Oparic Privacy Policy

Zhixu Technology (Beijing) Co., Ltd. (“we,” “us,” or “our”) respects your privacy. This policy applies to the Oparic desktop application, website, accounts, purchases, and support services. It explains how we collect, use, retain, share, and protect personal information, and how you may exercise your rights.

Please read this policy before using the services. An important note about research files: routine Oparic analysis runs on your computer. Selecting files or running a workflow does not automatically upload the contents of your research files. A data sample is uploaded only when you actively use a feature, such as an issue report, that clearly informs you of the upload.

1. Information we process

1.1 Account and authentication information

When you register, sign in, or manage an account, we process:

• your phone number, SMS-verification result, and display name;
• irreversibly hashed password-verification data; we do not store a directly readable password;
• account identifiers, status, type, and registration and update timestamps; and
• login credentials, session state, and security records relating to logout or expiration.

We use this information to create accounts, verify identity, maintain sessions, reset passwords, and protect account security. If required information is not provided, account and paid features cannot be supplied.

1.2 Device, network, and security information

To distinguish installations, manage devices and login state, diagnose problems, and protect the service, we may process:

• random installation and device identifiers, device name, and device type;
• operating system, application version, session identifiers, and login and access times; and
• network addresses, access results, and security records generated while a device is online.

1.3 Orders and transaction information

When you purchase a service or review an order, we process:

• order number, product tier, service term, price, discounts, and coupon information;
• payment channel and status, channel transaction identifier, and payment or refund time;
• license and membership-entitlement records associated with delivery; and
• information needed for invoicing and support when you request those services.

Payments are processed by providers such as Alipay and WeChat Pay. We generally do not receive or store your complete card number, payment password, or other payment-account credentials. Payment providers process that information under their own privacy rules.

1.4 Application logs and usage

To maintain stability, diagnose errors, understand feature use, and prevent abuse, we may process:

• feature access, workflow selection and execution state, error type, and duration;
• timestamps, severity, source location, error messages, and related diagnostic records; and
• installation and session identifiers, application version, operating system, network address, and random identifiers used to correlate one incident.

Application logs are designed not to record research-file contents, passwords, SMS codes, or complete login credentials. Because error messages may reflect user-provided context, avoid placing unnecessary personal, confidential, or secret information in file names, paths, or inputs.

1.5 Issue reports and data samples you submit

If a workflow fails, Oparic may offer an issue-report action. Only after you choose and confirm submission do we upload:

• the file or folder sample you selected;
• the workflow name and identifier, failed step, error summary, time, and application version; and
• application logs related to that failure.

We use this information to reproduce issues, assess format compatibility, fix defects, and improve the product. Before submitting, confirm that you are authorized to provide the sample and remove unrelated personal information, unpublished results, and third-party confidential information.

1.6 Research files and analysis results

During routine analysis, raw data, generated tables, images, Origin projects, and other results remain on your device or in a location you choose. You control those files. We do not receive their contents unless you actively use an upload feature.

2. How we use information

We process personal information only as reasonably necessary to:

1. provide registration, login, licenses, workflows, and application updates;
2. create orders, verify payment, deliver entitlements, and handle discounts, refunds, invoices, and support;
3. protect accounts, transactions, and systems against suspicious login, fraud, attacks, and abuse;
4. analyze failures and performance and improve stability, compatibility, and user experience;
5. handle issue reports and support requests that you submit;
6. meet legal, regulatory, audit, tax, and dispute-resolution obligations; and
7. carry out another purpose after obtaining separate consent where required.

If we change the processing purpose and the new purpose is not reasonably compatible with the original one, we will provide notice and obtain consent where required by law.

3. Sharing, processors, and disclosure

We do not sell personal information. We provide necessary information to the following recipients only where needed to supply the service or permitted by law:

We use contracts, security measures, and access controls to require processors to handle information only for agreed purposes. If a merger, division, or asset transfer changes the party responsible for personal information, we will provide notice as required and require the successor to remain bound by this policy.

We may disclose information in response to a lawful request from a judicial or administrative authority, or where legally necessary to protect users, the public, or our legitimate rights and interests.

4. Retention

1. We generally store personal information processed by the service within the People's Republic of China. If a cross-border transfer becomes necessary, we will complete legally required notice, consent, and security procedures.
2. Account information is retained while the account exists. After closure, necessary records are retained for transaction, tax, security, and dispute obligations, then deleted or anonymized.
3. Order, payment, and refund records are retained for periods required by e-commerce, tax, and accounting law.
4. Application logs are generally retained for no more than 180 days from creation. Records needed for a security incident, complaint, or dispute are retained only as long as necessary.
5. Data samples and issue reports you submit are retained only as long as needed to investigate, fix, and verify the issue, then deleted or anonymized unless law requires otherwise or you separately consent.
6. You control the retention of research files and results stored on your computer.

5. Security

We use measures appropriate to the sensitivity of the information, including access restrictions, authentication, transport protection, irreversible password hashing, security logs, backups, and personnel access controls. Access is limited to authorized personnel with a work-related need and confidentiality obligations.

No internet system is absolutely secure. If a personal-information incident may affect your rights, we will take remedial action and provide legally required notice about the incident, likely impact, actions taken or recommended, and contact information.

6. Your rights

Subject to applicable law, you may:

1. access, copy, correct, or supplement your personal information;
2. request deletion where information is no longer necessary, was unlawfully processed, or relates to consent you lawfully withdrew;
3. withdraw consent-based processing without affecting the lawfulness of earlier processing;
4. close your account or request an explanation of our processing rules; and
5. restrict or object to particular processing and exercise other statutory rights.

Use the in-application account features or email legal@oparic.com to make a request. We may verify your identity for security. We will respond within the period required by law; for manifestly unreasonable, repetitive, or rights-infringing requests, we will explain the lawful outcome.

7. Minors

Oparic is primarily intended for users capable of independent research, study, or work. A child under 14 should use the service only after a guardian has read and accepted this policy. We do not intentionally collect information for the purpose of serving children under 14; if we discover collection without guardian consent, we will delete the information or take other legally required action.

8. Third-party services and external links

The application or website may link to third-party sites, payment tools, or software. Information independently processed by a third party is governed by that party's privacy policy, and we do not control its activity. Review those rules before using the third-party service.

9. Policy updates

We may update this policy when features, processing, or law changes and will show the update date on this page. If a change materially affects your rights, we will provide prominent notice through the website, application, or another appropriate channel and obtain consent where required.

10. Contact us

Personal-information handler: Zhixu Technology (Beijing) Co., Ltd.
Email: legal@oparic.com

Contact us with questions, comments, or complaints about this policy or our processing. After verifying identity, we will handle the matter within the period required by law.