Privacy Protection 隐私保护
Traditional Chinese Cultural Education Platform
易知录重视您的个人信息安全。本隐私保护说明阐述我们收集哪些数据、如何使用，以及您在使用 iching-lab.com 文化研习平台时享有的权利。
以下中文段落便于阅读，正式法律效力以英文说明为准（The English version prevails）。
IChing Lab is committed to protecting your privacy. This privacy protection document explains what data we collect, how we use it, and your rights regarding your personal information when you use our cultural education platform at iching-lab.com.
1. Data Controller
The data controller responsible for your personal information is:
Individual Developer
Website: https://iching-lab.com
Contact: [email protected]
2. Data We Collect
| Category | Data Collected | Source |
|---|---|---|
| Account Data | Email address, username, hashed password | Provided by you at registration |
| Transaction Data | Order ID, purchase amount, 研习次 (study credit) balance, transaction timestamps | Provided by Creem (Merchant of Record) |
| Usage Data | Study session inputs (classical study queries), AI analysis history, tool interaction logs | Automatically generated during use |
| Technical Data | IP address, browser type, device type, access timestamps | Automatically collected |
| Communications | Content of support emails or inquiries you send us | Provided by you |
We do not collect: full name, phone number, physical address, government ID numbers, or raw payment card details (all card processing is handled exclusively by Creem).
【中文参考】我们主要收集五类数据：（1）账户数据——邮箱、用户名、加密密码；（2）交易数据——订单号、金额、研习次余额与时间戳（由 Creem 提供）；（3）使用数据——研习输入、AI 分析记录与工具交互日志；（4）技术数据——IP、浏览器、设备与访问时间；（5）通信内容——您发送的客服邮件。我们不收集全名、电话、住址、证件号或原始银行卡信息（卡信息仅由 Creem 处理）。
3. How We Use Your Data
We use your data to:
- Provide and maintain core platform features (study tools, session history, account management)
- Process payments and manage your 研习次 balance via Creem and our auth service
- Send transactional emails directly related to your account or orders
- Respond to your support and service inquiries
- Analyze aggregated, anonymized usage patterns to improve our platform
- Comply with applicable legal and regulatory obligations
We do not sell your personal data to third parties, nor do we use it for targeted advertising.
4. Third-Party Service Providers
We share limited data with the following trusted providers as necessary to operate our services:
- Creem (Payment processing & Merchant of Record): Handles all payment transactions. Your payment data is governed by Creem's Privacy Policy. We receive only order metadata, not raw card data.
- AI Service Providers (DeepSeek / Anthropic): Your classical study query text is sent to AI providers to generate cultural annotations and content. Please do not include sensitive personal information in your study queries.
- Cloudflare (CDN & Security): Processes web traffic for security and performance. Subject to Cloudflare's Privacy Policy.
- Tencent Cloud (Hosting): Our servers are hosted on Tencent Cloud infrastructure in mainland China.
【中文参考】我们与以下第三方共享有限必要数据：Creem（支付与 Merchant of Record，我们仅接收订单元数据）；AI 服务商（DeepSeek / Anthropic，用于生成文化注解，请勿在研习查询中输入敏感个人信息）；Cloudflare（CDN 与安全）；腾讯云（服务器托管于中国大陆）。
5. Data Storage and Security
Your data is stored on servers located in mainland China (Tencent Cloud). We implement the following security measures:
- HTTPS encryption for all data in transit
- Salted hashing for password storage
- Principle of least-privilege access controls
- Regular security reviews
While we take reasonable precautions, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.
6. Data Retention
Account data is retained until you delete your account, after which it is purged within 30 days. Study session history is retained for 12 months by default and can be manually deleted in your account settings. Payment transaction records are retained for 7 years to meet financial compliance requirements.
7. Your Rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Correct inaccurate account information
- Erasure — Request deletion of your account and associated data
- Portability — Receive a copy of your study session data in a portable format
- Opt-out — Unsubscribe from any optional marketing communications
To exercise any of these rights, email [email protected]. We will respond within 15 business days.
【中文参考】您有权：访问我们持有的个人数据、更正不准确信息、删除账户及相关数据、可携带获取研习记录副本、退订可选营销邮件。请发邮件至 [email protected]，我们将在 15 个工作日内回复。
8. Cookies
We use the following cookies:
- Essential cookies: Required to maintain login sessions and core platform functionality. Cannot be disabled without affecting service operation.
- Analytics cookies (optional): Aggregate page view statistics via Cloudflare Analytics (no cross-site tracking). You may disable these through your browser settings without affecting core features.
【中文参考】我们使用两类 Cookie：必要 Cookie（维持登录与核心功能，关闭可能影响服务）；分析 Cookie（可选，通过 Cloudflare 做聚合页面统计，无跨站追踪，可在浏览器中关闭且不影响核心功能）。
9. Children's Privacy
IChing Lab is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has registered an account, we will promptly delete it.
10. Changes to This Privacy Protection
若我们对本隐私保护说明作出重大变更，将至少提前 7 日通过邮件或网站显著位置通知已注册用户；变更生效后继续使用本平台，即视为接受更新后的说明。
If we make material changes to this privacy protection document, we will notify registered users via email or prominent website notice at least 7 days before the changes take effect. Continued use of our platform after that date constitutes acceptance of the updated document.
11. Contact
For any privacy-related questions or to exercise your rights:
[email protected]