SmartBoard Privacy Policy

This policy explains how SmartBoard processes personal information and user content for its website, console, and dashboard services.

Updated: November 4, 2026

SmartBoard is operated under the ShuXiu brand. We process information only as needed to provide account registration, dashboard editing, data access, publishing, and support. This policy applies to shuxiutech.com, the SmartBoard console, and its online services. Third-party systems connected by users remain subject to their own practices.

Information we process and why

  • Account and sign-in: registration email (also used as the login account), optional nickname, password verification data, account status, and membership type, for account creation, authentication, account management, and security. Passwords are stored as hashes, not readable plaintext.
  • Email verification and security records: verification-code hashes, email address, purpose, send and expiry times, failed attempts, and request IP, to verify email ownership, limit abuse, reset passwords, and investigate security events. Codes are used for verification, not marketing.
  • Projects and dashboards: project names, notes, canvas and component settings, published versions, thumbnails, templates, and content submitted by users, to save, edit, preview, publish, and restore projects.
  • Uploads and data-source settings: user-uploaded backgrounds, thumbnails, and other supported files, plus configured endpoint URLs, request parameters, mappings, and credentials. Data-source credentials are encrypted on the server. Do not put unnecessary personal information, passwords, or keys in dashboards, public share links, or API responses.
  • Necessary activity records: timestamps, account identifiers, target objects, and necessary request-origin details for sign-in, registration, project and template management, uploads, and administrative actions, for account security, troubleshooting, and audit.
  • Browser storage: local or session storage may hold a sign-in token, interface preferences, and temporary editing state to maintain sign-in and usability. Signing out or clearing browser storage removes the locally stored sign-in state. Do not stay signed in on a public device.

Processing, storage, and service providers

Account, project, dashboard, and necessary security data are stored in the SmartBoard server-side SQLite database; uploaded files are stored in a server directory. The current online service is hosted in Singapore, so submitted information is transmitted to and stored in that server region. Static website assets may be delivered through Cloudflare's static-asset CDN; account, project, and API requests are handled by the SmartBoard origin under the current deployment architecture. Verification emails are sent through Tencent Exmail SMTP.

These providers process requests only as needed for infrastructure, static asset delivery, or email delivery. They may handle network and security information under their own terms; please consult their privacy notices. We do not sell personal information or use dashboard data for advertising profiles.

For users in mainland China, hosting the service in Singapore means personal information may be provided outside mainland China. Where applicable law requires it, we will provide the required notice, complete applicable cross-border procedures, and obtain separate consent. Publishing this policy alone does not constitute separate consent or complete other cross-border compliance steps.

Third-party APIs and user content

Users may configure their own REST and other data APIs. To provide data-source management and dashboard functions, the service may call configured endpoints or display their responses. Users must have the right to submit and use this content and should avoid providing personal, sensitive, or confidential information beyond what the dashboard requires. The operators of connected third-party systems control their own practices; this policy does not replace or guarantee them.

Retention and deletion

We retain information only for as long as needed for the purposes in this policy, service delivery, dispute handling, and applicable legal requirements. Actual periods may vary by account status, project use, backups, and legal duties; we do not claim one fixed retention period for every data category. After verifying an account closure or deletion request, we will delete or anonymize relevant information as required. Information that must be retained by law, or that can only be removed after backup rotation, will be handled after the applicable period ends.

Your choices and rights

You may manage profile information and projects in account settings where those controls are available, or email smartboard@shuxiutech.com to request access, correction, deletion, withdrawal of consent, or account closure. We may verify your relationship to the account to protect it and will respond within applicable legal time limits. Closing an account may make associated projects, dashboards, and online services unavailable. Export or back up content you need before submitting a request.

Security and minors

We use measures appropriate to the service, including access controls, password hashing, session revocation, credential encryption, upload validation, and security auditing. No internet transmission or storage can be guaranteed absolutely secure. If a personal information incident requires notice under applicable law, we will take remedial steps and provide notices as required.

SmartBoard is intended for business users with the legal capacity to use the service. Minors should use it under a guardian's guidance. A guardian who believes a minor submitted personal information without appropriate authorization may contact us at the email above.

Changes and contact

We may update this policy when services, processing practices, or applicable rules change, and will show the updated date on this page. For material changes affecting your rights, we will provide additional notice or obtain consent where required.

For privacy questions, contact smartboard@shuxiutech.com. ShuXiu is the operating brand used on this website; the legal name of the operating entity and applicable contact details should be added to this policy and registration flow before the service is formally offered to users.