This Privacy Policy ("Policy") applies to the processing of your personal information by 春水Live ("we", "us", "our"). This Policy does not cover personal information contained in user-generated content on the platform — that content is the responsibility of the creator as its respective controller.
If you have questions or objections to this Policy, please do not register or use the platform. Registration and continued use constitute your acknowledgment of and agreement to this Policy.
For inquiries, contact [email protected].
1. How We Collect Your Information
We collect personal information through the following channels:
- You provide it directly: when you register an account (email, username, hashed password, avatar), when you create content (characters, Braindances, presets), when you chat with AI characters, and when you submit support tickets or reports.
- Automated collection: when you visit the platform we automatically collect login state, display preferences, IP address, device information, browsing behavior, and error logs via cookies, local storage, and server logs.
- Third-party sign-in: when you sign in via Google, Telegram, etc., we receive basic identity information (email, display name, avatar) from those providers.
2. What We Collect and Why
| Category | Purpose | Lawful basis (GDPR) | Retention |
|---|
| Account data (email, username, password hash, avatar, device/IP) | Provide registration, login, account management | Contract | Lifetime of account; hard-deleted 30 days after closure |
| User-generated content (characters, Braindances, presets, comments, forum posts) | Provide creation, publishing, social features | Contract | Lifetime of account; public content remains under the granted license after closure |
| Conversation history | Provide AI chat, context memory, history review | Contract | Lifetime of account; hard-deleted 30 days after closure |
| Payment data (order ID, amount, timestamp; card numbers are processed by third-party payment providers and not stored by us) | Process top-ups / subscriptions, issue invoices | Contract + Legal obligation (tax / AML) | Statutory retention (typically 5 years) |
| Cookies and behavioral telemetry | Maintain login session, personalization, product improvement, error diagnosis | Legitimate interests | 12 months by default; clearable via browser settings |
| Support tickets / reports | Customer support, community moderation | Legitimate interests + Legal obligation | 12 months after ticket closure |
| Security logs (fraud / spam prevention) | Protect service and user safety | Legitimate interests + Legal obligation | 12 months |
Sensitive information: do not submit government identifiers (ID, passport, SSN), full bank card numbers, or medical records. If you include such data in your content or chats, we do not apply special handling and you bear the associated risk.
Non-personal information: anonymized or aggregated statistics that cannot identify you (e.g., total platform traffic, model usage distribution) are not treated as personal information and may be used freely.
3. How We Share Your Information
We do not sell your personal information. We share information with third parties only in the following cases:
- AI model providers: to provide AI chat, your conversation content is transmitted to your selected model provider for inference. Current providers include OpenAI (GPT family), Anthropic (Claude family), Google (Gemini, DALL·E), and others. These providers contractually commit not to use your conversations to train their models.
- Payment processors: third-party payment channels (e.g., epay) that process top-ups and subscriptions. We do not transmit payment-unrelated personal information to them.
- Infrastructure providers: cloud hosting, CDN (Cloudflare), email delivery (Resend), etc., with access strictly limited to what is necessary to provide service.
- Legal requirements: when required by law, court order, or government authority, we disclose information to the extent legally required.
- Business transfers: in the event of a merger, acquisition, or asset transfer, your information may be transferred as part of the business assets and the recipient will continue to honor this Policy.
4. Cross-Border Data Transfers
Some AI model providers and infrastructure providers are located outside China (including the United States and the EU). When your personal information is transferred across borders, we provide appropriate safeguards under the PRC Personal Information Protection Law and Standard Contractual Clauses (SCCs) under the EU GDPR.
5. Your Rights
5.1 All Users
- Access: view your account information, content, and conversation history.
- Correction: correct inaccurate information in your account settings at any time.
- Account closure: request account closure in account settings. After closure, you have 30 days to recover the account; after 30 days, your account information and conversation history are hard-deleted (except where legal retention applies).
5.2 EU / UK Residents (GDPR / UK GDPR)
In addition to the above, you have:
- Data portability: request your data in a structured, commonly used, machine-readable format.
- Restriction of processing: in specific circumstances, request that we restrict processing of your information.
- Objection: object to processing based on legitimate interests.
- Withdrawal of consent: withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing before withdrawal.
- Complaint to supervisory authority: complain to your local data protection authority.
To exercise these rights, email [email protected].
5.3 California Residents (CCPA / CPRA)
California residents additionally have:
- Right to know: the categories of personal information we collected, used, shared, sold, or shared in the past 12 months and the purposes.
- Right to delete: request deletion of the personal information we collected about you (subject to statutory exceptions).
- Right to opt-out of sale or sharing: we do not sell or share your personal information for cross-context behavioral advertising; no opt-out action is required.
- Right to limit use of sensitive personal information: request that we limit our use of sensitive personal information to what is necessary to provide service.
- Right to non-discrimination: exercising these rights will not result in discrimination in price or service quality.
To exercise California rights, email [email protected] with subject "CCPA Request".
6. Children
The platform is not directed to individuals under 22 years of age. If you are under 22, do not submit your personal information or register. If we discover we have collected personal information from a person under 22 without parental consent, we will delete that information as soon as practicable.
Parents or guardians who believe their child is using the platform without consent may contact [email protected] to request deletion.
7. Information Security
We apply industry-standard technical and organizational measures to protect your personal information:
- passwords stored using Argon2id;
- TLS encryption in transit;
- tiered access control over databases with periodic auditing;
- audit logs for critical operations.
Despite these measures, no transmission over the internet is absolutely secure. Please safeguard your account credentials and do not share them.
8. Cookies
We use the following categories of cookies:
- Strictly necessary: maintain your login session, CSRF protection, load balancing — cannot be disabled.
- Functional: save your display preferences (language, theme).
- Analytics: help us understand product usage and improve.
You may manage or clear cookies via your browser settings. Disabling strictly necessary cookies may prevent the platform from functioning.
9. Changes to This Policy
If we make material changes to this Policy, we will notify you via in-app notice or email. Continued use of the platform constitutes acceptance of the updated Policy.
10. Contact
For questions, complaints, or requests:
春水Live Privacy Team
Email: [email protected]