This policy applies to hitszaiia.cn and its website-account features. The personal-information handler is the student team of the Harbin Institute of Technology, Shenzhen AI Innovation Association, a university student-association team without separate legal-person status (“we”). Applicable law and current university rules prevail where they require otherwise.
1. Information we handle
We handle basic request and security data when you browse; your email address, password hash, verification-code hash and verification records when you register or sign in; policy-version and consent timestamps; and any information you choose to send by email. We do not intentionally collect government identifiers, payment data, biometrics or precise location through this website.
2. Purposes and essential cookies
We use this information only to deliver pages, create and secure accounts, send one-time codes, prevent abuse, diagnose faults and answer requests. Public pages remain available if you do not register. Passwords are stored only as one-way bcrypt hashes. The essential sign-in cookie is HttpOnly, Secure in production and SameSite=Strict, and lasts up to seven days.
3. Service providers and international processing
We use Vercel for hosting and request security, Neon for the account database (currently in AWS us-east-1 in the United States), and Resend for verification email. These providers may process ordinary personal information outside mainland China. We request separate consent before registration and limit processing to what each service needs. See the providers’ Vercel, Neon and Resend privacy notices. We do not sell personal information, serve profile-based ads or use non-essential cross-site tracking.
4. Retention
- Account information: until account deletion, subject to a legal hold where required.
- Verification records: normally no longer than 30 days.
- Necessary security logs: for the shortest period needed, normally no longer than 180 days.
- Support and rights-request email: normally no longer than three years after closure.
5. Your choices and rights
You may request access, a copy, correction, deletion, restriction or an explanation, withdraw consent, or delete your account. Self-service deletion is available in account settings. For any other request, email hitszaiia@qq.com with the subject “Personal Information Request”. We normally respond within 15 working days after any necessary account verification.
6. Minors
Account registration is not offered to children under 14. Users aged 14–17 should review these terms with a guardian and register only with guardian consent. Contact us if you believe a child’s information was submitted in error.
7. Security and changes
We use transport encryption, access controls, password hashing, rate limits, security headers and administrative audit records. We will contain and report personal-information incidents as required by applicable law. Material changes will be highlighted, and renewed consent will be requested where legally required.