隱私政策

贏樓助手 Pro（下稱「本服務」）· 最後更新：2026-08-18

1. 我們收集什麼資料

我們的伺服器只儲存您的登入與帳號資料（電郵、邀請碼、會員級別、已用／可用額度），以及為保障帳號安全所記錄的最少元數據（例如登入 IP、操作類型統計），用於防濫用與額度核算。伺服器不會以明文或可讀形式儲存您的客戶業務內容；基礎版與專業版的客戶資料會以零知識端到端加密形式自動備份至伺服器（詳見下一節），但伺服器僅持有無法解讀的密文，沒有您的密碼即無法讀取任何內容，我們亦無從存取。

客戶業務資料：您在本服務中建立的房源檔案、客戶檔案、聊天記錄與分析結果。體驗版這些資料僅儲存於您自己的瀏覽器本地（localStorage），不做雲端備份；基礎版與專業版則會自動以端到端加密（AES-GCM，密鑰由您的密碼經 PBKDF2 衍生）備份至伺服器，以保障您換設備、清快取後仍可恢復。無論哪種方案，上傳至伺服器的客戶資料一律為無法解讀的密文，沒有您的密碼即無法讀取任何客戶內容，我們（開發者）亦無從存取。

加密密碼：用於解鎖雲端備份的密碼僅暫存於您瀏覽器當前的工作階段記憶體，既不會上傳到我們的伺服器，也不會寫入瀏覽器本地儲存；因此若您忘記該密碼，備份將無法恢復，請務必牢記。

第三方 AI（高級大模型）：當您使用 AI 功能時，您輸入的對話與提示內容會傳送至我們接入的第三方高級 AI 大模型（例如 ChatGPT、OpenAI 等主流模型）以生成回覆。請知悉該等內容會由對應的 AI 服務供應商處理，並受其各自的私隱條款規管；您儲存在本地或加密備份中的客戶資料，不會自動發送給 AI，僅在您主動將其納入對話時才會一併送出。

推播通知：若您啟用瀏覽器推播，我們會保存一組標準的推播訂閱資訊（用於向您發送提醒），其中不包含您的任何客戶業務內容。

1. Our servers store ONLY your login/account information (email, invite code, plan, quota) and minimal security metadata (e.g., login IP, action counts for abuse prevention and quota). Your business data (listings, clients, chats, analyses) is stored on your own device by default for the Trial plan. For Basic and Pro plans it is automatically end-to-end encrypted (AES-GCM, key derived from your password via PBKDF2) in your browser and backed up to our server, so you can recover after switching devices or clearing cache. In all plans, what reaches our server is only ciphertext it cannot decrypt without your password, and we (the developer) cannot access it either. The backup password lives only in your browser's session memory — never uploaded, never written to local storage — so a forgotten password means the backup cannot be recovered. When you use AI features, your conversation/prompt content is sent to a third-party advanced AI model (e.g., ChatGPT, OpenAI and similar leading models) to generate replies and is governed by that provider's own privacy terms; your stored business data is not automatically shared with the AI and is sent only when you explicitly include it in a prompt. If you enable push notifications, we store a standard push subscription (no business content).

2. 我們「不」做什麼

我們不以明文將您的客戶業務資料儲存於伺服器；不出售、出租或與任何第三方共享您的客戶資料。若您啟用雲端備份，該備份一律為端到端加密，伺服器僅持有無法解讀的密文，我們無從得知其內容。

2. What we do NOT do: we never store your business data on our servers in plaintext; we do not sell, rent, or share your client data with third parties. If you enable cloud backup, it is always end-to-end encrypted — our server holds only ciphertext it cannot read.

3. 您的權利

您可以隨時在本機匯出或清除您的客戶資料；如需刪除帳號，請聯絡客服，我們會將您的帳戶（電郵、額度等）從伺服器移除。

3. Your rights: you may export or clear your local data at any time; to delete your account, contact customer service and we will remove your server-side account records.

4. 資料安全

您的客戶資料留存在您自己的設備。帳號以邀請碼驗證，請勿向他人洩露您的邀請碼；使用公用或共用設備後請清除瀏覽器資料。

4. Security: your business data stays on your device. Accounts are verified by invite code — keep your code secret and clear browser data on shared devices.

5. 聯絡我們

如有任何私隱疑問，請聯絡客服。

5. Contact: for any privacy questions, please contact customer service.
English version（英文版）

Privacy Policy — Winlou Pro

We collect only account data (email, invite code, plan, quota) and minimal usage metadata (login IP, action counts). Your business data — listings, client profiles, chat logs and analyses — is stored on your own device by default for the Trial plan. For Basic and Pro plans it is automatically end-to-end encrypted (AES-GCM, key derived via PBKDF2) in your browser and backed up to our server; our server holds only ciphertext it cannot read without your password, and we (the developer) cannot access it either. The backup password is kept only in your browser's session memory — never uploaded or stored locally — so a forgotten password means the backup is unrecoverable. When you use AI features, your conversation content is sent to a third-party advanced AI model (e.g., ChatGPT, OpenAI and similar) to generate replies and is governed by that provider's privacy terms; your stored business data is not automatically shared with the AI.

We do not sell, rent, or share your client data with third parties; any cloud backup you enable is end-to-end encrypted and unreadable by our server. You may export or clear your local data at any time; contact customer service to delete your server-side account. Accounts are verified by invite code — keep it secret.