Privacy policy

What we collect

Only what we need to fill your order and help you afterwards. We don't ask for your account password, and we never see your full card number.

• Order details: Plan, amount, currency, payment status, order number and payment time.
• Email and contact details: Your payment email and the email on the account being subscribed. Some plans also need a WeChat contact, and for consulting we ask you to describe what you need.
• ChatGPT Session: Needed only for ChatGPT Plus orders. How we use it is explained below.
• Claude login code: The one-time code you forward to support during setup. It stops working after a single sign-in.
• IP hash: When you submit your details, we record a one-way hash of your IP address to stop spam orders. We don't keep the raw IP.
• Browsing data: Visit data that analytics tools record through cookies. See "Third-party services and cookies" below.

How we use it

We use it to process orders, check payments and refunds, answer your questions and block fake orders. We also look at it to see which parts of the site need work. We don't sell your information, and we don't use it for marketing that has nothing to do with your order.

Your Session is used for this one subscription top-up and nothing else. Before you submit, we use it to check what plan the account is on right now. After that, we use it to process this order. It isn't written to our database and doesn't go into our logs.

Third-party services and cookies

Payments, storage, email and analytics run on the services below. Each one handles only the data its part of the job needs.

• Payments: Stripe processes cards and Apple Pay, and your full card number stays with Stripe. We also accept WeChat Pay.
• Database and hosting: Order records are stored in Supabase. The site is hosted on Vercel.
• Email: Support emails are sent through Resend.
• Order notifications: When a new order comes in, the operator gets an alert through an instant messaging service.
• Analytics: Google Analytics, Microsoft Clarity, DataFast and Vercel Analytics. The analytics tools listed above set cookies in your browser. We use them to count visits, see where visitors come from and learn how pages get used. The page where you enter your top-up details doesn't load any analytics scripts. If you'd rather not be counted, clear or block these cookies in your browser. You can still order and pay as usual.

Where it is stored and for how long

All of these providers run their servers outside mainland China, so your order information is stored and processed there. We give them only what they need to provide their service.

We keep order records until we no longer need them for after-sales support or bookkeeping. If the law or payment reconciliation requires us to keep a record longer, we keep it as long as required. Sessions aren't stored at all. If you want your data deleted sooner, contact us as described in the next section.

Your rights

Email support@xingqiaosub.com with your order number or payment record. Once we've confirmed it's you, we can send you the information tied to your order, correct an email or contact detail you got wrong, or delete the information once the order is finished and needs no more after-sales help. Records we have to keep for legal or reconciliation reasons are the exception.

You can also ask us to stop processing your information at any time. If you do, we may not be able to keep providing the service.

Minors and changes to this policy

The service is only for people aged 18 and over. We don't knowingly collect information from anyone younger.

When we update this page, the date at the top changes with it. For bigger changes we'll also post a notice on the site. If you keep using the service after an update, you accept the new version.