Update date: August 5, 2026
Important notice
Alibaba Cloud Computing Co., Ltd. ("Alibaba Cloud," "we," or "us") takes the protection of personal information seriously. When you use our services (the "Video Services"), we protect the personal information collected for the services in accordance with applicable laws and regulations and industry best practices. This Video Services Privacy Policy (this "Policy") explains how we process information about you and your end users (the end users of your products).
This Policy applies to products under the Alibaba Cloud Video Services, including our websites, SDKs, APIs, plug-ins, components, code, tools, and newly developed products and services. If a particular service has a separate privacy policy, that policy and this Policy form the complete privacy terms for that service. If you permit sharing with a third-party website, product, or service, that third party's terms and privacy policy also apply.
Read this Policy carefully before using the Video Services, especially provisions shown in bold and underlined. If you do not agree with this Policy, stop using the Video Services.
Contents
- How we collect and use your and your end users' personal information
- How we share, transfer, and publicly disclose personal information
- How we protect personal information
- How you and your end users may exercise personal-information rights
- How we handle information about minors
- Storage and global transfer of personal information
- How this Policy is updated
- How to contact us
1. Collection and use of personal information
We collect information to provide the service you select more effectively and accurately. We collect and use information only for the business purposes described in this Policy and generally with consent.
1.1 Information you provide
When you open an Alibaba Cloud account or use the Video Services, you may provide a telephone number, email address, company information, product information, promotion channel, application name, and related data. For enterprise verification, we may also request a business license, unified social credit code, company name, business term, location, detailed address, and Alipay information used for verification.
We use this information to provide, maintain, and improve the Video Services; prevent, detect, and investigate fraud, infringement, security threats, illegal conduct, or breaches of agreements and policies; protect you, other users, and our or our affiliates' lawful interests; contact you to resolve issues; and for other purposes you authorize.
1.2 Information collected during use
The following personal-information fields may be collected in applicable scenarios by the relevant SDK products:
| Field | Purpose or scenario | Products |
|---|---|---|
| UUID | Algorithmically generated unique identifier for a terminal application; performance tuning, fault analysis, and compatibility. | Live Streaming, Real-Time Communication, Player, Upload, and Ultra-Low-Latency Live Streaming SDKs. |
| Device model | Performance tuning, fault analysis, and compatibility. | Live Streaming, Real-Time Communication, Player, Upload, and Ultra-Low-Latency Live Streaming SDKs. |
| IP address | Server-side SDK API calls; performance tuning, fault analysis, and compatibility. | Live Streaming, Real-Time Communication, Player (including intermediate-node IPs), Upload, and Ultra-Low-Latency Live Streaming SDKs. |
| Wi-Fi status | Determine Wi-Fi connectivity. | Live Streaming and Real-Time Communication SDKs. |
| Carrier information | Select and optimize the network path. | Live Streaming and Real-Time Communication SDKs. |
| Screen resolution | Collected when necessary, such as for screenshots. | Alibaba Cloud Player SDK. |
SDK versions below 6.8.0 (including the Live Streaming SDK) may still collect IDFV, IMEI, and DeviceID. Upgrade to the latest SDK version as soon as possible.
1.3 Device permissions
| Platform / permission | Products | Function |
|---|---|---|
| Android: INTERNET | Live Streaming, Real-Time Communication, Player, Upload SDKs | Make network requests. |
| Android: ACCESS_NETWORK_STATE / ACCESS_WIFI_STATE | Live Streaming, Real-Time Communication, Upload SDKs | Check network availability and Wi-Fi status. |
| Android: RECORD_AUDIO | Live Streaming, Real-Time Communication, IMPaaS | Capture microphone audio during live streaming or voice messages. |
| Android: READ/WRITE external storage or READ_MEDIA_* (depending on target SDK) | Real-Time Communication, Live Streaming, Player, Upload SDKs | Read or write logs, downloaded messages, local images/files, resources, and video output. |
| Android: CAMERA / FLASHLIGHT | Live Streaming and Real-Time Communication SDKs | Capture camera video; use the flash in low-light recording. |
| Android: MODIFY_AUDIO_SETTINGS / Bluetooth | Live Streaming and Real-Time Communication SDKs | Adjust playback and connect Bluetooth headsets or monitor audio. |
| iOS: microphone / camera usage descriptions | Low-Code Audio/Video Factory, IM PaaS, Live Streaming SDK | Capture microphone audio and camera video. |
| HarmonyOS: INTERNET, GET_NETWORK_INFO, MICROPHONE, GET_WIFI_INFO | Framework SDKs | Resolve domains, check network/Wi-Fi state, and capture microphone audio. |
Other information may include SDK/API/JavaScript versions, application version, device manufacturer and operating-system version, CPU/GPU information, network type and state, screen-awake state, and global audio settings. We may also collect information you provide to customer service, survey responses, service-partner interactions, software-use habits, and risky URLs to improve service quality and security. Standalone device and service-log information cannot identify a specific person; if combined with personal information, it is treated as personal information during that combination and anonymized or de-identified as required.
1.4 Your compliance obligations
If you accept this Policy and integrate our SDK into your product, you must ensure that collection and use of your end users' information are lawful. Keep the Video Services upgraded to the latest version, clearly disclose the SDK in your privacy policy (including the SDK name, service type, provider "Alibaba Cloud Computing Co., Ltd.", information categories, and this Policy link), and initialize the SDK only after the user has authorized your privacy policy. You bear risks and losses caused by non-compliant use.
If you offer services in the European Union, you must have a lawful basis for processing personal data, such as contract performance, legal compliance, legitimate interests, or consent. You must require end users to consent to this Policy, resolve their complaints and claims relating to the collection or use of their information, and compensate Alibaba Cloud for resulting losses. End users may object to or restrict processing and request access, correction, deletion, or portability. Contact us through the ticket system if you need assistance.
1.5 Exceptions to consent
Subject to applicable laws and national standards, consent is not required when processing is directly related to public security, public health, or a significant public interest; necessary to protect life, property, or other significant lawful interests where consent is difficult to obtain; information is made public by the individual; information is collected from lawful public disclosures; processing is necessary to perform a contract requested by you; processing is necessary to maintain software and service security and stability; or another statutory exception applies.
2. Sharing, transfer, and public disclosure
2.1 Sharing
We owe you a duty of confidentiality and do not sell or rent your or your end users' information for third-party marketing or illegal purposes. We share end-user information only with consent or authorization, when required by law or an administrative or judicial authority, to handle a valid intellectual-property complaint, when sharing is necessary to provide a service or resolve a dispute, or with partners that have signed confidentiality agreements and must follow this Policy and strict security measures. Necessary information may be shared with affiliates and their designated service providers for the purposes stated in this Policy; renewed consent is obtained when required for sensitive information or a changed purpose.
2.2 Transfer
We do not transfer end-user personal information to third parties unless the end user consents or the transfer occurs in a merger, acquisition, or bankruptcy. In the latter case, the new holder must continue to follow this Policy or obtain new consent.
2.3 Public disclosure
We publicly disclose personal information only with your or the end user's express consent, when legally required in a legal proceeding or by a government authority, or when reasonably necessary in an emergency to protect important lawful interests.
3. Protection of personal information
We use reasonable physical, electronic, and administrative safeguards consistent with industry standards. These include SSL/HTTPS encryption, encryption technologies, trusted protection mechanisms, access controls, and employee security and privacy training. We maintain a data-centered security-management system covering the data lifecycle, organization, policies, personnel, products, and technology.
Information is stored in secure environments that are not open to the public, with firewalls and, where appropriate, encryption. No system is completely secure, and we cannot eliminate all risk of unauthorized access or unreliable information. If a security incident occurs, we will notify you or your end users as required by law, explain the incident and possible impact, describe response and mitigation measures, and report to regulators where required.
We avoid collecting irrelevant information and retain personal information only for as long as needed for the stated purposes, service records, security and quality, an agreed longer period, or another specific retention requirement. After the retention period, we delete or anonymize it as required by law.
4. Exercising personal-information rights
We support rights to access, correct, supplement, delete, obtain a copy of, and withdraw consent for personal information. Direct users may exercise these rights after signing in to the Alibaba Cloud website; if a right cannot be exercised there, contact us using the details below. We may verify identity, generally respond within 15 days after verification, and charge a reasonable fee only for excessive or repeated requests.
Account cancellation requests are normally answered within 15 working days. After cancellation we stop providing services; you may separately request deletion of personal information. If an end user needs a copy of their information, the end user should normally contact the application provider. After verifying a legitimate request from the provider or end user, we will cooperate.
We may refuse a request when necessary to fulfill a legal duty; protect national security, defense, public security, public health, or a significant public interest; support criminal investigations or proceedings; prevent abuse of rights; protect life or property where consent is difficult to obtain; avoid serious harm to another person's lawful interests; or protect a trade secret.
5. Information about minors
We do not accept minors as registered users. If your application targets children under 14, obtain guardian consent, provide the required notices, and follow applicable app-store standards. Because technology and business models make proactive identification difficult, a guardian may contact us to request deletion of unauthorized information. We will also delete such information when we discover it.
6. Storage and global transfer
When you use our services, we store your data in mainland China. We strongly recommend using the Video Services only within mainland China. If you use them elsewhere, you must comply with cross-border transfer and local data-protection requirements and bear the resulting risks and losses.
You are responsible for risks and consequences if your end users have not accepted this Policy, including claims, complaints, penalties, or losses suffered by Alibaba Cloud. If you provide services in the European Union, data may be transferred outside the EU. We will take appropriate measures, including standard contractual clauses where applicable, to maintain confidentiality and protection.
7. Policy updates
We may update this Policy from time to time and publish the update date on the Alibaba Cloud website. We will not limit your rights under this Policy without your express consent. For material changes, we will provide prominent notice, such as a website or client-homepage announcement or a pop-up notice.
Material changes include major changes to service models or processing purposes; major changes in control or organizational structure; changes to the main recipients of sharing, transfer, or disclosure; major changes to your rights or how they are exercised; changes to the responsible department, contact method, or complaint channel; and a high-risk finding in a personal-information security impact assessment. Archived versions will remain available on a dedicated Video Services page.
8. Contact us
For questions, suggestions, or comments about this Policy, sign in to your account and contact customer service or submit a ticket at Alibaba Cloud Support. You may also email the Personal Information Protection Officer at pipaliyun@service.aliyun.com. We aim to respond within 15 working days after receiving your inquiry.
If you are dissatisfied with our response, especially if you believe processing has harmed your lawful interests, you may bring proceedings before a court with jurisdiction at the defendant's domicile.