Tripolo Guide Privacy Standards

Scope: These Standards are a Tripolo Policy incorporated by reference into both the Tripolo Traveler Terms and the 趣菠萝服务条款 (Tripolo Guide Terms). They form an integral part of both agreements. The obligations they impose fall on Guides; Travelers may rely on them as protection for their personal information.

Entities: In these Standards, “Tripolo” refers to the Tripolo Platform as a whole. Guide verification, settlement and account measures are carried out by 趣菠萝科技（深圳）有限公司; controller responsibility for Traveler personal information rests with Tripolo, Inc. Neither company is the agent of the other.

Changes: Amendments follow the amendment procedure in the Terms that apply to you — Section 29.1 of the Tripolo Traveler Terms for Travelers, 【协议的变更】 of the 趣菠萝服务条款 for Guides. That procedure distinguishes material modifications from other modifications: a material change — one affecting fees, liability, dispute resolution or the handling of personal information, or otherwise reducing your rights or increasing your obligations — is notified by email at least thirty (30) days in advance; other changes, such as correcting an error, clarifying wording, adding examples or changing formatting, take effect when posted, with no separate notice. A confirmed Reservation remains governed by the version in effect when it was confirmed. Prior versions are retained for at least three (3) years.

Note: These Standards govern your obligations regarding Traveler personal information. How Tripolo handles a Guide’s own personal information is set out in the 趣菠萝隐私政策 (published in Chinese). How Tripolo handles a Traveler’s personal information is set out in the Tripolo Privacy Policy.

1. Your legal position

You receive Traveler personal information in the course of delivering Guide Services. In relation to that information you are an independent personal information handler, and you bear legal responsibility in your own right under the PRC Personal Information Protection Law (PIPL) and other applicable law.

Tripolo and you are not joint handlers of that information, and Tripolo is not responsible for how you process it.

2. Information you receive

Through the Tripolo Platform you may receive a Traveler’s name or display name, party size, booking date and time, meeting point, language, in-Platform messages, and any special requirements the Traveler chooses to share (such as accessibility needs or dietary restrictions).

Tripolo does not give you a Traveler’s phone number, identification details, or payment information. Communication with Travelers takes place through in-Platform messaging.

3. Permitted uses

You may use personal information obtained through the Tripolo Platform only:

• to manage your Reservations — confirming itineraries, coordinating meeting points, and communicating service details
• to deliver your Guide Service — ensuring the experience runs smoothly and to the expected standard
• to comply with law — including lawful requests from authorities and legal obligations

Any use beyond this scope is a violation.

4. Prohibited conduct

4.1 Unless expressly approved in writing by Tripolo, or reasonably necessary to deliver the booked service, you may not encourage or require Travelers — before, during, or after a Reservation — to:

• register for third-party accounts
• post reviews or ratings, particularly outside the Tripolo Platform
• interact in any way with third-party websites, applications, or services

These restrictions exist to prevent unauthorised data collection and commercial redirection, to protect Traveler privacy, and to maintain the integrity of the Platform. Item (b) also engages the Review Rules and the circumvention provisions of the Terms.

4.2 You may not:

• disclose or sell Traveler information to unrelated third parties
• use it for marketing, promotion, or any purpose unrelated to the booked service
• retain it after the service ends, except where law or a Tripolo Policy requires retention
• photograph, record audio or video, or post identifiable content about a Traveler on social media without their consent

5. Security and confidentiality

5.1 You must take reasonable measures to protect the security and confidentiality of Traveler information, including:

• storing all Traveler information safely, whether digital or physical, and preventing unauthorised access, misuse, or breach
• promptly deleting or securely destroying it when no longer needed, except where law or a Tripolo Policy requires retention
• not transmitting it through insecure channels

5.2 Security incidents

If a data breach, loss, or other security incident occurs, you must notify Tripolo immediately (support_cn@tripolo.cn) and cooperate with any investigation or response.

Note: Under PIPL art. 57, a personal information handler must take remedial measures immediately and notify both the supervising authority and the affected individuals. That obligation rests on you independently.

6. Sensitive personal information

Tripolo does not ask Travelers for health information, and Section 2.3 of the Safety and Conduct Standards tells Travelers to describe what they need rather than why. Free-text fields cannot prevent it entirely, so a Traveler may still mention something health-related. If you receive it, treat it as sensitive personal information. You must:

use it only to ensure the safety and smooth delivery of that service;

not record it, retain it, or pass it to anyone who does not need it;

delete it once the service is complete.

7. Minors

Where a Traveler’s party includes minors, you may learn their names or ages.

Under PIPL art. 31, processing the personal information of a minor under 14 requires the consent of their parent or guardian.

Do not separately collect, record, or retain minors’ personal information. Where knowing it is necessary for the safety of the service, delete it as soon as the service ends.

8. Consequences of violation

8.1 Tripolo may respond to a violation with a warning and recorded breach, reduced search visibility, account suspension, or permanent termination.

8.2 Where a Guide sells Traveler information, publishes Traveler content without consent, or uses the information for marketing, Tripolo may terminate the account immediately and report the matter to the authorities.

8.3 Where your breach of these Standards causes loss to a Traveler or to Tripolo, you bear legal responsibility in your own right and are liable to indemnify Tripolo under Section 25 of the Terms.

Traveler trust in the Platform rests on a shared responsibility to protect personal information. Mishandling Traveler data may carry legal consequences and affect your continued eligibility to offer services through Tripolo.