Legal
Privacy Policy
Effective Date: October 13, 2026
Last Updated: October 13, 2026
This Privacy Policy explains how Yiheng Inc. (“Yiheng,” “we,” “us,” or “our”) collects, uses, processes, discloses, and safeguards your personal information when you access or use our websites (including yihenginc.com), mobile applications, commercial ordering and digital menu solutions, enterprise Mobile Device Management (MDM) platforms, IoT systems, and related hardware/software services (collectively, the “Services”).
By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, please discontinue using our Services immediately.
At Yiheng Inc., we respect fundamental privacy rights and define “Personal Data” (or “Personal Information”) broadly to include any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable natural person, household, or enterprise account.
Personal Data does not include aggregated, anonymized, or de-identified data that cannot reasonably be used to identify an individual or household.
The specific types of Personal Data we collect depend on how you interact with our Services, whether as an enterprise client, merchant, consumer, or site visitor:
Account and Authentication Information
Full name, business email address, username, password hashes, account roles/permissions, organization affiliation, and onboarding records.
Contact and Organizational Information
Physical mailing address, billing address, telephone number, job title, and employer details.
Transaction and Billing Data
Order numbers, purchased items, subscription plans, transaction timestamps, payment method types, invoice records, and shipping addresses. (Note: Payment card details are processed directly by our compliant third-party payment processors, such as Stripe; we do not store full payment card numbers on our local servers).
Device, Log, and Network Data
IP address, unique device identifiers (UUID, MAC address, IDFV), operating system and version, browser type, device manufacturer and model, language preferences, referring/exit pages, access timestamps, and error/crash diagnostics.
Commercial Integration & Service Data
For enterprise and hospitality clients using our smart systems: digital menu configurations, catalog structures, store locations, transactional volume metadata, and system preference settings.
Enterprise Device Management (MDM) Metadata
Where enterprise clients utilize our MDM and Apple Business Manager provisioning tools: managed device enrollment IDs, compliance statuses, corporate software inventory, operating system build levels, and remote configuration logs necessary to enforce organization security policies.
Customer Support and Direct Communications
Inquiries, feedback, emails, support tickets, survey responses, and customer service call or chat logs.
We collect Personal Data from the following sources:
- Directly From You: When you register for an account, subscribe to our software services, purchase smart accessories or equipment, submit customer inquiries, or access our cloud portals.
- Automatically Through Tracking Technologies: When you interact with our websites or applications, via cookies, pixels, web beacons, and server log files.
- From Business Customers and Enterprise Clients: When an enterprise client or merchant provisions an account or deploys our services to authorized end-users.
- From Third-Party Service Providers: Credit reporting agencies, anti-fraud identification partners, payment gateway providers (e.g., Stripe, Square), and enterprise integration partners.
We use the Personal Data we collect for lawful business and commercial purposes, including:
- Providing and Administering the Services: Fulfilling orders, managing corporate accounts, processing payments, facilitating digital menu ordering, deploying MDM profiles, and configuring smart space IoT environments.
- Customer Support and Communications: Responding to technical support inquiries, sending administrative updates (such as policy modifications or security alerts), and managing billing disputes.
- Product Enhancement and Analytics: Monitoring system performance, testing software updates, optimizing user experience, diagnosing technical bugs, and analyzing usage trends.
- Security, Compliance, and Fraud Prevention: Detecting, preventing, and investigating unauthorized access, data breaches, fraudulent transactions, network abuse, and software piracy.
- Marketing and Business Communications: Providing commercial information, product updates, and industry insights where permitted by applicable law (you can opt out of commercial communications at any time).
- Legal Obligations: Complying with applicable federal, state, and local laws, court orders, accounting and tax auditing rules, and lawful government requests.
We do not sell, rent, or trade your Personal Data to third parties for monetary consideration or cross-context behavioral advertising. We may share your Personal Data with:
- Service Providers and Vendors: Trusted third parties that perform services on our behalf (e.g., cloud hosting infrastructure, payment processing, fraud detection, analytics, and customer support ticketing). These providers are contractually bound to access and process data strictly under our instructions and to maintain confidentiality.
- Corporate Affiliates: Parent entities, corporate affiliates, or subsidiaries under common control for administrative consistency, corporate restructuring, and centralized operations.
- Business Reorganization: Prospective buyers, investors, or successors in the event of an evaluation or completion of a merger, acquisition, divestiture, restructuring, reorganization, or asset sale.
- Legal and Regulatory Authorities: Government bodies, law enforcement agencies, courts, or regulators when required by subpoena, search warrant, statute, or where disclosure is reasonably necessary to protect the rights, property, or safety of Yiheng Inc., our users, or the public.
Our digital platforms use cookies, pixels, and local storage mechanisms to recognize your browser, enhance navigation, remember user preferences, and compile aggregate usage data.
- Strictly Necessary Cookies: Essential for platform functionality, security, identity verification, and checkout completion.
- Performance & Analytics Cookies: Collect aggregated data about how visitors navigate the site to assist in site optimization and service monitoring.
- Functional Cookies: Remember your settings (such as language preferences or region selection) to deliver a personalized experience.
You can adjust your browser settings to refuse or delete cookies. Please note that disabling certain cookies may affect the operational features and availability of our Services.
We implement administrative, technical, and physical safeguards designed to protect Personal Data against unauthorized access, destruction, loss, alteration, or disclosure. These measures include:
- Transport Layer Security (TLS/HTTPS) encryption for data in transit;
- Industry-standard encryption algorithms (such as AES) for sensitive stored data;
- Role-based access controls (RBAC) and least-privilege administrative principles;
- Periodic security reviews, firewall protection, and intrusion detection monitoring.
No method of digital transmission or electronic storage is completely secure. While we work to safeguard your information, we cannot guarantee absolute security. You remain responsible for maintaining the confidentiality of your account credentials.
We retain Personal Data only for as long as reasonably necessary to fulfill the purposes outlined in this Privacy Policy, provide ongoing Services, resolve disputes, enforce our agreements, and satisfy statutory record-keeping, tax, and legal requirements. When Personal Data is no longer required, we securely delete, anonymize, or isolate it from active systems.
Depending on your state or jurisdiction of residence (including consumer privacy laws across various U.S. states), you may have certain statutory rights regarding your Personal Data:
- Right to Know / Access: The right to confirm whether we process your Personal Data and request access to the specific pieces and categories of information we hold.
- Right to Correct: The right to request correction of inaccurate or incomplete Personal Data.
- Right to Delete: The right to request deletion of Personal Data collected from or about you, subject to legal and regulatory exceptions.
- Right to Opt-Out: The right to opt out of the sale of your Personal Data or the processing of your Personal Data for targeted advertising and profiling. (Yiheng Inc. does not sell personal data or engage in targeted behavioral profiling).
- Non-Discrimination: We will not deny goods, charge different prices, or provide a different level of quality because you exercised any of your privacy rights.
To exercise these rights, please submit a written request to legal@yihenginc.com. To protect your security, we will verify your identity before processing your request.
Our Services are intended exclusively for commercial entities, professional operators, and adult consumers. We do not knowingly solicit, collect, or process Personal Data from children under the age of 13 (or under 16 where required by state law) without verifiable parental consent. If we become aware that we have inadvertently collected Personal Data from a child without valid consent, we will take prompt action to delete such data from our records.
Yiheng Inc. is headquartered and operates in the United States. If you access our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States and other jurisdictions where our cloud infrastructure and service providers operate. These jurisdictions may have data protection laws that differ from those of your home jurisdiction. We apply appropriate safeguards and contractual commitments to protect your Personal Data in accordance with this Policy.
We may revise this Privacy Policy periodically to reflect technological updates, business practices, or statutory revisions. When modifications are made, we will update the “Last Updated” date at the top of this document. Material changes will be communicated via prominent notice on our website or through direct notification where an active corporate account exists. Continued use of our Services after the effective date of an updated policy indicates your acceptance of the revised terms.
If you have questions, comments, or requests regarding this Privacy Policy, or wish to submit a privacy inquiry, please contact our legal and compliance desk:
Yiheng Inc.
Attention: Legal & Privacy Department
4030 Wake Forest Road, Ste 349
Raleigh, NC 27609, USA
Email: legal@yihenginc.com
Website: yihenginc.com