Yujian Cloud Website Privacy Policy

Effective date: 2026-10-14 | Policy version: 2026-10-14 (policyVersion)

This policy applies to the Yujian Cloud website (yujiancloud.com, "this site"), operated by Lingxi Zhiyu (Chengdu) Technology Co., Ltd. We handle personal information in line with applicable laws, including the Personal Information Protection Law (PIPL) of the People's Republic of China, and we state each tool's data path and retention period plainly. This policy does not use blanket phrases such as "fully compliant worldwide." Business facts that are not yet final are explicitly marked "to be confirmed."

1. Your data rights

Access, copy, correction, and deletion

You have the rights to access, copy, correct, and delete your personal information as provided by law. To exercise these rights, email service@lingxizhiyu.com with the subject "Privacy rights request," and include the information needed for us to verify your identity. The exact response timeframe is to be confirmed by the business and will be published in this policy once confirmed; until then we will process requests as soon as practicable and reply within a reasonable period.

2. Data paths and retention per tool

What each tool collects and where it goes

Necessary preferences (no optional scripts)

Your language choice is stored in browser localStorage (key yujian-language), and your privacy choice in localStorage (key yujian-consent); each is kept for 90 days and contains no identifying information. If you reject or withdraw, no optional tracking identifiers are written.

Baidu Analytics (optional, off by default)

Baidu Analytics (hm.js from hm.baidu.com) loads only after you explicitly consent. Baidu Analytics collects your full IP address without anonymization — we disclose this third-party behavior as it is. The data path is: your browser → Baidu's servers (located in mainland China); retention is governed by Baidu Analytics' own privacy policy. This site does not send user IDs that identify you to Baidu Analytics, and we never merge analytics identifiers with contact leads or any account data (no user-ID mixing on this site).

Marketing trackers

This site currently has no marketing tracking tool enabled. If we ever enable one, we will ask for consent before it loads and update this policy.

Search-engine submission

Submitting pages to search engines is done server-side via sitemap submission. No submission script is loaded in your browser, and this is fully decoupled from the consent system.

3. Contact lead data

Storage region and retention

Information submitted through the contact form (organization name, your role, a description of your needs, contact details, and the source page) is sent to the same-origin endpoint /api/leads. Consent record: when you opt in to continued contact on the form, we record the time of consent (consentedAt) and the policy version in force (policyVersion), to meet PIPL's consent-keeping requirements. After a policy change, older leads require a manual review of the consent version before we continue contacting them.

The current local intake service stores leads as JSON files on the server's disk, used only for delivery follow-up and never made public. The production storage region, backup mechanism, and access control will be finalized before launch and reflected in an updated policy (currently to be confirmed). The initial suggested retention period is 90 days (to be confirmed by the business), after which leads are deleted.

4. Geo IP handling

How your IP is used for region detection

To power the language entry recommendation, the /api/locale-context endpoint may use your IP address to determine a coarse region (the result is only one of "mainland," "non-mainland," or "unknown"). The scope of this processing is limited to that coarse region classification: the endpoint never returns the IP address, performs no precise geolocation, and caches the result separately by trusted region and your preferences. The current implementation does not persistently store visitor IP addresses. If a third-party Geo provider is introduced in production, we will disclose its name and data path here and bump the policy version.

5. Minors

No intentional collection from minors

This site serves wellness business owners and operators. We do not knowingly collect personal information from minors under the age of 14, and our products are not directed at minors. If you believe information about a minor has been collected by mistake, please notify us at service@lingxizhiyu.com and we will verify and delete it.

6. Your choices

Consent, rejection, withdrawal, and re-prompt rules

On your first visit, the banner offers three buttons at the same level: "Accept optional," "Reject optional," and "Customize." Until you choose, optional analytics scripts do not load. Rejecting records a rejection timestamp (rejectedAt) for audit. You can reopen the panel anytime via "Cookie settings" in the footer; unchecking analytics and saving completes a withdrawal. Withdrawal records a revocation timestamp (revokedAt), after which we immediately clear the cookies Baidu Analytics has set and reload the page so that no further analytics requests are sent. Preferences last 90 days. After a policy version change or expiry, the banner may return, but we re-ask the same visitor at most once every 7 days. If your browser sends a Global Privacy Control (GPC) signal, we treat it as rejection of all optional tracking; the banner stays visible so you can still choose. See the Cookie Policy for details.

7. Effective date and version history

Version record

V1 | 2026-10-14 (current)

First version: establishes the consent state machine (including rejectedAt / revokedAt audit timestamps), treats GPC as rejection of all optional tracking, and caps policy-change re-prompts at once per 7 days. Mandates disclosure of Baidu Analytics' non-anonymized full IP collection, lead storage region and retention (to be confirmed), Geo IP handling, and the minors clause.