Last updated: August 7, 2026
1. Introduction
This Privacy Policy explains how JORYEA (“we”, “us”) collects, uses, stores, shares and protects your personal information when you use our platform. We comply with the Personal Information Protection Law (PIPL) of the People's Republic of China and, where applicable, the General Data Protection Regulation (GDPR).
2. Information We Collect
Depending on how you use our platform, we collect the following categories of personal information:
- Inquiry and quotation data: your name, email, contact details, destination country and vehicle preferences submitted through our inquiry and quotation forms.
- Vehicle browsing data: the pages and vehicles you view on our catalog, used to improve recommendations and site performance.
- In-app messaging content: conversation history between you, our staff and our suppliers or service providers.
- Marketing attribution data: UTM parameters and the landing path used to measure which channel brought you to our platform.
- AI-assisted processing: your inquiry and message content may be processed by our DeepSeek-based AI assistant to draft replies and improve service quality.
- Payment and trade records: payment reference numbers and transaction records collected to complete PPI inspection fees and vehicle purchases.
- Device and security data: IP address, browser user-agent, cookies and security tokens used for authentication, fraud prevention and bot protection.
3. How We Use Your Information
We use your personal information to: respond to your inquiries and quotations; provide customer support through in-app messaging; process payments and complete transactions; operate and improve our platform; prevent fraud and abuse; comply with legal and regulatory obligations; and, with your consent, provide marketing communications about our services.
4. Storage and Security
Your personal information is stored on infrastructure provided by Alibaba Cloud (Aliyun) and Cloudflare, protected by industry-standard measures including TLS encryption in transit, encrypted storage, access controls and security audit logging in accordance with MLPS Level 3 requirements.
5. Information Sharing
We do not sell your personal information. We share information only with: our infrastructure providers (Alibaba Cloud, Cloudflare, MinIO/R2 object storage, Redis); payment processors (PayPal, Escrow.com, LianLian Pay) as needed to complete your payments; our AI provider (DeepSeek) to operate the customer-service assistant; and our staff who require access to fulfill your requests.
6. Cross-Border Data Transfers
Because our platform serves customers worldwide, your personal information may be stored and processed outside your country of residence, including on Alibaba Cloud infrastructure in the People's Republic of China and Cloudflare's global edge network. We rely on appropriate safeguards required by applicable laws, including data transfer agreements and adequacy assessments, and we will obtain separate consent where required by the PIPL.
7. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal, tax and audit obligations (for example, completed transaction records are retained as required by applicable accounting and tax laws), and defend legal claims. Security audit logs are retained for at least six months. When the retention period ends, we delete or anonymize your personal information.
8. Your Rights
Under the PIPL and applicable privacy laws, you have the right to: access and obtain a copy of your personal information; request correction of inaccurate information; request deletion of your personal information; withdraw consent at any time; request a portable copy of your data (data export); object to certain processing; and file a complaint with the competent authority. You can exercise most of these rights from your account page or by contacting us.
9. Account Deletion
You may delete your account at any time from the “Privacy & Data” section of your account page. When you request deletion, we will deactivate your account, delete or anonymize your personal information across our platform databases, and retain only what is required for legal, tax and audit purposes. Some transaction records may be anonymized rather than physically deleted to preserve business and accounting integrity.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our data protection contact at the address shown on our website. We will respond to your request within the timeframes required by applicable law.