accounts, identity information, location trails, and trade secrets. When voice is used for voiceprint recognition or identity verification, voice characteristics are biometric sensitive personal information.
2. Your agreement to this Policy does not mean that other people in a recording have agreed. The enterprise customer and the person actually recording must, before recording, tell participants about recording, upload, transcription, and AI analysis, and obtain consent or confirm another lawful basis.
3. Information needed for basic features is processed separately from information for optional features. Refusing non-essential information or permissions does not affect features unrelated to that permission. Where sensitive personal information is processed, personal information is provided to another personal information processor, publicly disclosed, or provided across borders, we will give enhanced notice and obtain separate consent as required by law.
4. We will not use your recordings, transcripts, prompts, or AI output for general model training, advertising profiles, or other unrelated purposes merely because you agreed to this Policy. If we later need them for optional product improvement, human annotation, or model training, we will explain that clearly, obtain separate consent, and provide a way to opt out.

1. Scope

1. This Policy applies to the Eigenteam mobile app, companion Eigenteam AI Band and Eigenteam AI Card devices, cloud services, CRM, AI sales analysis, website, or admin console that we provide.
2. Systems provided by the enterprise customer itself, and websites or services independently operated by third parties, are not covered by this Policy. We will make a reasonable effort to prompt you before a redirect. You should read that third party’s privacy rules.
3. This Policy does not apply to personal information processing that an enterprise customer carries out independently outside Eigenteam.

2. Roles in Personal Information Processing

2.1 Information Eigenteam processes for its own purposes

For account assignment and identity verification, service security, device binding and after-sales support, billing, customer support, compliance audits, and duties we bear under law, if we decide the purposes and means ourselves, Eigenteam is the personal information processor and is responsible for that processing under this Policy.

2.2 Information whose purposes and means the enterprise customer decides, and which Eigenteam processes on instructions

The enterprise customer usually decides why and how it collects and uses employee information, CRM customer information, sales follow-ups, recordings, transcripts, and sales analysis data. When we provide hosting, sync, transcription, analysis, backup, or technical support on the enterprise customer’s instructions, the enterprise customer is usually the personal information processor and Eigenteam is usually a processor acting on instructions.

We will agree in the enterprise contract or data processing agreement on the purposes, period, methods, types of information, safeguards, rights and duties of both parties, and conditions for onward processing. We process only on lawful, clear instructions. We do not use entrusted data for our own advertising, profiling, or model training without separate consent. When the engagement ends, we return or delete the data as required by law and contract, and do not keep it on our own. We will provide permission settings and access controls appropriate to the service risk, take measures to prevent access beyond authority, and bear liability under law for Eigenteam’s own unauthorized processing or inadequate security measures.

2.3 Responsibilities the enterprise customer bears itself

The enterprise customer must ensure that its purposes and means are lawful, legitimate, and necessary; give notice to employees, customers, and recording participants and establish a lawful basis; configure least privilege and the shortest retention period; respond to individual rights requests; and manage access, export, disclosure, and deletion by its administrators and employees.

2.4 Third-party service providers

Cloud computing, object storage, ASR, and large-model providers process information only to the extent necessary for the relevant feature. When they act as our processors, they are bound by the processing agreement. If a third party decides the purposes and means itself, we will, before providing the information, tell you its name, contact details, purposes, methods, and types of information, and obtain separate consent as required by law. The current version does not integrate SDKs for advertising, user profiling, or third-party analytics. If we later add a third-party SDK or component that processes personal information, we will update the relevant disclosure in a timely way as required by law.

3. How We Collect and Use Personal Information

The table below lists business feature, type of information, purpose and method, necessity, recipient, period, and user control. Information marked “necessary” is required for that feature. It does not mean the whole app requires it. If you do not use the feature, you do not need to provide it.

3.1 Sources of information

We obtain information from: information you submit directly; information the enterprise customer or an administrator provides to create the organization and perform employment or business-management duties; CRM entries or recordings entered by other enterprise members; a bound Eigenteam AI Band or Eigenteam AI Card; information the app and servers generate to the extent necessary for operational security; and third-party systems authorized by you or the enterprise customer.

If we indirectly obtain your personal information from a third party, we will require the provider to explain the source and lawful basis, and will tell you when the law requires it. The enterprise customer must not upload data obtained by theft, unlawful purchase, unauthorized scraping, or other unlawful means.

3.2 Information about third parties in recordings

1. Before recording starts, the enterprise customer and the person actually recording must explain, in a way the other person can understand and perceive: who is recording, the purpose, whether it will be uploaded to the cloud, whether it will be transcribed or analyzed by AI, who in the enterprise may access it, the retention period, and how to make a rights request.
2. A user’s upload of a recording only means that, where they already have the required authorization or another lawful basis, they instruct us to process that recording to provide the storage, sync, transcription, summary, analysis, and CRM services they chose. It does not mean recording participants have consented, and it does not authorize us to use the data for model training, advertising, sale, or other unrelated purposes.
3. Recording is performed by the Eigenteam AI Band or Eigenteam AI Card, which indicates recording status with its indicator light. The app only sends control commands to the device. When connected in the foreground, it can display the device status it receives. It does not provide a recording-status prompt after it moves to the background or the screen locks. If a participant refuses or asks to stop, the person recording must operate or turn off the Eigenteam AI Band or Eigenteam AI Card directly and confirm with the device indicator light that recording has stopped.
4. If a recording participant makes a request to us and the enterprise customer decides how the related data is processed, we will check identity and clues, forward the request to the enterprise customer, and provide necessary help. If we decide the processing ourselves, we will respond directly as required by law.
5. Recordings that involve private conversations, minors, medical information, finance, identity information, whereabouts, trade secrets, or other high-risk content should be subject to stricter necessity review, permissions, and retention periods. The enterprise customer should support a reasonable alternative when a participant refuses recording.

3.3 Optional model improvement or human review

We do not currently use users’ audio, transcripts, prompts, CRM context, or AI output to train Eigenteam’s own general-purpose models, unless we give a clear notice in the future and obtain the authorization required by law. When we select and configure model services, we will prefer enterprise or API configurations that do not use enterprise business data to train independent models, and will use contracts, product settings, permission management, and other reasonable measures to limit service providers from using data beyond the entrusted purpose. If a service provider, processing purpose, processing method, or type of information changes, we will update the relevant disclosure as required by law. Where consent or separate consent is required, we will obtain it before processing.

3.4 Network access before the first consent

Before you make a privacy choice on first launch, the app makes only the minimum network communication needed to display this Policy and the Terms of Service and to protect page and transmission security. The minimum access logs generated in that process, such as IP address and request time, are used only for transmission and security, not for user profiling or operations analysis. At this stage we do not start personal information processing for login, advertising or user profiling, recording upload, CRM sync, Bluetooth search or connection, ASR, or AI analysis, and we do not request camera, Bluetooth, or file-storage permissions. If you choose not to agree, the app does not start that non-essential business processing.

4. System Permission List

For the current version, Eigenteam requests necessary permissions such as camera, Bluetooth / nearby devices, and file access when the corresponding feature is triggered. Network access is used for login, upload, cloud processing, and other online services. We request and use permissions only to the extent necessary for the feature. Refusing a non-essential permission does not affect features unrelated to it. Network access is usually a basic app capability and does not show an ordinary runtime permission dialog.

The current version does not request or use the phone microphone, location, photo / media library, notifications, contacts, phone, SMS, calendar, app list, advertising tracking, or sensor permissions. Recording in the app is performed by the Eigenteam AI Band or Eigenteam AI Card, not the phone microphone. If a later version truly needs a new permission, we will first assess necessity, update this Policy and the permission list, and request it as required by law when the corresponding feature is used.

The usual path to turn a permission off is “System Settings — Apps — Eigenteam — Permissions.” Names differ slightly by system. Turning a permission off does not affect processing that was lawfully completed before it was turned off. You may also request deletion of information already created. Network access can be managed in system network settings.

5. Sensitive Personal Information and Separate Consent

1. We treat recordings and transcripts as high-risk content and apply enhanced protection. Whether they are sensitive personal information as defined by law depends on the specific content and use. Voiceprint characteristics, identity information, financial accounts, health, location trails, and personal information of minors under 14 are, or may be, sensitive personal information.
2. For processing that requires separate consent by law, such as processing sensitive personal information, providing personal information to another personal information processor, public disclosure, or cross-border provision, we will give enhanced notice and obtain separate consent before processing. For technical processing by a service provider acting only on instructions from Eigenteam or the enterprise customer, we will carry out entrusted processing, necessary notice, and security duties according to the actual legal relationship. The product may still ask for confirmation before upload, transcription, or AI analysis.
3. Separate consent must not be bundled with account assignment, login, basic CRM, or unrelated permissions. Users may refuse or withdraw. Withdrawal affects only the corresponding feature and does not affect lawful processing based on consent before withdrawal.
4. The enterprise customer must itself complete enhanced notice and lawful-basis management for employees, customers, and recording participants. We will provide product mechanisms to support this, but a technical prompt does not replace the enterprise customer’s legal duties.

6. Entrusted Processing, Sharing, Transfer, and Public Disclosure

6.1 Entrusted processing and third-party recipient list

We provide service providers with the minimum information, only for clear, reasonable, and necessary purposes, and use contracts, service configuration, and permission management to limit their purposes, data scope, security measures, and onward processing. Cloud capabilities and data storage for the enterprise customer’s growth system currently use Alibaba Cloud services in the Hangzhou region. The current version does not integrate SDKs for advertising, user profiling, or third-party analytics.

The table in this section is the current third-party information-sharing list. If a provider, the information received, the purpose, the region, or the retention period changes, we will update this section. We will not replace our own accurate disclosure with “please refer to the third party’s policy.”

6.2 Sharing

Except in the following cases, we do not provide your personal information to other personal information processors:

1. We have told you the recipient’s name and contact details, the purposes, methods, and types of information, and have obtained separate consent;
2. Laws and regulations, litigation or dispute resolution, or a lawful request from a competent authority require it;
3. The enterprise customer shows enterprise business data to its members within lawful permissions. An administrator may not view a user’s recordings, transcripts, or AI analysis without the recording user’s authorization. The user may authorize the administrator, orally or by contract, to view them, and may also authorize download, export, or deletion. The enterprise customer and administrators must keep proof of the content, scope, and validity period of the authorization, and must keep necessary records of viewing, download, export, deletion, and withdrawal.

6.3 Transfer

We do not sell personal information. If a merger, division, reorganization, asset transfer, dissolution, or bankruptcy involves a transfer of personal information, we will tell you the recipient’s name and contact details and require the recipient to continue to follow this Policy. If the recipient changes the original purposes or methods, it must obtain consent again.

6.4 Public disclosure

We do not publicly disclose personal information in principle. If disclosure is truly necessary, we will explain the purpose, type of information, necessity, and impact, and obtain separate consent, unless the law provides otherwise.

7. Storage Location, Retention, and Deletion

7.1 Storage location and cross-border transfer

Under the current deployment, Eigenteam’s main business data storage and core cloud processing are in mainland China. Cloud databases, object storage, and backups currently use Alibaba Cloud in the Hangzhou region. We do not proactively provide personal information collected or generated in mainland China to parties outside mainland China.

If a later change in service architecture, suppliers, or business involves cross-border provision of personal information, we will, before it actually happens, complete a personal information protection impact assessment, tell you about the overseas recipient and how to exercise rights, obtain separate consent, and meet security assessment, standard contract, certification, or other applicable conditions, and we will update this Policy.

7.2 Retention periods

We keep information only for the shortest time necessary for the purpose. Recording master files, transcripts, summaries, AI analysis, and other business data are kept for one year by default. The enterprise customer may agree a different period in the contract. After the enterprise service ends, a default three-month window applies for data export and migration, unless the contract says otherwise. When that window ends, we return, delete, or anonymize the data as required by law and contract. Backups, temporary objects, upload parts, and general service logs rotate on a three-month cycle by default. Network operation logs are kept for at least six months as required by law.

7.3 Deletion

1. We will delete or anonymize data on our own initiative when the retention period ends, the purpose has been achieved or cannot be achieved, you withdraw consent and there is no other lawful basis, you delete your account, the service stops, or the processing violates law or the agreement.
2. Data that cannot be deleted immediately because of backup rotation, security logs, legal retention duties, or technical limits will no longer be used for ordinary business processing. It will be processed only as necessary for legal duties, security protection, and similar purposes, and will be deleted or anonymized when the relevant retention period ends.
3. After a user starts deletion and completes the corresponding action, we will start deletion or anonymization of recordings, transcripts, summaries, AI analysis results, and related business data that no longer have a lawful basis or are no longer necessary, according to product features, device connection status, and the data-processing relationship. Data in online business systems will be handled within a reasonable period. For data controlled by the enterprise customer, we will follow its lawful instructions and the parties’ agreement, while protecting the rights individuals have under law.

8. Your Personal Information Rights

8.1 Access, correction, supplementation, and copies

You may access or correct content you are allowed to access on the account, CRM, recording, and analysis pages in the app, or request access, correction, supplementation, or a copy of personal information at business@eigenteam.ai.

8.2 Deletion

You may use the delete function on the relevant recording, transcript, AI result, or CRM data page, or make a request at business@eigenteam.ai. Deletion requests for data we process on the enterprise’s instructions are usually decided by the enterprise customer, and we will help. If the enterprise customer refuses, we will ask it to explain the legal basis. That does not remove our responsibility for our own processing.

8.3 Withdrawal of consent and turning off permissions

You may withdraw the relevant authorization or request deletion at business@eigenteam.ai, and you may turn off camera, Bluetooth, and file-storage permissions in system settings, or manage network access. Withdrawal does not affect lawful processing based on consent before withdrawal. Turning off a permission only makes the corresponding feature unavailable.

8.4 Account deletion

Eigenteam accounts are assigned by the enterprise or by us in the backend or on H5. The app does not currently let individuals apply for an account themselves. You may tap “Request account deletion” in the app to open an email to business@eigenteam.ai, or ask the enterprise administrator to disable, reclaim, or delete the account. After the necessary identity and permission checks, we will complete account deletion within fifteen business days and, based on the nature of the data, the enterprise customer’s control of the data, and applicable law, delete or anonymize related personal information in online business systems that no longer needs to be kept or no longer has a lawful basis, and tell you the result. Data that must continue to be kept by law, and data that cannot be deleted immediately because of backup rotation or similar technical reasons, will not be processed except for legal duties, security protection, and similar necessary purposes, and will be deleted or anonymized when the relevant period ends. Conditions for deletion must not be unnecessarily stricter than the conditions for assigning the account.

After an employee leaves the enterprise or deletes the account, that person no longer accesses, downloads, or exports enterprise data. Enterprise business data created while performing work duties is still managed by the enterprise customer in accordance with law, but the natural person still has statutory rights over personal information in that data that relates to them, and may make a request at business@eigenteam.ai.

8.5 Restricting or refusing automated decision-making

If an AI score or analysis is used to make a decision that has a significant effect on an employee or customer, you have the right to request an explanation and the right to refuse a decision made solely by automated decision-making. Eigenteam’s AI output should not be the sole basis for performance evaluation, dismissal, credit, pricing, or other significant decisions. If the enterprise customer enables leaderboards, employee scoring, automatic alerts, or automatic writing into CRM, it should set up human review, objection, and correction mechanisms.

8.6 How we respond, and exceptions

1. When you submit a request through the contact details in this Policy, please state the account, enterprise, relevant recording or customer clue, and the specific request. For security, we check only the information necessary to handle the request. We do not ask for identity documents unrelated to the request.
2. We will complete the check and respond within fifteen business days after the necessary identity checks. If the matter is complex or the law provides otherwise, we will explain the reason and the expected time. Reasonable requests are in principle free of charge.
3. We may refuse or limit a response, and explain the reason and remedies, where the law says a response is not required, the request would seriously harm another person’s lawful rights, trade secrets are involved, or identity cannot be verified.
4. If you are a recording participant but do not have an Eigenteam account, you may still make a request through the contact details in this Policy. We will ask only for the minimum clues needed to locate the record, and will handle it together with the relevant enterprise customer.

9. How We Protect Personal Information

1. We will establish mechanisms for data classification, least privilege, identity authentication, access auditing, vulnerability and supply-chain management, backup and recovery, employee confidentiality, and security-incident response, and will take technical and organizational measures appropriate to the processing risk.
2. We will take reasonable measures such as identity verification, access control, protection in transit and at rest, log auditing, backup and recovery, and security-incident response, based on the nature of the personal information and the processing risk.
3. We will periodically audit app dependencies, third-party services, permission use, and where data goes, and will carry out personal information protection impact assessments for high-risk processing.
4. The internet and device environment are not absolutely secure. If a leak, alteration, or loss occurs or may occur, we will take remedial measures immediately, report to the competent authority as required by law, and notify affected individuals by push, SMS, email, phone, or announcement. If it is difficult to notify people one by one, we will publish a notice in a reasonable and effective way.

10. Personal Information of Minors

1. Eigenteam is for enterprise sales teams and does not provide account services to minors under 18. Enterprise customers should not assign accounts to minors.
2. If a recording happens to include a minor’s information, the enterprise customer and the person actually recording should process it only where there is a lawful basis and it is truly necessary. Personal information of a minor under 14 is sensitive personal information and requires consent from a parent or other guardian, and special rules apply.
3. If you believe we have improperly processed a minor’s information, please contact us. After we verify it, we will stop processing, delete it, or take other necessary measures.

11. AI Services and Labels for Generated or Synthetic Content

1. Transcripts, summaries, scores, and suggestions are generated by algorithms and may misrecognize, omit, be biased, or invent content. Please check them manually before using them for customer communication, contracts, performance, HR, or other important decisions.
2. We currently use DeepSeek, Kimi, and Tongyi Qianwen. We will carry out algorithm filing, generative AI service filing, or registration duties that apply to us. A model provider’s filing does not replace duties that Eigenteam must perform under law.
3. For AI-generated content that falls within rules requiring labels for generated or synthetic content, we will take labeling measures appropriate to the content type, how it is provided, and applicable law. For text output such as AI summaries, Q&A, sales analysis, sales reviews, and AI-generated CRM follow-up content, we will place a clear “AI-generated” or “AI-assisted” label, with reasonable type size and contrast, in an easy-to-notice place near the title, at the start, or at the end of the result page or content card, and may also use an icon. When copy, download, or export is provided, we will keep the corresponding text label in the exported content as required by applicable laws, regulations, and mandatory national standards, and, where the file format supports it and the law applies, add an implicit generated-content label in the file metadata. When users publish AI-generated content to the public that the law requires to be labeled, they must keep or add the required labels, and must not maliciously remove, alter, forge, or hide labels that the law requires.

12. Policy Updates

1. We will update this Policy when features, data processing, service providers, or the law change, and will mark the version, publication date, and effective date.
2. For material changes to purposes, methods, types of personal information, recipients, cross-border transfer, or user rights, we will explain them prominently, such as by an in-app dialog. Where consent or separate consent is required by law, we will obtain it again. We will not treat continued use as consent.
3. You may view and save this Policy, and the personal information collection list, third-party information-sharing list, and system permission list it contains, at any time through the agreement entry in the app or the public page for this Policy.

13. Contact Us

Personal information protection contact: Eigenteam personal information protection contact
Contact email: business@eigenteam.ai

We will reply within fifteen business days after the necessary identity checks. If you are not satisfied with the result, you may complain to the cyberspace, telecommunications, public security, or market-regulation authorities as provided by law, or bring a lawsuit in a people’s court with jurisdiction.

14. Related Public Lists

To reduce extra page jumps and keep versions consistent, Section 3 of this Policy is also the Eigenteam Personal Information Collection List, Section 4 is also the Eigenteam System Permission List, and Section 6 is also the Eigenteam Third-Party Information Sharing List. Section 2 explains the personal information processing roles of Eigenteam, the enterprise customer, and third-party service providers.