We may collect the following types of information when you use AI Open Fortune services:

Information You Provide:

• Account information: name, email address, password (encrypted)
• Market preference: your selected market version (A-Share or Global)
• Payment information: subscription plan, payment records (no full card numbers stored)
• Communications: content of emails or support messages you send us

Automatically Collected Information:

• Device information: browser type, operating system, device identifiers
• Log data: IP address, access time, page views
• Usage data: feature usage frequency, click behavior (anonymized)

We use the collected information for the following purposes:

• Provide, maintain, and improve our AI investment strategy services
• Send account verification emails, subscription confirmations, and weekly reports
• Process your subscription payments and refund requests
• Respond to your inquiries and support requests
• Send important service change notifications
• Prevent fraud, abuse, and security threats
• Comply with applicable laws and regulations

We implement industry-standard security measures to protect your personal information:

• Encryption in Transit: Full HTTPS/TLS encryption across the entire site
• Password Security: bcryptjs algorithm with salting, passwords never stored in plaintext
• Access Control: JWT Token authentication, API rate limiting protection
• Least Privilege: Internal staff only access the minimum information required for their work
• Regular Audits: Periodic security reviews and updates

We do not sell, rent, or trade your personal information. We only share in the following limited circumstances:

• Service Providers: Trusted third parties who help us operate our services (e.g., email service Resend, payment processors), bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or government agency
• Security Protection: To prevent fraud, protect user safety, or investigate violations
• Business Transfers: In case of merger or acquisition, your information may be transferred as an asset; we will notify you in advance

We use the following types of local storage technologies:

• Necessary Cookies: Used to maintain login state (JWT Token), essential for service operation
• Preference Storage: Remember your language preference (localStorage)
• Analytics Cookies: Anonymous page view statistics to help us improve user experience

You can manage or delete cookies through your browser settings, though this may affect certain features.

Under applicable law, you have the following rights:

• Right of Access: View the personal information we hold about you
• Right to Rectification: Request correction of inaccurate personal information
• Right to Erasure: Request deletion of your account and related data ("Right to be Forgotten")
• Right to Data Portability: Receive a copy of your data in a structured format
• Right to Object: Object to certain types of data processing
• Right to Unsubscribe: Unsubscribe from marketing emails at any time (unsubscribe link in email footer)

To exercise these rights, please email privacy@aiopenfortune.com. We will respond within 30 days.

• Account Data: We will delete your personal information within 30 days after account cancellation
• Transaction Records: Financial records are retained for 7 years as required by law
• Log Data: Server logs are automatically deleted after 90 days
• Email Communications: Support emails are retained for 2 years for dispute resolution

AI Open Fortune's investment services are intended for adults aged 18 and over. We do not knowingly collect personal information from minors. If you discover that a minor has registered for our services, please contact us immediately and we will delete the relevant account.

We may update this Privacy Policy from time to time. When significant changes occur, we will notify you through:

• A prominent notice on the website
• An email notification to your registered address

Your continued use of the service after changes take effect constitutes acceptance of the new Privacy Policy.

If you have any questions, suggestions, or complaints about this Privacy Policy, please contact us through: