处理哪些信息Information processed
根据你使用的功能，系统可能处理账户邮箱和资料、身份验证信息、API Key 关联信息、模型调用及用量记录，以及你提交的提示词、聊天记录、记忆偏好、文件、图片和生成结果。基础设施可能记录 IP 地址、请求时间及错误信息，用于安全和故障排查。Depending on the features you use, the system may process account email and profile information, authentication data, API key associations, model requests and usage records, prompts, conversations, memory preferences, files, images and outputs. Infrastructure may record IP addresses, request times and errors for security and troubleshooting.
处理目的与依据Purposes and legal bases
这些信息用于登录和账户管理、履行你请求的生成服务、保存历史记录及记忆、统计用量、提供支持和保护服务安全。适用时，处理依据包括履行合同、遵守法律义务和经评估的安全运营正当利益；需要同意的可选处理应先征得同意。Information is used for sign-in and account management, providing requested generation services, storing history and memory, metering usage, support and security. Where applicable, legal bases include contract performance, legal obligations and assessed legitimate interests in secure operation. Optional processing that requires consent should occur only with that consent.
第三方处理与跨境传输Providers and international processing
为生成回答或图片，所选模型的上游提供商会接收完成请求所需的提示词、上下文、附件内容和记忆偏好。网站使用阿里云日本区域基础设施与 Cloudflare 网络服务；数据处理可能发生在欧洲经济区以外。To generate a response or image, the selected upstream model provider receives the prompts, context, attachment contents and memory preferences needed for that request. The website uses Alibaba Cloud infrastructure in Japan and Cloudflare network services; processing may occur outside the European Economic Area.
正式支付上线后，支付服务商还将按其隐私政策处理付款和交易信息。当前不应将网站连接到 Paddle 插件理解为已启用网站付款。Once payments launch, payment providers will process payment and transaction information under their own privacy policies. Connecting the website operator’s Paddle plugin does not mean website payments are enabled.
模型提供商名单、其数据保留和训练使用规则，以及适用的跨境传输保障机制，仍需经营者核实补充。不同上游可能采用不同的数据保留和训练使用规则，请在发送内容前了解所选服务的规则。The operator must still verify and document model providers, their retention and training-use rules, and applicable international-transfer safeguards. Upstream providers may have different retention and training-use rules. Review the selected provider’s rules before sending content.
保存、历史与删除Retention, history and deletion
聊天历史、附件、生成图片和记忆偏好会保存在服务器，以支持后续访问。你可在聊天界面删除会话，并单独修改或清空长期记忆。删除一个会话并不自动清空长期记忆。Conversation history, attachments, generated images and memory preferences are stored on the server for later access. You can delete conversations and separately edit or clear long-term memory in the chat interface. Deleting a conversation does not automatically clear long-term memory.
账户、用量、安全日志、法定交易记录与备份可能适用不同的保存期限。具体期限、备份清理周期及上游删除流程尚待核实，不作即时删除所有副本的承诺。Accounts, usage records, security logs, legally required transaction records and backups may have different retention periods. Specific periods, backup deletion cycles and upstream deletion procedures still need verification; instantaneous deletion of all copies is not promised.
浏览器存储与安全Browser storage and security
网站可能使用登录状态及界面偏好所需的浏览器存储。我们使用 HTTPS 和账户访问控制；这些措施不构成绝对安全保证。新增非必要追踪工具时，应根据适用规则提供相应说明与选择。The website may use browser storage for sign-in state and interface preferences. HTTPS and account access controls are used, but do not guarantee absolute security. Any addition of non-essential tracking should include appropriate disclosures and choices under applicable rules.
你的权利与联系方式Your rights and contact
在适用法律规定的条件下，你可以请求访问、更正、删除、限制处理、反对处理或获取可携带的数据；基于同意的处理可撤回同意。你也可向所在地区的数据保护监管机构投诉，在卢森堡可联系 CNPD。Subject to applicable law, you may request access, correction, deletion, restriction, objection or data portability, and withdraw consent for consent-based processing. You may also complain to your data protection authority, including the CNPD in Luxembourg.
提出请求时，请提供用于定位账户的必要资料，不要发送密码或完整 API Key。可通过本页的客服入口提交隐私相关请求。Provide only information needed to identify your account when making a request; do not send passwords or full API keys. Privacy requests can be submitted through the support link on this page.