Last updated: July 16, 2026
Personal Information: When you create an account, we collect your name, email address, and password (encrypted). When you make a purchase, our Merchant of Record, Lemon Squeezy, handles billing and tax collection (we never store credit card numbers directly).
Usage Data: We collect information about how you interact with our service, including pages visited, time spent, browser type, device information, and IP address. This helps us improve our service.
Communication Data: If you contact us, subscribe to our newsletter, or participate in our community, we collect the content of those communications.
We use your information to:
We do not sell your personal data. We share data with:
Depending on your location, you may have the following rights:
To exercise any of these rights, contact us at privacy@chinasojourn.com. We will respond within 30 days.
For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). Our legal basis for processing your data includes:
You have the right to lodge a complaint with your local supervisory authority.
EU Representative: For EU/EEA users: Please direct GDPR inquiries to privacy@chinasojourn.com. Our EU Representative details will be published here in accordance with GDPR Article 27 requirements.
For California residents, we comply with the California Consumer Privacy Act (CCPA). You have the right to:
We do not sell your personal information to third parties. If you wish to exercise your right to opt out, please contact us at privacy@chinasojourn.com.
Your data is stored on servers in the United States. When using third-party services (Clerk for authentication, Lemon Squeezy for payments), your data may be transferred to their US-based servers. We ensure appropriate safeguards including Standard Contractual Clauses (SCCs) are in place.
We retain different categories of data for the following periods:
If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
We implement industry-standard security measures including encryption (SSL/TLS), secure authentication, and regular security audits. However, no method of transmission over the Internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.
Data Breach Notification: In the event of a data breach, we will notify affected users within 72 hours and report to relevant supervisory authorities as required by GDPR Article 33.
Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected such data, we will delete it immediately.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your personal data, please contact us: