Legal
Privacy Policy
Last updated: 2026-04-22·Version: 2.0·Entity: 芯想（深圳）控股有限公司
1. Overview · 概述
This Privacy Policy explains how SkillSwipe, a product of 芯想（深圳）控股有限公司 (Unified Social Credit Code: 91440300MA5G4UD231), collects, uses, stores, and shares your personal information when you use our platform at skillswipe.cn and related services. We comply with the EU General Data Protection Regulation (GDPR), the PRC Personal Information Protection Law (PIPL), and are working toward SOC 2 Type I certification.
本隐私政策说明 SkillSwipe（由芯想（深圳）控股有限公司运营，统一社会信用代码：91440300MA5G4UD231）如何收集、使用、存储和共享您在使用skillswipe.cn及相关服务时的个人信息。我们遵守欧盟《通用数据保护条例》（GDPR）、 中华人民共和国《个人信息保护法》（PIPL），并正在申请 SOC 2 Type I 认证。
2. What we collect · 收集的信息
Identity & contact · 身份信息
- Name, email address, phone number (when you register)
- 姓名、邮箱、手机号（注册时）
- Profile data: job title, bio, skills, education, work history
- 个人资料：职位、简介、技能、教育背景、工作经历
- Avatar / profile image (optional)
- 头像 / 头像图片（可选）
Usage & technical · 使用和技术信息
- Device information (browser, OS, screen size) · 设备信息（浏览器、操作系统、屏幕尺寸）
- IP address and approximate location · IP 地址和大致地理位置
- Core Web Vitals and performance telemetry · Core Web Vitals 和性能遥测
- Interactions with jobs, matches, and messages · 与职位、匹配和消息的交互
What we do not collect · 我们 不 收集
- National ID / passport numbers unless required for verification (opt-in only)
- Precise GPS location
- Biometric data
- Bank account or credit card numbers directly — when web billing is enabled, payments are processed by licensed payment partners rather than stored by SkillSwipe
3. How we use your information · 使用方式
We process your data for the following purposes:
- Matching: ranking candidates against job requirements (lawful basis: contract performance / PIPL Art. 13(2)) · 匹配：根据职位要求对候选人进行排序
- Communication: sending match alerts, messages, service updates · 沟通：发送匹配提醒、消息和服务更新
- Security: fraud detection, rate limiting, audit logs · 安全：欺诈检测、速率限制、审计日志
- Product improvement: aggregated, anonymized analytics (lawful basis: legitimate interest) · 产品改进：聚合匿名分析
- Legal compliance: tax, accounting, regulatory reporting · 法律合规：税务、会计、监管报告
5. Data retention · 存储期限
- Active account data: kept while the account is active · 账户存续期间
- Messages: 24 months after last activity · 消息：最后活动后 24 个月
- Audit logs: 36 months (PIPL Art. 51) · 审计日志：36 个月
- Deleted accounts: hard-deleted within 30 days · 账户删除：30 天内硬删除
- Backups purged within 90 days · 备份 90 天内清除
6. Your rights · 您的权利
Under GDPR Art. 15-22 and PIPL Art. 44-50, you have the right to:
- Access your data (in-app export) · 访问您的数据
- Correct inaccurate data · 更正不准确的数据
- Delete your data ("right to be forgotten") · 删除您的数据
- Port your data to another service (JSON export) · 数据可移植性
- Restrict processing / withdraw consent · 限制处理 / 撤回同意
- Object to automated decision-making · 反对自动化决策
- Lodge a complaint with a supervisory authority · 向监管机构投诉
Contact privacy@skillswipe.cn for any of the above. We respond within 15 business days (GDPR) / 15 working days (PIPL).
7. Security · 安全措施
- TLS 1.3 for all traffic · 全链路 TLS 1.3
- Bcrypt password hashing (cost 12+) · Bcrypt 密码哈希
- JWT with 24-hour expiry + refresh rotation · JWT 令牌 24 小时过期
- Principle of least privilege on database access · 数据库最小权限原则
- Daily encrypted backups retained 90 days · 每日加密备份保留 90 天
- SOC 2 Type I audit in progress (Q3 2026) · SOC 2 Type I 审计进行中
8. Cross-border data transfer · 跨境传输
Our primary infrastructure is hosted in the Hong Kong region of Tencent Cloud. Transfers into Mainland China for Chinese users comply with the PIPL standard contractual clauses (filed with CAC). Transfers to the EEA are covered by the EU Commission's Standard Contractual Clauses (SCCs).
我们的主要基础设施托管于腾讯云香港区域。中国大陆用户数据的跨境传输符合 PIPL 标准合同条款（已在网信办备案）。向欧洲经济区（EEA）的传输适用欧盟委员会的标准合同条款（SCCs）。
9. Children · 未成年人
SkillSwipe is not intended for users under 16 years old (GDPR) or 14 years old (PIPL). We do not knowingly collect data from minors. If you believe a minor has registered, contact privacy@skillswipe.cn.
10. Contact · 联系我们
- Data Protection Officer · 数据保护官: dpo@skillswipe.cn
- Privacy inquiries · 隐私咨询: privacy@skillswipe.cn
- Registered address · 注册地址: 深圳市 · China
- EU representative · 欧盟代表: on request