menu
Is this helpful?

# Privacy And Security

# Overview

ThinkingData respects and protects people's data privacy and rights. The ThinkingEngine we have built complies with industry best practices and global data security-related laws and regulations.Access our [privacy center] to learn how we comply with various privacy guidelines.

# Data Collection

You usually use our SDK for data acquisition. Before conducting data acquisition, you can follow the steps below to meet privacy compliance requirements.

[Android SDK]

[iOS SDK]

JavaScript SDK

[Unity SDK]

Unreal SDK

[Cocos2d-X SDK]

[ReactNative SDK]

[Flutter SDK]

After completing the application development that integrates our SDK, you usually distribute the application to the Google Play and App Store platforms. You can refer to the following documents for platform distribution.:[AppStore],GooglePlay.

# Data Transmission

In the data transmission layer, we provide multiple technical solutions to ensure the security of data transmission.

  • Support encryption transmission of messages using the HTTPS protocol.
  • Support data encoding compression
  • Support custom key encryption for data transmission.
  • Support data desensitization or encryption for sensitive properties.

# Data Storage

  • Provide privatization deployment service, data will be stored in the storage space specified by you.
  • Regularly backup data to prevent data loss or damage. Backup data needs to be stored in a secure location and regularly test whether the backup data is available.
  • Support secure storage devices and storage media, such as using hardware-encrypted disks, dedicated storage devices, etc. At the same time, attention should be paid to the physical security of storage devices to avoid theft or damage to the storage devices.

# Data Usage

# Account Login

We support SSO login for ThinkingEngine, and at the same time, we can enforce all users to enable MFA for multi-factor authentication during login to ensure the security of the system.

# Access control

For sensitive data, it is necessary to control access permissions so that only authorized personnel can perform read and write operations. Through data access control, the range of data tables that members can access can be limited, and sensitive fields can be encrypted. Administrators can control members' functional access permissions, restrict data queries and exports through role authorization, and other methods.

# Security Audit

According to your needs, we can deploy a security audit project for you to audit data access and modifications, record information such as operator, time, and operation type, in order to detect abnormal operations and handle them promptly.

# Data Management

The data query and delete functions of ThinkingEngine are designed to help ThinkingEngine meet the requirements outlined in the General Data Protection Regulation (GDPR). These APIs can assist users in deleting their personal data on ThinkingEngine and also help users query the personal data stored on ThinkingEngine. These measures aim to ensure that ThinkingEngine complies with GDPR regulations and protects users' privacy and data rights.

  • User opt-out

Although we provide solutions for deleting or retrieving personal data for GPDR compliance, it is also important for users to choose to stop data tracking. If tracking is done using a client SDK, you can use the methods provided by the SDK to stop data collection.

  • Verification

Before using the query function provided by our API, you must manually generate a query key. [How to generate a query key?]

  • GDPR And CCPA：[Data query]、 [Data deletion]