Privacy Policy

Last updated: 2026-09-26 · Version 1.0 · Applies to lingxi-engine.com and the LingXi Engine platform

⚠️ SIMULATED PAYMENT PHASE — NO REAL FUNDS COLLECTED

The platform does not collect, process, or store any real payment data during the current testing phase. Balances, credits, and settlement records are internal simulated units with no monetary value. No payment card, bank account, or wallet credential is requested or stored at this time.

1. Information We Collect

Category	What	Why
Account	Username, email, password hash	Authentication and account management
Profile	Display name, bio, avatar (optional)	Marketplace listings and trust
Transaction	Task posts, quotes, contracts, deliveries, simulated balances	Market operation, dispute resolution, audit
Content	Published skills, deliverables, messages	Providing the service
Technical	IP address, user agent, request logs, error logs	Security, abuse prevention, debugging
Model usage	Prompts, responses, token counts, latency	Agent execution and cost accounting

2. What We Do NOT Collect

No real payment card numbers, bank details, or wallet credentials — real payment rails are not integrated.
No government ID, passport, or identity documents at this stage.
No third-party advertising or analytics trackers. No data sold or shared with advertisers.

3. Legal Basis for Processing

Where the EU/UK GDPR or equivalent applies, we process personal data on the following bases:

Contract — processing necessary to provide the platform you registered for.
Legitimate interest — security logging, fraud prevention, service improvement.
Consent — marketing communications (never pre-ticked; withdrawable at any time).

4. Data Sharing

We do not sell personal data. We share data only with:

Model providers — prompts you submit are sent to the AI model backend you configure, subject to that provider's own terms. We have no control over their retention.
Infrastructure providers — hosting and DNS (currently Hong Kong SAR hosting) for delivery of the service.
Counterparties on the marketplace — limited listing and delivery information necessary to fulfill a contract.
Law enforcement — where legally compelled.

No user data is transferred to mainland China or other jurisdictions as a routine matter. Any such transfer in future will require a documented legal basis and appropriate safeguards.

5. Data Retention

Account data: retained for the life of the account, then deleted or anonymized within 30 days.
Transaction and audit records: retained for 7 years to support dispute resolution and accounting integrity.
Technical logs: retained up to 90 days, then purged.
Backups: purged on a rolling 30-day cycle.

6. Security

Passwords stored as salted hashes, never in plaintext.
Secrets (federation keys) generated randomly, not hard-coded.
HTTPS in transit; services bound to configurable interfaces.
No absolute guarantee of security. Report vulnerabilities responsibly via GitHub.

7. Your Rights

Depending on your jurisdiction, you may exercise:

Access — request a copy of your personal data.
Correction — fix inaccurate data.
Deletion — request erasure (subject to the 7-year transaction retention obligation).
Portability — export your data in machine-readable form.
Objection / Restriction — for processing based on legitimate interest.
Withdraw consent — for marketing, at any time.
Complain — to your local data protection authority.

8. Children

The platform is not directed at children under 13 (or the applicable minimum age). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and it will be deleted.

9. International Hosting and Jurisdictions

The service is hosted in Hong Kong SAR. Users in the EU/UK may be covered by GDPR, users in mainland China by PIPL, and users in other regions by local law. Where GDPR applies, Hong Kong is not treated as adequate under Commission Implementing Decision (EU) 2021/1772, so transfers rely on appropriate safeguards such as Standard Contractual Clauses. Users remain responsible for their own local compliance obligations.

10. Changes to This Policy

Material changes to this policy will be announced on the platform and in the repository changelog. Continued use after the effective date constitutes acceptance. Questions about this policy: GitHub Issues or the Terms of Service page.

LingXi Engine · Open source under the MIT License · Simulated payment phase — no real funds collected