Lingxian Privacy Policy

Chapter 1. Overview

Lingxian ("we", "us" or "the platform") is an online tool for editing and creating guqin jianzipu notation. We have prepared this Privacy Policy under the Personal Information Protection Law of the People's Republic of China (the "PIPL") and related laws to explain how we collect, use, store, share, transfer and protect your personal information, and the rights you have. The Service is operated independently by an individually owned business.

Scope: this policy applies to your entire use of Lingxian through the web, mobile or any other channel, including browsing marketing pages, registering an account, editing scores and subscribing to paid services.

Updates and notice: this policy is version 2026.09, effective 2026-10-05. We may update it in response to changes in law or in the Service; material changes will be announced prominently on the site, by email or by in-app notice.

Personal information officer: for questions, complaints or suggestions about this policy or our handling of personal information, contact us by email.

Chapter 2. Information we collect

To deliver the core features of the Service and keep your account secure we collect the personal information below. Some of it is required to provide the Service (marked "Required"); declining it means the corresponding feature cannot be used. Some is optional (marked "Optional") and is entirely your choice.

Note: data marked "Optional" is collected only after you consent. On your first visit a consent prompt appears at the bottom of the page; you can choose "Accept all" or select items individually under advanced settings, and change your choices at any time through "Cookie and data settings" in the page footer. Declining optional items does not affect the core editing features. The use of score content to improve features such as jianpu conversion is governed by clause 4.4 of the Terms of Service; before any training use we remove titles, the names of those who reconstructed or transcribed the piece, notes, inscriptions and other information that could identify you.

Chapter 3. How we use information

We follow the principles of lawfulness, fairness, necessity and good faith, and use your personal information only for the purposes below:

• Providing the core service: account information and score data are used for registration, sign-in, editing, storage, search and export.
• Security: device and log information is used for security monitoring, anomaly detection, fraud prevention and abuse prevention, to protect you and other users.
• Paid services: payment information is used to process subscriptions, billing and refunds and to provide premium features.
• Improving jianpu conversion and similar features: under clause 4.4 of the Terms of Service, de-identified score content is used to train, evaluate and improve Lingxian's own jianpu conversion, recommendations and related features. We do not sell score content and do not provide it to third parties for training their models.
• Product improvement: with your consent, site analytics are used to improve the marketing pages, and editing behavior data and Qinling conversations are used to improve jianpu conversion, recommendations and the Qinling assistant.
• Marketing analysis: visitor tracking data is used to measure marketing channels and refine promotion. We do not use your personal identity for third-party advertising.
• Product update emails: only if you turn on "product update emails" at registration or in "Cookie and data settings" will we send product news such as feature updates to your address. This option is off by default and "Accept all" does not enable it. You can turn it off at any time in "Cookie and data settings" or through the unsubscribe link at the bottom of each email, effective immediately. Verification codes and service notices about your account data are not product update emails and are unaffected.
• Legal compliance: where required by law, by a court or regulator, or to protect your or others' legitimate interests, we use the relevant information to meet legal obligations or assist investigations.

If we need to use your personal information for a purpose not stated here, or to use information collected for one purpose for another, we will inform you in a reasonable way and obtain your consent again before doing so.

Chapter 4. Sharing and third parties

We do not sell or rent your personal information. We may share it with third parties in the following cases:

4.1 Service providers

To deliver the Service we engage the following providers to process some of your personal information:

• Payment services (Alipay, WeChat Pay and others): process payment information including order numbers and subscription status. We do not store your full payment account details, only the order number and subscription status.
• Cloud hosting providers: provide hosting and content delivery and may access operational data such as server logs and network addresses.
• Large language model providers (within China): to provide the Qinling assistant, your questions and the score excerpt sent with them are transmitted to a model provider within China to generate answers.
• SMS and email providers: send registration and sign-in codes, service notices and, once you opt in, product update emails, and process your phone number or email address for that purpose.
• Third-party sign-in services: if you sign in with a third-party account, we receive the account identifier, display name and avatar you authorize.

These providers access your personal information only as necessary to perform their contracts. We require them to meet corresponding data protection obligations and to apply reasonable security measures.

4.2 Storage and transfer

Payments are processed by domestic Chinese payment services (Alipay, WeChat Pay and others) and payment data is not transferred across borders. Where cloud hosting or content delivery requires it, some operational data (such as server logs and network addresses) may be processed by providers outside China. Where a cross-border transfer is involved we will:

• assess the necessity and security of the transfer as the PIPL requires;
• require the overseas recipient to commit to protection no weaker than this policy;
• continue to supervise the recipient's processing to ensure compliance with Chinese law.

4.3 Legal requirements and protection of rights

We may disclose your personal information to the relevant parties, limited to what the law requires or the minimum necessary, where:

• required by law, legal process, litigation or a competent government authority;
• necessary to protect the life, property or other major legitimate interests of you, us or other users;
• necessary to prevent security incidents, fraud or criminal activity.

4.4 No sale of user data

We undertake not to sell or rent your personal information and not to use it for third-party targeted advertising.

Chapter 5. Storage and security

5.1 Location and retention

Your personal information is stored mainly on servers we operate. We undertake the following:

• Account data: kept from registration until 30 days after you delete your account.
• Score data: kept from creation until 30 days after you delete the score or your account.
• Score content used to improve jianpu conversion: no longer used for training after you delete the score or your account; models already trained are not retrained as a result.
• Qinling conversations: retained for 2 years, then deleted.
• Data for improving intelligent features: retained for 2 years for training and analysis, then anonymized or deleted.
• Site analytics: retained for 2 years, then anonymized or deleted.
• Logs: retained for 90 days for security auditing and troubleshooting, then deleted.

After these periods we delete or anonymize your personal information. If the law or a dispute requires a longer period we will notify you separately.

5.2 Security measures

We apply industry-standard technical and organizational measures:

• Encryption in transit: all secure connections use industry-standard protocols.
• Encryption at rest: sensitive data such as passwords is stored using industry-standard hashing; user identifiers are stored as secure hashes.
• Access control: internal access to personal information is strictly limited to authorized staff within the scope of their duties.
• Security audits: regular risk assessments and penetration tests, with timely remediation.
• Incident response: an incident response plan for personal information security events, activated promptly when an event is detected.

5.3 Security incidents

Despite reasonable measures, no internet environment is absolutely secure. If personal information is leaked, altered or lost, we will:

• activate the response plan immediately to contain the incident;
• assess its scope and severity promptly;
• within 24 hours of discovery, inform you by site notice, email or SMS of the basic facts, possible impact, measures taken and steps you can take to reduce risk;
• report to the cyberspace, public security and other authorities as regulations require.

Chapter 6. Your rights

Under the PIPL you have the following rights:

6.1 Access and copies

You may access and copy your personal information:

• sign in and open Settings to view your account information, score list and subscription status;
• contact us by email and we will provide a copy within 15 working days.

6.2 Correction

If information we hold is inaccurate or incomplete, you may ask us to correct or complete it. You can change your display name and similar details in Settings, or contact us by email.

6.3 Deletion

You may ask us to delete your personal information where:

• the purpose of processing has been achieved, cannot be achieved or is no longer necessary;
• we stop providing the product or service, or the retention period has expired;
• you withdraw consent;
• we have processed your information in breach of law or agreement.

You can delete scores in Settings or request account deletion by email. We will complete deletion within 15 working days of verifying your identity, except where the law provides otherwise.

6.4 Withdrawing consent

For processing based on consent (site analytics, data for improving intelligent features, product update emails) you may withdraw consent at any time through "Cookie and data settings" in the page footer; product update emails can also be stopped through the unsubscribe link in each email. Withdrawal does not affect processing carried out on the basis of consent before withdrawal.

6.5 Account deletion

You may delete your account at any time. We will then stop providing the Service and delete your personal information within 30 days, except where the law requires otherwise or retention is necessary to meet a legal obligation. Deletion is irreversible. You can request it in Settings or by email.

6.6 Complaints

If you believe our handling of personal information breaches the law or harms your legitimate interests, you may complain to us through:

• Email: email
• Feedback page: Contact
• Settings: sign in and use the in-app messaging feature.

We will respond within 15 working days. If you are not satisfied with our response, you may complain to the cyberspace, public security or other competent authorities.

Chapter 7. Minors

We take the protection of minors' personal information seriously and comply with the Law on the Protection of Minors, the Provisions on the Online Protection of Children's Personal Information and related rules:

• Children under 14: we do not knowingly collect personal information from children under 14. If we discover that we have collected a child's information without verifiable guardian consent, we will delete it immediately. If you are a guardian and find that a child has provided information to us without your consent, contact us by email and we will delete it promptly.
• Minors aged 14 to 18: if you are between 14 and 18, read this policy together with your guardian before using the Service, and use the Service or provide personal information only with your guardian's consent.

If a guardian finds that a minor has used the Service without consent, please contact us and we will help manage or delete the relevant information.