Information Security Policy

Purpose
To ensure the confidentiality, integrity, and availability of the information assets belonging to Chuanyue Light Technology Co., Ltd. (hereinafter referred to as "the Company"), to comply with the requirements of relevant laws and regulations, and to protect these assets from internal and external intentional or accidental threats, this policy is established in consideration of the Company's business needs.

Information Security Objectives
To maintain the confidentiality, integrity, and availability of the Company's information assets, and to safeguard the privacy and security of user data, the implementation of this policy aims to achieve the following objectives:

• Protect the security of the Company's business services, ensuring that information can only be accessed by authorized personnel to maintain its confidentiality.
• Protect the security of the Company's business services, preventing unauthorized modifications to ensure its accuracy and integrity.
• Establish a business continuity plan for the Company to ensure the continuous operation of its information business services.
• Ensure that the execution of all Company business services complies with the requirements of relevant laws and regulations.

To evaluate the attainment of these information security objectives, specific information security management indicators have been formulated and will be measured regularly to verify the effectiveness and implementation of the system.