PRIVACY POLICY

Table of Contents

Introduction

SECTION I: GENERAL PROVISIONS

1. How We Collect and Use Your Personal Data

2. Cookies and Similar Technologies

3. How We Store Your Personal Information

4. How We Share, Transfer and Disclose

5. How We Protect Your Personal Information

6. Your Rights

7. Children's Personal Information

8. Global Data Transfers

9. Policy Updates

10. Inconsistency

11. Contact Us

SECTION II: SPECIAL PROVISIONS FOR THE UNITED STATES

12a) General U.S. Terms

12b) Special Terms for California (CCPA)

INTRODUCTION

MAYCHI VendOS and its related services (hereinafter referred to as "Product" or "Service") are provided by Hefei Meizhi Intelligent Technology Co., Ltd. and its affiliated companies (hereinafter referred to as "we", "us", or "our"). MAYCHI VendOS is an AI-powered vending machine management application designed for operators to remotely manage vending machine inventories, sales data, device status, payment accounts, and operational analytics.

We highly value your privacy. This Privacy Policy (hereinafter referred to as "Policy") describes how we collect, use, disclose, process, and store any personal information that you provide to us or that we collect from you when you use our products and services. If you are under 16 years of age or otherwise regarded as a minor in your jurisdiction, please do not use our product and/or service and do not provide any personal information to us.

Data Controller: Hefei Meizhi Intelligent Technology Co., Ltd. and its affiliated companies are the controller (or similar term under applicable laws) of any information processed in connection with this Policy.

The Privacy Policy consists of two parts: (I) General Provisions applicable to users in the EU and the United States; and (II) Special Provisions applicable only where MAYCHI VendOS provides products and/or services in specific jurisdictions. In the event of any inconsistency between the General Provisions and the Special Provisions, the Special Provisions shall prevail.

SECTION I: GENERAL PROVISIONS

1. HOW WE COLLECT AND USE YOUR PERSONAL DATA

The term "personal information" or "personal data" means any information relating to an identified or identifiable natural person. Personal information does NOT include anonymized information from which individual identities have been removed.

a) Information You Provide

Account Registration & Management

When you register for MAYCHI VendOS, you need to provide: country, time zone, device language, company name, email address, password, and phone number to create an account. If you choose to complete your profile, you may also provide: contact person's name, contact address, and administrator's name. Legal basis: performance of a contract and your prior consent.

Payout Account Information

To process earnings withdrawals, we collect sensitive financial and identity information including: Social Security Number (SSN), driver's license photo, electronic signature, bank account details (routing number, account number, account holder name, void check), account type, date of birth, home address, and PAX payment terminal information. This data is collected solely for payout account application and verification purposes and is processed by our payment partner.

Customer Support Information

If you contact our customer care team, we will collect the information you provide during the interaction. If you choose not to provide relevant information, we may be unable to effectively respond to your inquiry.

b) Information Automatically Collected

Device & Log Information

We automatically collect: IP address, device model, operating system version, unique device identifiers (e.g., IMEI, MAC address), login time, cookies, and device language. This information is used for account security protection, fraud risk identification, and fault diagnosis.

Vending Machine Operational Data

When you use VendOS to manage vending machines, we collect: device activation data (via QR code scan), inventory levels, sales transaction records, device status and alerts, sales analytics, and product image data for AI-assisted product recognition.

c) Device Permissions

MAYCHI VendOS may request the following device permissions to enable core functions:

2. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and improve our services. You may control cookie preferences through your browser settings or our in-app privacy settings.

3. HOW WE STORE YOUR PERSONAL INFORMATION

We store personal data on third-party cloud servers located in the United States of America. We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law.

4. HOW WE SHARE, TRANSFER AND DISCLOSE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We may share it in the following limited circumstances:

a) Service Providers & Processors

We engage trusted third-party service providers to help deliver our services. These providers only process your data on our behalf under strict confidentiality obligations:

b) Legal Requirements

We may disclose your personal information when required by law, court order, or government authority, or when necessary to protect the rights, property, or safety of us, our users, or the public.

c) Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you in advance.

d) With Your Consent

We may share your personal information for other purposes with your explicit prior consent.

5. HOW WE PROTECT YOUR PERSONAL INFORMATION

We implement robust technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

AES-256 encrypted storage of all sensitive data (SSN, bank information)

TLS/HTTPS encryption for all data in transit

Role-based access control (RBAC) limiting data access to authorized personnel only

Multi-factor authentication (MFA) for account login and sensitive operations

Real-time security monitoring, intrusion detection, and audit logging

Regular security assessments and penetration testing

In the event of a personal data breach, we will notify you and the relevant supervisory authorities as required by applicable law.

6. YOUR RIGHTS

As a data subject, you have rights under applicable privacy laws. You may exercise these rights by contacting us at service@maychi.com, by phone at [Please fill in], or through our official website. We will generally respond within one (1) month.

Right to Know

We publish this Policy to inform you how we handle your personal information.

Right to Access

You may request access to personal information we hold about you.

Right to Correct

You may request correction of inaccurate or incomplete personal information.

Right to Delete

You may request deletion of your personal information, subject to legal retention requirements.

Right to Restrict Processing

You may request restriction of processing under certain circumstances.

Right to Data Portability

You may request a copy of your data in a machine-readable format, where required by law.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

You may withdraw consent at any time; withdrawal does not affect prior processing.

Right to Refuse Automated Decisions

We currently do not use automated decision-making or profiling.

Right to Lodge a Complaint

You may lodge a complaint with your local data protection authority.

7. HOW WE PROCESS CHILDREN'S PERSONAL INFORMATION

MAYCHI VendOS is designed for adult business operators and is not directed at children. We do not knowingly collect personal information from any person under 16 years of age. If you are under 16, please do not use our service.

If we discover that we have inadvertently collected personal information from a child under 16, we will promptly delete such information and terminate that user's registration. Parents should contact us immediately at service@maychi.com.

8. HOW YOUR PERSONAL INFORMATION IS TRANSFERRED GLOBALLY

Generally, data from users is stored on third-party cloud servers located in the United States. For necessary maintenance of the Services, your personal data may be accessed by our technical personnel in China. We implement corresponding protective measures in accordance with applicable data protection laws to ensure data security.

Where personal data generated within the European Economic Area ("EEA") is transferred to countries outside the EEA, we ensure that appropriate safeguards are in place in compliance with the GDPR, including Standard Contractual Clauses or other approved mechanisms.

By agreeing to this Privacy Policy and using our products, you consent to international data transfers. To withdraw consent, contact: service@maychi.com.

9. HOW THIS POLICY IS UPDATED

We reserve the right to update or modify this Policy from time to time. For significant changes, we will notify you through the App, email, or other appropriate means. Your continued use of the Service after notification constitutes acceptance of the updated Policy.

10. INCONSISTENCY

In case of any inconsistency between this Policy and other privacy policies related to the Services, the most recently published policy content shall prevail.

11. CONTACT US

If you have any concerns or questions about this Privacy Policy, or wish to exercise your privacy rights, please contact us through the following channels:

SECTION II: SPECIAL PROVISIONS FOR THE UNITED STATES

12. SPECIAL PROVISIONS FOR THE UNITED STATES

If you are a resident of the United States and where we meet the relevant threshold tests, the following additional terms apply. In the event of any conflict with the main Privacy Policy, the following terms shall prevail.

a) General U.S. Terms

1) De-identified Information

Where we maintain or use de-identified data, we will continue to maintain and use such data only in a de-identified fashion and will not attempt to re-identify the data.

2) Your Rights Under U.S. Law

You may exercise the privacy rights described in Section 6 of this Policy in accordance with applicable U.S. law, subject to certain limitations. These rights are not absolute and are subject to certain exceptions.

We do not sell personal information and do not use personal information for targeted advertising or profiling. Therefore, we do not process requests for opt-out of sale, targeted advertising, or profiling.

We will not unlawfully discriminate against you for exercising your rights. If we refuse to take action on your request, you may appeal this refusal within a reasonable period by sending an email to service@maychi.com.

3) Identity Verification & Authorized Agents

Once we receive your request, we may verify your identity by requesting information sufficient to confirm it. If you use an authorized agent to exercise your rights, we may request evidence of power of attorney or valid written authority. Not all types of requests can be made by authorized agents in all states.

b) Special Terms for California (CCPA/CPRA)

If you are a consumer resident in California and where we meet the relevant threshold tests under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), the following provisions apply.

1) Notice at Collection -- Personal Information Summary (Last 12 Months)

As described in Sections 1 and 4, the table below summarizes the personal information we collected and disclosed in the preceding 12 months:

We do not knowingly collect the personal information of consumers under 13 years of age. In the preceding 12 months, we have not sold personal information or shared personal information for cross-context behavioral advertising. We do not use sensitive personal information for purposes not permitted by applicable laws.

2) Your CCPA Rights

You have the following rights under the CCPA. You may exercise these rights by contacting us via the information in Section 11. We will verify your identity before processing your request.

(i) Right to Know

Request disclosure of: categories and sources of personal information collected; business purposes; categories of third parties; and specific pieces of personal information (covering the 12 months preceding your request).

(ii) Right to Correct

Request correction of inaccurate personal information we maintain about you.

(iii) Right to Delete

Request deletion of personal information we collected from you, subject to certain exceptions. We will notify applicable service providers and contractors to delete your information from their records.

(iv) Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA privacy rights.

3) Authorized Agent

If you use an authorized agent to exercise your CCPA rights, we may request evidence that you have provided such agent with power of attorney or valid written authority.

We do not sell personal information or share personal information for cross-context behavioral advertising, targeted advertising, or profiling. We do not provide any financial incentives tied to the collection, sale, or deletion of your personal information.

4) Do Not Track (DNT)

Under California law, operators of online services must disclose how they respond to "Do Not Track" signals. Currently, we do not track individuals' personal information over time and across third-party online services. We do not knowingly permit third parties to collect personal information about individuals' online activities over time and across different online services while using our Service.

5) California "Shine the Light" Law

For consumers located in California, we do not share your personal information with third parties for those third parties' own direct marketing purposes.

MAYCHI VendOS · Hefei Meizhi Intelligent Technology Co., Ltd. service@maychi.com | © 2026 All Rights Reserved