Inner Mongolia Xuanqian Technology Co., Ltd. (“we” or “Xuanqian Tech”) respects and protects your personal information. This policy explains what information we collect when you visit the Site, how we use, store and protect it, and the rights you have under applicable law.
1. Information We Collect
- Server logs. When you visit the Site, the server automatically records access logs, including your IP address, access time, pages visited, browser type and operating system. We use this information to keep the Site secure, defend against attacks and troubleshoot issues.
- Language preference. The Site uses your browser’s local storage (localStorage) to remember the interface language you choose (Chinese or English). This stays on your own device, is never uploaded to our servers, and contains no personally identifiable information.
- Analytics. To understand how the Site is used and improve it, we may integrate third-party analytics services (such as Baidu Tongji). These services use cookies and similar technologies to collect visit information — such as your IP address, referral source, pages viewed, time on page, device type and approximate region — and provide us with the results as aggregated statistics. Until such a service is actually integrated, the Site sends no visit data to it; once integrated, we will update this policy. For details of how Baidu Tongji handles personal information, please refer to the privacy documentation published on its official website.
- Information you provide. When you contact us by email, phone or WeChat, we receive the name, contact details and message content you choose to provide and use them only to answer inquiries, handle cooperation or fulfil a lawful rights request. If you use the primary email route on the account-deletion page, we process your sender address, sign-in method, request content and—only if genuinely necessary to verify ownership—the original purchase channel and order number you later provide. Never send us a password, verification code or third-party identity token.
- Optional account-deletion self-service data. The account-deletion page creates a one-time random web-device identifier in the browser and asks our API whether self-service is open. Only where a channel is actually enabled in the target environment and you choose to use it: the email channel processes the normalized email address, selected language and a deletion-purpose one-time code; the Google channel invokes Google Identity Services and processes the identity token returned by Google, a one-time nonce and the random web-device identifier to verify account control and execute deletion. A nonce is valid for at most five minutes and can be used only once. The Google identity token is used only for this verification and is not retained as a long-term Site business record. If self-service is unavailable, the primary email-request route remains available.
Other than where genuinely necessary for a deletion verification you initiate, we do not actively collect sensitive personal information such as facial images or fingerprints, ID-card numbers, financial accounts or location trails. If order information is genuinely required, we separately explain the purpose and scope and apply data minimisation.
2. How We Use Information
We use the information above only to:
- keep the Site running securely and reliably;
- measure and analyze Site traffic to improve content and experience;
- respond to inquiries and partnership requests and verify and process account deletion or other personal-information rights requests you initiate;
- rate-limit, prevent abuse, verify identity and conduct security audits for the account-deletion page.
We do not use this information for targeted advertising, and we never sell your personal information.
3. Information Sharing
We do not share your information with third parties, except:
- after an analytics service is actually integrated, with that provider (such as Baidu Tongji), which processes visit data under its rules to deliver analytics;
- with Site hosting, API and corporate-email providers, which process access logs or emails you send only as needed to provide hosting, network, email and security services;
- only if the email self-service channel is actually enabled and you trigger it, with Tencent Cloud Simple Email Service (SES), which processes the recipient address, deletion code and selected-language template to deliver the message; and only if Google self-service is actually enabled and you trigger it, with Google, which processes the sign-in interaction and identity token under its rules;
- where required by law or by a competent authority.
Our footer and pages may contain links to third-party websites (such as filing-verification sites and analytics providers). Once you click through and leave the Site, the handling of your information on those sites is governed by their own privacy policies, for which we are not responsible; we recommend you review their policies separately.
4. Managing Cookies
You can view, delete or block cookies in your browser settings. Blocking analytics cookies does not affect your ability to browse the Site. If you choose to use an enabled Google self-service verification, Google may use cookies or similar technologies under its rules; you may instead use the primary email-request route.
5. Storage, Retention and Security
Our Site, API and business databases are generally deployed within the People’s Republic of China. Access logs are retained for at least six months as required by applicable law. Inquiry and account-deletion emails are retained for no more than three years after resolution for dispute handling and compliance records, then deleted or anonymized. An optional self-service email code is valid for 30 minutes; successful verification invalidates it so it cannot be reused, and an invalid record is automatically deleted within seven days. Keyed HMAC values of email/request IP and daily counts used for email rate-limiting and abuse prevention are automatically deleted 90 days after the relevant date. A Google verification nonce is valid for at most five minutes, cannot be reused after consumption or expiry, and is removed through routine maintenance. Analytics data is kept only as long as needed for the purposes above.
If Google self-service verification is actually enabled in the relevant environment and you choose it, Google may process sign-in interaction data outside China under its service rules. Availability, information involved and applicable rules are shown on the page and in Google's notice at that time. You may always avoid that channel and use the primary email-request route, which does not require Google. If another activity constitutes a cross-border provision of personal information, we will fulfil applicable duties such as notice, separate consent or a personal-information protection impact assessment.
After the applicable period, we delete or anonymize information unless law requires otherwise. We apply reasonable technical and organizational safeguards, including HTTPS encryption and access controls, against unauthorized access, disclosure or loss.
In the event of a security incident such as a leak, alteration or loss of personal information, we will promptly activate our contingency plan, take remedial measures, notify affected users as required by law, and report to the competent authorities.
6. Minors
The Site's information pages and account-deletion tool are not directed at children under 14. A child under 14 must not register or use online product functions through the Site. A guardian should contact us at the email below if a pre-existing account must lawfully be handled. If we learn that a child under 14 circumvented these restrictions and submitted information, we stop the online service and delete the information promptly unless law requires retention.
7. Your Rights
Under the Personal Information Protection Law of the People’s Republic of China and other applicable laws, you may access, copy, correct or delete your personal information, or withdraw consent. Contact us using the details below and we will respond within fifteen business days.
If you believe our handling of your personal information has harmed your lawful rights, in addition to contacting us you may complain or report to the competent authorities, including the cyberspace administration, the industry-and-information-technology department, and the public-security department.
8. Updates to This Policy
We may revise this policy from time to time. Updated versions will be posted here with new publication and effective dates. We will prominently notify material changes and obtain separate consent where required by law.
9. Contact Us
Personal information handler: Inner Mongolia Xuanqian Technology Co., Ltd.
Registered address: Unit 25-6, Hongya New Town, Longxingchang Town, Wuyuan County, Bayannur, Inner Mongolia, China
Privacy and account-deletion email: privacy@xuanqiantech.com
Business email: contact@xuanqiantech.com