1. Scope
This policy explains how HaloCrystal, operated by 封丘县观序山百货有限公司, handles information when a business account holder uses our website or authorizes account connectivity.
2. Information we may process
- Business account profile details and platform account identifiers.
- Media metadata and content associated with an authorized account.
- Comments and related engagement information for authorized account media.
- Authorization data such as authorization codes, access tokens, refresh tokens, scopes, token expiry information, and revocation status.
- Operational logs necessary for security, troubleshooting, and abuse prevention.
- Information you send to us at [email protected].
3. How we use information
We use information to connect authorized accounts, retrieve and manage authorized media, support comment workflows, publish content when directed by an authorized operator, maintain authorization sessions, provide support, and protect the service.
4. Legal and authorization basis
Platform data is processed only after the relevant account holder has completed an authorization flow or where another valid business authorization applies. We do not sell personal data or platform authorization credentials.
5. Data sharing
We may use infrastructure and service providers that process data on our behalf. We may disclose information when required by law, to protect security, or in connection with a lawful corporate transaction. We do not share platform credentials with advertisers or unrelated third parties.
6. Retention
We retain data only as long as reasonably necessary for the authorized business purpose, security, legal compliance, dispute resolution, or service operation. Authorization data is removed or rendered unusable when access is revoked and retention is no longer required.
7. Security
We use reasonable administrative and technical safeguards appropriate to the nature of the data. No online system can guarantee absolute security.
8. Your choices
You may revoke platform authorization through the relevant platform controls. You may also request access, correction, or deletion by following our Data Deletion page.
9. International processing
Because our operator is based in China and service providers may operate in other jurisdictions, information may be processed across borders subject to applicable law and contractual safeguards.
10. Contact
Privacy inquiries: [email protected].
11. Updates
We may update this policy when our services, platform permissions, or legal obligations change. The effective date above identifies the current version.