Last Updated: 2025/09/15
The iQIYI Union Platform (hereinafter referred to as the "iQIYI Union" or "our products and/or services") is managed and operated by iQIYI International HK Limited (a company incorporated under the laws of Hong Kong, China, with its registered address at 3806 Central Plaza, 18 Harbour Road, Wanchai, Hong Kong; hereinafter referred to as "we" or "iQIYI"). It provides products and/or services with personalized advertising bidding and placement functionalities.
The iQIYI Union includes, but is not limited to, the official website (https://ssp.iqiyi.net/) under the registered name "iqiyi union" that we legally own, manage, and operate, as well as application programming interfaces (APIs) and software development kits (SDKs) provided for use by application developers or SSP platforms (hereinafter referred to as "Media Platforms", "SSP"; or collectively as "Developers" or "you"), along with any potential continuously innovated and developed products and/or services.
We fully understand the importance of personal information protection. This iQIYI Union Platform Privacy Policy (hereinafter referred to as "this Policy") aims to outline our practices regarding the processing and protection of personal information when you access our products and/or services, including: what personal information we collect, how we use personal information, how we safeguard personal information security, and what rights personal information subjects are entitled to exercise. Before utilizing our services, developers are required to thoroughly review this Policy, with particular attention to provisions highlighted in bold or presented through other distinctive formatting methods. If you do not agree to or accept the contents of this Policy, please refrain from using our services.
(1) Personal information of the developer's employees:
If you are a corporate developer, your use of our products and/or services may involve providing certain personal information of your employees (such as employee email addresses) to us. You undertake to obtain prior lawful authorization from your employees or establish other legitimate legal bases before submitting such personal information. Otherwise, any responsibilities or consequences arising therefrom shall be borne solely by you and shall have no connection with iQIYI. To avoid redundancy, references to "your personal information" and "developer personal information" herein encompass employee personal information that may be submitted by corporate developers.
(2) Personal information of the developer's end users:
When integrating our products and/or services and engaging in advertising cooperation, developers may collect, provide, and transmit end users' personal information to us. Developers must ensure lawful data sources, obtain the authorization from end users for such personal information processing related to the integration of our products and/or services, and comply with all and fulfill other requirements and obligations stipulated by applicable laws and regulations. Details are as follows:
If you are a media platform: You shall, in accordance with applicable laws, regulations, and regulatory policies, inform end users through a privacy policy or other reasonable means about the personal information processing involved in integrating our products and/or services,including disclosing our entity name and/or SDK name, the purposes, methods, and types of personal information processing, and a link to this Policy (subject to requirements of local laws and regulations). Only after obtaining end users' authorization and consent may you collect and transmit relevant personal information to us, thereby fully safeguarding the legitimate rights and interests of end users.
If you are an SSP: You shall take reasonable measures to verify that the data sources from media platforms are legally obtained and properly authorized, ensuring the media platforms' processing of end users' personal information complies with all the aforementioned requirements.
(3) Special Instructions for End Users
To maximize the protection of users' legitimate rights and interests, end users may read this Policy to understand how we indirectly collect, use, and otherwise process and safeguard end users' personal information from developers, as well as how to exercise their rights as personal information subjects with us. However, you understand that in most cases, it is more convenient and efficient for end users to exercise their rights directly with developers, such as requesting the deactivation of personalized ad recommendations or exemption from automated decision-making. If an end user's rights exercise request requires our response, we mandate that developers promptly and accurately relay your request to us through the system or other reasonable means, and we will address it in a timely manner. In cases involving developers' processing of end users' personal information, the privacy policy or relevant personal information processing rules provided by developers to end users shall prevail.
If you have any questions while reading this Policy, you may contact us through the contact details provided herein, and we will promptly address your inquiries.
I. How We Collect Personal Information
II. How We Use Personal Information
III. How We Share Personal Information with Third Parties
IV. Cross-Border Transfer of Personal Information
V. How We Protect the Security of Personal Information
VI. Retention of Personal Information
VII. Personal Information Rights and Methods for Exercising Such Rights
VIII. Protection of Children's Personal Information
IX. Privacy Policy Updates
X. Contact Us
Under normal circumstances, we collect personal information in the following functions/scenarios:
(1) Developer Account Application: Prior to utilizing our products and/or services, you are required to apply for a developer account. To do so, you need to provide your email address. We will employ your email address to establish an iQIYI Union account and furnish you with an initial password.
(2) Developer Account Login: When you log into the iQIYI Union Service Platform, to assist you in successfully completing the login process, you will need to provide us with your email address, account and password information.
We will collect your relevant and necessary cooperation information through various online and offline channels (subject to actual circumstances) to evaluate the feasibility of entering into an advertising cooperation and conducting potential communications. Such cooperation information includes, but is not limited to, your entity details (including corporate entity name or individual developer's name), email address, and contact information (name, phone number, and mailing address). . Additionally, for potential future settlements, you are required to provide us with your bank account details.
To facilitate advertising cooperation, you are required to provide us with relevant information regarding theapplications and ad space involved in the cooperation.
To ensure the security of your account and prevent malicious programs or combat fraud while using our products and/or services, we may collect information from your browser and computer, including but not limited to your cookie data, IP address, browser type, language used, access date and time, platform operations, usage patterns, service logs, and related information.
To facilitate issue and dispute resolution, document the handling procedures and outcomes of related issues, and continuously improve service quality, we may need to collect the following personal information from you: contact details (phone number/email address used when you communicate with us or other contact methods voluntarily provided by you), communication records (including text/images/audio/video/call logs), and other necessary information relevant to your request.
To achieve the purpose of personalized advertising cooperation, developers will transmit all or part of the following personal information of end users to iQIYI upon obtaining authorization from end users (subject to the actual data transmission by the developer. Regarding the necessary information as per our request, special instructions have been provided in the table below):
| Categories of Personal Information | Intended Use |
|---|---|
| Device Information [Both Android & iOS] Basic information including device brand, model, operating system and version, system language, resolution, screen dimensions and orientation, IP address, network type, network operator, and Wi-Fi name. [Android Only] GAID (required information), Android ID [iOS Only] IDFA (required information) | Advertising placement, monitoring attribution, anti-fraud |
| End User Cookies and Similar Information (Note: Applies only when end users access the developer's applications and websites, and the developer transmits such information to us) | Advertising placement, monitoring attribution, anti-fraud |
| Application Information: [Android Only]: Application name, package name, version number [iOS Only]: Application bundle ID | Advertising placement, anti-fraud |
| End User Profile Information: [Both Android & iOS] User age, gender, preferences, interests, etc. | Advertising placement, anti-fraud |
| Advertising Information: [Both Android & iOS] Advertising interaction data such as impressions, clicks, and conversions | Monitoring attribution, advertising placement statistical analysis, anti-fraud |
| Location Information [Both Android & iOS] Location information | Advertising placement, anti-fraud |
If any feature requiring the collection of your personal information is not specified in this Policy, or if we exceed the originally stated purpose of collection and its directly or reasonably related scope, we will notify you again and obtain your consent in accordance with relevant legal and regulatory requirements.
Advertising placement: We may provide third-party advertising partners, such as cooperative DSP platforms, with de-identified device information and audience tags of end users to deliver more relevant information, promotions, advertisements, and commercial information to end users.
Advertising monitoring, attribution, statistical analysis, and optimization: We may provide our partners engaged in advertising statistical analysis and optimization services with advertising-related data such as de-identified device information, audience tags, ad impressions, views, clicks, plays, and conversion data related to advertisements pertaining to you and end users. This data is utilized for advertising monitoring, attribution, and analysis; assessing the effectiveness of advertisements and related services; generating advertising or decision-making recommendations; enhancing the effective reach of advertisements; and delivering higher-quality, more tailored services to you and end users. Advertisers and/or their designated agents may request that we furnish some or all of the aforementioned information for the purposes of user source attribution, operational analysis, optimizing advertising placement strategies, or improving their products and services.
We may share your relevant information with external regulatory bodies and professional consulting institutions (such as auditing firms) during due diligence or audit processes.
iQIYI Advertising Ecosystem Holistic Services
The advertising ecosystem of iQIYI may encompass various products and/or services, including this product and/or service that provides developers with advertising matching, bidding, and placement, as well as advertising placement platforms offered to advertisers and/or agencies. We may share your/end users' personal information within the iQIYI Group based on the iQIYI advertising ecosystem.
iQIYI Union Operation Support
As an international group, our services may be provided or facilitated by affiliated companies under the iQIYI Group. These affiliated companies provide us with daily operational support and deliver certain essential functions including customer service, security risk control, statistical analysis, as well as service optimization and improvement.
Our data center is located in Singapore, where we transfer the personal information collected from developers and end users for centralized storage and subsequent processing. This may occur outside the country/region where developers/end users are located. Furthermore, developers/end users acknowledge and agree that our products and/or services may be entrusted to our affiliated company (Beijing iQIYI Science & Technology Co., Ltd.) for operation and management. Said affiliated company may be granted remote access and other processing rights to the personal information of both you and end users, or we may directly transmit such personal information to the country or region where the affiliated company is located(i.e., Chinese Mainland).
In addition, when we provide, transfer, or disclose personal information to third parties based on the aforementioned Section III "How We Share Personal Information with Third Parties", such third parties may be located in countries or regions outside Singapore. To achieve the aforementioned sharing purposes, we may retransmit certain personal information of developers and end users to the countries/regions where the third-party partners' data centers are located.
Rest assured, we will ensure that the transmission of such personal information complies with applicable data protection laws and this Policy. Meanwhile, we will implement organizational, technical, and contractual measures to ensure the security of such transmissions and guarantee that personal information receives adequate protection following cross-border transfers. In the event that developers provide us with end users' personal information, developers shall fully disclose the circumstances of such cross-border data transfer to end users and shall only provide us with end users' personal information after obtaining authorization and consent from end users.
We have implemented multi-layered protection measures, including security technologies compliant with applicable data protection laws and industry standards, as well as supporting organizational structures and management systems, to safeguard your personal information. These measures are designed to minimize risks associated with personal information breaches, damage, misuse, unauthorized access, unauthorized disclosure, and alteration (collectively referred to as "Data Security Incidents"). Our specific protection measures include:
We have employed cryptographic technologies such as Transport Layer Security (TLS) protocols to prevent transmission links from being sniffed, eavesdropped on, or intercepted. We also apply secure storage measures including data classification and tiered handling have been adopted; strictly control data access rights through multi-factor authentication technologies; and monitor data processing activities and conduct full-process monitoring and auditing of the data lifecycle.
We have established a dedicated personal information protection department responsible for safeguarding personal data and facilitating data subject rights exercise. We have implemented internal control systems including the business data security usage guidelines and data cooperation management framework. Employee access privileges are minimized. Regular information security protection training sessions are conducted for all staff members. Personal data storage zones are geofenced with restricted employee access permissions.
We have established the iQIYI Security Emergency Response Center, which has implemented multiple security management systems and emergency response plans, clearly defining the reporting procedures for security incidents and the emergency response handling procedures. In the unfortunate event of a personal data security incident, we will promptly activate our emergency response plans to mitigate the impact and prevent further escalation of the incident. We will notify you of security incidents via phone calls, push notifications, announcements, or emails in accordance with the requirements of applicable data protection laws.
The retention of personal information is subject to various factors, such as the type and purpose of the personal data we process, our statutory obligations, and the necessity to defend against current or anticipated legal proceedings.
Generally, within the scope permitted by applicable laws and regulations, we retain personal information only for the period necessary to provide our services and achieve the aforementioned purposes. We may also retain personal information as necessary to fulfill contractual and legal obligations, safeguard our legitimate business interests, and assert, defend, or establish legal claims or rights.
Upon expiration of the retention period, we will promptly delete or anonymize your personal information unless otherwise stipulated by applicable laws and regulations. If restricted by legal requirements or technical limitations that prevent the immediate deletion or anonymization of your personal information, we will securely store such data, cease all other forms of processing, and promptly delete or anonymize it once the restricting conditions are lifted.
Under applicable laws and regulations, developers and end users are entitled to corresponding personal information subject rights, which typically include the right to be informed, the right to access, the right to rectification, the right to erasure, the right to restrict processing, and the right to withdraw consent. However, provisions may vary across different countries/regions, and specific rights shall be determined in accordance with the applicable laws and regulations.
Specifically:
Developers may log into their iQIYI Union account and utilize the rights exercise features provided by iQIYI Union (subject to actual availability) to access, rectify, delete, restrict processing, or withdraw consent regarding relevant personal information. Developers have the right to opt out of receiving marketing emails or SMS messages from us at any time. They may unsubscribe from our marketing communications by clicking the "unsubscribe" link or following other instructions provided by us.
Developers and end users may also contact us at privacy@iq.com to exercise personal information rights or inquire about the exercise of such right.
We will respond to the exercise of rights requests in a timely manner within a reasonable period as required by applicable laws and regulations. To ensure security, we may need to verify the identities of developers and/or end users prior to responding to such request. For reasonable requests, we generally do not charge fees. However, for excessive, repetitive, or unreasonable requests, we may charge fees or deny such requests at our discretion.
Please be advised that the rights granted to data subjects are not absolute. At times, the rights of personal data subjects may be subject to certain conditions or restrictions as stipulated by applicable laws and regulations, such as national security, public security and interests, crime prevention and investigation, or the protection of others' lawful rights and interests. If we are unable to fully or partially respond to the rights exercise requests from developers and/or end users, we will provide an explanation of the reasons to such developers and/or end users. If the applicable laws and regulations of the country/region in which developers or end users are located do not support specific types of rights, or impose additional applicable conditions or restrictions, we will also provide corresponding clarifications.
If developers and/or end users believe that we have violated applicable laws and regulations in the processing of personal information, they shall have the right to lodge a complaint with the data protection authority or other competent regulatory body, file a lawsuit in court, or pursue any other remedies available under applicable laws and regulations.
Developers must be at least 18 years old to use our products and/or services. In principle, our products and/or services do not actively collect or process children's personal information, including indirectly obtaining such data from developers. We impose reasonable restrictions to require developers not to transmit children's personal information to us. Unless developers provide us with a commitment and reasonable evidence demonstrating that their transmission of children's personal information for personalized advertising complies with all applicable laws and regulations (including, but not limited to, obtaining the authorization and consent of the guardian).
Please understand that as we do not directly provide services to end users, in most cases it is difficult for us to determine the age of personal information provided by developers. If end users believe we may have processed children's personal information in violation of applicable laws, please contact us through the contact details provided in this Policy. We will conduct an investigation and, if necessary, take appropriate measures to cease any such processing and delete all related information.
In accordance with applicable laws and regulations and the evolution of our services, we may update and publish this Policy from time to time and provide notice as required by applicable data protection laws, including but not limited to issuing notifications, push messages, pop-ups, emails, either individually or in combination.
If you continue to use our services after the updated version of this Policy takes effect, it shall constitute your acceptance of such updates. If you do not accept or agree to the updates of this Policy, you may cease using our services, including deactivating your iQIYI Union account.
For the latest update date of this Policy, please refer to the "Last Updated" date at the beginning of this document.
If you encounter any issues related to personal information and privacy protection while using our services, or if you have any questions, complaints, or suggestions regarding this Policy, you may contact us by sending an email to: privacy@iq.com. We will promptly address your inquiries.