Privacy Policy

Public browsing requires no account. We process information to provide the services you request, fulfill legal duties or with consent where required. Withholding information necessary for a function may prevent that function without affecting unrelated public browsing.

Website visits: access IP addresses, times, page requests, and browser and system information are processed for page delivery, troubleshooting and security.

Account services: account type, username, display or contact name, email, password and verification information, registration and login activity, browser session information and terms-confirmation records are processed for registration, sign-in, recovery, profile management and deletion. Enterprise accounts additionally require the company name, unified social credit code and review information for manual approval.

Authorized management and content: personnel identities, permissions, security-verification information and activity records support authorized management and security review. Names, images and other personal information in news, research and recruitment content are published only with a lawful basis and required notice and consent.

Direct contact: the email address, message and attachments you send are processed for inquiries, complaints or recruitment. Applications are received through the recruitment mailbox. Do not submit unrelated sensitive information.

Necessary cookies maintain sign-in, distinguish browser sessions and support security verification. Session retention for regular users is enabled by default with no opt-out switch. An HttpOnly cookie stores a random session identifier, and the server stores the corresponding session record; passwords are not stored in browser local storage. Returning within one hour after closing the browser preserves sign-in. Valid page activity renews the session for one hour from its latest use; one continuous hour of inactivity requires sign-in again. Automatic refreshes and background status checks do not count as activity. Company products integrated with unified authentication can report valid activity to the same session; products not yet integrated are excluded. You can sign out, revoke device sessions or clear cookies. Local storage records animation state. This information is not used for cross-site advertising tracking.

Email services process addresses, message content and delivery records for verification and correspondence. Network and security services process necessary access, transmission and security information to operate and protect the website. For entrusted processing, we define the purpose, duration, information scope and protection duties as required by law and supervise processing.

Before providing information to another independent personal-information processor, we will identify the recipient and contact details, purposes, methods and information types, and obtain separate consent as required by law. Disclosures to competent authorities, public disclosures and transfers following a merger or similar event follow applicable legal conditions and duties.

Account information and terms-confirmation records are kept while needed for account services and deleted following account deletion as required by law. Verification, session information and related cookies are retained for the shortest period needed for identity checks and abuse prevention. Management and content records are retained until the relevant authorization, content-maintenance or dispute-resolution purposes are fulfilled, then deleted or anonymized.

Relevant network-operation and security logs are retained for at least six months as required by law; other statutory records follow applicable periods. Records are deleted or anonymized when those periods end and they are no longer needed. If a statutory period has not ended or deletion is technically difficult, processing is restricted to storage and necessary security protection.

Inquiry and complaint materials are kept until the matter and applicable legal duties are completed. Unsuccessful applicants' resumes are kept for no more than thirty days from receipt, then deleted, without automatic inclusion in a long-term talent pool.

Website account information is stored in mainland China. We take necessary organizational and security measures and respond, report and notify as legally required if personal information is or may be compromised. Any transfer abroad will follow applicable advance recipient and processing notices, separate-consent requirements and transfer procedures.

The user center lets you view information, change your display or contact name, password and email, and request account deletion. You may lawfully request access, copies, correction, supplementation, deletion, restriction or refusal of processing, withdrawal of consent, explanations and, where conditions are met, transfer of your information. Send requests to the contact emails in this policy.

After necessary identity verification, we will promptly handle and respond to requests without unreasonable conditions. If a request cannot be fulfilled, we will explain why; you may complain or pursue judicial remedies. Withdrawing consent does not affect earlier processing based on consent. Ending necessary account processing may affect account services.

Account deletion requires the displayed security verification and cannot be reversed. Management personnel must first transfer responsibilities and have their permissions removed. Contact us for assistance if you cannot sign in, correct read-only information or delete an account yourself. Earlier emails are not automatically deleted with an account; you may include them in your request. Statutory retention still applies.

Account services are for adults. Minors should not register or submit personal information. If information is received in error, we will verify and address it as required by law. Processing information about children under fourteen requires lawful guardian consent and dedicated rules.

This page shows the revision date. Material changes will be prominently notified, with renewed consent where required. Information-rights and complaint contacts: aizheyu@xuankunsec.com and yanhao@xuankunsec.com. Recruitment materials: hr@xuankunsec.com.