Privacy Policy

1. Controller and contact

1. 处理者与联系方式

ParallelFolio is operated under the Rorolo brand by Jinliang Zhao. For privacy questions or requests, contact rrrr.zhao@gmail.com.

ParallelFolio 由 Jinliang Zhao 以 Rorolo 品牌运营。如有隐私问题或权利请求，请联系 rrrr.zhao@gmail.com。

2. Information we process

2. 我们处理的信息

• Account data, such as your email address, authentication identifiers, language, timezone, and settings.
• Portfolio records you choose to enter, including account names, trades, cash flows, positions, decisions, notes, and hypothetical paths.
• Files you choose to upload for import or recognition, together with review results and import history.
• Subscription information, such as plan, status, billing interval, Paddle customer or subscription references, and entitlement history. We do not receive or store full payment-card details.
• Security and diagnostic data, such as timestamps, request identifiers, limited device/browser information, and error logs. Sensitive portfolio contents are not intentionally written to general application logs.
• Support communications you send to us.

• 账户数据，例如邮箱、认证标识、语言、时区和设置。
• 你主动录入的投资组合记录，包括账户名称、交易、现金流、持仓、决策、备注和假设路径。
• 你主动上传用于导入或识别的文件，以及审核结果和导入历史。
• 订阅信息，例如方案、状态、计费周期、Paddle 客户或订阅引用和权益历史。我们不会接收或保存完整银行卡信息。
• 安全与诊断数据，例如时间戳、请求标识、有限的设备/浏览器信息和错误日志。我们不会有意把敏感投资组合内容写入通用应用日志。
• 你发送给客服的通信内容。

3. Why we process it

3. 处理目的

• Provide authentication, owner-separated storage, portfolio calculations, imports, reports, and support.
• Operate subscriptions and apply the correct plan entitlements after verified billing events.
• Protect accounts, prevent abuse, diagnose failures, and maintain service reliability.
• Comply with legal, tax, accounting, fraud-prevention, and dispute-resolution obligations that apply to us or Paddle.

• 提供认证、按用户隔离存储、投资组合计算、导入、报告和客服支持。
• 运营订阅，并在验证账单事件后应用正确的方案权益。
• 保护账户、防止滥用、诊断故障并维护服务可靠性。
• 履行适用于我们或 Paddle 的法律、税务、会计、反欺诈和争议处理义务。

4. Service providers and disclosure

4. 服务提供商与披露

We use service providers for hosting, database, authentication, email, security, and operational support. They may process information only as needed to provide those services under their applicable terms and safeguards.

For Global purchases, Paddle is Merchant of Record and independently processes checkout, payment, tax, invoice, fraud, and buyer-support data under Paddle's privacy terms. We may disclose information when required by law, to protect rights and security, or as part of a business transfer with appropriate safeguards.

We do not sell personal information or portfolio records and do not use them for third-party behavioral advertising.

我们使用托管、数据库、认证、邮件、安全和运营支持服务商。他们只能依据适用条款和保护措施，在提供相应服务所需范围内处理信息。

全球版购买由 Paddle 作为记录商户，根据其隐私条款独立处理结账、支付、税务、发票、反欺诈和买家支持数据。法律要求、保护权利与安全，或在具备适当保护措施的业务转移中，我们可能依法披露必要信息。

我们不出售个人信息或投资组合记录，也不使用这些数据进行第三方行为广告。

5. Retention and security

5. 保存期限与安全

We retain account and portfolio data while your account is active and for a limited period after deletion when needed for backup integrity, fraud prevention, disputes, or legal obligations. Billing and transaction records may be retained for the period required by tax, accounting, or payment rules.

We use reasonable technical and organizational safeguards, including authenticated access, owner boundaries, restricted secrets, and payment-card handling by Paddle. No internet service can guarantee absolute security, so please contact us promptly if you suspect unauthorized access.

账户有效期间我们会保存账户和投资组合数据；删除后，如备份完整性、反欺诈、争议或法律义务确有需要，可能在有限期间内继续保留。账单和交易记录可能按税务、会计或支付规则要求保存。

我们采用合理的技术和组织措施，包括认证访问、用户边界、密钥限制，并由 Paddle 处理银行卡信息。任何互联网服务都无法保证绝对安全，如怀疑未经授权访问，请及时联系我们。

6. Your choices and rights

6. 你的选择与权利

• Access, correct, export, or delete your account information and factual records, subject to applicable legal exceptions.
• Cancel a paid subscription without deleting your factual records.
• Object to or restrict certain processing, or withdraw consent where consent is the legal basis.
• Complain to an applicable data-protection authority if you believe your rights were not respected.

• 在适用法律例外范围内，访问、更正、导出或删除账户信息和事实记录。
• 取消付费订阅，而不删除事实记录。
• 对特定处理提出异议或限制；以同意为处理依据时，可以撤回同意。
• 如果认为权利未受到尊重，可以向适用的数据保护机构投诉。

7. International use and policy updates

7. 跨境使用与政策更新

Service providers may process data in countries other than yours. Where required, we rely on contractual or other lawful safeguards for international transfers. Regional deployments are intended to keep CN and Global portfolio data separated rather than synchronizing it by default.

We may update this policy as the service or law changes. Material changes will be highlighted through the service or another reasonable channel before they take effect where required.

服务提供商可能在你所在国家或地区以外处理数据。在法律要求时，我们会依赖合同或其他合法保护措施进行跨境传输。区域部署旨在分离中国区和全球区投资组合数据，而不是默认跨区同步。

随着服务或法律变化，我们可能更新本政策。法律要求时，重大变更会在生效前通过服务内提示或其他合理渠道告知。