Privacy Policy
How we collect, use, and protect personal information. Plain English where we can manage it; legal precision where we can't.
1 · Introduction
QiYuan Labs LLC ("QiYuan Labs," "we," "us," or "our") operates the website at qiyuanlabs.ai and provides software development, AI integration, e-commerce engineering, and technical advisory services. We respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it. It applies to information collected through our website, our project inquiry forms, and the course of our engagements with clients.
2 · Information we collect
Information you give us
- Contact and project inquiry information: name, email address, company name, role, and any details you include when you submit our contact form or email us.
- Client engagement information: during a project, we may receive business, technical, and operational information needed to deliver the work. This is handled under a written services agreement and (where applicable) a Non-Disclosure Agreement.
- Billing information: if you become a client, our payment processors (Stripe, Mercury, or wire-transfer originators) collect the financial details necessary to bill you. We do not store full payment card numbers on our servers.
Information collected automatically
- Log and usage data: our hosting provider records standard request data (IP address, user agent, referring page, timestamps) for security and operational purposes.
- Cookies: see Cookies and analytics below.
3 · How we use information
We use the information we collect to:
- Respond to project inquiries and conduct discovery conversations.
- Deliver the services you have engaged us for under a written agreement.
- Send invoices and process payments.
- Send transactional emails (project updates, contract documents, scheduling).
- Operate, maintain, and improve our website and services.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with our legal obligations.
We do not use your information for behavioral advertising. We do not sell your personal information.
4 · When we share information
We share personal information only in the following circumstances:
- Service providers we use to run our business: hosting (Cloudflare), email (Google Workspace), accounting and payments (Stripe, Mercury), customer-relationship and document tools (e.g., Notion, Linear, Slack). Each provider is bound by contract and processes information only to deliver their service to us.
- Subcontracted engineers: where we engage trusted senior engineers on your project, they are bound by our contractor agreements, which include confidentiality and data-handling obligations equivalent to our own.
- Legal and safety: when required by valid legal process, or where necessary to protect the rights, property, or safety of QiYuan Labs, our clients, or the public.
- Business transfers: if we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to the standard protections of this Policy.
5 · Cookies and analytics
Our website uses a minimal set of cookies and similar technologies:
- Strictly necessary cookies for security and basic site operation.
- Privacy-respecting analytics to understand traffic patterns. We use aggregated, anonymized metrics; we do not use cross-site tracking or advertising pixels.
You can disable cookies through your browser settings. Disabling strictly necessary cookies may affect site functionality.
6 · Data security
We take reasonable and appropriate measures to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include encryption in transit (TLS), encryption at rest where supported by our service providers, access controls based on least privilege, and periodic review of permissions. No system is fully secure; we cannot guarantee absolute security, but we will notify affected individuals and regulators as required by law in the event of a breach.
7 · Data retention
We retain personal information for as long as necessary to provide our services and fulfill the purposes set out in this Policy, including for legal, accounting, and reporting obligations. Project inquiry information that does not result in an engagement is typically deleted within 24 months. Client engagement records are retained per the applicable services agreement and, where required, our tax and legal retention obligations (generally up to 7 years).
8 · Your rights (GDPR & CCPA)
Depending on where you live, you may have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you.
- Correction: request that we correct inaccurate information.
- Deletion: request that we delete your personal information (subject to legal retention requirements).
- Portability: request a machine-readable copy of information you have provided to us.
- Objection and restriction: object to certain processing, or request that we restrict it.
- Withdrawal of consent: where processing is based on consent, withdraw that consent at any time.
- Opt-out of sale or sharing (CCPA): we do not sell personal information, and we do not share it for cross-context behavioral advertising.
- Non-discrimination: we will not discriminate against you for exercising any of these rights.
To exercise these rights, email privacy@qiyuanlabs.ai. We will verify your identity before responding and will respond within the timeframes required by applicable law.
9 · Children's privacy
Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us at privacy@qiyuanlabs.ai and we will delete it.
10 · International data transfers
QiYuan Labs is based in the United States. If you access our website or engage us from outside the United States, your information will be transferred to, processed, and stored in the United States and in the locations of our service providers. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms to protect personal information transferred from the European Economic Area, the United Kingdom, or Switzerland.
11 · Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. For material changes, we will give reasonable advance notice (for example, by email to active clients).
12 · Contact us
Questions about this Privacy Policy or about how we handle personal information? Reach us at:
QiYuan Labs LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States
Email: privacy@qiyuanlabs.ai