This policy is currently a **trial text**, published to explain how we handle data before a final version is issued. During the trial we may revise it as features and legal advice evolve; the final version will be published separately and announced in-product. Whether or not the text is final, we process your personal data on the minimum-necessary basis described here.
Shanghai Zihulu Technology Application Co., Ltd. ("we") operates VR Task Hall. We process your personal data in accordance with the Personal Information Protection Law of the People’s Republic of China and other applicable laws. This policy explains what we process, why, how we protect it, and how you can exercise your rights.
1. What we collect
We collect only what the service needs, and nothing unrelated to it.
- Account data: mobile number or email address (for registration and sign-in), password (stored only as a salted hash — we cannot recover the plaintext), display name, avatar.
- Role data: the platform role you choose (client or provider); if identity verification is introduced, we will inform you separately and ask for consent.
- Business content: tasks you post, applications and quotes, reviews and tags, direct messages, read status of notifications.
- Point records: the reason, time and resulting balance of each point change (used for reconciliation and appeals).
- Device and log data: access time, IP address, request path, browser and OS type, error logs — used for security, troubleshooting and audit.
2. How we use it
To provide the service: authentication, posting and browsing tasks, applying and accepting, direct messages and notifications, point history.
For security: detecting unusual sign-ins, preventing credential stuffing and API abuse, handling violating content, keeping audit records.
To improve the product: aggregate, de-identified statistics about feature usage (for example the distribution of task categories). We do not profile individuals or make automated decisions about you.
3. Cookies and local storage
We use a very small number of cookies and local-storage entries, all for functionality, never for advertising:
- Session cookie: identifies your signed-in state and expires when you sign out.
- Language preference (vrrwdt_locale): remembers your interface language so the next visit opens in the same one.
- Theme preference: remembers light or dark mode.
4. How we share it
We do not sell your personal data and do not provide it to unrelated third parties. Sharing happens only in these cases:
- Content you publish: task titles and descriptions, the display name and introduction shown to a client when you apply, and reviews. These are visible to the relevant users.
- Service providers: SMS or email vendors (for verification codes and notifications) and our cloud and database providers. We share the minimum needed and require confidentiality.
- Legal requirements: where compelled by laws, courts or administrative authorities.
5. Where and how long we keep it
Your personal data is stored on servers located in mainland China.
Account data is kept while the account exists. After deletion we remove or anonymise it, except records we must retain by law (logs, audit records).
Logs and audit records are kept on a minimum-necessary basis (generally no more than six months) and purged automatically.
6. How we protect it
Traffic is encrypted with HTTPS (TLS 1.2 or above). Passwords are stored as salted hashes and cannot be reversed.
The service runs with least privilege: the database listens only on localhost, the application runs as an unprivileged account, and every administrative action is logged.
Sensitive fields such as mobile numbers are masked in logs and audit records.
If a personal-data breach occurs, we will notify affected users and report to regulators as required by law.
7. Your rights
Within the limits of applicable law you may exercise the following rights over your personal data:
- Access and correct: view and change your display name and avatar in your account area; to change your mobile number or email, contact us via direct message.
- Delete: delete tasks you posted, withdraw applications, delete messages and notifications.
- Withdraw consent: we will stop processing the relevant data, without affecting processing carried out before withdrawal.
- Close your account: request it via direct message; we will verify your identity and act on it.
- Obtain a copy and an explanation: ask us for a copy of your data or an explanation of our processing rules.
8. Minors
The Platform is intended for adults with full legal capacity and for legally established organisations. If you are under 18, please read this policy with a guardian and use the Platform only with their consent.
If we learn that we have collected personal data of a child under 14, we will delete it promptly.
9. Changes to this policy
This policy may be updated as the product changes. We will publish the new version here with an updated date, and will notify you in-product of changes to purposes, categories of data or sharing recipients.
10. Contact
For questions about this policy or to exercise the rights above, contact us. We reply within 15 working days of receiving a request:
- Operator: Shanghai Zihulu Technology Application Co., Ltd.
- Registered address: Floor 2, Building 2, No. 1508 Kunyang Road, Minhang District, Shanghai, China (200245)
- In-product: sign in and message the platform support account via Direct messages