California Privacy Notice
Last modified: July15, 2022
This California Privacy Notice (this “Notice”) applies only to California residents and supplements Tuya Privacy Policy. This Notice explains how we may collect, use, andshare your Personal Data in connection with your use of our Services, and how you can exercise your rights under the California Consumer Privacy Act (the “CCPA”)..

Exercise of Your CCPA Rights

The CCPA recognizes a variety of privacy rights for Californian consumers. According to the CCPA, we as a business is required to provide channels for the consumers to exercise their rights, including the rights, via a verifiable request, to
(i) disclose and access the Personal Data that we collect, use, disclose, and “sell”; and
(ii) delete the consumer’s Personal Data

Right to Know

Why We Process Your Personal Data?

Under the CCPA, you have the right to request that we disclose to you your personal Data that we collect, use, or disclose. You may also request information about our data practice. Each category of Personal Data that may be used by us or shared with ceritain third parties for business purposes is categorically outlined below by category.

What Are the Purposes of Processing Your Personal Data?

  • Provision of our Services to you;
  • Improvement of our Services;
  • Non-marketing communications;
  • Data analysis based on your consent;
  • Marketing communications and personalization based on your consent;
  • Compliance with applicable law.
We may collect your Personal Data through the App and your smart devices.

What Types of Personal Data We Collect about You?

Personal data we collect about you may include the following categories:
  • Account registration data: account name and contact details, such as your email address, phone number, user name, and login credentials. During your use of our Services, we may also collect your nickname, country code, language preference or time zone information as related to your account.
  • (Optional) If you authorize login to your account with a third-party account, we will obtain from such third party certain account information (such as avatar, nickname, region etc.) which may be bound with your Tuya account for quick login.
  • (Optional) Non-registered Account Data.
  • Feedback: When you provide feedback and suggestion regarding our Services, we will collect your email address, mobile phone number, and other Personal Data that may be provided in your feedback contents, so as to contact you regarding the feedback.
  • Mobile Device Information: we automatically collect mobile device information, such as model number, IP address, wireless connection information, the type and version of the operating system, App version number, push notification identifier, log files, and mobile network information. Meanwhile, we will collect your software version number. In order to ensure the security of the operating environment or to provide Services, we will also collect information about your installed mobile applications and other software you use.
  • Usage Data: When you use our websites and/or Services, we automatically collect usage data relating to visits, clicks, downloads, messages sent/received, and other usage of our websites and Services.
  • Log Information: When you use the App, in order to improve your user experience, the system and exception log may be uploaded, including your IP address, language preference setting, operating system version, date or time of access, so that we can facilitate and accurately identify problems and help you solve them in timely manner.
  • Smart device related information:
    • Basic Information of Smart Devices: When you use Smart Devices in combination with the Services, we may collect basic information about your Smart Devices such as device name, device ID, online status, activation time, firmware version, and upgrade information.
    • Information collected during the process of connecting to a Smart Device: Based on the type of Smart Devices you use in combination with the Services, we may collect the following relevant information:
    • Smart Devices connected via Wi-Fi: Wi-Fi information (SSID, Wi-Fi password), device MAC address;
    • After establishing a local connection via Bluetooth, Smart Devices connected via Wi-Fi: Wi-Fi information (SSID, Wi-Fi password), device MAC address;
    • Smart Devices connected via Bluetooth: device MAC address;
    • Smart Devices connected via Zig-bee: device MAC address.
    • Information Reported by Smart Devices: Depending on the different Smart Devices you use in combination with the Services, we may collect different information reported by your Smart Devices

The personal data we may share with the following parties:

At Tuya, we only share Personal Data in ways that we tell you about. Without your consent, we will not disclose your Personal Data to any third-party, except in the following cases:
  • To our third-party service providers that perform certain functions related to our Services, such as website hosting, data analysis, payment and credit card processing, infrastructure provision, IT services, customer support service, e-mail delivery services, and other similar services, in order to enable them to provide these services to us.
  • To our customers and other business partners that provide you, directly or indirectly, with your Smart Devices, and/or networks and systems through which you access and use our websites and Services.
  • To subsidiaries or affiliates within our corporate group for purpose of regular business activities based on our instructions and in compliance with applicable law, this Policy and other appropriate confidentiality and security measures.
  • To an affiliate or a third-party successor or assignee, · in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings). In such an event, you will be notified via email and/or a prominent notice on our website of such change of control, and choices you may have regarding your Personal Data..
  • Other scenarios where as we believe in good faith that access to, or use, preservation, or disclosure of your Personal Data is reasonably necessary or appropriate.

Right to Access

  • You may submit your request to access your Personal Data that we process by visiting: "My-Setting-Privacy Settings-Personal Data Export";

    • Right to Request Deletion

  • You may submit your request to delete your Personal Data by visiting: "My-Setting-Account and Security-Delete Account". Whenyou confirm the deletion of your account, your Personal Data will be deleted accordingly.

    • Right to Opt-out of the Sale of Personal Data

    The CCPA allows you to opt-out the sale of your Personal Data. To opt-out of these “sales”, please follow the Statement on Do Not Sell Your Personal Data and confirm your decision.

    Exercising Your Rights through Authorized Agents

    Per the CCPA, consumers may exercise their rights through an authorized agent. Therefore, we have prepared the following guidelines for authorized agents acting on behalf of consumers regarding exercise of consumer’s rights under the CCPA.

    If you have a Tuya account

    Authorized agents acting on behalf of consumers with a Tuya account can exercise their rights through Tuya account. Please kindly note the following rights will be handled respectively:
    1. Right to know: You can check the categories of personal information being collected, processed, shared or used are recorded in this Notice.
    2. Right to access and right to be forgotten: You may access to or delete consumer’s personal information through submitting the request in the Help Center with technical support.
    It is important to note that a valid login is required to access or delete personal information associated with a Tuya account. This safeguard is in place to protect the security of consumer data. Once the request is submitted by the authorized agent, the request will be handled automatically.

    If you do not have a Tuya account

    If the consumer does not have a Tuya account or would like to export or delete personal information not linked to a Tuya account, the following instructions may allow you to excise your right:
    1. Right to know: You can check the categories of personal information being collected, processed, shared or used are recorded in this Notice.
    2. Right to access and right to be forgotten: Your personal information will be deleted right after you clean your cookies upon the visiting pages. Or, you can make a request directly to privacy@tuya.com. As this request is for data outside of a logged-in Tuya account, we require at least two identification elements, such as a verified email or phone number, for verification purposes prior to processing the request.

    Contact us

    If you have any questions about our practices or this Policy, please contact us as follows:
    Tuya Global, Inc.
    Address: 3979 Freedom Circle, Suite 340, Santa Clara, CA 95054, USA
    Email: privacy@tuya.com.