WADesk CRM

The privacy policy does not explicitly state whether user content is used for AI training. However, the broad language about using information for 'product improvement' and 'service optimization' combined with the lack of explicit opt-out for training purposes creates moderate risk. The policy mentions collecting usage data and logs for 'product operation statistical analysis and product improvement plan' but doesn't specifically address AI/ML training.

“we will automatically collect your detailed usage of our services and save them as relevant network logs...used for product operation statistical analysis and product improvement plan”

The terms grant WADesk very broad rights to user content. Section 8.3 explicitly states users authorize WADesk to use their name, trademark, and service mark in publicity and promotion. The service agreement grants a non-exclusive right to use the software but doesn't clearly limit WADesk's rights over user-generated content, creating significant risk for enterprise shadow AI use.

“You understand and agree to authorize WADesk to use your name, trademark, trade name, and service mark in publicity and promotion”

The policy allows sharing with third parties in multiple scenarios: with explicit consent, for legal obligations, for contract performance, and with enterprise/organization users. Section 3.1 states WADesk will share information with 'the counterparty and payment company' for transactions. Enterprise users are explicitly identified as processors with access to employee information, creating significant third-party sharing risk.

“we will share the necessary transaction-related information in your order information with the counterparty and payment company according to your choice to complete the transaction”

The privacy policy provides moderate clarity on retention periods, referencing legal requirements (3 years for e-commerce, 6 months for network logs) and stating data will be deleted after retention periods expire. However, backup systems may retain data longer, and the policy allows indefinite retention for certain purposes. Users can request deletion but with exceptions for security/legal reasons.

“we will only retain your personal information for the period required to achieve the purposes stated in this policy...When you delete information from our services, we will not immediately delete the corresponding information from the backup system”

Section 8.1-8.2 clearly states all intellectual property rights of products, technologies, and services belong to WADesk or its affiliates. Users are prohibited from copying, disseminating, or processing these materials. The policy does not explicitly grant users ownership of their outputs or generated content, creating high risk for enterprise IP concerns.

“all intellectual property rights of all products, technologies, software, programs, source codes, trademarks and other information provided by the services belong to WADesk or its affiliates”

The privacy policy mentions general security measures (SSL, HTTPS, encryption, access controls) but does not reference any specific compliance certifications such as SOC2, GDPR, HIPAA, or ISO standards. The policy states data is stored in China and references Chinese laws, but lacks evidence of international compliance certifications required for enterprise use.

“we have taken reasonable and feasible security protection measures that meet industry standards to protect your information...when exchanging data between your WADesk client APP and the server, it is encrypted and protected by the SSL protocol”