Privacy Policy

1. Who we are

This policy applies to the O1M website and one-item-one-code cloud services operated by O1M Technologies ("we", "us"). We are the data controller of your personal data. Contact: contact@ocas.cn.

2. What data we collect

• Account data: email address and encrypted password credentials provided at sign-up or sign-in.
• Form data: name, company, phone, email and requirement details you submit via contact forms.
• File data: documents and images you actively upload after signing in.
• Query data: codes submitted in anti-fake verification and query timestamps (for anti-fraud control).
• Technical data: IP address, browser type and access logs (for security auditing and troubleshooting).

3. Purposes and legal bases (GDPR)

• Providing accounts and cloud services — performance of a contract (Art. 6(1)(b)).
• Responding to inquiries — legitimate interests (Art. 6(1)(f)).
• Anti-fraud and security auditing — legitimate interests (Art. 6(1)(f)).
• Marketing (only with your consent) — consent (Art. 6(1)(a)), withdrawable at any time.

4. Storage and international transfer

Data is stored in cloud databases and object storage, encrypted in transit with TLS and isolated by row-level security. Where international transfer occurs, we rely on lawful mechanisms such as Standard Contractual Clauses (SCC).

5. Data retention

Account data is kept while your account is active; inquiry form data up to 24 months; logs up to 12 months; afterwards data is securely deleted or anonymized.

6. Your rights

Under GDPR and applicable laws you have the rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise them, email contact@ocas.cn — we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

This site only uses technical cookies / local storage necessary to maintain sign-in sessions. No third-party advertising trackers are set.

8. Children

Our services target business users and are not directed at children under 16; we do not knowingly collect their personal data.

9. Changes to this policy

Material changes will be posted on this page with an updated "Last updated" date.