Privacy Policy
This Privacy Policy explains how Bixuebihui (“we”, “us”) collects, uses, shares and protects personal data when you use bixuebihui.com, en.bixuebihui.com and related services (the “Service”). It is designed to meet the EU/EEA and UK General Data Protection Regulation (GDPR) and U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (CCPA).
1. Who we are
The data controller for the Service is the operator of Bixuebihui (bixuebihui.com, ICP filing 京ICP备18001194号). For any privacy question or request, contact us at privacy@bixuebihui.com.
2. Data we collect
- Account data: username, email address, password hash, profile information you choose to provide.
- Third-party sign-in: if you sign in with Google or GitHub, we receive your account identifier, name, email and avatar from that provider. We never receive your password.
- Content you submit: comments, community posts, answers to practice questions, feedback messages and questions you send to the AI assistant.
- Newsletter: your email address and confirmation status if you subscribe.
- Payments: if you purchase paid content, order details and payment status. Card or wallet details are handled by the payment provider and not stored by us.
- Usage and device data: pages viewed, clicks, search terms, referrer, approximate time spent, a random visitor ID, IP address, browser type and language, collected through server logs and our first-party analytics.
We do not intentionally collect special categories of personal data (such as health, religion or biometric data).
3. How we use data and legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Create and manage your account, provide courses, practice and community features | Performance of a contract |
| Process purchases and keep accounting records | Contract; legal obligation |
| Send the newsletter | Consent (double opt-in; unsubscribe anytime) |
| Security, fraud and abuse prevention, rate limiting, error monitoring | Legitimate interests |
| Aggregate analytics to improve content and site performance | Legitimate interests |
| Remember your language preference | Strictly necessary / legitimate interests |
| Personalized advertising via Google AdSense | Consent (EEA/UK/Switzerland) |
| Answer AI-assistant questions and auto-reply to question-like comments | Contract; legitimate interests |
We do not make decisions that produce legal or similarly significant effects based solely on automated processing.
6. International transfers
Our servers are located in the People’s Republic of China, and some providers (such as Google) process data in the United States and elsewhere. When personal data of EEA/UK users is transferred to countries without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) or other lawful transfer mechanisms, together with appropriate safeguards.
7. Retention
- Account data and content: while your account is active; deleted or anonymized within 30 days after account deletion, unless we must keep it longer by law.
- Server logs and raw analytics events: up to 12 months, then aggregated or deleted.
- Newsletter: until you unsubscribe.
- Order records: as long as required by tax and accounting law.
8. Your rights (EU/EEA/UK)
Subject to the conditions of the GDPR, you have the right to:
- access your personal data and receive a copy;
- rectify inaccurate data;
- erasure (“right to be forgotten”);
- restrict processing;
- data portability;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, without affecting earlier lawful processing;
- lodge a complaint with your local data protection supervisory authority.
Email privacy@bixuebihui.com to exercise these rights. We respond within one month (extendable by two months for complex requests) and may need to verify your identity.
9. Your rights (California and other U.S. states)
In the past 12 months we collected the categories described in Section 2: identifiers (name, email, IP address, visitor ID), internet or network activity, commercial information (purchases) and user-generated content, from you directly and from your device. We use them for the business purposes in Section 3 and disclose them to the service providers listed in Section 5. We do not collect or use sensitive personal information to infer characteristics about you.
We do not sell personal information for money. However, allowing Google AdSense cookies for personalized ads may be considered “selling” or “sharing” for cross-context behavioral advertising under the CCPA and similar laws. You may opt out using the control below. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request.
You also have the right to know, access, correct and delete your personal information, and the right not to be discriminated against for exercising these rights. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with comparable laws have similar rights, including the right to appeal a denied request by replying to our decision. Send requests to privacy@bixuebihui.com; an authorized agent may submit a request on your behalf with written permission. We respond within 45 days.
10. Children
The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal data, in line with the U.S. Children’s Online Privacy Protection Act (COPPA) and the GDPR. If you believe a child has provided us with personal data, contact privacy@bixuebihui.com and we will delete it.
11. Security
We use HTTPS encryption in transit, hashed passwords, access controls and least-privilege administration. No method of transmission or storage is fully secure; we will notify you and the relevant authorities of a personal data breach where required by law.
12. Changes and contact
We may update this policy from time to time. Material changes will be announced on this page with a new effective date. Questions, requests or complaints: privacy@bixuebihui.com.