Accio: Alibaba AI Agent

"In order to facilitate your use of our Services, we may request access to, and you may provide us with, contents stored in your devices including but not limited to photos, videos and/or other files. If you are using voice recording function, we may require access to your microphone."

The policy claims broad access to device contents including photos, videos, and other files, plus microphone access. The "including but not limited to" language leaves this open-ended beyond what a B2B sourcing tool would typically require.

"We may disclose (or provide access to) your Personal Information to certain service providers engaged by us to provide basic processing services such as software, tools and systems, and to other business partners whom we work with, for purposes described in this Privacy Policy. Some of these service providers or business partners include due diligence and verification service providers, risk control service providers, IT service providers, cloud computing service providers, instant messaging service providers and/or social media platforms."

Accio shares personal information with a broad range of third parties including service providers, business partners, affiliates, and specifically DingTalk (a Chinese messaging platform) which collects and retains chat information independently.

"We and our service providers may collect some information from you using cookies and/or similar tracking technologies (collectively, "Cookies"). These technologies enable us to recognize you, analyze the use of our Services to improve their qualities and to enhance your experience, customize and/or personalize your experience, market additional products or services to you."

Accio uses cookies and similar tracking technologies to recognize users, personalize experiences, and market products, while also allowing advertising and analytics providers to collect identifiers and activity data across their services.

"We retain your Personal Information as long as we have an ongoing legitimate business need to do so. Examples of legitimate needs are to provide services to you, to resolve any disputes, safety and security reasons, or to comply with requirements pursuant to applicable laws (such as tax and accounting laws). When we have no ongoing legitimate business needs to process your Personal Information, we will either delete or anonymize it."

The retention period is indefinite, defined only by a broad and subjective "ongoing legitimate business need" standard with no concrete timelines for most data categories outside of South Korea-specific legal requirements.

"We may update this Privacy Policy from time to time including in response to changing legal, technical or business developments. When we update our Privacy Policy, we will take appropriate measures to notify you, consistent with the significance of the changes we make and in accordance with the applicable laws. Once notified, the new Privacy Policy will be effective immediately unless otherwise stated in our notification."

Accio can change the privacy policy at any time with changes taking effect immediately upon notification. Only material changes that reduce protections for previously collected data require consent.

"Device and Connection Information: We receive device and browser information which includes name of the device information, operating system, identifiers, browser information, Internet Protocol (IP) address. Information collected may vary depending on the types of devices and browsers you use and their settings."

Accio collects IP addresses automatically, which can be used for IP-based geolocation. This data is also shared with advertising and analytics providers for targeted advertising purposes.