superU Privacy Policy

Effective date: March 3, 2026

Updated date: March 3, 2026

Welcome to superU, a product and related service provided by JFgenius. We value the security of your personal information and business data. This Privacy Policy explains how we collect, use, store, share, transfer, publicly disclose, and protect personal information, and how you may manage your information.

Please read this Policy carefully before using superU, especially the sections about sensitive personal information, third-party sharing, cross-border processing, user rights, protection of minors, and important disclaimers. By using superU, you confirm that you have read and understood this Policy.

1. Scope

  • This Policy applies to the superU website, web app, admin console, digital employee services, file analysis services, and related features.
  • If a specific service has a separate privacy notice, authorization notice, data processing rule, or product-page notice, that separate document will apply first.
  • This Policy does not apply to third-party products or services independently provided to you. Their own privacy policies and rules apply to how they process your information.

2. Personal Information Controller

Unless otherwise stated, the personal information controller is:

3. Information We Collect

Depending on the features you use, we may collect the following information under the principles of lawfulness, legitimacy, necessity, good faith, and data minimization.

3.1 Information you provide

  • Registration and login information, such as email, username, password, verification code, or third-party login identifier.
  • Account profile information, such as avatar, display name, company name, and role information.
  • Content you enter, such as chat messages, instructions, questions, feedback, and notes.
  • Files you upload, such as documents, spreadsheets, PDFs, images, or other business materials.
  • Configuration content, such as digital employee settings, prompts, API settings, and connector configurations.
  • Transaction and subscription information, such as orders, subscription status, payment status, and invoice details where applicable.
  • Communications with us, such as support records, tickets, emails, and feedback.

3.2 Information generated while using the service

  • Device and log information, such as IP address, browser type, device information, operating system, access time, page activity, click records, and error logs.
  • Usage records, such as which digital employee you used, call time, call count, uploaded file type, task status, and result status.
  • Channel information, such as whether you accessed superU through the web, an enterprise communication platform, an open platform, or another entry point.
  • Security information, such as abnormal account behavior, risk control records, access frequency, and security detection records.

3.3 Sensitive personal information

Your uploaded business data may include personal information, enterprise confidential information, transaction data, contracts, or other sensitive content. Please upload such content only when you have lawful authority, have made necessary notices, and processing is necessary. Where separate consent or other legal conditions are required, we will take corresponding measures under applicable law.

4. How We Use Information

We may process personal information to:

  • Provide registration, login, identity verification, account management, and basic services.
  • Provide digital employee, file analysis, Q&A, search, task processing, and result generation features.
  • Save conversation records, task records, and call logs so you can view history, continue tasks, and manage usage.
  • Maintain security, detect abnormal behavior, prevent abuse, control access, rate-limit requests, and manage risk.
  • Process payments, subscriptions, credits, billing, invoices, and customer support.
  • Improve product performance, interaction experience, service stability, and feature design.
  • Conduct statistical analysis, operational analysis, and service optimization under applicable rules.
  • Send product notices, service updates, activity information, or follow-up communications where permitted by law or with your consent.

If we use your personal information for a purpose not directly related to the above or beyond the original scope of notice, we will provide notice and obtain your consent where required by law.

5. AI Processing and Model Services

When you use digital employees, Q&A, file analysis, or intelligent processing features, your input, uploaded files, and relevant context may be sent to our own systems or connected model/service providers to generate responses, perform analysis, or execute tasks.

We take reasonable steps to control data flow and process data according to service needs, technical capability, and compliance requirements. Except where necessary to provide the service, fulfill legal obligations, maintain service security, troubleshoot issues, trace misuse, or conduct de-identified or anonymized statistical analysis and service optimization, we will not use your content for unrelated purposes without notice and consent where required.

Please do not upload content you are not authorized to process or highly sensitive data that should not be processed by AI systems.

6. Enterprise Customer Scenarios

If you use superU on behalf of an enterprise or organization and upload employee, customer, transaction, contract, order, or other business data, you must ensure that you have a lawful basis for processing and have completed necessary internal authorization, notices, or other legal obligations.

In some enterprise scenarios, we may process relevant data as an entrusted processor or technical service provider according to the enterprise customer's instructions.

7. Sharing, Transfer, and Public Disclosure

We do not sell personal information. We may share necessary information with affiliates, technical service providers, payment providers, cloud infrastructure providers, model/service providers, and compliance or security partners only to the extent necessary for service delivery, operation, security, payment, support, or legal compliance.

If a merger, acquisition, asset transfer, restructuring, or similar transaction involves personal information, we will require the new holder to continue to comply with this Policy or otherwise obtain your authorization where required.

We will publicly disclose personal information only with your separate consent or where required by law.

8. Storage and Protection

We retain personal information only for the period necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law or agreed with you. We use reasonable security measures such as access control, encryption where appropriate, logging, auditing, and permission management to protect information.

No network environment is absolutely secure. If a personal information security incident occurs, we will take remedial measures and notify affected users or competent authorities as required by law.

9. Your Rights

Subject to applicable law, you may access, copy, correct, supplement, delete, withdraw consent, cancel your account, or request an explanation of our processing rules. You may contact us at [email protected]. We may verify your identity before handling your request.

10. Minors

superU is primarily intended for adults and enterprise users. Minors should use superU only with the consent and guidance of their guardian. If we discover that we have processed a minor's information without proper authorization, we will take appropriate measures.

11. Updates

We may update this Policy to reflect changes in products, services, laws, or business operations. Material changes will be announced through reasonable means. Your continued use of superU after the update takes effect indicates that you have read and accepted the updated Policy.

12. Contact Us

For privacy questions, requests, complaints, or suggestions, contact us at [email protected].