Coremail Lunkr Privacy Policy
Update time: February 6, 2026
Effective date: February 6, 2026
Welcome to Coremail Lunkr!
Coremail Lunkr (referred to as "this product") is an enterprise security collaboration tool that combines email and instant messaging. Effectively ensure enterprise data security, strive to improve office efficiency, and provide enterprise collaborative office solutions. This product provides instant messaging, email, Contacts and other services. Lunkr Technology (Guangzhou) Co., Ltd. and the authorized service provider (Guangdong Yingshi Computer Technology Co., Ltd.) are the service providers of this product.
Coremail Lunkr values the privacy of its users. When you use the service, we will collect and use your relevant information. We hope to explain to you through the "Coremail Lunkr Privacy Policy" (referred to as "this policy") how we collect, use, store and share this information when using the service, as well as the ways we provide you with access, update, control and protect this information. This policy is closely related to the Lunkr client services you use. I hope you read it carefully and make appropriate choices according to the guidelines of this policy when necessary. We try to express the relevant technical terms involved in this policy as concisely as possible and provide links to further explanations to facilitate your understanding.
It should be noted that this policy applies to the functions and services of the Coremail Lunkr product itself (such as instant messaging, emails, Contacts, business cards, etc.), and does not apply to other products or services provided by third parties through this product. You should fully understand the product functions and privacy protection policies of third-party services before choosing to use them.
WHAT PERSONAL INFORMATION WE COLLECT
We will collect and process personal information directly through your employer (for example, when your employer opens your account), and we will also collect and process personal information directly from you (for example, when you use this product). Personal information refers to information data including account number, usage, equipment, logs, etc.
Account information: In order to use this product, you need to register a Coremail email system account first, so we will obtain the personal information related to you provided to us by your employer, such as corporate email address, name, position, etc. Your employer may provide us with additional personal information about you or update the personal information you provide to us when you use this product.
You understand and agree that, according to your employer's representations and warranties, your employer has obtained your explicit authorization in advance before providing us with any of your personal information. The scope of its collection of your personal information is limited to the scope necessary to achieve the purpose of this agreement or other agreements entered into between your employer and us. Your employer has fully informed you of the purpose, scope, and use of your personal information. If you are unable to confirm the content of this paragraph, you should immediately stop using the Service and confirm the aforementioned matters with your employer. We only act as a data processor and process your personal information in accordance with your employer's requirements, and we are not legally responsible for your employer's collection and use of your personal information.
Information we collect during your use of this product. When you use this product, we will automatically collect your IP address, other tracking technologies, device unique identifiers, hardware models and settings, operating system and application features (such as MAC address), and your detailed usage of our services, such as browsing history, time zone, regional and language settings, server logs (including access date and time), application crashes and other system activity information. You can upload, publish, submit or send messages, chats, files, calendar information, etc. to this product. We collect information related to the schedules you create and edit on the Product, any other User Content you transmit, etc.
When you send messages, emails, or change your avatar, we will ask you to authorize the camera, photo, and microphone permissions required for the corresponding function based on the function you want to use and the scenario. If you do not agree or cancel the authorization, you will not be able to use the corresponding function, but it will not affect your use of other functions.
According to relevant laws and regulations, your authorization is not required to collect your information in the following situations: (1) Related to national security and national defense security; (2) Relevant to public safety, public health, and major public interests; (3) Relevant to criminal investigation, prosecution, trial and judgment execution, etc.; (4) To protect the life, property and other major legitimate rights and interests of the information subject or other individuals but it is difficult to obtain your consent; (5) The information collected is disclosed to the public by you yourself; (6) Collect information from legally publicly disclosed information, such as legal news reports, government information disclosure and other channels; (7) Necessary to sign a contract according to your requirements; (8) Necessary to maintain the safe and stable operation of Coremail Lunkr, such as discovering and handling product or service failures; (9) Necessary for legitimate news reporting; (10) When it is necessary for an academic research institution to conduct statistical or academic research based on public interests, and when providing the results of academic research or description to the outside world, the information contained in the results will be de-identified; (11) Other situations stipulated by laws and regulations.
How we use this information
Log in to your email In order to register an account to become a user of this product and log in to this product through an account so that you can use this product, it provides instant messaging services that support single or multiple participation, sending voice messages, pictures and text, etc., and uses services including but not limited to organization member management, Contacts, quick jumps, schedules, voice calls, video calls, and interoperability with other software; providing return visits to users with optimized services for registered accounts and service upgrade notifications and introductions, etc.
Name, avatar, corporate mobile phone number, corporate email, and department organizational structure If you use this product as a member of an enterprise user, in order to realize the enterprise functions such as internal display and internal communication of your employer as required and selected by your employer; Unless otherwise agreed in this agreement, this information is controlled by your employer and provided to us; if you, as an enterprise user member, contact non-members of the enterprise, in order to facilitate both parties to confirm each other's identity and improve communication efficiency, we will display your name, avatar, company name, enterprise email and other information to the contact party according to the contact function you choose.
Hardware model and settings, device unique identifier, operating system and application functions (such as MAC address), IP address, browsing history, time zone, region, language settings, server log information, unique device identifier (such as AndroidID on Android) are only used as a unique identifier for authentication. According to the specific permissions granted by you during the installation and use of the software, in order to provide basic services of this product based on relevant technical information and ensure the technical requirements necessary for the normal operation of this product.
Personal information stipulated in laws, regulations, rules, etc. In order to fulfill legal obligations stipulated in relevant laws, regulations, rules, etc., and to comply with the mandatory requirements of the government, judicial authorities or any other authorized legal entities, relevant information is collected or disclosed to authorized authorities and other legal entities.
We will take reasonable and feasible measures to try our best to avoid collecting personal information irrelevant to the purpose of use. If we use your personal information beyond the scope that is directly or reasonably related to the stated purpose of the use, we will separately inform you and obtain your express consent before using your personal information.
How we process your personal information
We will not share or transfer your personal information to third parties unless you obtain your prior authorization and consent, or the personal information shared or transferred is de-identified information, and the sharing third party cannot re-identify the personal information subject of such information.
We will only share the information necessary to achieve the purpose with third parties. You understand and authorize our information sharing behavior in this case. If a third party really needs to use personal information beyond the aforementioned purposes due to business needs, the third party will need to seek your consent again.
We will not disclose your information publicly unless we obtain your consent. However, if your personal information must be provided in accordance with laws, regulations, rules, other normative documents, mandatory administrative law enforcement or judicial requirements, we may disclose your personal information to administrative law enforcement or judicial agencies based on the required type of personal information and disclosure method. When we receive a disclosure request, we require it to issue corresponding legal certification documents on the premise of complying with laws and regulations. We only provide data that law enforcement and judicial departments have legal authority to obtain for specific investigation purposes. Where permitted by laws and regulations, the documents we disclose are protected by encryption measures.
In the following circumstances, sharing, transferring, and disclosing your information does not require your prior authorization and consent: (1) Related to national security and national defense security; (2) Relevant to public safety, public health, and major public interests; (3) Relevant to judicial or administrative law enforcement such as criminal investigation, prosecution, trial and judgment execution; (4) To protect your or other individuals’ life, property and other major legitimate rights and interests but it is difficult to obtain your consent; (5) Information you disclose to the public on your own; (6) Collect information from legally publicly disclosed information, such as legal news reports, government information disclosure and other channels.
According to legal provisions, sharing, transferring, and disclosing de-identified personal information, and ensuring that the data recipient cannot recover and re-identify the information subject, does not constitute external sharing, transfer, and public disclosure of personal information. The storage and processing of such data will not require separate notification to you and your consent.
How we protect your information
- We attach great importance to your information security. Coremail Lunkr actively responds to national laws and regulations, strictly abides by compliance, personal information privacy protection and other requirements. On the basis of establishing an internal security system, it actively obtains recognition from external authoritative organizations and related qualification certifications. It has currently passed ISO 9001 and ISO 27001 certification.
We adopt strict data processing authority control to prevent data from being used illegally; and we have security measures in place in terms of client security, server security, network security, and data security.
When an incident endangers network security occurs, we will promptly take corresponding remedial measures in accordance with the network security incident emergency plan. If our physical facilities or technical protection measures are damaged, causing your personal information to be leaked, illegally provided or misused, causing damage to your legitimate rights and interests, we will bear corresponding responsibilities strictly in accordance with the provisions of the law.
It should be noted that the Internet industry is ever-changing and there is no absolute security. Although we have a complete security protection mechanism, there are still certain risks. We also recommend that you take active measures, such as using complex passwords and changing passwords regularly. If you find that your account number, password and/or other identity elements may or have been leaked, please contact us immediately so that we can take appropriate measures in a timely manner to avoid or reduce related losses.
Where we store your personal information
Storage location: In accordance with the provisions of laws and regulations, we will store your personal information collected and generated during domestic operations within the territory of the People's Republic of China. Currently, we will not transfer the above information overseas. If we transfer it overseas, we will comply with relevant national regulations or seek your consent.
Storage period: We will continue to store your personal information while you are using this product, and the retention period will not exceed the period necessary to provide you with services. After you terminate your use of this product, we will delete or anonymize your information, unless otherwise provided by laws and regulations for a specific information retention period. If we stop operating this product service, we will delete or anonymize your personal information held within a reasonable period in accordance with applicable laws.
Your Rights
- How to access and correct your personal information Access personal information: access profile photo, name, department, email, and mobile phone number. Click on the avatar to access personal information. You may submit a request to correct information to your employer, which will be processed by an Enterprise User Administrator.
Withdraw consent to privacy authorization
You can withdraw your personal authorization in the Coremail Lunkr App (My/Settings/About Coremail Lunkr/Privacy Policy/Withdrawal of Privacy Agreement). When you withdraw your consent, we will be unable to continue to provide you with the corresponding services and will log out of the current account and will no longer process your corresponding personal information.
About account registration and cancellation
Since it is an enterprise service APP, this APP does not support users to register their own accounts, nor does it support users to cancel their accounts. Accounts are managed uniformly by the administrator of the user's company.
Change
Once there are any major changes to this Privacy Policy, we will make reasonable efforts to notify all users, such as by posting a notice on this product; but you should check this Privacy Policy regularly to check for relevant changes. We will also update the "Updated" and "Effective Date" at the top of this Privacy Policy. Your continued access or use of this product after this Privacy Policy is updated will be deemed to be your acceptance of the updated Privacy Policy. If you agree to the updated Privacy Policy, you must stop accessing or using this product.
Third Party Services
This product may be connected or linked to social media or other services (including websites or other service forms) provided by third parties. include:
You can use the "Share" button to share some of the content of this product to third-party services, or you can share the content of third-party services to this product. These functions may collect your information (including your log information) and may install COOKIES on your computer to allow the above functions to function properly;
We provide you with links through advertisements or other means of our services so that you can link to third-party services or websites;
Other situations of accessing third-party services. For example, to achieve the purposes stated in this policy, we may access the SDK or other similar applications provided by third-party service providers, and share some of your information we collected in accordance with this policy with these third-party service providers in order to provide better customer service and user experience. Currently, the third-party service providers we access mainly include the following types: (1) Used for advertising-related services, including advertising display, advertising data monitoring/statistics, etc.; (2) For message push function: We use Huawei/Xiaomi/OPPO/VIVO/Apple push SDK to provide you with message services. We use the push SDK to obtain your device token, including specific event reminders, etc. (3) Used for payment-related services, including order payment, transaction behavior verification, income settlement, payment information summary statistics, etc.; (4) Used to obtain device location permissions, collect device information and log information, etc. with your consent; (5) Used for third-party authorized services, including third-party account login, sharing relevant content to third-party products, etc.; (6) Used to support product function modules, including online live broadcast, video playback, speech recognition, AR, intelligent customer service, barrage playback, content storage, etc.; (7) Used to optimize product performance, including improving hardware distribution capabilities, reducing server costs, functional hot repair, etc.; (8) Used for account security and product reinforcement related services, including network monitoring, domain name resolution (HTTPDNS), anti-hijacking, anti-spam and anti-cheating, encryption and decryption services, etc. We will only share your information for legitimate, necessary, and specific purposes. For third-party service providers with whom we share information, we will require them to fulfill relevant confidentiality obligations and take appropriate security measures.
Integrate third-party SDK
Huawei push Purpose of use: used to implement offline message push for Huawei device APP Types of personal information collected: AAID, Token Affiliated organization: Huawei Terminal Co., Ltd. Privacy policy link: https://consumer.huawei.com/cn/privacy/privacy-policy/
Xiaomi push Purpose of use: used to implement offline message push on Xiaomi device APP Types of personal information collected: device identifier (IMEI, MAC), application information (system notification switch status, APP installation list), device parameters and system information (device type, model, operating system type, hardware information), network information (IP address, Wifi information, base station information) Affiliated organization: Beijing Xiaomi Mobile Software Co., Ltd. Privacy policy link: https://dev.mi.com/console/doc/detail?pId=1822
VIVO push Purpose of use: used to implement offline message push for VIVO device APP Types of personal information collected: device identifier (IMEI, MAC), device parameters and system information (device type, model, operating system type, hardware information), network information (IP address, Wifi information, base station information) Affiliated organization: Vivo Mobile Communications Co., Ltd. Privacy policy link: https://www.vivo.com.cn/about-vivo/privacy-policy
OPPO push Purpose of use: used to implement offline message push for OPPO device APP Types of personal information collected: device information (IMEI number, Serial Number, device model, mobile operating system version), network information (IP or domain name connection results, current network type), notification bar status (notification bar permissions, user click behavior) Affiliated organization: OPPO Guangdong Mobile Communications Co., Ltd. Privacy policy link: https://www.oppo.com/cn/service/help/640?id=640&name=Service Policy&hdscreen=1
Firebase Purpose of use: Used to record APP running crashes and network request failures. Type of personal information collected: Network status Affiliation: Google LLC Privacy policy link: https://policies.google.com/privacy
Tencent QQ Purpose of use: Help users share information to QQ Types of personal information collected: device information (IMEI), APP installation list Affiliated organization: Shenzhen Tencent Computer Systems Co., Ltd. Privacy policy link: https://privacy.qq.com/policy/tencent-privacypolicy
WeChat open platform Purpose of use: Help users share information to WeChat Types of personal information collected: network status, APP installation list Affiliated organization: Shenzhen Tencent Computer Systems Co., Ltd. Privacy policy link: https://weixin.qq.com/cgi-bin/readtemplate?lang=zh_CN&t=weixin_agreement&s=privacy
Alipay Purpose of use: Help users send Red Packets Types of personal information collected: Device identifiers (imsi, imei, MAC address, AndroidID, SSID, BSSID, OAID, UDID) Affiliated organization: Alipay (China) Network Technology Co., Ltd. Privacy Policy Link: https://render.alipay.com/p/c/k2cx0tg8
NetEase Cloud Letter Purpose of use: voice and video conferencing functions Types of personal information collected: unique device identification code (APNS Token, device serial number, AndroidID, OAID, GAID, IDFV, CID, MAC address), device operating status (SIM card status), simulator information Affiliated organization: NetEase (Hangzhou) Network Co., Ltd. Privacy policy link: https://yunxin.163.com/clauses?serviceType=3
These third-party social media or other services are operated by the relevant third parties. Your use of such third-party social media services or other services (including any information you provide to such third parties) is subject to the third party's own terms of service and information protection statement (rather than this policy), and you need to read its terms carefully. This policy only applies to the personal information we collect and does not apply to the services provided by any third party or the third party's information use rules. If you find that there are risks in these third-party social media or other services, it is recommended that you terminate the relevant operations to protect your legitimate rights and interests.
Self-starting instructions (1) In order to ensure that the application can normally receive information pushed by the client when it is closed or running in the background, the application needs to use the (self-starting) capability. There will be a certain frequency of sending broadcasts through the system to wake up the application's self-starting or associated startup behavior, which is necessary to implement functions and services. (2) Schedule synchronization, supports system schedule synchronization to wake up the App.
Minor Terms
If you are a minor under the age of 18, you should read and agree to this privacy policy under the supervision and guidance of your parents or other guardians before using this product or service. We protect the personal information of minors in accordance with relevant national laws and regulations. We will only collect, use, store, share, transfer or disclose the personal information of minors as permitted by law, with explicit consent from parents or other guardians, or as necessary to protect minors; if we discover that personal information of minors has been collected without prior verifiable parental consent, we will try to delete the relevant information as soon as possible. If you are the guardian of a minor, if you have any questions about the personal information of the minor under your guardianship, please contact us through the contact information disclosed in this privacy policy of the company.
You agree to process your sensitive personal information for the purposes and methods described in this Privacy Policy.
How to contact us
You can contact us through the mobile phone [Coremail Lunkr] > [Me] > [Settings] > [Feedback] or lunkrteam@coremail.cn. We will contact you as soon as possible after receiving feedback and verifying your identity.