1. 适用范围与负责人
本规则说明由美国注册公司运营的 ReLove90 如何处理网站、账号、购买、咨询和退款相关个人信息。数据与隐私联系邮箱为 [email protected]。
2. 我们收集的信息
我们可能收集账号名称、姓名、性别、年龄、婚姻状态、邮箱和联系信息；套餐、订单号、金额、币种、付款状态和退款记录；预约、已使用次数及用户主动提供的咨询信息；脱敏 IP 网段、设备标识、浏览器、语言、时区和安全日志；以及条款接受版本与时间。登录密码继续使用独立盐值哈希保护；我们另以服务器密钥生成不可逆指纹，仅用于识别多个账号是否重复使用同一密码。请勿在普通表单中提交银行卡完整号码、安全码或不必要的敏感信息。
3. 付款数据
银行卡及其他付款凭据由 Stripe 或付款页面标明的支付服务商直接处理。ReLove90 通常只接收 Customer、Checkout Session、PaymentIntent、交易、付款状态、Stripe 卡指纹和卡片品牌/末四位等有限资料；卡指纹可用于识别重复注册，完整卡号和安全码不会进入 ReLove90 服务器。支付服务商将依据其自身隐私政策处理数据。
4. 使用目的
信息用于创建和保护账号、提供套餐与预约、处理付款和退款、发送订单与服务通知、回复客服请求、防止欺诈和滥用、履行会计税务与法律义务，以及在汇总或去标识后改进网站。
5. 分享对象
我们仅在必要范围内向支付、托管、邮件、客服、分析和专业顾问服务商提供信息，或依法向监管和执法机构披露。我们不出售个人信息，也不向无关第三方提供咨询内容用于定向广告。
6. 保存期限
活跃账号资料在提供服务期间保存；连续24个月未使用的非交易账号将被审查或删除。订单、付款、退款、条款接受与争议记录可保存最长7年，或适用财税及支付法规要求的更长期限。普通客服邮件通常保存24个月。法律保留义务优先于删除请求。
7. Cookie 与本地存储
网站可使用必要的 Cookie 或本地存储保存语言、登录状态和功能设置。正式支付接入后，Stripe 可能使用防欺诈和付款所需的 Cookie。浏览器清除本地数据可能导致退出登录或设置丢失。
8. 安全与跨境处理
我们采取访问控制、传输加密、日志和最小权限等合理措施，但任何网络传输都无法保证绝对安全。数据可能在美国以及服务商所在的其他国家处理；我们将使用合同、合规机制和必要保护措施管理跨境传输。
9. 你的权利
在适用法律范围内，你可请求访问、更正、导出或删除个人信息，限制或反对部分处理，并撤回基于同意的处理。请求请发送至官方邮箱，我们可能核验身份。撤回同意不影响此前合法处理，也不影响必须保存的交易记录。
10. 未成年人、变更与联系
服务面向18周岁以上用户，不主动收集儿童信息。规则重大变更将在网站提示并标明新版本。隐私请求、投诉或数据事件请联系 [email protected]。
1. Scope and controller
This Policy explains how ReLove90, operated by a company registered in the United States, handles personal information related to the website, accounts, purchases, consulting, and refunds. Contact [email protected] for data and privacy matters.
2. Information collected
We may collect account names, full names, gender, age, marital status, email and contact details; package, order ID, amount, currency, payment status, and refund records; scheduling, used sessions, and information you choose to provide during consulting; masked IP ranges, device identifiers, browser, language, timezone, and security logs; and the accepted policy version and timestamp. Passwords remain protected by salted password hashing; a separate server-keyed, non-reversible fingerprint may be used only to identify password reuse across accounts. Do not submit full card numbers, security codes, or unnecessary sensitive information in ordinary forms.
3. Payment data
Card and other payment credentials are processed directly by Stripe or the provider named on the payment screen. ReLove90 normally receives only limited identifiers and status data such as Customer, Checkout Session, PaymentIntent, transaction, Stripe card fingerprint, card brand, and last four digits. Card fingerprints may be compared to detect repeated registrations; full card numbers and security codes must never reach ReLove90. Payment providers process data under their own privacy policies.
4. Purposes
Information is used to create and protect accounts, deliver packages and scheduling, process payments and refunds, send order and service notices, answer support requests, prevent fraud and abuse, meet accounting, tax, and legal duties, and improve the website using aggregated or de-identified data.
5. Sharing
Information is shared only as necessary with payment, hosting, email, support, analytics, and professional service providers, or with authorities where legally required. We do not sell personal information or provide consulting content to unrelated third parties for targeted advertising.
6. Retention
Active account data is kept while services are provided. Non-transaction accounts inactive for 24 consecutive months are reviewed for deletion. Order, payment, refund, policy acceptance, and dispute records may be kept for up to 7 years or longer where tax, financial, or payment law requires. Ordinary support email is normally retained for 24 months. Legal retention duties override deletion requests.
7. Cookies and local storage
Necessary cookies or local storage may retain language, login state, and functional settings. After payment integration, Stripe may use cookies required for fraud prevention and payment. Clearing browser data may sign you out or remove settings.
8. Security and international processing
We use reasonable access controls, encryption in transit, logging, and least-privilege measures, but no network transmission is completely secure. Data may be processed in the United States and in other countries where providers operate; contractual and compliance safeguards will be used for international transfers.
9. Your rights
Subject to applicable law, you may request access, correction, export, or deletion, restrict or object to certain processing, and withdraw consent-based processing. Email us to exercise these rights; identity verification may be required. Withdrawal does not affect earlier lawful processing or records that must be retained.
10. Children, updates, and contact
The service is intended for users aged 18 or older and does not knowingly collect children's data. Material updates will be posted with a new version. Contact [email protected] for privacy requests, complaints, or suspected data incidents.
