第三方 AI（高級大模型）：當您使用 AI 功能時，您輸入的對話與提示內容會傳送至我們接入的第三方高級 AI 大模型（由設於中國內地及海外的國內外模型共同提供）以生成回覆。請知悉該等內容會由對應的 AI 服務供應商處理，並受其各自的私隱條款規管；您儲存在本地或加密備份中的客戶資料，不會自動發送給 AI，僅在您主動將其納入對話時才會一併送出。
1. Our servers store ONLY your login/account information (email, invite code, plan, quota) and minimal security metadata (e.g., login IP, action counts for abuse prevention and quota). Your business data (listings, clients, chats, analyses) is stored on your own device by default for the Trial plan. For Basic and Pro plans it is automatically end-to-end encrypted (AES-GCM, key derived from your password via PBKDF2) in your browser and backed up to our server, so you can recover after switching devices or clearing cache. In all plans, what reaches our server is only ciphertext it cannot decrypt without your password, and we (the developer) cannot access it either. The backup password lives only in your browser's session memory — never uploaded, never written to local storage — so a forgotten password means the backup cannot be recovered. When you use AI features, your conversation/prompt content is sent to a third-party advanced AI model (provided jointly by domestic and overseas AI models based in mainland China and abroad) to generate replies and is governed by that provider's own privacy terms; your stored business data is not automatically shared with the AI and is sent only when you explicitly include it in a prompt. If you enable push notifications, we store a standard push subscription (no business content).
2. What we do NOT do: we never store your business data on our servers in plaintext; we do not sell, rent, or share your client data with third parties. If you enable cloud backup, it is always end-to-end encrypted — our server holds only ciphertext it cannot read.
3. Your rights: you may export or clear your local data at any time; to delete your account, contact customer service and we will remove your server-side account records.
4. Security: your business data stays on your device. Accounts are verified by invite code — keep your code secret and clear browser data on shared devices.
5. 聯絡我們
如有任何私隱疑問，請聯絡客服。
5. Contact: for any privacy questions, please contact customer service.
跨境傳輸：為提供 AI 功能，您主動納入對話的內容會傳送至我們接入的第三方高級 AI 大模型（部份模型由設於中國內地的服務供應商提供，構成向中國內地的跨境傳輸）。該等傳輸僅限您主動提供的對話內容，您的客戶業務資料（備份密文）不會自動傳送給 AI。我們已與相關供應商簽訂處理協議，要求其依合同與法律保護資料；對於傳輸至中國內地的個人資料，我們依香港《個人資料（私隱）條例》採取合約保障措施（包括與供應商簽訂資料處理協議及合約條款，並進行盡職審查），確保資料於境外獲適當保護。
次處理者（sub-processors）：本服務使用的次處理者包括：雲端主機／資料庫服務供應商、電郵發送服務（Brevo）、國內外第三方 AI 模型供應商（由設於中國內地及海外的服務共同提供）。我們會在變更次處理者前於本頁更新清單。
6. Retention, cross-border transfer & data controller: Server-side account and backup data are retained while your account is active; upon account deletion or your erasure request we delete or anonymise the relevant server data within 30 days (unless law requires longer). For AI features, content you actively include in a conversation is sent to third-party advanced AI models (some provided by vendors established in mainland China, constituting a cross-border transfer to mainland China); only such active conversation content is transferred, and your business backup ciphertext is never sent to AI automatically. We have data-processing agreements with these vendors; for personal data transferred to mainland China we apply contractual safeguards under Hong Kong's Personal Data (Privacy) Ordinance (including data processing agreements and contractual clauses with our vendors, together with due diligence) to ensure appropriate protection abroad. Sub-processors include our cloud hosting/database provider, email sender (Brevo), and third-party AI model providers (based in mainland China and abroad); we update this list before changes. In the event of a personal data breach we will proactively notify affected users and, where appropriate, the Privacy Commissioner for Personal Data, Hong Kong, as soon as reasonably practicable (generally within 72 hours of becoming aware). The service is provided by an individual (not operated as a company, so no Business Registration Number / BRN applies). The data controller is ZHIYUAN SONG (a natural person); for privacy requests or to exercise access/rectification/erasure rights, contact As272750@outlook.com.
English version（英文版）
Privacy Policy — Winlou Pro
We collect only account data (email, invite code, plan, quota) and minimal usage metadata (login IP, action counts). Your business data — listings, client profiles, chat logs and analyses — is stored on your own device by default for the Trial plan. For Basic and Pro plans it is automatically end-to-end encrypted (AES-GCM, key derived via PBKDF2) in your browser and backed up to our server; our server holds only ciphertext it cannot read without your password, and we (the developer) cannot access it either. The backup password is kept only in your browser's session memory — never uploaded or stored locally — so a forgotten password means the backup is unrecoverable. When you use AI features, your conversation content is sent to a third-party advanced AI model (provided jointly by domestic and overseas AI models based in mainland China and abroad) to generate replies and is governed by that provider's privacy terms; your stored business data is not automatically shared with the AI.
We do not sell, rent, or share your client data with third parties. For Basic and Pro plans your business data is automatically backed up to our server in end-to-end encrypted (zero-knowledge) form — you may disable cloud backup at any time in Settings; the Trial plan stores data only on your own device with no cloud backup. In all plans any backup is end-to-end encrypted and unreadable by our server. You may export or clear your local data at any time; contact customer service to delete your server-side account. Accounts are verified by invite code — keep it secret.