How Bold Echo collects, uses, and protects your information. We take your privacy seriously.
Effective: June 20, 2026 · Last updated: June 20, 2026
Bold Echo is a platform operated by Shaanxi Boxiao Network Technology Co., Ltd., a company duly organized under the laws of the People's Republic of China, with its registered address at West Xian New District, Jinghe New City, Chongwen Town, Chongwen Jiayuan Community, Zone 3, Building 2, Unit 1, Room 802, XiAn, 710000, China. Throughout this Privacy Policy, references to Bold Echo, we, us, or our refer to Shaanxi Boxiao Network Technology Co., Ltd. and its affiliates.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our website, applications, products, and services (collectively, the Service). By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, you must discontinue use of the Service immediately.
We are committed to protecting your privacy rights and handling your personal data in a transparent, fair, and lawful manner. This policy is designed to comply with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) where applicable, and the Personal Information Protection Law of the People's Republic of China (PIPL).
We encourage you to read this policy in full. If you have any questions, you may contact our Data Protection Officer using the details provided in the Contact Information section at the bottom of this page.
We collect several categories of information to provide, maintain, and improve the Service. The types of personal data we process depend on how you interact with Bold Echo. We collect information both directly from you and automatically through your use of the Service.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, username, display name, account ID | Account creation |
| Contact Data | Email address, phone number, mailing address, billing address | Communication |
| Technical Data | IP address, browser type and version, operating system, device identifiers, screen resolution, time zone setting | Service delivery |
| Usage Data | Pages visited, time spent on pages, clickstream data, navigation paths, feature interaction logs, referring URLs, search queries | Analytics |
| Transaction Data | Purchase history, subscription tier, payment method type (last four digits only), billing ZIP code, transaction timestamps | Billing |
| Content Data | User-generated content, uploaded files, comments, messages, survey responses, feedback submissions, support tickets | Service provision |
| Preference Data | Language preferences, notification settings, theme choices, communication opt-ins, marketing consent | Personalization |
| Inferred Data | Interest profiles derived from usage patterns, approximate location from IP address, engagement likelihood scores | Improvement |
We also collect information from the following sources:
We use the personal information we collect for the following purposes, always grounded in a lawful basis and with appropriate safeguards:
You can manage your communication preferences in your account settings at any time. Every marketing email we send includes an unsubscribe link in the footer. Transactional and service-related communications (such as account verification, security notices, and billing confirmations) are essential to the Service and cannot be opted out of while you maintain an active account.
Depending on your jurisdiction and the nature of the processing activity, we rely on one or more of the following legal bases to process your personal data:
For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar requirements, we ensure that a valid legal basis exists before processing your personal data. If you would like more information about the specific legal basis applicable to a particular processing activity, please contact us using the details in the Contact Information section.
We do not sell your personal information in the traditional sense of the word. However, we may share your data with the following categories of recipients, always under appropriate contractual safeguards, and only to the extent necessary for the purposes described in this policy:
Bold Echo does not sell, rent, or trade your personal information to third parties for monetary consideration. We do not share personal data with advertisers or data brokers for their own commercial use. If this practice changes in the future, we will update this policy and provide you with notice and the opportunity to opt out as required by applicable law.
We use cookies, web beacons, pixels, local storage, session storage, and similar tracking technologies to collect information about your interactions with the Service. These technologies help us provide core functionality, remember your preferences, analyze usage patterns, and deliver relevant content.
| Cookie Type | Function | Duration |
|---|---|---|
| Essential | Required for the Service to function. Enable authentication, security, session management, and accessibility features. The Service cannot operate properly without these cookies. | Session / Persistent |
| Functional | Remember your preferences and choices — language selection, theme settings, region, and customized interface elements. Enhance your experience by personalizing interactions. | Persistent |
| Analytics | Collect aggregated, anonymized data about how visitors use the Service — pages visited, time on site, feature engagement, error encounters, and navigation flows. We use this data to improve the Service. | Persistent |
| Marketing | Track browsing activity across sites to deliver relevant advertisements and measure campaign performance. We use these sparingly and only with your consent where legally required. | Persistent |
You have control over cookie settings through the following mechanisms:
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined by the nature of the data and the purposes of processing:
When determining retention periods, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorized use or disclosure; the purposes for processing; whether those purposes can be achieved by other means; and applicable legal requirements. After the applicable retention period expires, personal data is securely deleted, destroyed, or irreversibly anonymized.
We implement and maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information. Our security program is built on industry best practices and is continuously reviewed and improved:
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. We encourage you to take steps to protect your own information: use strong, unique passwords; enable multi-factor authentication where available; keep your devices and software updated; and notify us immediately if you suspect unauthorized access to your account.
Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to honoring these rights and responding to your requests promptly and without discrimination. The rights available to you may include:
You have the right to know what personal information we collect, use, disclose, and sell (we do not sell). You may request a detailed report of the categories and specific pieces of personal data we hold about you.
You may request a copy of your personal data in a structured, commonly used, and machine-readable format. We provide this free of charge, with additional copies subject to a reasonable administrative fee.
You may request deletion of your personal information, subject to certain exceptions (such as ongoing legal obligations, active transactions, security needs, or freedom of expression). We will honor verifiable requests within the timeframes required by law.
You may request that we rectify inaccurate or incomplete personal information we hold about you. You can also update much of your information directly through your account settings at any time.
You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. As stated above, Bold Echo does not sell personal data, so this right is inherently respected.
In certain circumstances, you may request that we limit the processing of your personal data — for example, while we verify the accuracy of contested data or assess an objection to processing.
You may request that we transfer your personal data directly to another organization, where technically feasible. We provide exports in standard, machine-readable formats (JSON, CSV).
You may object to processing based on legitimate interests, including profiling and direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you additional rights beyond those described above:
To submit a data rights request, email us at toni@boldecho.mom with the subject line Data Rights Request. Please include your full name, the email address associated with your account, and a clear description of the right you wish to exercise. We will verify your identity before processing your request — typically by confirming your control of the email address on file. We aim to respond to all valid requests within 30 days, with a possible 30-day extension for complex requests (we will notify you if an extension is needed). If we are unable to fulfill your request, we will explain the reasons in writing.
Bold Echo is not directed to, and we do not knowingly collect or solicit personal information from, children under the age of 16. If you are under 16 years of age, please do not use or access the Service, create an account, or provide any personal information to us.
If we learn that we have collected personal information from a child under the age of 16 without verified parental consent, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at toni@boldecho.mom. We will work with you to address the situation and remove the information promptly.
We comply with the Children's Online Privacy Protection Act (COPPA) in the United States, the Age-Appropriate Design Code in the United Kingdom, and equivalent child protection laws in all jurisdictions where we operate. We do not target advertising to children, profile children, or sell children's data under any circumstances.
For users between the ages of 16 and 18 (or the age of majority in your jurisdiction), we recommend that you review this Privacy Policy with a parent or guardian to ensure you understand how your data is handled.
Bold Echo is operated by Shaanxi Boxiao Network Technology Co., Ltd., headquartered in China, and we use cloud infrastructure distributed across multiple geographic regions. Your personal information may be transferred to, stored, and processed in countries other than the country in which you reside — including China, the United States, Singapore, the European Union, and other jurisdictions where we or our service providers operate.
When we transfer personal data across international borders, we implement appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy and applicable data protection laws:
By using the Service, you acknowledge that your information may be transferred to and processed in jurisdictions where data protection laws may differ from those in your country of residence. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy, regardless of where it is processed.
The Service may contain links to third-party websites, plug-ins, applications, and services that are not owned or controlled by Bold Echo. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices, content, or security.
When you interact with a third-party service through our platform, we may share certain information with that service to facilitate the integration — for example, when you authenticate using a social login provider or connect a third-party tool to your account. The use of your information by those third parties is governed by their respective privacy policies, which we encourage you to read carefully.
Examples of third-party services that may be integrated with or linked from Bold Echo include:
We carefully evaluate all third-party service providers before engagement, assessing their security posture, privacy practices, and compliance with applicable data protection laws. We enter into data processing agreements with all vendors that process personal data on our behalf. However, we cannot accept responsibility or liability for third-party services that you choose to interact with independently of our platform.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, applicable laws, or for other operational, legal, or regulatory reasons. When we make changes, we will revise the Last updated date at the top of this page and take additional steps as required by applicable law.
The types of changes we may make and how we notify you depend on the nature and significance of the update:
Your continued use of the Service after the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the changes, subject to any consent requirements under applicable law. If you do not agree with the updated policy, you must discontinue use of the Service and may request deletion of your account and data.
We maintain a public changelog of material revisions to this policy, available upon request. To receive automatic notifications of policy updates, we recommend subscribing to our service announcements mailing list (which can be managed in your account settings).
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to reach out. We are committed to addressing your privacy concerns in a timely and transparent manner.
You may also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or the place of the alleged infringement. We would appreciate the opportunity to address your concerns directly before you approach a regulatory body, and we ask that you contact us first so we can attempt to resolve the matter.
Our Data Protection team is available to assist you with any privacy-related inquiries, data rights requests, or concerns about how your information is handled.