隐私政策 Privacy Policy

1. 概述 Overview

AIYuan.AI（"我们"、"我们的"或"公司"）致力于保护您的隐私。本隐私政策说明了我们如何收集、使用、披露和保护您在使用园园AI服务（"服务"）时的信息。使用我们的服务即表示您同意本隐私政策中描述的数据处理做法。

AIYuan.AI (“we”, “our”, or “the Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use AIYuan.AI services (the “Service”). By using our Service, you consent to the data practices described in this policy.

2. 我们收集的信息 Information We Collect

2.1 您提供的信息 Information You Provide

• 账户信息 Account Information: 电子邮件地址、昵称 / Email address, nickname
• 付款信息 Payment Information: 账单信息（由 Stripe 安全处理，我们不存储信用卡号码）/ Billing details (securely processed by Stripe; we do not store credit card numbers)
• AI 对话内容 AI Conversation Data: 您与 AI 助手的所有对话内容，包括您发送的消息和 AI 的回复 / All conversations with our AI assistant, including messages you send and AI responses
• 量化策略代码 Strategy Code: 您在量化实验室中编写或 AI 生成的策略代码 / Strategy code you write or AI generates in the Quant Lab
• 量化云运行数据 Quant Cloud Operating Data: 仅当您开通量化云服务时产生，详见下方 2.4 / Only if you subscribe to the Quant Cloud service; see 2.4 below
• 通信数据 Communication Data: 您与我们联系时提供的信息 / Information you provide when contacting us

2.2 自动收集的信息 Automatically Collected Information

• 设备信息 Device Information: 设备类型、操作系统、浏览器类型 / Device type, OS, browser type
• 日志数据 Log Data: IP 地址、访问时间、User-Agent（用于安全防护和攻击检测）/ IP address, access time, User-Agent (for security and attack detection)
• AI 使用量数据 AI Usage Data: AI 功能的使用频率和使用量 / Frequency and volume of AI feature usage
• Cookies: 用于身份验证和服务体验的必要 Cookie / Essential cookies for authentication and service experience

2.3 移动应用 Mobile App

当您使用我们的 iOS / Android 应用时，除上述信息外，我们还会收集：

When you use our iOS / Android app, in addition to the above, we also collect:

• 推送通知令牌 Push Notification Token: 由 APNs / FCM 颁发，用于向您的设备发送通知（可在系统设置中关闭）/ Issued by APNs / FCM for sending notifications to your device (can be disabled in system settings)
• 应用版本和平台 App Version & Platform: 用于调试和兼容性 / For debugging and compatibility
• 订阅状态 Subscription Status: 由 Apple App Store / Google Play 提供的订阅凭证，经 RevenueCat 同步 / Subscription receipts from Apple App Store / Google Play, synced via RevenueCat

我们不收集 We do NOT collect: 位置数据、联系人、相册、麦克风、相机（除非您主动上传）、健康数据、广告标识符 (IDFA) / Location, contacts, photo library, microphone, camera (unless you actively upload), health data, advertising identifiers (IDFA)

2.4 量化云服务数据 Quant Cloud Service Data

本节仅适用于开通了「量化云」服务的用户。使用量化云时，您的策略运行在为您分配的专属云主机上，并在您本人登录的券商会话内代表您与您授权的券商交互。为向您本人提供策略托管、跨设备展示、对账与故障恢复，我们会收集并存储：

This section applies only to users who subscribe to the Quant Cloud service. When you use the Quant Cloud, your strategies run on a dedicated cloud host allocated to you and interact with your authorized broker on your behalf, within a broker session that you yourself have logged into. To provide you with strategy hosting, cross-device display, reconciliation, and failure recovery, we collect and store:

• 运行账本 Run Ledger: 您的策略产生的成交记录与持仓记录 / Trade fills and position records generated by your strategies
• 账户资产快照 Account Snapshots: 您券商账户的资产与净值快照，用于界面展示与对账 / Snapshots of your brokerage account assets and equity, used for display and reconciliation
• 策略配置与参数 Strategy Configuration: 您启用的策略、参数与运行状态 / The strategies you enable, their parameters, and their run status
• 运行与告警日志 Operating & Alert Logs: 云主机与券商会话的连接状态、告警和运维记录 / Connection status, alerts, and operational records for your cloud host and broker session
• 券商会话凭据与验证器种子 Broker Session Credentials & Authenticator Seeds: 您在面板提交的券商应用凭据或双重验证种子，用于配置您的专属云主机；提交后会经我们的数据库短暂中转（通常在 60 秒内由您的云主机取走并从数据库中清除），此后仅存放在您的专属云主机上，界面不会回读展示 / Broker application credentials or two-factor seeds you submit in the panel, used to configure your dedicated cloud host; after submission they pass through our database only in transit (normally fetched by your cloud host and cleared from the database within 60 seconds), after which they reside solely on your dedicated cloud host and are never read back into the interface

用途限定：上述数据仅用于向您本人提供量化云的策略托管与展示服务（包括跨设备查看、对账、故障恢复与向您发送告警）。我们不将其用于其他目的，不出售、不出租、不交易，不向其他用户提供，也不用于训练 AI 模型。您的专属云主机部署在美国的 AWS 云区域，相关跨境说明见第 11 节。

Purpose limitation: This data is used solely to provide the Quant Cloud hosting and display service to you (including cross-device viewing, reconciliation, failure recovery, and sending you alerts). We do not use it for any other purpose, do not sell, rent, or trade it, do not make it available to other users, and do not use it to train AI models. Your dedicated cloud host is deployed in an AWS region in the United States; see Section 11 for cross-border details.

如何终止：您可以随时在面板中停止或删除策略、并退订量化云服务；停止后我们不再收集新的运行数据。如需删除已产生的数据，请使用账户删除功能或联系 privacy@aiyuan.ai 提出删除请求（见第 8、9 节）。

How to stop it: You can stop or delete your strategies and cancel the Quant Cloud service at any time from the panel; once stopped, we collect no new operating data. To have data already collected deleted, use the account deletion function or contact privacy@aiyuan.ai with a deletion request (see Sections 8 and 9).

2.5 我们不收集的信息 Information We Do Not Collect

我们不会主动收集、也不设置任何功能用于记录您的券商登录密码或交易密码——这些凭据由您直接输入运行在您专属云主机内的券商官方程序，不写入我们的日志或数据库（上述 2.4 所列的凭据中转情形除外）。除 2.4 所述的量化云运行数据外，我们不收集您在其他券商或其他账户中的持仓、成交或资产信息。

We do not actively collect, and we build no feature to record, your brokerage login password or trading password — you enter those directly into the broker's official application running inside your own dedicated cloud host, and they are not written to our logs or database (except for the credential transit described in 2.4 above). Apart from the Quant Cloud operating data described in 2.4, we do not collect holdings, trades, or asset information from any other brokerage or account of yours.

3. AI 对话与社群消息数据处理 AI Conversation & Community Message Data Processing

3.1 数据存储 Data Storage

您与 AI 助手的对话内容存储在我们的安全数据库中（由 Supabase 托管），用于维持对话上下文、改善服务质量和确保安全。

Your conversations with the AI assistant are stored in our secure database (hosted by Supabase) to maintain conversation context, improve service quality, and ensure security.

3.2 第三方 AI 处理 Third-Party AI Processing

您的对话内容会发送至第三方 AI 模型提供商进行处理。这些提供商会根据其各自的隐私政策和数据处理协议处理您的数据。我们不会使用您的对话数据来训练 AI 模型。

Your conversation data is sent to third-party AI model providers for processing. These providers process your data according to their respective privacy policies and data processing agreements. We do not use your conversation data to train AI models.

3.3 管理员访问 Administrator Access

我们的管理员可能在以下有限情况下访问用户对话数据：安全事件调查、服务质量保障、回应用户投诉或支持请求、遵守法律法规要求。我们不会日常浏览用户对话内容，且所有管理员访问均有审计记录。

Our administrators may access user conversation data in the following limited circumstances: security incident investigation, service quality assurance, responding to user complaints or support requests, and compliance with legal requirements. We do not routinely browse user conversations, and all administrator access is audit-logged.

3.4 社群消息内容审核 Community Message Content Moderation

当您在社群（Community）频道发送任何消息时，该消息内容会在发布前被发送至 第三方 AI 服务提供商 / third-party AI service provider 进行自动内容合规审核。该审核仅用于识别违规内容（包括但不限于色情、暴力、仇恨言论、违法明示、严重人身侮辱、诈骗等），以维护社群安全，符合 Apple App Store 审核指南 1.2 关于用户生成内容（UGC）的要求。

When you send any message in our Community channels, the message content is sent to 第三方 AI 服务提供商 / third-party AI service provider for automated content compliance moderation prior to publication. This moderation is solely used to identify objectionable content (including but not limited to pornography, violence, hate speech, explicit illegal activity, severe personal insults, and fraud), in order to maintain a safe community, in accordance with Apple App Store Review Guideline 1.2 for User-Generated Content (UGC).

关于此处理的关键事实：

• 消息内容仅用于审核判断，不会被 Google 用于训练 AI 模型 / Message content is used solely for moderation decisions and is not used by Google to train AI models
• 审核结果分三档：通过（消息正常发布）、灰区（发布但管理员复核）、违规（拒绝发布并提示用户修改）/ Three verdicts: Pass (published), Gray-area (published with admin review), Reject (blocked with user prompt to revise)
• 如您认为消息被误判，可发邮件至 support@aiyuan.ai 申诉 / If you believe your message was incorrectly flagged, contact support@aiyuan.ai to appeal
• 若您不希望消息被发送给第三方 AI 审核，请勿在社群频道发布消息（仅影响社群功能，不影响其他服务） / If you do not wish your messages to be sent to third-party AI for moderation, please do not post in Community channels (this only affects Community functionality, not other services)
• 社群消息存储与管理员访问规则与上述 3.1 / 3.3 一致 / Community message storage and administrator access follow the same rules as sections 3.1 and 3.3 above

4. 信息使用 How We Use Information

我们使用收集的信息用于 / We use collected information to:

• 提供、维护和改进我们的服务 / Provide, maintain, and improve our Service
• 处理交易和发送相关通知 / Process transactions and send related notifications
• 监控 AI 使用量和管理用户额度 / Monitor AI usage and manage user quotas
• 检测、调查和防止欺诈、滥用和安全威胁 / Detect, investigate, and prevent fraud, abuse, and security threats
• 个性化和改善您的 AI 对话体验 / Personalize and improve your AI conversation experience
• 运行、展示并对账您在量化云中的策略，并就运行异常向您发送告警（限量化云用户，见 2.4）/ Run, display, and reconcile your Quant Cloud strategies and alert you to operating anomalies (Quant Cloud users only; see 2.4)
• 遵守法律义务 / Comply with legal obligations

5. 信息共享 Information Sharing

我们不会出售、出租或交易您的个人信息。我们可能在以下情况下共享您的信息：

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

5.1 服务提供商 Service Providers

• AI 服务提供商 AI Service Providers: 用于处理 AI 对话及社群消息内容审核 / For AI conversation processing and Community message content moderation
• Stripe: 网页版订阅支付处理 / Web subscription payment processing
• Apple App Store (In-App Purchase): iOS 订阅与支付处理（由 Apple 按其隐私政策处理账单信息）/ iOS subscription and payment processing (handled by Apple per its own privacy policy)
• Google Play Billing: Android 订阅与支付处理（由 Google 按其隐私政策处理账单信息）/ Android subscription and payment processing (handled by Google per its own privacy policy)
• RevenueCat: 跨平台订阅管理与同步（接收来自 Apple / Google 的订阅事件以同步到您的账户）/ Cross-platform subscription management (receives subscription events from Apple / Google to sync your account)
• 云基础设施 Cloud Infrastructure: 数据存储、网站托管和计算服务（含为量化云用户提供专属云主机的服务商）/ Data storage, website hosting, and computing services (including the provider of the dedicated cloud hosts used by Quant Cloud users)
• 邮件服务 Email Services: 发送交易通知和策略信号 / Sending transactional notifications and strategy signals
• 推送通知 Push Notifications: iOS APNs / Android FCM 用于发送应用内通知 / iOS APNs / Android FCM for in-app notifications
• 安全服务 Security Services: 人机验证和安全防护 / Human verification and security protection
• 数据服务 Data Services: 专业级市场数据 / Professional-grade market data

5.2 法律要求 Legal Requirements

如果法律要求或我们真诚地认为必要，我们可能会披露您的信息以遵守法律义务、保护公司权利、防止犯罪或保护用户安全。

We may disclose your information if required by law or if we believe in good faith that such action is necessary to comply with legal obligations, protect Company rights, prevent crime, or protect user safety.

6. 数据安全 Data Security

我们采取以下安全措施保护您的信息 / We implement the following security measures to protect your information:

• 数据传输和存储的加密 / Encryption of data in transit and at rest
• 人机验证和速率限制防护 / Human verification and rate limiting
• 多层认证和访问控制 / Multi-layer authentication and access control
• 数据库行级安全保护 / Database row-level security
• 定期安全审计 / Regular security audits

然而，没有任何互联网传输或电子存储方法是100%安全的。我们无法保证绝对安全。

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Cookie 政策 Cookie Policy

• 必要 Cookies / Essential Cookies: 用户认证和会话管理 / User authentication and session management
• 功能 Cookies / Functional Cookies: 记住您的偏好设置 / Remember your preferences

您可以通过浏览器设置管理 Cookie 偏好。禁用必要 Cookie 可能会影响服务功能。

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect service functionality.

8. 数据保留 Data Retention

我们会在您拥有账户期间保留您的信息。AI 对话记录将在您的账户活跃期间持续保留。当您删除账户时，我们将在 30 天内删除或匿名化您的个人信息和对话数据，除非法律要求我们保留。

We retain your information for the duration of your account. AI conversation records are maintained while your account is active. When you delete your account, we will delete or anonymize your personal information and conversation data within 30 days, unless legally required to retain it.

9. 您的权利 Your Rights

根据适用法律，您有权 / Under applicable law, you have the right to:

• 访问 Access: 请求我们持有的关于您的个人信息的副本 / Request a copy of your personal information
• 更正 Correction: 请求更正不准确的信息 / Request correction of inaccurate information
• 删除 Deletion: 请求删除您的个人信息和对话数据 / Request deletion of your personal information and conversation data
• 导出 Portability: 请求以结构化格式接收您的数据 / Request your data in a structured format
• 撤回同意 Withdraw Consent: 随时撤回先前给予的同意 / Withdraw previously given consent at any time

要行使这些权利，请联系 privacy@aiyuan.ai

To exercise these rights, contact privacy@aiyuan.ai

10. 儿童隐私 Children's Privacy

我们的服务不面向 18 岁以下的个人。我们不会故意收集儿童的个人信息。

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. 国际数据传输 International Data Transfers

您的信息可能会被传输到加拿大以外的服务器进行处理，包括位于美国的 Google Cloud、Vercel 服务器与我们的数据库；如您开通量化云服务，为您分配的专属云主机同样位于美国的 AWS 云区域，2.4 所述的量化云运行数据在该处产生并存储。我们确保所有数据传输符合适用的数据保护法规。

Your information may be transferred to servers outside Canada for processing, including Google Cloud and Vercel servers and our database in the United States; if you subscribe to the Quant Cloud service, the dedicated cloud host allocated to you is likewise located in an AWS region in the United States, where the Quant Cloud operating data described in 2.4 is generated and stored. We ensure all data transfers comply with applicable data protection regulations.

12. 加拿大隐私法 Canadian Privacy Law (PIPEDA)

作为一家在加拿大安大略省运营的公司，我们遵守《个人信息保护和电子文件法》（PIPEDA）。根据 PIPEDA，您享有知情权、同意权、访问权、更正权、撤回同意权和投诉权。我们的隐私官负责确保合规。

As a company operating in Ontario, Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to know, consent, access, correct, withdraw consent, and file complaints. Our Privacy Officer ensures compliance.

隐私官联系方式 Privacy Officer: privacy@aiyuan.ai

13. 加拿大反垃圾邮件法 CASL Compliance

我们遵守加拿大反垃圾邮件法（CASL）。我们仅在获得您的同意后发送商业电子信息，每封邮件都包含发件人标识、联系信息和取消订阅链接。您可以随时退订，我们将在 10 个工作日内处理。

We comply with Canada's Anti-Spam Legislation (CASL). We only send commercial electronic messages with your consent. Every email includes sender identification, contact information, and an unsubscribe link. You can opt out at any time, and we process requests within 10 business days.

14. 加州居民权利 California Residents (CCPA)

如果您是加州居民，您有权了解我们收集的个人信息、请求删除、以及不因行使隐私权而受到歧视。我们不出售加州消费者的个人信息。

If you are a California resident, you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your privacy rights. We do not sell California consumers' personal information.

15. 隐私政策变更 Policy Changes

我们可能会更新本隐私政策。重大变更将通过电子邮件或服务内通知告知您。继续使用服务即表示接受更新后的政策。

We may update this Privacy Policy. Material changes will be communicated via email or in-service notification. Continued use of the Service constitutes acceptance of the updated policy.

16. 联系方式 Contact Us