Privacy Policy
呼映 Hooing 隐私政策
版本：2026-08-23生效日期：2026-08-23
本政策说明呼映 Hooing 在提供账号、互动演示、课堂、报告、订阅和客服服务时如何处理及保护个人信息。我们遵循目的明确、最小必要、公开透明和安全保障原则。
一、适用范围与处理者
本政策适用于呼映 Hooing 网站及其提供的相关功能。个人信息处理者为蕉岭县呼映信息技术工作室。你可以通过登录后 Dashboard 右下角微信客服入口，或官网公布的其他联系方式联系我们。
二、我们如何收集和使用个人信息
1. 注册、登录与账号安全
新用户注册时，我们处理手机号、短信验证码记录、昵称和密码哈希；你可以在登录后选择绑定邮箱。为验证身份、防止滥用和保护账号安全，我们还会处理登录时间、IP 地址及其大致城市或地区、浏览器与设备信息、会话标识、安全操作记录和请求日志。
验证码本身有效期为 5 分钟，登录会话默认有效期为 30 天。密码、会话 token 和验证码在服务端以哈希或加密派生形式保存，不保存可直接读取的原始密码。
2. 演示、互动、问卷与报告
为保存和展示你创建的内容，我们处理演示标题、幻灯片内容、题目与选项、背景、品牌设置、讲者备注、上传图片及相关文件信息。
提供实时互动、问卷、Q&A 和报告时，我们处理参与者标识、昵称、头像、回答、问题、点赞、反应、提交状态、参与时间和聚合报告。主持人可以依据产品功能查看、审核、隐藏、删除或导出其有权管理的互动数据。
3. 课堂、考勤和分组
使用课堂功能时，我们处理课堂名称、成员姓名、学号、头像、标签、考勤状态、签到时间、分组、角色和课堂活动记录。
使用位置考勤时，我们会在调用浏览器定位前展示独立告知并取得本次确认。精准经纬度仅用于服务端计算签到距离，不作为长期字段保存；系统会保存距离、定位精度、判定结果、采集或接收时间及必要的防代签风险摘要，用于考勤核验、安全风控和申诉处理。拒绝定位时，可以联系老师采用手动考勤方式。
4. 订阅、支付与发票
购买订阅时，我们处理用户标识、套餐、订单号、金额、支付状态、支付渠道交易标识和权益期限。申请发票时，我们处理购买方类型、发票抬头、单位纳税人识别号、接收邮箱、发票号码及发票文件。
5. 客服、通知与运营安全
你联系客服或提交反馈时，我们处理留言、回复、相关账号和操作记录。为发送系统维护、功能更新、账号、安全和额度通知，我们处理站内通知及其已读、关闭状态。我们不会将注册手机号默认用于商业营销。
三、Cookie 与本地存储
我们使用 HttpOnly 会话 Cookie 维持登录状态，并使用浏览器本地存储保存参与者标识、昵称、头像选择、点赞状态、问卷继续填写状态和界面偏好。这些信息用于保持会话连续性和恢复用户操作，不用于跨站广告跟踪。你可以清理浏览器 Cookie 和站点数据，但清理后可能需要重新登录或无法恢复未完成的本地状态。
四、委托处理、共享与公开展示
为发送短信和邮件、提供云服务器或对象存储、处理支付与发票、完成人机校验，我们可能委托经审查的服务提供商处理实现相关功能所必需的信息。我们会通过合同约束其处理目的、范围、期限和安全义务。
除取得你的授权、为履行你主动请求的服务所必需、依法履行义务或保护合法权益外，我们不会向其他个人信息处理者出售或提供你的个人信息。
根据主持人设置，参与者昵称、头像、回答、问题、点赞或排行榜结果可能在互动大屏、主持端和报告中展示。Hooing 提供匿名、审核、隐藏和删除等产品能力，具体展示范围由活动主持人结合现场规则配置。
五、存储期限
我们仅在实现处理目的所必要的期间保存个人信息，或按照法律法规要求的期限保存：
- 账号资料和用户内容在账号存续及提供服务所需期间保存；用户删除或账号终止后，依法删除或匿名化。
- 验证码有效期为 5 分钟；相关发送、风控和安全记录按排查滥用所需的最短期限保存。
- 登录会话默认 30 天；失效会话和安全审计记录按账号安全、投诉和争议处理所需期限保存。
- 精准经纬度在完成距离计算后不作为长期字段保存；距离、精度和签到结果随考勤记录保存。
- 互动回答、报告和课堂记录在用户保留相关演示或课堂、提供历史报告和导出能力所需期间保存，用户可以通过产品提供的删除能力处理相关记录。
- 订单、支付和发票资料按照适用的税务、会计和交易争议处理期限保存。
六、你的权利
你可以通过 Dashboard 查看或修改昵称、手机号、邮箱和部分账号资料，并删除演示、素材、历史场次或课堂记录。你还可以通过客服申请查阅、复制、更正、补充、删除或限制处理相关个人信息，以及提出账号注销请求。
为保护账号及其他人的权益，我们可能在响应请求前核验身份。法律法规要求继续保存的信息，在法定期限届满前将仅进行必要存储和安全保护。
七、安全保护
我们采取访问控制、权限隔离、密码哈希、会话 token 哈希、CSRF 与同源校验、限流、审计、私有资源授权及备份等措施保护信息。若发生可能影响个人权益的安全事件，我们会依法采取补救措施，并通过合理方式告知受影响的用户。
八、政策更新
本政策发生实质性变化时，我们会通过页面提示、站内通知或其他合理方式告知。依法需要重新确认的，会在继续处理相关信息前取得确认。历史版本和当前版本号应保持可查。
Privacy Policy
Hooing Privacy Policy
Version: August 23, 2026Effective: August 23, 2026
This Policy explains how Hooing processes and protects personal information when providing accounts, interactive presentations, classrooms, reports, subscriptions, and customer support. We follow the principles of specific purpose, minimum necessity, openness, transparency, and security.
1. Scope and Processor
This Policy applies to the Hooing website and its related features. The personal information processor is Jiaoling County Hooing Information Technology Studio. You may contact us through WeChat customer support in the lower-right corner of the Dashboard after login, or through another contact method published on the official website.
2. How We Collect and Use Personal Information
2.1 Registration, Login, and Account Security
When a new user registers, we process the mobile number, SMS verification records, display name, and password hash. You may link an email address after login. To verify identity, prevent abuse, and protect account security, we also process login time, IP address and approximate city or region, browser and device information, session identifiers, security-operation records, and request logs.
A verification code is valid for five minutes, and a login session is valid for 30 days by default. Passwords, session tokens, and verification codes are stored as hashes or cryptographically derived values; we do not store readable plaintext passwords.
2.2 Presentations, Interactions, Surveys, and Reports
To save and display content you create, we process presentation titles, slide content, questions and options, backgrounds, brand settings, speaker notes, uploaded images, and related file information.
When providing live interactions, surveys, Q&A, and reports, we process participant identifiers, names, avatars, responses, questions, likes, reactions, submission status, participation time, and aggregated reports. Hosts may use product features to view, moderate, hide, delete, or export interaction data they are authorized to manage.
2.3 Classrooms, Attendance, and Groups
When you use classroom features, we process classroom names, member names, student numbers, avatars, tags, attendance status, check-in time, groups, roles, and classroom activity records.
For location-based attendance, we provide a separate notice and obtain confirmation before requesting browser location access. Precise latitude and longitude are used only by the server to calculate check-in distance and are not retained as long-term fields. We retain distance, location accuracy, decision result, collection or receipt time, and necessary anti-fraud risk summaries for attendance verification, security controls, and appeals. If location access is declined, the teacher may use manual attendance.
2.4 Subscriptions, Payments, and Invoices
When you purchase a subscription, we process the user identifier, plan, order number, amount, payment status, payment-channel transaction identifier, and benefit term. When you request an invoice, we process the purchaser type, invoice title, taxpayer identification number, recipient email, invoice number, and invoice file.
2.5 Customer Support, Notices, and Operational Security
When you contact customer support or submit feedback, we process the message, reply, related account, and operation records. To send maintenance, feature, account, security, and quota notices, we process in-product notices and their read or dismissed status. We do not use the registered mobile number for commercial marketing by default.
3. Cookies and Local Storage
We use an HttpOnly session cookie to maintain login state. Browser local storage is used for participant identifiers, names, avatar selections, like status, survey-resume state, and interface preferences. This information maintains session continuity and restores user actions; it is not used for cross-site advertising tracking. You may clear browser cookies and site data, but doing so may require you to log in again or may prevent recovery of unfinished local state.
4. Entrusted Processing, Sharing, and Public Display
To send SMS and email, provide cloud servers or object storage, process payments and invoices, and perform human verification, we may entrust reviewed service providers to process information necessary for those functions. Contracts restrict their processing purpose, scope, term, and security obligations.
Except with your authorization, as necessary to perform a service you requested, to fulfill legal obligations, or to protect lawful rights and interests, we do not sell or provide your personal information to another personal information processor.
Depending on the host's settings, participant names, avatars, responses, questions, likes, or leaderboard results may appear on the interactive screen, host interface, and reports. Hooing provides anonymity, moderation, hiding, and deletion controls; the host configures the scope of display according to the event rules.
5. Retention
We retain personal information only for the period necessary to achieve the processing purpose or for the period required by applicable law:
- Account information and user content are retained while the account exists and as needed to provide the service. They are deleted or anonymized as required by law after user deletion or account termination.
- Verification codes are valid for five minutes. Related delivery, risk-control, and security records are retained for the shortest period necessary to investigate abuse.
- Login sessions last 30 days by default. Expired sessions and security audit records are retained as needed for account security, complaints, and dispute handling.
- Precise latitude and longitude are not retained as long-term fields after distance is calculated. Distance, accuracy, and check-in results are retained with attendance records.
- Interaction responses, reports, and classroom records are retained while the user keeps the associated presentation or classroom and as needed to provide history and export features. Users can process relevant records through deletion features in the product.
- Order, payment, and invoice information is retained for periods required by applicable tax, accounting, and transaction-dispute rules.
6. Your Rights
You can use the Dashboard to view or change your display name, mobile number, email address, and certain account information, and to delete presentations, assets, historical sessions, or classroom records. You may also contact customer support to request access, copying, correction, supplementation, deletion, or restriction of relevant personal information, or to request account cancellation.
To protect the account and the rights of others, we may verify your identity before responding. Information that must continue to be retained by law will be stored and protected only as necessary until the statutory period expires.
7. Security
We use access controls, permission isolation, password hashing, session-token hashing, CSRF and same-origin checks, rate limiting, auditing, private-resource authorization, and backups to protect information. If a security incident may affect personal rights and interests, we will take remedial measures and notify affected users by a reasonable method as required by law.
8. Policy Updates
We will notify you through a page prompt, in-product notice, or another reasonable method when this Policy changes materially. Where renewed consent is required by law, we will obtain it before continuing the relevant processing. Historical versions and the current version number should remain available.