Privacy Policy / 隐私协议

Effective Date / 生效日期:2026-06-02
Last Updated / 最后更新:2026-06-02
Version / 版本:1.1

English Version

1. Introduction

This Privacy Policy ("Policy") describes how Jiamingyage / GreatName (operated by JiaMingYaGe Consulting Service, hereinafter "we", "us", or "the Service") collects, uses, discloses, retains, and protects personal information when you use our website, our WeChat Mini Program (operated under our WeChat overseas/international entity account), or related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree, you must not use the Service.

This Policy is governed by, and shall be interpreted in accordance with, the laws of [British Columbia, Canada], subject to the additional rights granted to users in their respective jurisdictions under applicable data protection laws, including but not limited to: the General Data Protection Regulation (EU GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Personal Information Protection and Electronic Documents Act (PIPEDA, Canada), and the Personal Information Protection Law (PIPL, People's Republic of China).

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide Directly

• Account information: email address, phone number (optional), name or pseudonym
• Service input data: family surname, child's date and time of birth, place of birth (optional, for solar-time correction), gender, taboo characters (family naming restrictions), naming preferences
• Payment information:
  • International users: payments are processed by Stripe, a third-party payment processor, for cross-border credit/debit card transactions. Stripe processes your card details directly as the payment processor; we do not store complete card numbers.
  • RMB (China) users: RMB payment is not collected within the Mini Program. RMB access is enabled offline by adding our customer-service WeChat (impm01); we do not process RMB card or bank details in-app.
• Communications: messages you send to our customer support, including via our customer-service WeChat (impm01)

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device identifiers, referring URLs
• Usage data: pages visited, features used, time spent, click patterns, session timestamps
• Cookies and similar technologies: as described in Section 9

2.3 Information from Third Parties

• Authentication data from Single Sign-On providers (e.g., Google, Apple, WeChat) if you choose to sign in via such services
• Payment confirmation data from payment processors

2.3.1 WeChat Login (Mini Program)

If you use our WeChat Mini Program, you may sign in via WeChat login. In this process:

• We call WeChat's wx.login interface and exchange the resulting code via code2session to obtain your OpenID (and, where available, your UnionID). These identifiers are used solely to create and authenticate your account.
• We do not obtain your WeChat password, your WeChat friends/contacts list, or your WeChat chat records.
• WeChat/Tencent acts as the login platform; their handling of your information is governed by their own privacy policy.

2.4 Special Note Regarding Minors' Data

The Service processes date and time of birth for newborns and minors as a core feature. This data is provided by the parent, guardian, or family member of the minor. By submitting such information, you represent and warrant that:

• You are at least 18 years of age (or the age of majority in your jurisdiction)
• You are the parent, legal guardian, or an authorized family member of the minor whose information you are submitting
• You have the legal authority to provide such information for processing
• You consent to such processing on behalf of the minor

We do not knowingly collect personal information directly from children under the age of 16 (or applicable local minimum, such as 13 in the U.S. under COPPA). If we become aware that we have collected such information without proper parental consent, we will delete it promptly.

3. How We Use Your Information

We use your information for the following purposes:

• Service provision: To generate naming reports based on your inputs, including bazi (Chinese astrology) analysis, character meaning analysis, and cultural references
• Account management: To create and maintain your account, authenticate access, and provide customer support
• Payment processing: To process payments and prevent fraud
• Service improvement: To analyze usage patterns, debug technical issues, and improve the quality of our algorithm and reports
• Communication: To send transactional emails (order confirmations, report ready notifications) and, with your consent, marketing communications
• Legal compliance: To comply with applicable laws, respond to lawful requests, and enforce our Terms of Service
• Aggregated analytics: To create de-identified, aggregated datasets for product research and business analysis. Such aggregated data is no longer personal information and is not subject to this Policy.

Legal Bases (for users subject to GDPR):

• Contract performance: processing necessary to provide the Service you purchased
• Legitimate interests: service improvement, fraud prevention, security
• Consent: marketing communications, optional analytics cookies
• Legal obligation: tax, accounting, and regulatory compliance

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers: With trusted third parties who help us operate the Service, such as cloud hosting and infrastructure, database and storage, payment processing, sign-in (including WeChat login for the Mini Program), email delivery, AI text-generation services, and privacy-respecting analytics. These providers are contractually bound to use your information only to provide services to us.

• Legal requirements: When required by law, court order, or governmental authority, or to protect our rights, property, or safety

• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations

• With your consent: For any other purpose disclosed at the time of collection

5. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Canada, the United States, and other regions where our service providers operate. We implement appropriate safeguards for cross-border transfers, including:

• Standard Contractual Clauses (SCCs) for transfers from the European Economic Area
• Adequacy decisions where applicable
• Equivalent protections for transfers from Canada under PIPEDA
• Separate consent for transfers from China under PIPL, as required

6. Data Retention

We retain your information for the following periods:

• Account data: As long as your account is active, plus 3 years after account closure for legal, tax, and audit purposes
• Naming reports: Retained in your account until you delete them, or 5 years after generation, whichever is longer (to enable repeat access by you)
• Payment records: 7 years for tax compliance
• Technical logs: 90 days
• Marketing communications data: Until you withdraw consent
• Aggregated/de-identified data: Indefinitely

After applicable retention periods, we will delete or anonymize your information.

7. Your Rights

Subject to applicable law, you have the following rights:

• Access: Request a copy of personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information, subject to legal retention requirements
• Portability: Request your information in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time
• Non-discrimination (CCPA): We will not discriminate against you for exercising your rights
• Lodge a complaint: With your local data protection authority

To exercise any rights, contact us at jiamingyage@gmail.com. We will respond within 30 days (or as required by applicable law).

For California Residents (CCPA/CPRA): You have the right to know the categories and specific pieces of personal information we have collected, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising).

For EU/UK Residents (GDPR): You may lodge a complaint with your local supervisory authority.

For China Residents (PIPL): You have rights of access, correction, deletion, portability, and the right to refuse automated decision-making.

8. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256 for sensitive fields)
• Access controls and authentication
• Regular security reviews
• Incident response procedures

However, no system is 100% secure. You acknowledge that you provide information at your own risk. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

9. Cookies and Tracking

We use the following categories of cookies:

• Strictly necessary: For authentication, session management, and security (cannot be disabled)
• Functional: For preferences and language settings
• Analytics: To understand usage patterns (you may opt out)
• Marketing: With your explicit consent only

You can manage cookie preferences through our cookie banner or your browser settings.

10. AI and Automated Processing

The Service uses artificial intelligence and rule-based algorithms to generate naming reports.

This processing:

• Does not produce legal or similarly significant decisions about you
• Is based on the data you voluntarily provide
• Generates outputs for cultural and reference purposes only (see Terms of Service for full disclaimer)
• May be reviewed manually by us for quality assurance

You may contact us to obtain human review of any specific report.

11. Children's Privacy

The Service is intended for adult users who are submitting information about minors in their care. We do not knowingly allow direct registration or use by children under 16 (or 13 in the U.S.).

If you believe we have inadvertently collected information directly from a child, please contact us immediately at jiamingyage@gmail.com and we will delete such information.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via:

• A notice on the Service
• Email to your registered address (for substantive changes)
• A revised "Last Updated" date at the top of this Policy

Continued use of the Service after notice constitutes acceptance of the revised Policy.

13. Contact Us

For questions, requests, or complaints regarding this Policy:

• Email: jiamingyage@gmail.com
• Customer-service WeChat: impm01
• Postal Address: [Your Business Address]
• Data Protection Officer (if applicable): [DPO contact]

For EU residents, you may also contact us via our EU Representative (if applicable): [EU Rep details].

中文版本

一、引言

本《隐私协议》("本协议")说明 嘉名雅阁 / GreatName(由 JiaMingYaGe Consulting Service 运营,以下简称"我们"或"本服务")如何在您使用我们的网站、我们的微信小程序(在我们的微信海外/国际主体账号下运营)或相关服务(统称"本服务")时,收集、使用、披露、保留和保护个人信息。

您访问或使用本服务,即表示您已阅读、理解并同意受本协议约束。如您不同意,请勿使用本服务。

本协议受 [加拿大不列颠哥伦比亚省] 法律管辖并据之解释,同时受相关数据保护法律赋予用户的权利保护,包括但不限于:欧盟《通用数据保护条例》(GDPR)、加州《消费者隐私法案》(CCPA/CPRA)、加拿大《个人信息保护和电子文档法》(PIPEDA)、中国《个人信息保护法》(PIPL)。

二、我们收集的信息

我们收集以下类别的信息:

2.1 您直接提供的信息

• 账户信息:邮箱、手机号(可选)、姓名或昵称
• 服务输入数据:家族姓氏、孩子出生年月日时、出生地(可选,用于真太阳时校正)、性别、避讳字、命名偏好
• 支付信息:
  • 海外用户:由第三方支付处理方 Stripe 处理跨境信用卡/借记卡交易。Stripe 作为支付处理方直接处理您的卡信息,我们不存储完整卡号。
  • 人民币(国内)用户:小程序内不收款。人民币开通经"添加客服微信 impm01 线下开通",我们不在小程序内处理人民币卡号或银行信息。
• 通讯内容:您发送给客服的消息,包括通过我们的客服微信(impm01)发送的消息

2.2 自动收集的信息

• 技术数据:IP 地址、浏览器类型与版本、操作系统、设备标识符、引荐 URL
• 使用数据:访问页面、使用功能、停留时间、点击模式、会话时间戳
• Cookie 和类似技术:见第九条

2.3 来自第三方的信息

• 单点登录(SSO)提供商(如 Google、Apple、微信)的身份验证数据,仅当您选择通过此类服务登录
• 来自支付机构的支付确认数据

2.3.1 微信登录(小程序)

若您使用我们的微信小程序,可通过微信登录。在此过程中:

• 我们调用微信 wx.login 接口,并通过 code2session 用所得 code 换取您的 OpenID(以及在可获取时的 UnionID)。这些标识符仅用于创建并验证您的账户。
• 我们不获取您的微信密码、微信好友/通讯录列表或微信聊天记录。
• 微信/腾讯作为登录平台,其对您信息的处理受其自身隐私政策管辖。

2.4 关于未成年人数据的特别说明

本服务作为核心功能,会处理新生儿及未成年人的出生年月日时。该数据由未成年人的父母、监护人或被授权的家庭成员提供。您提交此类信息,即声明并保证:

• 您年满 18 周岁(或您所在司法管辖区的成年年龄)
• 您是您所提交信息所涉未成年人的父母、合法监护人或被授权的家庭成员
• 您具有合法授权提供此类信息以供处理
• 您代表该未成年人同意此类处理

我们不会有意直接从 16 岁以下儿童(或当地适用最低年龄,如美国 COPPA 法案下为 13 岁)收集个人信息。如发现未经适当家长同意收集此类信息,我们将立即删除。

三、我们如何使用您的信息

我们将您的信息用于以下目的:

• 服务提供:基于您的输入生成取名报告,包括八字分析、字义解读、文化典故
• 账户管理:创建并维护您的账户、验证访问权限、提供客户支持
• 支付处理:处理付款并防止欺诈
• 服务改进:分析使用模式、调试技术问题、改进算法和报告质量
• 沟通:发送事务性邮件(订单确认、报告完成通知)和(经您同意)营销邮件
• 法律合规:遵守适用法律、回应合法请求、执行《用户协议》
• 聚合分析:创建去标识化、聚合的数据集用于产品研究和业务分析。此类聚合数据不再属于个人信息,不受本协议约束。

法律基础(适用 GDPR 的用户):

• 合同履行:为提供您所购买的服务所需
• 合法利益:服务改进、欺诈防范、安全保障
• 同意:营销邮件、可选分析 cookies
• 法律义务:税务、会计和监管合规

四、我们如何共享信息

我们不会出售您的个人信息。 仅在以下情形下共享信息:

• 服务提供商:与协助我们运营本服务的可信第三方共享,例如云托管与基础设施、数据库与存储、支付处理、登录服务(含小程序的微信登录)、邮件发送、人工智能文字生成服务,以及注重隐私的数据分析。这些提供商受合同约束,仅可将信息用于向我们提供服务。

• 法律要求:法律、法院命令或政府机关要求,或为保护我们的权利、财产或安全所需

• 业务转让:在并购、收购或资产出售的情形下,受保密义务约束

• 经您同意:为收集时披露的其他目的

五、跨境数据传输

您的信息可能传输至您居住国以外的国家处理,包括加拿大、美国及我们服务提供商运营所在的其他地区。我们对跨境传输采取适当的安全保障措施:

• 欧洲经济区传输适用《标准合同条款》(SCCs)
• 适用充分性决定的国家或地区
• 对于来自加拿大的传输,提供等同 PIPEDA 的保护
• 对于来自中国的传输,根据 PIPL 要求获取单独同意

六、数据保留

我们按以下期限保留您的信息:

• 账户数据:账户存续期间,加上账户关闭后 3 年(用于法律、税务、审计目的)
• 取名报告:保留在您的账户中,直至您删除,或生成后 5 年(以较长者为准,便于您重复访问)
• 支付记录:7 年(税务合规)
• 技术日志:90 天
• 营销通讯数据:直至您撤回同意
• 聚合/去标识化数据:无限期

适用保留期满后,我们将删除或匿名化您的信息。

七、您的权利

根据适用法律,您享有以下权利:

• 访问权:请求获取我们持有的关于您的个人信息副本
• 更正权:请求更正不准确或不完整的信息
• 删除权:请求删除您的信息,受法律保留要求限制
• 可携带权:以结构化、机器可读格式获取您的信息
• 限制处理权:在特定情形下请求限制处理
• 反对权:反对基于合法利益的处理
• 撤回同意权:对基于同意的处理,您可随时撤回
• 不受歧视权(CCPA):我们不会因您行使权利而歧视您
• 投诉权:向您当地的数据保护机构投诉

行使权利请联系 jiamingyage@gmail.com。我们将在 30 日内回复(或按适用法律要求)。

加州居民(CCPA/CPRA)特别权利:您有权了解我们收集的个人信息类别和具体内容,有权删除、更正,并有权选择退出个人信息的"出售"或"共享"(我们不出售或共享用于跨情境行为广告)。

欧盟/英国居民(GDPR)特别权利:您可向当地监管机构投诉。

中国居民(PIPL)特别权利:您享有访问、更正、删除、可携带权,以及拒绝自动化决策的权利。

八、数据安全

我们采取合理的技术和组织措施保护您的信息,包括:

• 传输加密(TLS 1.2+)和静态加密(敏感字段采用 AES-256)
• 访问控制和身份验证
• 定期安全审查
• 事件响应程序

但任何系统都不能保证 100% 安全。您确认您系自行承担风险提供信息。如发生影响您个人信息的数据泄露事件,我们将按适用法律要求通知您和相关机关。

九、Cookie 和追踪

我们使用以下类别的 cookies:

• 必要 cookies:身份验证、会话管理、安全(无法禁用)
• 功能 cookies:偏好设置和语言
• 分析 cookies:理解使用模式(您可选择退出)
• 营销 cookies:仅经您明确同意

您可通过我们的 cookie 横幅或浏览器设置管理 cookie 偏好。

十、人工智能与自动化处理

本服务使用人工智能和基于规则的算法生成取名报告。

此类处理:

• 不会对您产生法律上或类似重要影响的决策
• 基于您自愿提供的数据
• 生成的输出仅用于文化和参考目的(完整免责见《用户协议》)
• 我们可能进行人工质检审查

您可联系我们对特定报告获取人工审核。

十一、儿童隐私

本服务面向为其照护下的未成年人提交信息的成年用户。我们不会有意允许 16 岁以下(或美国 13 岁以下)儿童直接注册或使用。

如您认为我们无意中直接从儿童处收集了信息,请立即通过 jiamingyage@gmail.com 联系我们,我们将删除此类信息。

十二、协议变更

我们可能不时更新本协议。重大变更将通过以下方式通知:

• 本服务上的公告
• 发送至您注册邮箱(实质性变更)
• 本协议顶部的"最后更新"日期

通知后您继续使用本服务,视为接受修订后的协议。

十三、联系我们

如对本协议有疑问、请求或投诉:

• 邮箱:jiamingyage@gmail.com
• 客服微信:impm01
• 通讯地址:[您的营业地址]
• 数据保护官(如适用):[DPO 联系方式]

欧盟居民也可通过我们的欧盟代表(如适用)联系我们:[欧盟代表信息]。

Revision History / 修订历史

END OF PRIVACY POLICY / 隐私协议结束