Cnmai (hereinafter referred to as "we"), as the operator deeply engaged in China-Africa cross-border e-commerce, is committed to protecting the security and legitimate rights and interests of users' (hereinafter referred to as "your") personal information. This Privacy Policy aims to clarify the scope, methods and rights for us to collect, use, store, share and transmit your personal information, and to inform you of the rights you have regarding your personal information and the methods of exercising such rights. This Policy applies to all scenarios where you use the Cnmai APP and related services (including websites, localized logistics and payment services). Your use of the aforementioned services shall be deemed as your full reading, understanding and consent to the content of this Policy.

1. Personal Information We Collect

To provide you with cross-border e-commerce services and optimize your experience, we will collect the following necessary personal information and no irrelevant information:
· Registration and Identity Information: Name, mobile phone number, email address, ID card/passport and other identity verification information provided when registering an account (for account real-name authentication, compliant transactions and cross-border regulatory requirements);
· Transaction and Payment Information: Order products, amount, payment method, bank card number/local payment account information (for transaction settlement, reconciliation and dispute resolution; payment information will be encrypted and stored, and complete sensitive information will not be disclosed);
· Logistics and Location Information: Shipping address, contact phone number, city of residence (for localized warehousing and distribution; you can choose to turn off location permissions and only fill in the address manually);
· Device and Usage Information: APP installation device model, operating system, IP address, browsing records, operation logs (for optimizing APP performance, troubleshooting and anti-fraud, excluding sensitive content that can identify personal identity);
· Other Authorized Information: Album and address book permissions actively authorized by you (for uploading avatars and inviting friends; permissions can be turned off in device settings at any time).

2. Purposes of Using Personal Information

We strictly use the collected personal information for the following purposes, and will obtain your authorization separately if it exceeds the scope:
· Providing Core Services: Completing basic services such as account registration, commodity transactions, payment settlement, logistics and distribution, and after-sales customer service;
· Ensuring Service Security: Identifying abnormal transactions, preventing fraud, troubleshooting system failures, and protecting your account and property security;
· Optimizing User Experience: Recommending suitable products according to your browsing and purchasing habits (you can turn off personalized recommendations in APP settings);
· Compliance and Regulatory Requirements: Responding to regulatory requirements of China and African operating countries (such as the DRC), cooperating with judicial investigations, and fulfilling cross-border trade compliance obligations.

3. Storage and Protection of Personal Information

· Storage Location: Personal information will be stored on servers in China and Africa (including servers of Kinshasa warehousing and logistics centers), in line with the requirements of the Malabo Convention on Cybersecurity and Data Protection and China's Personal Information Protection Law on cross-border data transmission;
· Storage Period: Continuously stored during your use of the service; after the service is terminated, it will be retained for the shortest necessary period specified by law (e.g., transaction records are retained for 5 years to meet cross-border trade regulatory requirements), and will be anonymized or completely deleted after the expiration;
· Security Assurance: Adopting technical means such as encrypted transmission, access control, and firewalls, establishing a localized security team to prevent information leakage, tampering, and loss, and conducting regular security audits.

4. Sharing and Disclosure of Personal Information

We will not sell or rent personal information to third parties, and only share it in a limited manner in the following scenarios, ensuring that the recipient fulfills confidentiality obligations:
· Cooperative Service Providers: Sharing necessary information with localized logistics providers (for delivery), payment institutions (for settlement), and real-name authentication service providers (for compliance verification), and only providing the minimum scope of data required to complete the service;
· Compliance and Legal Requirements: Responding to legal subpoenas from judicial authorities and regulatory departments, or disclosing to protect the legitimate rights and interests of you and others and maintain service order;
· Your Active Authorization: Sharing information with designated third parties after your explicit consent (such as sharing contact information when inviting friends).

5. Your Rights to Personal Information

You can exercise your rights to personal information in the following ways, and we will respond and process within 15 working days:
· Access and Correction: View and modify personal information in "Personal Center - Account Settings" of the APP (modification of identity verification information requires secondary verification);
· Deletion and Cancellation: Apply to delete redundant information, or apply for account cancellation through customer service (relevant information will be processed in accordance with the storage period regulations after cancellation);
· Permission Management: Enable/disable location, album, address book and other permissions in device settings without affecting the use of basic services;
· Objection and Complaint: If you have objections to personal information processing, you can complain through the contact information below, and we will verify and feedback in a timely manner.

6. Use of Cookies and Similar Technologies

We use Cookies to store your login status and browsing preferences to optimize page loading speed and personalized recommendations. You can clear or disable Cookies in browser settings; after disabling, some personalized functions may be affected, but core services will not be impacted.

7. Protection of Minors' Information

We do not provide services to minors under the age of 16. If we inadvertently collect minors' information, we will delete it immediately and notify their guardians. If a guardian finds that a minor is using the service, they can contact us to cancel the account.

8. Policy Updates and Notifications

This policy will be optimized in accordance with legal and regulatory updates and business adjustments. After the update, it will be notified through pop-ups and announcement boards on the APP homepage; if core rights and interests are involved, your explicit consent will be obtained. You can view the latest version in "Settings - Privacy Policy" of the APP at any time.

9. Contact Information

If you have questions, complaints or suggestions about personal information protection, you can contact us through the following ways:
· Email: 10000@cnmai.com
· Phone: +86 17626035999 (China), +243 980572442 (DRC)
· Office Address: Nanjing, China; Kinshasa, DRC

---

January 20, 2026