Privacy Policy

1. Who we are

The data controller for Recall365 is Beijing Chuanwei Culture Co., Ltd. For any privacy question, to exercise your rights, or to complain, contact hi@recall365.io or our contact page.

2. What we collect & why (legal bases)

We collect only what is necessary for each feature. Where required, our legal bases are your consent, performance of a contract, and our legitimate interests in operating and securing the service.

• Account (email, and any name you provide) — to register / sign in (email one-time code) and manage your account and security. Basis: contract.
• Subscriptions & alerts (email, your chosen category / country / keyword filters) — to send the risk brief and alerts you request. Basis: consent.
• Inquiry form (name, company, email, interests, message) — to respond and follow up. Basis: legitimate interests / pre-contract steps.
• Payment (order and payment result, handled by the payment provider) — to complete a purchase; we do not receive card numbers or payment passwords. Basis: contract.
• Logs & usage (pages viewed, referrer, approximate region, device / browser, UTM, timestamps) — for security and to improve the service in aggregate. Basis: legitimate interests.
• Cookies & similar — to keep you signed in and for anonymous analytics.

We do not sell your personal data, and we do not collect special-category (sensitive) data.

3. Recipients / processors

We use the following processors, which handle data only on our instructions:

• Cloudflare, Inc. (USA) — hosting, CDN, database (D1) and security;
• Resend (USA) — sending login codes and alert / brief emails;
• Google (Gemini API, USA) — machine translation of recall notices;
• a payment provider — payment processing;
• search engines (indexing) and privacy-friendly analytics.

4. International transfers

We are based in China and use providers located in the United States (Cloudflare, Resend, Google). Your data may therefore be transferred to and processed outside your country. Where transfers occur from the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK Addendum) or an applicable adequacy decision. Contact us for details or a copy of the safeguards.

5. Retention

We keep personal data only as long as necessary for the purposes above: account and subscription data while your account is active and for a reasonable period after closure; inquiry leads for as long as needed to follow up; log data for no longer than necessary. We then delete or anonymise it. Longer retention applies only where required by law.

6. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing, to data portability, to withdraw consent at any time (without affecting prior processing), and to close your account. To exercise these, email hi@recall365.io; you can also manage subscriptions in-app under "My alerts" and unsubscribe from any email. You may lodge a complaint with your local data-protection supervisory authority.

7. Security

We use reasonable technical and organisational measures — including access controls, encryption / pseudonymisation where appropriate, staff training and an incident-response process — to protect personal data.

8. Children

The service is intended for business and professional users and is not directed to children. We do not knowingly collect children's personal data.

9. Changes

We may update this policy; the current version is posted here with an effective date, and we will notify you of material changes where appropriate.

Contact

To exercise your rights or ask a privacy question, contact hi@recall365.io or our contact page.