匠人学院隐私政策
Last updated: 16 July 2026
JR Academy Pty Ltd (ABN registered in Australia) ("JR Academy", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use our website (https://jiangren.com.au), our mobile applications, our browser extensions (including but not limited to "考证匠 AI Tutor", "求职匠 Job Hunter", and "UniMate AI Tutor"), and any related services (collectively, the "Services").
This policy applies globally and is designed to comply with applicable data protection laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), thePeople's Republic of China Personal Information Protection Law (PIPL), and other applicable privacy legislation in jurisdictions where we operate.
1. Information We Collect
1.1 Information You Provide to Us
When you register, use our Services, or communicate with us, we may collect:
- Account information: name, email address, phone number, WeChat ID
- Profile information: city, country, educational background, career interests
- Payment information: transaction records (processed by third-party payment providers; we do not store credit card numbers)
- Communications: messages, feedback, and support inquiries you send to us
- User-generated content: forum posts, course reviews, resume data (when using JobPin AI)
1.2 Information Collected Automatically
When you access our Services, we automatically collect:
- Device information: browser type, operating system, device identifiers
- Usage data: pages visited, features used, time spent, click patterns
- Log data: IP address, access timestamps, referring URLs
- Cookies and similar technologies: session cookies, analytics cookies, preference cookies (see Section 8)
1.3 Information Collected by Our Browser Extensions
Our Chrome browser extensions collect additional data only when you actively use their features. We do not passively monitor your browsing activity.
| Extension | Data Collected | Purpose |
|---|---|---|
| 考证匠 AI Tutor | Screenshots and selected text from exam websites (only when you trigger capture); current page URL; session analytics (daily question count, study streaks) | AI-powered exam question analysis and study tracking |
| 求职匠 Job Hunter | Job posting content from supported job sites (Seek, LinkedIn, Indeed, Glassdoor, GradConnection); current page URL | Job description extraction and AI career analysis |
| UniMate AI Tutor（牛小匠） | Screenshots and selected text from learning pages (only when you trigger capture); visible page text; public citation metadata (URL, DOI, title, authors, year); current page URL; usage quota statistics — see Section 1.4 | Step-by-step AI tutoring, citation generation, and essay AI-rate checking |
Important:
- Screenshots and content extraction occur only when you explicitly trigger them (e.g., pressing a keyboard shortcut or clicking a button).
- No background data collection, automatic screenshots, or passive browsing monitoring occurs.
- Extension data is transmitted via HTTPS encryption to our secure servers for AI processing.
- Authentication tokens (JWT) are stored locally in Chrome storage to maintain your login session.
1.4 浏览器插件（UniMate AI Tutor · 留学生学习助手）
本节适用于 UniMate AI Tutor Chrome 扩展（v0.6 起）。插件仅在你主动触发功能时读取和上传页面内容，不做任何后台采集。
我们收集什么（仅在你主动触发时）：
- 截屏图片：仅在你按 Ctrl+Shift+S（Mac: ⌘+Shift+S）全屏截图或 Ctrl+Shift+A 拖拽选区截图时上传，用于本次 AI 解读，不做存档
- 划选文字与页面可见文本：你划选提问或触发步骤教学时，插件提取当前页可见文字供 AI 参考
- 引用生成 metadata：你点击「📚 复制引用」时读取当前页面的公开文献信息（URL、DOI、标题、作者、年份）
- 提问与 AI 回答：保存在你的 JR Academy 账号下，登录网页端可随时查看、删除
- 账号信息：JR Academy 邮箱与用户 ID（验证身份与配额）
- 登录 Cookie（SSO）：仅读写 jiangren.com.au 自有 Cookie，实现 JR 系列插件共享登录态；不读取任何第三方网站 Cookie
- 使用统计：插件版本、功能使用时间戳与配额计数（用于免费配额追踪与体验改进）
我们不收集什么：
- 不后台收集浏览历史（仅在你触发功能时读取当前标签页 URL 作为学习上下文）
- 不收集表单输入、键盘或鼠标活动
- 不收集财务、健康、位置信息或私人通信
- 不向广告商或数据经纪商共享任何数据
数据保留与删除（opt-out）：
- 截屏与提取的页面内容实时处理，AI 分析完成后不在服务器留存
- 提问与回答保存在你的账号下，登录网页端可随时删除；也可发邮件至 privacy@jiangren.com.au 申请彻底删除账号及全部相关数据
- 登录 token 仅存于浏览器 session storage，关闭浏览器即清除
- 随时可在 chrome://extensions 一键停用或卸载插件；停用后即停止一切数据收集，本地存储随卸载由 Chrome 清除
权限用途对照：
| 权限 | 用途 |
|---|---|
| host_permissions（<all_urls>）+ content script | 你可能在任意课程页 / 工具页触发截屏教学与划选提问；Canvas 与 Excel Online 使用 iframe 嵌套，划选与选区截图 UI 需注入子框架。不做后台采集，页面内容仅在你主动触发时读取 |
| activeTab | 快捷键 / 点击图标触发时截取当前可见页面 |
| sidePanel | 主界面（AI 辅导 + AI 率检测） |
| storage | 登录 token（session storage，关浏览器即清）+ 语言 / 主题 / 本地统计 |
| scripting | content script 未注入时，兜底提取当前页可见文本供 AI 参考 |
| cookies | 读写 jiangren.com.au 自有 Cookie，实现 JR 系列插件共享登录态；不读任何第三方站点 Cookie |
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: Providing, maintaining, and improving our educational services, AI tutoring, career tools, and browser extensions
- AI processing: Analysing exam questions, job descriptions, and educational content using artificial intelligence to provide personalised insights and recommendations
- Personalisation: Customising your learning experience, course recommendations, and content preferences
- Communication: Sending service-related notices, responding to inquiries, and providing customer support
- Analytics: Understanding usage patterns to improve our Services and develop new features
- Marketing: Sending promotional materials about our courses and services (with your consent; you may opt out at any time)
- Legal compliance: Meeting our legal obligations and protecting our rights
3. AI Data Processing
Our Services use artificial intelligence (AI) and large language models (LLMs) to provide educational assistance. When you use AI-powered features:
- Content you submit (screenshots, text, questions) is sent to our backend servers for AI processing.
- We may use third-party AI providers (such as OpenAI, Google Gemini, or Anthropic Claude) to process your queries. These providers process data according to their respective privacy policies and data processing agreements.
- AI-generated responses are for educational purposes only and should not be treated as professional advice.
- We do not use your personal data to train AI models. Your submitted content is processed in real-time and is not retained by third-party AI providers for model training purposes.
- Conversation history may be stored on our servers to provide session continuity and study analytics.
4. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Contractual necessity: Processing necessary to provide the Services you have requested (Article 6(1)(b) GDPR)
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our Services, fraud prevention, and security (Article 6(1)(f) GDPR)
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications (Article 6(1)(a) GDPR)
- Legal obligation: Processing necessary to comply with applicable laws (Article 6(1)(c) GDPR)
5. Disclosure of Personal Information
We may share your personal information with:
- Service providers: Third-party vendors who assist us in operating our Services (cloud hosting, payment processing, email delivery, analytics). These providers are contractually bound to protect your data.
- AI processing providers: Third-party AI/LLM providers that process your queries for educational analysis (see Section 3).
- Legal requirements: When required by law, regulation, legal process, or governmental request.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as a business asset.
- With your consent: When you explicitly authorise us to share your information.
We do not sell your personal information to third parties. We do not use or transfer your personal information for purposes unrelated to our Services, and we do not use your data to determine creditworthiness or for lending purposes.
6. International Data Transfers
JR Academy operates globally, and your information may be transferred to and processed in countries other than your country of residence, including Australia, where our primary servers are located.
Where we transfer personal data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA
- Data processing agreements with all third-party service providers
- Compliance with the Australian Privacy Principles for cross-border disclosure (APP 8)
- Compliance with PIPL requirements for cross-border transfers of Chinese residents' data
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
- Account data: Retained for the duration of your account and up to 3 years after account closure
- AI conversation history: Retained for up to 12 months for service improvement and study analytics
- Browser extension data: Screenshots and extracted content are processed in real-time and not permanently stored on our servers after AI analysis is complete
- Usage analytics: Retained in anonymised form for up to 3 years
- Legal/compliance records: Retained for a minimum of 7 years as required by Australian law
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
- Essential cookies: Required for the Services to function (e.g., authentication, session management)
- Analytics cookies: Help us understand how you use our Services (e.g., Google Analytics)
- Preference cookies: Remember your settings such as language and theme
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our Services.
9. Security of Personal Information
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- JWT-based authentication with secure token management
- Role-based access controls for internal systems
- Regular security assessments and monitoring
- Secure cloud infrastructure (AWS) with compliance certifications
While we take all reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Your Rights
10.1 Rights Under Australian Privacy Law
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Complain about a breach of the Australian Privacy Principles
10.2 Rights Under GDPR (EEA/UK Residents)
If you are in the EEA or UK, you have additional rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
10.3 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the right to:
- Know what personal information is collected, used, shared, or sold
- Delete personal information held by us
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising your CCPA rights
10.4 Rights Under PIPL (China Residents)
If you are a resident of the People's Republic of China, you have the right to:
- Know and decide on the processing of your personal information
- Restrict or refuse the processing of your personal information
- Request access, copy, correction, and deletion of your personal information
- Request explanation of processing rules
- Withdraw consent at any time
To exercise any of these rights, please contact us at privacy@jiangren.com.au. We will respond to your request within 30 days (or within the timeframe required by applicable law).
11. Children's Privacy
Our Services are not directed to children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.
12. Third-Party Links and Services
Our Services may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also notify you by email or through our Services. Your continued use of our Services after such changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
- Email: privacy@jiangren.com.au
- General enquiries: hello@jiangren.com.au
- Mail: Privacy Officer, JR Academy Pty Ltd, Level 4, 155 Queen Street, Brisbane QLD 4000, Australia
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority:
- Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
- EU/EEA: Your local Data Protection Authority
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- California: Office of the Attorney General — oag.ca.gov