Duro Privacy Policy

1. Introduction

This privacy policy applies to all products, websites, applications and services offered by Duro. We are committed to protecting the personal information you share with us, and to being transparent about how we handle that information.

By using any of our services, you agree to the practices described in this policy. We only collect data that we actually need to deliver and improve our services, and we never collect information without a clear, legitimate purpose.

2. Information We Collect

We collect two broad categories of information when you use our services:

Information you provide to us directly:

• Account information including your name, email address, username and password when you register for an account
• Profile information you choose to add to your account, such as profile photos, preferences and biographical details
• Content you create, upload or submit through our services, including documents, notes, messages, and media files
• Communications you send to us, including support requests, feedback and survey responses
• Payment information if you purchase paid services, such as billing address and payment card details (we never store full payment card information on our servers, this is handled by secure payment processors)

Information we collect automatically:

• Device information including your device type, operating system, unique device identifiers, browser type and language
• Usage data including features you use, time spent on our services, pages you view, click-through rates, and error reports
• Cookies and similar tracking technologies to remember your preferences, personalize your experience and analyze how our services are used. You can control cookie settings through your browser preferences at any time
• General location data derived from your IP address, to help us optimize service performance for your region (we never collect precise GPS location data unless you explicitly grant us permission to do so for specific features)

3. How We Use Your Information

We only use your information for specific, clearly defined purposes:

• Deliver and maintain our services: To operate our features, authenticate your account, process transactions, and provide the functionality you request
• Improve our services: To understand how users interact with our products, identify bugs, performance issues, and areas for improvement, and develop new features
• Customer support: To respond to your requests, troubleshoot issues, and provide assistance when you contact us
• Security: To detect, prevent, and address fraud, unauthorized access, malicious activity, and security risks to protect our users and our services
• Service communications: To send you important updates about service changes, outages, security alerts, and other non-marketing communications that are necessary for the use of our services
• Marketing communications (only with your explicit consent): If you opt in, we may send you updates about new features, promotions, and other news about Duro. You can unsubscribe from these communications at any time

4. How We Share Your Information

We will never sell your personal information to third parties for marketing purposes, under any circumstances.

We only share your information in the following limited scenarios:

• With your explicit consent: We will share your information if you specifically ask us to, or otherwise give us permission to do so
• Service providers: We share necessary information with trusted third-party service providers who help us operate our services, such as cloud hosting providers, payment processors, email delivery services, and analytics providers. These providers are contractually required to only use your information to perform services on our behalf, and are prohibited from using it for their own purposes
• Legal requirements: We may disclose your information if required to do so by a valid legal request, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership, and you will have the option to delete your account before any transfer takes effect

5. Your Rights & Choices

We believe you should have full control over your personal information. You can exercise the following rights at any time:

• Access and review: You can access all personal information we hold about you through your account settings
• Update and correct: You can edit or update your account information at any time if you find any inaccuracies
• Delete your data: You can request deletion of your account and all associated personal information, subject to limited exceptions where we are required to retain certain information for legal or security purposes
• Data portability: You can export your personal data and content you have created on our services in a machine-readable format, for transfer to another service provider if you wish
• Withdraw consent: You can withdraw any consent you previously provided to us for processing of your information, at any time
• Control communications: You can opt out of marketing communications at any time using the unsubscribe link included in every message, or through your account settings

To exercise any of these rights, you can either use the tools built into your account settings, or contact us directly using the email address provided in the Contact Us section. We will respond to all valid requests within 30 days.

6. Data Security

We take the security of your information very seriously, and implement industry-standard technical and organizational measures to protect it from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption of your data in transit using TLS 1.3 technology, and encryption at rest using AES-256 encryption
• Regular security audits and vulnerability assessments of our systems
• Strict access controls, so only a limited number of authorized employees have access to your personal information, and only when necessary to perform their job duties
• Regular employee training on data protection and security best practices

While we take all reasonable measures to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously update our security practices to mitigate risks as new threats emerge.

7. Children's Privacy

Our services are not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will immediately delete that information from our systems. If you are a parent or guardian and believe we may have collected information about a child under 13, please contact us immediately using the details below.

8. Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or service updates. When we make material changes to this policy, we will provide prominent notice to users at least 30 days before the changes take effect, either through an in-app notification, email to the address associated with your account, or a notice on our website. Your continued use of our services after the effective date of the updated policy constitutes your acceptance of the changes.

We will maintain an archive of previous versions of this policy, available upon request, so you can review changes over time.

9. Contact Us

If you have any questions, concerns, or requests related to this privacy policy or our data practices, please contact us at: dr3ouh5@zohomail.cn

We will respond to all inquiries as quickly as possible, typically within 3 business days.