匠人学院隐私政策
Last updated: 16 March 2026
JR Academy Pty Ltd (ABN registered in Australia) ("JR Academy", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use our website (https://jiangren.com.au), our mobile applications, our browser extensions (including but not limited to "考证匠 AI Tutor", "求职匠 Job Hunter", and "牛小匠 Uni AI Tutor"), and any related services (collectively, the "Services").
This policy applies globally and is designed to comply with applicable data protection laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), thePeople's Republic of China Personal Information Protection Law (PIPL), and other applicable privacy legislation in jurisdictions where we operate.
1. Information We Collect
1.1 Information You Provide to Us
When you register, use our Services, or communicate with us, we may collect:
- Account information: name, email address, phone number, WeChat ID
- Profile information: city, country, educational background, career interests
- Payment information: transaction records (processed by third-party payment providers; we do not store credit card numbers)
- Communications: messages, feedback, and support inquiries you send to us
- User-generated content: forum posts, course reviews, resume data (when using JobPin AI)
1.2 Information Collected Automatically
When you access our Services, we automatically collect:
- Device information: browser type, operating system, device identifiers
- Usage data: pages visited, features used, time spent, click patterns
- Log data: IP address, access timestamps, referring URLs
- Cookies and similar technologies: session cookies, analytics cookies, preference cookies (see Section 8)
1.3 Information Collected by Our Browser Extensions
Our Chrome browser extensions collect additional data only when you actively use their features. We do not passively monitor your browsing activity.
| Extension | Data Collected | Purpose |
|---|
| 考证匠 AI Tutor | Screenshots and selected text from exam websites (only when you trigger capture); current page URL; session analytics (daily question count, study streaks) | AI-powered exam question analysis and study tracking |
| 求职匠 Job Hunter | Job posting content from supported job sites (Seek, LinkedIn, Indeed, Glassdoor, GradConnection); current page URL | Job description extraction and AI career analysis |
| 牛小匠 Uni AI Tutor | Course-related content from university websites; current page URL | University course AI tutoring assistance |
Important:
- Screenshots and content extraction occur only when you explicitly trigger them (e.g., pressing a keyboard shortcut or clicking a button).
- No background data collection, automatic screenshots, or passive browsing monitoring occurs.
- Extension data is transmitted via HTTPS encryption to our secure servers for AI processing.
- Authentication tokens (JWT) are stored locally in Chrome storage to maintain your login session.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: Providing, maintaining, and improving our educational services, AI tutoring, career tools, and browser extensions
- AI processing: Analysing exam questions, job descriptions, and educational content using artificial intelligence to provide personalised insights and recommendations
- Personalisation: Customising your learning experience, course recommendations, and content preferences
- Communication: Sending service-related notices, responding to inquiries, and providing customer support
- Analytics: Understanding usage patterns to improve our Services and develop new features
- Marketing: Sending promotional materials about our courses and services (with your consent; you may opt out at any time)
- Legal compliance: Meeting our legal obligations and protecting our rights
3. AI Data Processing
Our Services use artificial intelligence (AI) and large language models (LLMs) to provide educational assistance. When you use AI-powered features:
- Content you submit (screenshots, text, questions) is sent to our backend servers for AI processing.
- We may use third-party AI providers (such as OpenAI, Google Gemini, or Anthropic Claude) to process your queries. These providers process data according to their respective privacy policies and data processing agreements.
- AI-generated responses are for educational purposes only and should not be treated as professional advice.
- We do not use your personal data to train AI models. Your submitted content is processed in real-time and is not retained by third-party AI providers for model training purposes.
- Conversation history may be stored on our servers to provide session continuity and study analytics.
4. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Contractual necessity: Processing necessary to provide the Services you have requested (Article 6(1)(b) GDPR)
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our Services, fraud prevention, and security (Article 6(1)(f) GDPR)
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications (Article 6(1)(a) GDPR)
- Legal obligation: Processing necessary to comply with applicable laws (Article 6(1)(c) GDPR)
5. Disclosure of Personal Information
We may share your personal information with:
- Service providers: Third-party vendors who assist us in operating our Services (cloud hosting, payment processing, email delivery, analytics). These providers are contractually bound to protect your data.
- AI processing providers: Third-party AI/LLM providers that process your queries for educational analysis (see Section 3).
- Legal requirements: When required by law, regulation, legal process, or governmental request.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as a business asset.
- With your consent: When you explicitly authorise us to share your information.
We do not sell your personal information to third parties. We do not use or transfer your personal information for purposes unrelated to our Services, and we do not use your data to determine creditworthiness or for lending purposes.
6. International Data Transfers
JR Academy operates globally, and your information may be transferred to and processed in countries other than your country of residence, including Australia, where our primary servers are located.
Where we transfer personal data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA
- Data processing agreements with all third-party service providers
- Compliance with the Australian Privacy Principles for cross-border disclosure (APP 8)
- Compliance with PIPL requirements for cross-border transfers of Chinese residents' data
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
- Account data: Retained for the duration of your account and up to 3 years after account closure
- AI conversation history: Retained for up to 12 months for service improvement and study analytics
- Browser extension data: Screenshots and extracted content are processed in real-time and not permanently stored on our servers after AI analysis is complete
- Usage analytics: Retained in anonymised form for up to 3 years
- Legal/compliance records: Retained for a minimum of 7 years as required by Australian law
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
- Essential cookies: Required for the Services to function (e.g., authentication, session management)
- Analytics cookies: Help us understand how you use our Services (e.g., Google Analytics)
- Preference cookies: Remember your settings such as language and theme
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our Services.
9. Security of Personal Information
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- JWT-based authentication with secure token management
- Role-based access controls for internal systems
- Regular security assessments and monitoring
- Secure cloud infrastructure (AWS) with compliance certifications
While we take all reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Your Rights
10.1 Rights Under Australian Privacy Law
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Complain about a breach of the Australian Privacy Principles
10.2 Rights Under GDPR (EEA/UK Residents)
If you are in the EEA or UK, you have additional rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
10.3 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete personal information held by us
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your CCPA rights
10.4 Rights Under PIPL (China Residents)
If you are a resident of the People's Republic of China, you have the right to:
- Know and decide on the processing of your personal information
- Restrict or refuse the processing of your personal information
- Request access, copy, correction, and deletion of your personal information
- Request explanation of processing rules
- Withdraw consent at any time
To exercise any of these rights, please contact us at privacy@jiangren.com.au. We will respond to your request within 30 days (or within the timeframe required by applicable law).
11. Children's Privacy
Our Services are not directed to children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.
12. Third-Party Links and Services
Our Services may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also notify you by email or through our Services. Your continued use of our Services after such changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:
- Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
- EU/EEA: Your local Data Protection Authority
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- California: Office of the Attorney General — oag.ca.gov
