Privacy Policy
Last Updated: March 16, 2026
This Privacy Policy explains how Tangyou Space collects, uses, stores, and protects your personal information. We strictly comply with applicable laws and regulations including the China Personal Information Protection Law (PIPL), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
1. Information We Collect
1.1 Information You Provide
- Account Information: When you register an account, we collect your email address, username, etc.
- Subscription Information: When you subscribe to our newsletter or download ebooks, we collect your email address
- Contact Information: When you contact us, we may collect your name, email address, message content, etc.
- Payment Information: When you purchase products, payment processing is handled by third-party payment platforms. We do not store your complete credit card information.
1.2 Automatically Collected Information
- Browsing Data: IP address, browser type, access time, pages visited
- Device Information: Device type, operating system, screen resolution
- Cookies: Session cookies and persistent cookies for improving user experience
2. How We Use Your Information
2.1 Providing Services
- Sending newsletters and ebook download links you subscribe to
- Processing your purchase orders
- Responding to your inquiries and requests
2.2 Improving Services
- Analyzing user behavior to optimize website content and functionality
- Understanding user preferences to provide better user experience
2.3 Legal Compliance
- Complying with applicable laws and regulations
- Cooperating with law enforcement or regulatory authorities upon legitimate requests
3. Information Sharing and Third-Party Services
3.1 Service Providers
We may share necessary information with the following third-party service providers:
- Email Services: For sending newsletters and notifications
- Payment Processing: For processing purchase transactions
- Website Analytics: For understanding website traffic and user behavior
3.2 Legal Requirements
We may disclose your information in the following circumstances:
- Complying with legal obligations
- Protecting our or users’ rights and interests
- Responding to emergencies
3.3 Not Selling Personal Information
We do not sell your personal information. In accordance with CCPA regulations, we explicitly inform users that we do not sell any personal information.
4. Data Protection Measures
4.1 Technical Measures
- Using HTTPS encryption for data transmission
- Implementing access control and authentication
- Regular security updates and audits
4.2 Administrative Measures
- Employee data protection training
- Data access control using the principle of least privilege
- Data retention period management
5. Your Rights
5.1 Under GDPR (EU Users)
- Right to Access: You have the right to know what personal data we hold about you
- Right to Rectification: You have the right to request correction of inaccurate personal data
- Right to Erasure: You have the right to request deletion of your personal data (“Right to be Forgotten”)
- Right to Restrict Processing: You have the right to restrict our processing of your data
- Right to Data Portability: You have the right to receive your data in a structured, commonly used, machine-readable format
- Right to Object: You have the right to object to processing based on legitimate interests
5.2 Under CCPA (California Users)
- Right to Know: Understand what personal information we collect and its specific contents
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Choose to opt out of personal information sales (we do not sell)
- Right to Non-Discrimination: Not be discriminated against for exercising privacy rights
5.3 Under PIPL (China Users)
- Right to Know: Understand the purposes, methods, and scope of personal information processing
- Right to Decide: Exercise decision-making authority over personal information processing
- Right to Access and Copy: Access and copy your personal information
- Right to Correction and Completion: Request correction or completion of inaccurate or incomplete information
- Right to Deletion: Request deletion of personal information under specific circumstances
- Right to Data Portability: Request transfer of personal information to designated other processors
6. Data Retention
We only retain your personal information for as long as necessary:
- Account Information: Retained for 30 days after account deletion
- Subscription Information: Retained for 30 days after subscription cancellation
- Transaction Records: Retained for 7 years per tax requirements
- Log Data: Retained for 12 months
7. Children’s Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover such information has been collected, we will delete it immediately.
8. Cross-Border Data Transfer
8.1 Transfers from the EU
For data collected from EU users, we implement the following measures to ensure compliance:
- Standard Contractual Clauses (SCC)
- Adequacy decisions
- Explicit user consent
8.2 Transfers from China
For data collected from China users, in accordance with the Personal Information Protection Law, we:
- Conduct personal information protection impact assessments
- Use security assessments or Standard Contractual Clauses
- Inform users about overseas recipient information
9. Policy Updates
We may update this Privacy Policy from time to time. For material changes, we will:
- Post a notice on the homepage
- Notify you via email (if you have provided your email)
- Update the “Last Updated” date at the top of the page
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- Email: [email protected]
- Subject Line: [Privacy Inquiry] or [Data Rights Request]
- Processing Time: We will respond within 30 days
10.1 Data Rights Requests
To exercise your data rights, please submit your request as follows:
- Send an email to [email protected]
- Subject line format:
- [Data Access Request]
- [Data Deletion Request]
- [Data Correction Request]
- We will process your request within 30 days
11. Right to Complain
If you believe our processing of your personal information violates applicable law, you have the right to lodge a complaint with the relevant supervisory authority:
- China: Cyberspace Administration of China
- EU: Data Protection Authorities in respective member states
- United States: California Consumer Privacy Agency (for CCPA-related issues)