IChing Lab is committed to protecting your privacy. This Policy explains what data we collect, how we use it, and your rights regarding your personal information when you use our cultural education platform at iching-lab.com.
1. Data Controller
The data controller responsible for your personal information is:
Individual Developer
Website: https://iching-lab.com
Contact: [email protected]
2. Data We Collect
| Category | Data Collected | Source |
|---|---|---|
| Account Data | Email address, username, hashed password | Provided by you at registration |
| Transaction Data | Order ID, purchase amount, 研习次 (study credit) balance, transaction timestamps | Provided by Creem (Merchant of Record) |
| Usage Data | Study session inputs (classical study queries), AI analysis history, tool interaction logs | Automatically generated during use |
| Technical Data | IP address, browser type, device type, access timestamps | Automatically collected |
| Communications | Content of support emails or inquiries you send us | Provided by you |
We do not collect: full name, phone number, physical address, government ID numbers, or raw payment card details (all card processing is handled exclusively by Creem).
3. How We Use Your Data
We use your data to:
- Provide and maintain core platform features (study tools, session history, account management)
- Process payments and manage your 研习次 balance via Creem and our auth service
- Send transactional emails directly related to your account or orders
- Respond to your support and service inquiries
- Analyze aggregated, anonymized usage patterns to improve our platform
- Comply with applicable legal and regulatory obligations
We do not sell your personal data to third parties, nor do we use it for targeted advertising.
4. Third-Party Service Providers
We share limited data with the following trusted providers as necessary to operate our services:
- Creem (Payment processing & Merchant of Record): Handles all payment transactions. Your payment data is governed by Creem's Privacy Policy. We receive only order metadata, not raw card data.
- AI Service Providers (DeepSeek / Anthropic): Your classical study query text is sent to AI providers to generate cultural annotations and content. Please do not include sensitive personal information in your study queries.
- Cloudflare (CDN & Security): Processes web traffic for security and performance. Subject to Cloudflare's Privacy Policy.
- Tencent Cloud (Hosting): Our servers are hosted on Tencent Cloud infrastructure in mainland China.
5. Data Storage and Security
Your data is stored on servers located in mainland China (Tencent Cloud). We implement the following security measures:
- HTTPS encryption for all data in transit
- Salted hashing for password storage
- Principle of least-privilege access controls
- Regular security reviews
While we take reasonable precautions, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.
6. Data Retention
Account data is retained until you delete your account, after which it is purged within 30 days. Study session history is retained for 12 months by default and can be manually deleted in your account settings. Payment transaction records are retained for 7 years to meet financial compliance requirements.
7. Your Rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Correct inaccurate account information
- Erasure — Request deletion of your account and associated data
- Portability — Receive a copy of your study session data in a portable format
- Opt-out — Unsubscribe from any optional marketing communications
To exercise any of these rights, email [email protected]. We will respond within 15 business days.
8. Cookies
We use the following cookies:
- Essential cookies: Required to maintain login sessions and core platform functionality. Cannot be disabled without affecting service operation.
- Analytics cookies (optional): Aggregate page view statistics via Cloudflare Analytics (no cross-site tracking). You may disable these through your browser settings without affecting core features.
9. Children's Privacy
IChing Lab is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has registered an account, we will promptly delete it.
10. Changes to This Policy
If we make material changes to this Privacy Policy, we will notify registered users via email or prominent website notice at least 7 days before the changes take effect. Continued use of our platform after that date constitutes acceptance of the updated Policy.
11. Contact
For any privacy-related questions or to exercise your rights:
[email protected]