Privacy Policy

How GalaxyAI (银河智影) collects, uses, and protects your personal information.

1. Data Controller

The data controller for this Service is:

  • Company name: Bit Transition Network Technology Co., Ltd.(比特跃迁(陕西)网络科技有限公司)
  • Privacy contact email: support@29play.com
  • Data Protection Officer (DPO): Not appointed at this time
  • Service website: https://media.yinhebot.com

2. Personal Information We Collect

Information you provide: account details (name/nickname, email or phone, encrypted credentials), payment-related records (amount, status — not full card numbers), customer-support communications, and other fields required for the Service.

Information collected automatically: IP address, device and browser type, OS, timezone, page views, feature usage, session duration, request logs, and performance/error data.

Optional / feature-related: third-party login profile data when you choose Google or similar sign-in; prompts, reference media, and generation parameters when you use AI features.

3. How We Use Your Information

We use personal information to: provide and maintain the Service (contract); process billing and payments (contract); provide customer support (contract / legitimate interests); send service notices such as billing, security, and policy updates (legitimate interests); prevent fraud and abuse (legitimate interests); improve and analyze the product (legitimate interests); and comply with law (legal obligation). Marketing communications, if any, are based on your consent.

We may aggregate or de-identify data for statistics. Such data cannot reasonably identify you.

4. Cookies & Tracking

We use strictly necessary cookies for login and core features (cannot be disabled), functional cookies for preferences such as language/theme (can be disabled), and analytics cookies for anonymized product improvement (can be disabled). Marketing cookies are used only if enabled. You can adjust preferences via browser settings.

5. Sharing & Disclosure

We do not sell your personal information, including "sale" as defined under laws such as CCPA. We share information only with:

  • Service providers (cloud, CDN, customer support, analytics) under confidentiality obligations
  • Payment processor: card data is handled exclusively by our PCI-DSS compliant processor Waffo Pancake and is not stored on our servers
  • AI model providers, solely to fulfill your generation requests
  • Legal authorities when required by law, court order, or lawful request
  • Parties in a merger or acquisition, with notice and continued protection where required
  • Others only with your prior explicit consent

6. Data Security

We use TLS/HTTPS in transit, encrypt or hash sensitive credentials at rest where applicable, apply least-privilege access controls, and require confidentiality from staff and vendors. We conduct periodic security reviews. If a security incident affecting your rights occurs, we will notify you and relevant regulators as required by law, aiming to do so within 72 hours of becoming aware where feasible. Please keep your account credentials confidential.

7. Retention

Account information: kept while the account is active; deleted or anonymized within 1 year after closure (subject to legal holds). Transaction records: typically retained for 5 years for tax/accounting compliance, then deleted or archived. Support records: typically 2 years. Security audit logs: typically 12 months. AI processing logs: retained for a limited period for abuse prevention and billing, then deleted or anonymized.

8. Your Rights

Depending on applicable law, you may have rights to be informed, access, rectify, erase, restrict processing, data portability, object to certain processing, and withdraw consent. To exercise these rights, contact support@29play.com. We aim to respond within 30 calendar days. You may also lodge a complaint with your local data-protection authority.

9. Marketing & Opt-out

With your consent, we may send product updates or promotional messages. You can opt out via unsubscribe links, account settings, or by emailing us. Opting out does not affect necessary service notices (billing, security, policy changes).

10. International Transfers

Our servers and partners may be located in mainland China and other regions (including where cloud or AI providers operate). Where data is transferred across borders, we use appropriate safeguards such as contractual protections (including Standard Contractual Clauses where applicable) and transfers only to recipients offering adequate protection.

11. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect personal information from children under that age. If you believe a child has provided information to us, contact us immediately and we will delete it promptly.

12. Third-Party Links & Services

The Service may contain links to or integrations with third-party services. This Policy applies only to information we collect directly. We are not responsible for third-party practices; please review their policies before use.

13. Changes to This Policy

For material changes, we will notify you at least 15 days in advance via platform notice or your registered email, and update the "Last updated" date on this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

Privacy and support contacts:

  • Privacy email: support@29play.com
  • Customer support: support@29play.com
  • Company: Bit Transition Network Technology Co., Ltd.(比特跃迁(陕西)网络科技有限公司)
  • Service hours: Monday–Friday 09:00–18:00 (UTC+8)

This Privacy Policy is for informational purposes and does not constitute legal advice.

Questions? Email us at support@29play.com

Last updated: September 23, 2026 · Bit Transition Network Technology Co., Ltd. · https://media.yinhebot.com