Compliance & Data

Data Categories

WeJot classifies data into four categories for export, deletion, and consent withdrawal:

• Account (ACCOUNT): phone number, email, third-party identifiers, password hash, nickname, avatar
• Survey (SURVEY): questions, options, logic, styling
• Response (RESPONSE): submitted answers and response times
• AI (AI): conversation inputs, generated results, and analysis reports

Data Storage

All data is stored within Mainland China using the existing deployment, with no overseas nodes. Data from overseas users is also stored in Mainland China and legalized through privacy-policy disclosure and explicit consent. SCC / PIPL cross-border mechanisms are not enabled in this phase.

Privacy Consent & Cookies

• Registration and login require accepting the privacy policy before submission; consent is versioned.
• The official website  and H5 provide cookie management with “necessary” and “marketing/analytics” categories. Only necessary cookies are enabled by default.
• Marketing/analytics cookies require explicit consent and are stored in consent_prefs.

Data Subject Rights

You can exercise the following rights in the “Privacy & Data” page:

• Export data: export account, survey, response, and AI records.
• Delete account: delete or anonymize data after double confirmation.
• Withdraw consent: disable marketing analytics and stop non-essential data use immediately.
• Privacy preferences: update marketing cookies, notifications, and data-usage preferences.

Legal Terms

The privacy policy and terms of service are available in Chinese and English and are subject to final legal review before release. Full DPA / SCC, SOC 2, and ISO 27001 are out of scope for this phase.