Data ownership and control

Data Owner: The individual user is the owner of the personal data, which is owned by the individual user. Data Controller: In the case of products or services provided by Tuya to its corporate customers, a legally binding contract is utilized by Tuya's corporate customers. The customer determines the purpose of collection, the scope of collection, and the manner of processing personal data, and in this case, the customer's dominance determines its status as a data controller. Data Processors: Tuya provides personal data processing services to our customers on an ongoing basis in accordance with their data processing instructions, ensuring and improving the ongoing provision of our agreed services. As a service provider and data processor, Tuya is the customer's data processor and has a strict data processing agreement with the customer, including the scope of data processing, processing methods, etc. Tuya has strict internal permission and access control policy and technical assurance structure to ensure that data can only be accessed or processed with the customer's authorization. To ensure data compliance, Tuya has globally deployed multiple independent data nodes that perform localized data storage and processing, as well as strict data encryption protection.