Privacy Policy

This page explains what personal data hipaidang.com collects, why, who receives it, and what you can do. The data controller is Xinpeng WU, Fengxin Road, Yuhang, Hangzhou, CHINA 311115, contact contact@hipaidang.com.

What we collect

• Account: email, display name, language, and a hash of your password (we never store the password itself). If you sign in with Google we receive your email, name and a stable user id.
• Pro profile: photos, bio, city, prices, and the contact details you enter (WhatsApp number, WeChat ID, WeChat QR) — these are public. The Instagram and Xiaohongshu accounts you provide are not public; we use them only to verify the source of your work.
• Enquiries: what you submit — date, place, party size, notes — sent to the pro you chose.
• Board payments: amount, the display name and message you enter, whether you chose anonymity, payment status and the provider's reference. We never see or store your card or Alipay details — those go only to the payment provider.
• Technical: IP address (rate limiting and abuse prevention), browser, pages visited.

Why

• To run the service: sign-in, profiles, delivering enquiries, maintaining the Board.
• To prevent abuse: rate limiting, bot checks, bans. Without IPs we cannot stop bulk signups.
• To meet legal obligations: transaction and tax records.

Who receives it

• Cloudflare — hosting, database, image storage.
• Resend — verification and notification email.
• Dodo Payments — Board payments. They are the Merchant of Record for that transaction.
• Google — only if you choose to sign in with Google.
• The pro you contact — receives your enquiry and display name.

We do not sell personal data or use it for third-party advertising.

What is public

Pro profiles, work, and contact details are public. On the Board, the display name and message are public. If you choose anonymity your name is hidden, but we keep the record for dispute handling.

How long we keep it

• Account and profile: while the account exists, deleted within 30 days after closure.
• Enquiries: 24 months.
• Payment records: as long as law requires, typically at least 5 years.
• Rate-limit and technical logs: no more than 90 days.

Your rights

You may request access, correction, export or deletion of your data, and withdraw consent. Email contact@hipaidang.com; we reply within 30 days. Deleting your account does not reverse amounts already counted on the public Board, but we remove your display name and message.

International transfers

The service runs on Cloudflare's global network, so data may be stored or processed outside your country. We use providers offering standard contractual clauses or equivalent protection.

Cookies

We use only the cookies needed to keep you signed in, plus the technical cookie required by our bot check (Cloudflare Turnstile). No advertising cookies.