X-GORB Account Privacy Policy

1. Information We Collect

1.1 Account Registration

• Identity Information: First name, last name (required to verify your identity and facilitate account recovery)
• Date of Birth: To confirm that you are at least 13 years old, in compliance with applicable age restrictions
• Gender: Optional, for personalized service optimization (you may choose "Prefer Not to Disclose")
• Regional and Language Settings: Country/region and preferred language (e.g., Simplified Chinese, English, Japanese) to provide localized services
• Account Credentials: Username (3-50 characters, containing only letters, numbers, and underscores), email address (used for verification and communication), and optional mobile phone number
• Security Information: Password (stored in hashed form), verification code (sent to your email for identity verification)

1.2 Account Login

• Login Credentials: Username/email and password (or Passkey, biometric verification data if you choose such login methods)
• Device and Session Data: Device identifier, IP address, browser type (we recommend using Google Chrome for optimal service), login time, and session duration. This data is used to detect abnormal login activities and protect your account from unauthorized access.

1.3 Password Recovery

• Verification Information: Registered email address, verification code (sent to your email), recovery code, or biometric data (if used for identity verification)
• Security Information: New password (stored in hashed form) to complete the password reset process

2. How We Use Your Information

• Create, verify, and manage your X-GORB Account to ensure you can access our services normally.
• Authenticate your identity during login and secure access, including detecting and preventing unauthorized login attempts.
• Facilitate password reset and account recovery to help you regain access to your account when needed.
• Maintain service security, detect and prevent fraud, abuse, and security incidents (e.g., phishing, account hijacking) to protect your account and personal data.
• Comply with applicable laws, regulations, legal processes, or enforceable governmental requests (e.g., court orders, regulatory inquiries).
• Send service-related notifications (e.g., account verification, password reset reminders). You may opt out of non-essential notifications (e.g., product updates, promotions) at any time.

3. Data Storage and Protection

3.1 Data Storage

• We retain your personal data only for as long as necessary to provide the account service or as required by applicable laws. The retention period will be determined based on the purpose of data use and legal obligations.
• After you close your account or terminate the service, we will delete or anonymize your personal data in accordance with applicable regulations, unless we are required to retain it by law (e.g., for dispute resolution, compliance with legal obligations).
• Your data may be stored on servers located in countries/regions where we operate, and we ensure that all data storage complies with local data protection laws.

3.2 Data Protection

• Password Security: Your password is stored only in irreversible hashed form. We do not store, access, or process your plaintext password under any circumstances.
• Encryption: We use industry-standard encryption technologies (e.g., SSL/TLS) for data transmission and storage to prevent unauthorized access, disclosure, or alteration of your personal data.
• Access Control: Access to your personal data is restricted to authorized personnel who are bound by strict confidentiality obligations. We implement role-based access control and regular access audits to ensure data security.
• Security Measures: We maintain security logs, conduct regular security audits and vulnerability scans, and update our security systems to protect against unauthorized access, disclosure, alteration, or destruction of your personal data.

4. Information Sharing and Disclosure

• With Your Explicit Consent: We will share your personal data with third parties only if you have given your explicit consent, and we will clearly inform you of the purpose, scope, and recipient of the data sharing.
• With Trusted Service Providers: We may share your personal data with trusted third-party service providers who assist us in operating our account services (e.g., email service providers for sending verification codes, cloud storage providers for data storage). These service providers are bound by strict confidentiality and data protection obligations, and are prohibited from using your personal data for any purposes other than providing the agreed services.
• Legal Requirements: We may disclose your personal data if required by applicable laws, regulations, legal processes (e.g., court orders, subpoenas), or enforceable governmental requests.
• Protection of Rights and Safety: We may disclose your personal data to protect the rights, property, or safety of X-GORB, our users, or the public, where necessary and permitted by law (e.g., to prevent fraud or protect against imminent harm).

5. Your Rights as a User (In Compliance with GDPR and CCPA)

• Right to Access: You have the right to request access to the personal data we hold about you, including the type, purpose, and recipient of the data.
• Right to Correction/Update: You have the right to request correction or update of your personal data if it is inaccurate or incomplete.
• Right to Erasure (Right to Be Forgotten): You have the right to request the deletion of your personal data, subject to legal restrictions (e.g., if we are required to retain the data for legal obligations).
• Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time (where the processing is based on your consent). Withdrawing consent will not affect the legality of data processing conducted before the withdrawal.
• Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data in certain circumstances (e.g., if you dispute the accuracy of the data).
• Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller if technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes, or for other purposes based on our legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
• Right to Lodge a Complaint: If you believe your rights have been violated, you have the right to file a complaint with a competent data protection authority (e.g., the European Data Protection Board under GDPR, the California Attorney General under CCPA).

6. Special Terms

6.1 Minors

6.2 Third-Party Login

6.3 Policy Updates

6.4 Cross-Border Data Transfer

7. Contact Us