Privacy Policy
Effective date: 24 October 2026 · Last updated: 24 October 2026
This Privacy Policy explains what personal data we process when you use findpromax.com ("FindProMax", the "Site", the "Service"), why, and what rights you have. It sits alongside our Terms of Service. We have tried to write it accurately rather than reassuringly: where we collect something, we say so.
1. Who we are
| Controller | JI'AN WANGDONG TECHNOLOGY CO., LTD. (吉安市旺东科技有限公司) |
| Unified Social Credit Code | 91360802MADAP1JBXQ |
| Company type | Limited liability company, incorporated in the People's Republic of China on 31 January 2024 |
| Registered address | Room 806, No.801, Zongshanghui Building, No.9 Jinggangshan Avenue, Jizhou District, Ji'an, Jiangxi 343000, China |
| support@findpromax.com |
Chinese business registration records a company's Chinese name only; "JI'AN WANGDONG TECHNOLOGY CO., LTD." is the English name we use internationally. We have not appointed a Data Protection Officer or an EU/UK representative; privacy questions go to support@findpromax.com.
2. The short version
- You can browse, search and visit tools without an account. We do not run advertising, third-party analytics or tracking cookies.
- If you sign in with Google, we receive only your Google account ID, name, email address and profile picture. We never see your Google password and we request no other Google data.
- Requests and comments you post are public once approved. Every post is checked automatically against our own keyword list and, if it passes that, by OpenAI's moderation service; anything flagged or uncertain is reviewed by a person before it can appear.
- When you click "Visit site", we record that the click happened (which tool, when, page language, the page you came from and an approximate country). We do not store your IP address with it and we do not link it to your account.
- If you want a tool or post a request, we may email you when its status changes. Every email has a one-click unsubscribe link.
- We do not sell your personal information, and we do not share it for advertising.
3. What we process, why, and the legal basis
| What | Why | Legal basis (GDPR/UK GDPR) |
|---|---|---|
| Connection data handled by Cloudflare when your browser loads the Site: IP address, user agent, requested URL, time, approximate location | Delivering pages, blocking abuse and attacks, keeping the Site available | Legitimate interests, Art. 6(1)(f) |
Google sign-in data: Google account ID (sub), name, email address, profile picture URL, and your interface language |
Creating and running your account; showing your name next to your posts and your picture in your own account menu; preventing duplicate accounts and abuse | Performance of a contract, Art. 6(1)(b) |
| Session data: a random session token (we store only a one-way hash of it) and an anti-forgery token | Keeping you signed in for up to 30 days and protecting forms | Performance of a contract, Art. 6(1)(b) |
| Your content: tool requests (title, description), comments, "I want this too" votes, and the time you posted | Publishing what you asked us to publish; counting demand; deciding what to build | Performance of a contract, Art. 6(1)(b) |
| Moderation records: the result of the automatic checks (pass / uncertain / violation, which rule matched, the category scores returned by the moderation service) and any decision by our reviewers, including account suspensions | Keeping prohibited content off the Site (see the Terms) and handling appeals | Legitimate interests, Art. 6(1)(f) |
| Outbound click records: tool, time, page language, referring page on our Site (without query string), approximate country from Cloudflare — no IP address, no account ID | Counting which tools people find useful; ranking; future affiliate tracking | Legitimate interests, Art. 6(1)(f) |
| Email notification data: your email address, language, which request changed status, delivery status, and any unsubscribe choices | Telling you when a request you posted or wanted changes status | Legitimate interests, Art. 6(1)(f); you can object at any time by unsubscribing |
| Support correspondence | Answering you | Legitimate interests, Art. 6(1)(f) |
We collect this data from you, from your browser, and — for sign-in — from Google. We do not buy personal data. We do not use any of it to train machine-learning models.
4. Moderation of what you post
Everything you post (requests and comments) is checked automatically before it can appear:
- Our own keyword list, run on our servers. It looks for spam, solicitation and other content our Terms prohibit, and for personal data such as phone or ID numbers. If it matches, the post goes straight to a human reviewer and is not sent to OpenAI.
- OpenAI's moderation API (
omni-moderation-latest), provided by OpenAI, L.L.C. in the United States. We send it the text of your post only — not your name, email or account ID. OpenAI processes it under its API terms; according to OpenAI's published API data policy, API inputs are not used to train its models by default and may be retained for a limited period for abuse monitoring.
If the keyword list does not match and the moderation service passes it, your post is published. If either flags it or is unsure, or if the moderation service is unavailable, the post is held for a human reviewer, who approves or rejects it; repeated or serious violations can lead to suspension. These checks decide only whether a post is published — they do not produce legal or similarly significant effects. If you think a decision is wrong, write to support@findpromax.com and a person will look at it again.
Approved requests and comments are public and show your Google name (with an initial, not your profile picture). Please do not include personal information in what you post.
5. Cookies and local storage
We set only what the Site needs to work:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
fpm_lang |
Cookie | Remembers the language you chose | 1 year |
fpm_session |
Cookie (HttpOnly, Secure) | Keeps you signed in | 30 days |
fpm_oauth |
Cookie (HttpOnly, Secure) | Protects the Google sign-in step against forgery | Minutes |
| Saved tools | Browser localStorage | Remembers tools you bookmarked, on your device only | Until you clear it |
Cloudflare may set a strictly necessary security cookie to tell bots from people. We use no analytics, advertising or tracking cookies, so we do not show a cookie banner. If that ever changes, we will ask for consent first where the law requires it.
6. Who receives data
| Provider | Role |
|---|---|
| Cloudflare, Inc. | Hosting (Workers), database (D1), image storage (R2), CDN, DNS, domain, security, and forwarding of mail sent to support@findpromax.com |
| Google LLC | Google sign-in. Google's own privacy policy applies to your Google account. |
| OpenAI, L.L.C. | Automatic moderation of the text you post (Section 4) |
| Email delivery provider | When email notifications are switched on, they are sent through Alibaba Cloud enterprise email (Alibaba Cloud's infrastructure) or, as a fallback, Resend, Inc. (United States). They receive your email address and the message content only. |
We do not use any other analytics, advertising, CRM or marketing vendor. We disclose data to authorities only where we are legally required to, and we will seek to narrow or challenge a request that appears overbroad or unlawful to the extent the law applicable to us permits.
7. International transfers
We are a Chinese company and access our administrative systems from the People's Republic of China, for which there is no EU adequacy decision. The Site runs on Cloudflare's global network, so data may be processed in many countries, including the United States. OpenAI and, where used, Resend are in the United States; Alibaba Cloud is used for email only.
Where personal data is transferred to processors in other countries, we rely on the providers' standard data processing terms, including the European Commission's Standard Contractual Clauses where they offer them. We keep what we collect small: no analytics profiles, no advertising identifiers, no IP addresses in click records, and only a hash of your session token. We are subject to PRC law, which in defined circumstances allows authorities to compel disclosure of data; we will respond only to legally binding requests.
8. How long we keep data
| Data | Retention |
|---|---|
| Account (Google ID, name, email, picture) | Until you ask us to delete your account |
| Sessions | 30 days, or until you sign out |
| Your requests, comments and votes | Until you ask us to delete them or your account; rejected posts are removed from public view immediately and their records deleted within 12 months |
| Moderation records and suspension records | 24 months after the decision, to handle appeals and repeat abuse |
| Outbound click records | 24 months; after that only aggregated counts per tool are kept |
| Email delivery records | 12 months |
| Unsubscribe choices | As long as needed to honour them |
| Support correspondence | 24 months |
| Cloudflare connection logs | Per Cloudflare's retention; we do not export or keep them |
9. Deleting your account and data
Email support@findpromax.com from the address you signed in with, with "Delete my account" in the subject line. Within 30 days we will delete your account, sessions, email preferences and votes, and delete or anonymise your requests and comments (if other people have voted on a request, we may keep the request text without your name or picture so their votes still count — tell us if you want it removed completely). We keep only what we must for legal reasons or to prevent a suspended user from returning, and we will tell you what that is. You can also revoke FindProMax's access to your Google account at any time in your Google Account settings under "Third-party connections"; this stops future sign-ins with Google, but it does not end a session that is already open (sign out on the Site for that) and does not delete data we already hold.
10. Your rights
Depending on where you live, you have the right to access, correct, delete, restrict, port and object to the processing of your personal data, to withdraw consent, and to complain to a supervisory authority (in the EU the authority where you live or work; in the UK the ICO). California and other US-state residents have the rights to know, delete and correct, and not to be discriminated against for using them; we do not sell or share personal information, so there is nothing to opt out of. If you are in mainland China, you have the rights under the Personal Information Protection Law to know, decide, access, copy, correct, delete and obtain an explanation of our rules.
To use any right, email support@findpromax.com with "Privacy request" in the subject line. We reply within one month (extendable by two months for complex requests, with notice). We may ask you to confirm the request from the email address on your account. If we refuse a request, you may appeal by replying with "Appeal" in the subject line; we answer appeals within 45 days.
11. Security
All traffic is encrypted with TLS. Session tokens are stored only as hashes. Forms are protected against cross-site request forgery. Access to production systems is limited to the people who need it. If a personal data breach is likely to put your rights at risk, we will notify the competent authority within 72 hours and tell you directly where the risk is high. No system is perfectly secure; if you find a vulnerability, please tell us at support@findpromax.com before disclosing it publicly.
12. Children
The Service is not intended for children under 13, and they may not create an account. If you believe a child under 13 has given us personal data, contact us and we will delete it. Where a higher digital-consent age applies (13–16 in EU member states), younger users should use the Service only with a parent or guardian.
13. Changes
We will update this policy when the Service changes — for example when we add paid plans, new sign-in methods or a new provider. We will change the date at the top, and for material changes we will give notice on the Site before they take effect.
14. Language and contact
This policy is written in English and translated into Chinese. If the versions conflict, the English version governs, unless the mandatory law where you live requires otherwise.
Questions, requests and complaints: support@findpromax.com · JI'AN WANGDONG TECHNOLOGY CO., LTD., Room 806, No.801, Zongshanghui Building, No.9 Jinggangshan Avenue, Jizhou District, Ji'an, Jiangxi 343000, China.