Privacy Policy

Effective Date: 1 Nov 2025 Jurisdiction: Hong Kong SAR
1. Scope
This data privacy policy applies to all users of the platform, regardless of location or declared origin.
2. Data we collect
We collect structured data submitted by users, including: • Profile, including native identity declarations (home location, native verbal language, native written language) • Title • Mode • Task • Task detail • Consent logs and session metadata • IP location (used solely to determine default language version; not stored beyond session routing) We do not collect sensitive personal data or behavioural tracking data.
3. Purpose of data use
Your data is used to: • Generate dashboards, comparisons, rankings and benchmarks • Enable task sharing and validation • Support anonymous ranking and benchmarking across users • Determine infrastructure routing based on declared origin
4. Origin-based classification
Users whose declared native identity includes: • Mainland China as home location • Mandarin as native verbal language • Simplified Chinese as native written language • Mainland China as current living location They are classified as mainland Chinese by origin. Their data is stored and processed within Mainland China infrastructure.
5. Anonymous ranking and benchmarking
We may use anonymized and aggregated user data to generate comparative rankings and benchmarking outputs. These rankings are presented without reference to individual identity, origin classification or personal profile details.
6. Data sharing
All data sharing is initiated and controlled by the user. When users share data with other users, they are responsible for ensuring that such sharing complies with any confidentiality agreements or employment obligations. The platform does not monitor or validate the legality or appropriateness of shared content, and liability remains with the user initiating the share. By sharing, users consent to their employer or affiliated organization obtaining a copy of the shared data, if applicable. The platform records sharing actions but does not validate the legality or appropriateness of shared content.
7. Cookies and tracking
We only use essential cookies for session management and login persistence. No analytics, marketing, profiling, or third-party tracking cookies are used. We also use IP location to determine the default language version of the site (e.g., Chinese for Hong Kong, China and Taiwan logins). Users may override this choice at any time via the language toggle. These strictly necessary cookies and localization functions are processed under legitimate interest to deliver core functionality, not under consent.
8. Your rights
You may access, update, or delete your data at any time through the platform interface. You may also terminate your account and choose whether your data is retained or deleted. If you choose to withdraw consent, this will result in termination of your access to the service. For the purposes of this Policy, the only personal identifiable information we collect and store is your email address, which serves as your unique username. Upon account termination, or upon your request, your email address and your name will be permanently deleted. All other data, including ages and task records, is retained indefinitely in anonymized and aggregated form. Such data is used solely to generate collective rankings and benchmarking outputs. No individual user’s data is ever disclosed separately.
9. China-origin data monitoring
We monitor the volume and nature of China-origin data to assess whether regulatory thresholds under PIPL are met. If such thresholds are reached, we will engage with the Cyberspace Administration of China (CAC) and comply with applicable filing or assessment procedures.
10. Children’s privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that personal data has been collected from a child under 13 without verified parental consent, we will take steps to delete the information promptly. This policy aligns with applicable laws including: • Children’s Online Privacy Protection Act (COPPA) – United States • Article 8 of the General Data Protection Regulation (GDPR) – European Union
11. Legal basis for processing
We process personal data in accordance with applicable data protection laws. Our legal bases include: • User consent • Performance of a contract • Compliance with legal obligations • Legitimate interest (for strictly necessary cookies and IP-based localization, required to deliver the service)
12. Applicable laws and jurisdiction
This platform operates under the laws of the Hong Kong Special Administrative Region. The contracting party and data controller is Rightfile Limited, incorporated in Hong Kong SAR. The following legal frameworks govern our data handling, infrastructure obligations, and user rights:
Law/RegulationJurisdictionDescription
PDPO – Personal Data (Privacy) OrdinanceHong Kong SARGoverns data collection, retention, user rights, and breach response.
PIPL – Personal Information Protection LawMainland ChinaApplies to users classified as mainland Chinese by origin; governs data localization and cross-border access.
GDPR – General Data Protection RegulationEuropean UnionReferenced for anonymization, consent, and data minimization principles.
UK GDPR – UK General Data Protection RegulationUnited KingdomMirrors GDPR protections for UK-based users.
CCPA – California Consumer Privacy ActUnited StatesReferenced for opt-out rights and data access transparency.
LGPD – Lei Geral de Proteção de DadosBrazilReferenced for user consent and data subject rights.
APPI – Act on the Protection of Personal InformationJapanReferenced for cross-border transfer and data handling standards.
PIPA – Personal Information Protection ActSouth KoreaReferenced for consent and data security obligations.
DPDP Act, 2023 – Digital Personal Data Protection ActIndiaReferenced for lawful processing and user rights.
Electronic Transactions OrdinanceHong Kong SARSupports digital consent, logging, and electronic record validity.
Contract Law (Common Law)GlobalGoverns user declarations, warranties, and liability waivers.

We do not actively target users in jurisdictions outside Hong Kong SAR, but we apply consistent privacy protections to all users regardless of location.

Rightfile | AI cannot replace your beauty