HEYCROSS

Privacy Policy

1. Scope

This Privacy Policy explains how HEYCROSS (heycross.com), operated by Fuzhou Shuxi Information Technology Co., Ltd. and/or its affiliates, collects, uses, stores, protects, and shares information when you visit our website, create an account, sign in, publish content, or use our services.

2. Information we collect

Depending on the services you use, we may collect:

  • account information such as your nickname, email address, phone number, and password hash;
  • profile information, content, enquiries, reviews, and other information you submit;
  • transaction and subscription records when you use paid services;
  • device, browser, IP address, security, cookie, login, and usage information; and
  • information received from a third-party sign-in provider when you choose that sign-in method.

We do not store your account password in plain text.

3. Google user data

If you choose “Sign in with Google,” Google provides HEYCROSS with the information needed to identify your Google account and create or locate your HEYCROSS account. This may include your Google account identifier (subject ID), display name, email address, email-verification status, profile picture URL, locale, and sign-in timestamps.

How we obtain it

The information is obtained only after you initiate Google Sign-In and Google returns a signed identity credential to HEYCROSS. We validate that credential, including its audience and security protections. We do not receive or store your Google password.

How we use it

We use Google user data only to authenticate you, create or link your HEYCROSS account, display your chosen profile information, protect account security, prevent fraud, and provide account support. We do not use Google user data for personalized advertising, and we do not sell it.

How we store and protect it

The account identifier and relevant profile fields are stored in HEYCROSS account records while your account remains active or as otherwise required for security, legal compliance, dispute resolution, and fraud prevention. The Google identity credential is used to validate the sign-in and is not retained as your HEYCROSS authentication credential. We apply access controls, transport encryption, monitoring, and other reasonable technical and organizational safeguards.

How we share it

We do not share Google user data with advertisers or data brokers. It may be processed by service providers acting for HEYCROSS only when necessary to operate, secure, host, or support the service; when you direct us to share it; or when disclosure is required by law, a valid legal process, or protection of users and the public. Service providers must handle the information consistently with applicable confidentiality and data-protection obligations.

HEYCROSS's use and transfer of information received from Google APIs follows the Google API Services User Data Policy , including the Limited Use requirements where applicable.

4. How we use information

  • provide, maintain, personalize, and improve HEYCROSS services;
  • register and authenticate accounts and send requested verification codes;
  • process payments, subscriptions, support requests, and service transactions;
  • moderate content, enforce platform rules, and protect users and the platform;
  • measure performance, diagnose faults, prevent abuse, and maintain security; and
  • comply with law and communicate important service or policy updates.

5. Cookies and similar technologies

We use cookies and similar technologies to maintain login sessions, remember preferences, protect forms, measure service operation, and prevent fraud. Browser settings may let you block cookies, but essential account and sign-in functions may then stop working.

6. Disclosure of information

We may disclose information:

  • with your consent or at your direction;
  • to vendors that provide hosting, security, verification, messaging, payment, and support services;
  • to other users when you intentionally publish information or enter a platform transaction;
  • to comply with applicable law, government requests, or legal process; or
  • to protect the lawful rights, safety, and property of HEYCROSS, our users, or the public.

We may use aggregated or de-identified information that does not reasonably identify an individual.

7. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, while your account is active, and for required legal, accounting, security, and dispute periods. Verification codes and temporary authentication challenges expire after a short period.

You may request access, correction, or deletion of your account information by emailing contact@mjzj.com. Disconnecting HEYCROSS in your Google Account stops future Google Sign-In access but does not automatically delete your HEYCROSS account; email us if you also want the HEYCROSS account deleted. We may retain limited records where required or permitted by law.

8. International processing and children

Information may be processed in locations where HEYCROSS or its providers operate, subject to applicable legal safeguards. HEYCROSS is not directed to children who cannot legally consent to the processing of their information. A parent or guardian who believes a child provided information without proper consent should contact us.

9. Changes and contact

We may update this Policy as our services or legal obligations change. The updated version will be posted at this same public URL with a revised date. Questions and privacy requests can be submitted to contact@mjzj.com.