QX Flow Privacy Policy

1. What Information We Collect

We strictly follow the principle of "data minimization" and only collect information necessary to maintain service operations and improve our product.

1.1 Information You Provide

Account Information: When you register for a QX Flow account, you need to provide a phone number or email address as login credentials. This information is used solely for identity verification and account recovery.

Payment Information: When you upgrade to a paid plan, payment collection is performed by our authorized third‑party payment provider, who acts as the Merchant of Record for all orders. Our payment provider handles payment collection, billing, and customer support related to payments. QX Flow does not have access to or store your complete payment card information. We only receive subscription status, order metadata and transaction receipts necessary to provision and manage your subscription.

Refunds are handled via the payment processor. QX Flow offers a 14‑day no‑questions refund policy for eligible purchases; see our detailed refund policy page for full terms and the refund request procedure. For payment-related inquiries, email us at hello@qingxiflow.com.

1.2 Information We Automatically Collect (Anonymous Analytics)

To continuously improve product experience, we may collect de-identified anonymous statistical data. This data cannot be linked to your personal identity or specific business data.

• Usage Statistics: File processing formats (e.g., CSV, JSON), average file size ranges, frequently used feature modules (e.g., masking/aggregation click rates)
• Technical Environment: Browser type (without specific version), operating system type (e.g., Windows/macOS)
• Collection Method: We use privacy-first self-hosted analytics services, do not use third-party tracking cookies, do not store your original IP address, and do not create user profiles

1.3 Information We Absolutely Do Not Collect

2. How We Use Cookies and Similar Technologies

We only use high-security functional cookies to maintain your login status and ensure account security.

3. How We Use Your Information

• Service Provision: Use your phone number/email to identify account identity and grant appropriate free or paid feature permissions
• Payment Processing: Interact with third-party payment providers to verify your subscription validity
• Product Improvement: Optimize product feature design based on anonymous aggregated statistics (e.g., JSON feature usage frequency)
• Security Protection: Detect and prevent fraud, abuse, and security attacks

4. How We Share Your Information

We adhere to a "three no-sharing" principle:

• No Sharing with Advertisers: We do not monetize through advertising
• No Selling Personal Information: QX Flow never sells any personal information
• Cross‑Border Processing Notice: Your account records and subscription metadata are stored on our servers. In some cases (for example, payment processing via our payment provider), order or payment metadata may be processed by third parties outside China. We disclose this to be transparent; detailed cross‑border transfer safeguards are described in our data transfer and processor sections. Your business files themselves continue to remain on your local device.

We may only provide necessary information to specific third parties in the following limited circumstances:

• Payment Service Providers: Only transmit order numbers and amounts to Alipay/WeChat/Stripe to complete transaction verification
• Legal Requirements: Only when required by law, regulations, or government authorities will we disclose limited necessary information in accordance with the law

5. Your Data Subject Rights

Regardless of your location, you have the following rights regarding your account information:

• Access and Correction: You can update your phone number/email in account settings at any time
• Data Deletion: You can delete your account at any time, and we will immediately delete your account information (phone number/email hash) and subscription records
• Data Export: Your business data and rule sets can be exported to local storage at any time through platform features
• Withdraw Consent: You can stop using our services at any time, and your local data will not be affected

6. Data Security and Storage

6.1 Local Storage

Your business files and rule sets are saved through browser local storage (IndexedDB/LocalStorage) or local folders you specify. QX Flow servers do not maintain databases to store your business data.

6.2 Transmission Security

All communications with servers (such as login verification, payment) are transmitted through TLS 1.3 high-strength encryption. Authentication data uses RSA encryption envelopes to ensure security during transmission.

6.3 Account Security

We employ industry-standard security measures to protect your account information:

• Passwords are encrypted using bcrypt algorithm
• Login failure protection mechanism to prevent brute force attacks
• Session tokens expire periodically, requiring re-login
• Two-factor authentication support (coming soon)

7. Children's Privacy

This service is not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you discover that we have inadvertently collected personal information from a child, please contact us immediately, and we will take steps to delete the relevant information.

8. Policy Updates

We may update this privacy policy from time to time. In the event of significant changes, we will send prominent notices at application startup or through your registered contact information. We recommend that you regularly review this page to stay informed about the latest privacy protection measures.

Continued use of our services indicates your acceptance of the updated privacy policy. If you do not agree with the updated policy, please stop using our services.