Privacy Policy

Shanghai Zhuyu Culture Communication Co., Ltd. ("we", "us") values your personal information and privacy. This policy explains how we collect, use, store and protect your information when you use www.zycul.com and our software products.

We follow the principles of lawfulness, fairness, necessity and good faith, and collect only the information required to provide our features. Please read this policy carefully before using our services.

Account information: the username, phone number or email address you provide when registering; the password you set (we store only a one-way bcrypt hash and cannot restore your original password); and any nickname you choose to provide.

Verification information: to complete registration, sign-in, password recovery and contact binding, we send one-time verification codes to the phone number or email address you provide, and record the verification status and validity period of that code.

Security and log information: to protect accounts and the system, we record sign-in times, source IP addresses, browser or client identifiers (User-Agent), software client identifiers, and access logs (request path, status code, duration and request ID).

Interaction information: the type, name, contact details and message you submit when applying to work with us.

WeChat login information: when you choose to sign in by scanning a WeChat QR code, we obtain your WeChat openid, unionid, nickname, avatar and whether you follow our official account, in order to create or sign in to your account and to confirm that you follow us.

Local storage: to keep you signed in, the website stores your sign-in token in your browser's local storage (localStorage); the admin console uses a separate admin token. Clearing browser data signs you out.

To provide features you actively request, such as account registration, sign-in, password recovery, and changing your bound phone number or email address.

To provide WeChat QR sign-in: identify your account by WeChat openid / unionid and complete sign-in after you follow our official account.

For security and risk control: including sign-in device management (viewing and signing out specific devices), limits on failed sign-in attempts, and CAPTCHA verification, to prevent malicious registration, credential stuffing and bulk verification-code requests.

For software login authorization: when you choose to sign in to one of our software products with a Zhuyu account, we use the information to complete device authorization and issue access credentials.

To process and respond to your cooperation applications and enquiries.

For service operations, troubleshooting and product improvement; where used for improvement, we prefer aggregated information that does not identify any individual.

We do not sell your personal information.

To send SMS or email verification codes, we provide your phone number or email address to third-party delivery providers (Alibaba Cloud SMS and Alibaba Cloud Email Push). These providers may process that information only to the extent necessary to deliver the message.

Where required by laws and regulations, or by a judicial or administrative authority following due process, we may provide necessary information as required.

In the event of a merger, acquisition, restructuring or bankruptcy liquidation, we may transfer relevant information; we will notify you prominently and require the successor to remain bound by this policy.

Your information is stored on servers within the People's Republic of China.

We take the following measures to protect information security: passwords are stored using one-way bcrypt hashing; the entire website uses HTTPS encryption; internal data access is granted on a least-privilege basis; databases are backed up regularly and access to backup files is restricted.

Retention: account information is retained while your account exists; after you delete your account or the information is no longer necessary, we delete or anonymize it. Verification code records are kept for their validity period and expired records are cleaned up regularly. Access logs and sign-in records are retained for the period necessary for operations and security auditing.

Despite these measures, please understand that the internet is not absolutely secure. Keep your account and password safe, and contact us immediately using the details at the end of this policy if you discover a security risk.

This website does not use third-party advertising tracking technologies and does not track your browsing across sites.

To keep you signed in, the website stores a sign-in token in your browser's local storage; it does not store your password.

You can clear local storage through your browser settings to sign out, or sign out from the account center. After clearing, you will need to sign in again to continue.

Access and correction: you can view your account information and change your nickname in the account center; to correct your phone number or email address, use the binding feature to rebind.

Sign out devices: in the account center, under “Signed-in devices”, you can review active sessions and sign out a specific device.

Delete your account, delete or copy your personal information: you may contact us using the details at the end of this policy. To protect security, we may first need to verify your identity.

Withdraw consent: you may withdraw your consent to the collection and use of personal information; once withdrawn, we will stop the corresponding processing, without affecting processing already carried out on the basis of consent before withdrawal.

Our services are primarily intended for adults. If you are under 18, please read this policy together with your guardian and use our services only with your guardian's consent.

If we discover that we have collected a minor's personal information without prior guardian consent, we will delete the relevant data as soon as practicable in accordance with the law.

This policy may be updated due to business adjustments or changes in laws and regulations. Updates will be published on this page with the latest update date.

If an update involves a material change to how your personal information is used, we will provide additional notice through reasonable means such as a website announcement.

If you have any questions about this policy or wish to exercise your rights, please contact us at zhuyucul@163.com.