Privacy Policy

This Privacy Policy explains how Yangtech LLC ("Yangtech", "we", "our") collects, uses, discloses and protects information when you use BallMatrix (the "Service"). By using the Service you agree to the practices described here.

1. Information we collect

• Account data: phone number (used as primary login), optional username, password (stored as a bcrypt hash), and any profile information you provide.
• Usage data: pages viewed, AI report views, AI chat queries, plan interactions, device type, IP address, and approximate region (derived from IP for fraud prevention only).
• Payment data: handled exclusively by our payment processor (Payssion). We receive only a transaction reference and subscription status — never card numbers or bank details.
• Communications: messages you send to customer service via email or phone.

2. How we use your information

• Provide and operate the Service (deliver reports, chat, analytics).
• Authenticate you and protect your account.
• Process subscriptions, billing and refunds.
• Enforce usage quotas and detect abuse.
• Improve the Service through aggregated, non-identifying analytics.
• Comply with applicable legal obligations.

3. How we share information

We do not sell or rent your personal information. We share data only with:

• Service providers who host or operate parts of the Service on our behalf (cloud hosting, SMS delivery via Aliyun, LLM inference via UCloud ModelVerse, payment processing via Payssion). They are contractually limited to processing data only for the purposes we specify.
• Legal authorities where required by law or valid legal process.
• Successors in the event of a merger, acquisition or asset sale, subject to equivalent privacy protection.

4. Data retention

Account data is retained while your account is active. Upon account deletion, identifying information is removed within 30 days; aggregated, de-identified usage data may be retained for analytics. Payment transaction records are retained for 7 years to meet financial reporting obligations.

5. Your rights

Subject to applicable law, you may request to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Export your data in a machine-readable format.
• Object to or restrict processing for marketing or analytics.

To exercise any of these rights, contact Julian@novalinks.cloud. We will respond within 30 days.

6. Security

All traffic is served over HTTPS. Passwords are hashed with bcrypt; SMS one-time codes are short-lived and single-use. Session tokens (JWT) expire after 7 days. Database access is restricted to authorised personnel. No system is fully secure — please use a strong, unique password and notify us immediately if you suspect unauthorised access.

7. International transfers

Yangtech LLC operates from the United States. If you access the Service from outside the US, your information may be transferred to, stored and processed in the US or other jurisdictions where our service providers operate.

8. Children

The Service is not directed at, and we do not knowingly collect personal data from, anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

9. Cookies & local storage

We use browser local storage to keep you signed in (session token). We do not use third-party advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted at this URL with an updated effective date; continued use of the Service after changes take effect constitutes acceptance.

11. Contact