隐私政策 Privacy Policy

1. 概述 Overview

AIYuan.AI（"我们"、"我们的"或"公司"）致力于保护您的隐私。本隐私政策说明了我们如何收集、使用、披露和保护您在使用园园AI服务（"服务"）时的信息。使用我们的服务即表示您同意本隐私政策中描述的数据处理做法。

AIYuan.AI (“we”, “our”, or “the Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use AIYuan.AI services (the “Service”). By using our Service, you consent to the data practices described in this policy.

2. 我们收集的信息 Information We Collect

2.1 您提供的信息 Information You Provide

• 账户信息 Account Information: 电子邮件地址、昵称 / Email address, nickname
• 付款信息 Payment Information: 账单信息（由 Stripe 安全处理，我们不存储信用卡号码）/ Billing details (securely processed by Stripe; we do not store credit card numbers)
• AI 对话内容 AI Conversation Data: 您与 AI 助手的所有对话内容，包括您发送的消息和 AI 的回复 / All conversations with our AI assistant, including messages you send and AI responses
• 量化策略代码 Strategy Code: 您在量化实验室中编写或 AI 生成的策略代码 / Strategy code you write or AI generates in the Quant Lab
• 通信数据 Communication Data: 您与我们联系时提供的信息 / Information you provide when contacting us

2.2 自动收集的信息 Automatically Collected Information

• 设备信息 Device Information: 设备类型、操作系统、浏览器类型 / Device type, OS, browser type
• 日志数据 Log Data: IP 地址、访问时间、User-Agent（用于安全防护和攻击检测）/ IP address, access time, User-Agent (for security and attack detection)
• AI 使用量数据 AI Usage Data: AI 功能的使用频率和使用量 / Frequency and volume of AI feature usage
• Cookies: 用于身份验证和服务体验的必要 Cookie / Essential cookies for authentication and service experience

2.3 移动应用 Mobile App

当您使用我们的 iOS / Android 应用时，除上述信息外，我们还会收集：

When you use our iOS / Android app, in addition to the above, we also collect:

• 推送通知令牌 Push Notification Token: 由 APNs / FCM 颁发，用于向您的设备发送通知（可在系统设置中关闭）/ Issued by APNs / FCM for sending notifications to your device (can be disabled in system settings)
• 应用版本和平台 App Version & Platform: 用于调试和兼容性 / For debugging and compatibility
• 订阅状态 Subscription Status: 由 Apple App Store / Google Play 提供的订阅凭证，经 RevenueCat 同步 / Subscription receipts from Apple App Store / Google Play, synced via RevenueCat

我们不收集 We do NOT collect: 位置数据、联系人、相册、麦克风、相机（除非您主动上传）、健康数据、广告标识符 (IDFA) / Location, contacts, photo library, microphone, camera (unless you actively upload), health data, advertising identifiers (IDFA)

2.4 我们不收集的信息 Information We Do Not Collect

我们不收集、存储或访问您的证券账户信息、交易密码或任何敏感的金融凭证。

We do not collect, store, or access your brokerage account information, trading passwords, or any sensitive financial credentials.

3. AI 对话与社群消息数据处理 AI Conversation & Community Message Data Processing

3.1 数据存储 Data Storage

您与 AI 助手的对话内容存储在我们的安全数据库中（由 Supabase 托管），用于维持对话上下文、改善服务质量和确保安全。

Your conversations with the AI assistant are stored in our secure database (hosted by Supabase) to maintain conversation context, improve service quality, and ensure security.

3.2 第三方 AI 处理 Third-Party AI Processing

您的对话内容会发送至第三方 AI 模型提供商进行处理。这些提供商会根据其各自的隐私政策和数据处理协议处理您的数据。我们不会使用您的对话数据来训练 AI 模型。

Your conversation data is sent to third-party AI model providers for processing. These providers process your data according to their respective privacy policies and data processing agreements. We do not use your conversation data to train AI models.

3.3 管理员访问 Administrator Access

我们的管理员可能在以下有限情况下访问用户对话数据：安全事件调查、服务质量保障、回应用户投诉或支持请求、遵守法律法规要求。我们不会日常浏览用户对话内容，且所有管理员访问均有审计记录。

Our administrators may access user conversation data in the following limited circumstances: security incident investigation, service quality assurance, responding to user complaints or support requests, and compliance with legal requirements. We do not routinely browse user conversations, and all administrator access is audit-logged.

3.4 社群消息内容审核 Community Message Content Moderation

当您在社群（Community）频道发送任何消息时，该消息内容会在发布前被发送至 第三方 AI 服务提供商 / third-party AI service provider 进行自动内容合规审核。该审核仅用于识别违规内容（包括但不限于色情、暴力、仇恨言论、违法明示、严重人身侮辱、诈骗等），以维护社群安全，符合 Apple App Store 审核指南 1.2 关于用户生成内容（UGC）的要求。

When you send any message in our Community channels, the message content is sent to 第三方 AI 服务提供商 / third-party AI service provider for automated content compliance moderation prior to publication. This moderation is solely used to identify objectionable content (including but not limited to pornography, violence, hate speech, explicit illegal activity, severe personal insults, and fraud), in order to maintain a safe community, in accordance with Apple App Store Review Guideline 1.2 for User-Generated Content (UGC).

关于此处理的关键事实：

• 消息内容仅用于审核判断，不会被 Google 用于训练 AI 模型 / Message content is used solely for moderation decisions and is not used by Google to train AI models
• 审核结果分三档：通过（消息正常发布）、灰区（发布但管理员复核）、违规（拒绝发布并提示用户修改）/ Three verdicts: Pass (published), Gray-area (published with admin review), Reject (blocked with user prompt to revise)
• 如您认为消息被误判，可发邮件至 support@aiyuan.ai 申诉 / If you believe your message was incorrectly flagged, contact support@aiyuan.ai to appeal
• 若您不希望消息被发送给第三方 AI 审核，请勿在社群频道发布消息（仅影响社群功能，不影响其他服务） / If you do not wish your messages to be sent to third-party AI for moderation, please do not post in Community channels (this only affects Community functionality, not other services)
• 社群消息存储与管理员访问规则与上述 3.1 / 3.3 一致 / Community message storage and administrator access follow the same rules as sections 3.1 and 3.3 above

4. 信息使用 How We Use Information

我们使用收集的信息用于 / We use collected information to:

• 提供、维护和改进我们的服务 / Provide, maintain, and improve our Service
• 处理交易和发送相关通知 / Process transactions and send related notifications
• 监控 AI 使用量和管理用户额度 / Monitor AI usage and manage user quotas
• 检测、调查和防止欺诈、滥用和安全威胁 / Detect, investigate, and prevent fraud, abuse, and security threats
• 个性化和改善您的 AI 对话体验 / Personalize and improve your AI conversation experience
• 遵守法律义务 / Comply with legal obligations

5. 信息共享 Information Sharing

我们不会出售、出租或交易您的个人信息。我们可能在以下情况下共享您的信息：

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

5.1 服务提供商 Service Providers

• AI 服务提供商 AI Service Providers: 用于处理 AI 对话及社群消息内容审核 / For AI conversation processing and Community message content moderation
• Stripe: 网页版订阅支付处理 / Web subscription payment processing
• Apple App Store (In-App Purchase): iOS 订阅与支付处理（由 Apple 按其隐私政策处理账单信息）/ iOS subscription and payment processing (handled by Apple per its own privacy policy)
• Google Play Billing: Android 订阅与支付处理（由 Google 按其隐私政策处理账单信息）/ Android subscription and payment processing (handled by Google per its own privacy policy)
• RevenueCat: 跨平台订阅管理与同步（接收来自 Apple / Google 的订阅事件以同步到您的账户）/ Cross-platform subscription management (receives subscription events from Apple / Google to sync your account)
• 云基础设施 Cloud Infrastructure: 数据存储、网站托管和计算服务 / Data storage, website hosting, and computing services
• 邮件服务 Email Services: 发送交易通知和策略信号 / Sending transactional notifications and strategy signals
• 推送通知 Push Notifications: iOS APNs / Android FCM 用于发送应用内通知 / iOS APNs / Android FCM for in-app notifications
• 安全服务 Security Services: 人机验证和安全防护 / Human verification and security protection
• 数据服务 Data Services: 专业级市场数据 / Professional-grade market data

5.2 法律要求 Legal Requirements

如果法律要求或我们真诚地认为必要，我们可能会披露您的信息以遵守法律义务、保护公司权利、防止犯罪或保护用户安全。

We may disclose your information if required by law or if we believe in good faith that such action is necessary to comply with legal obligations, protect Company rights, prevent crime, or protect user safety.

6. 数据安全 Data Security

我们采取以下安全措施保护您的信息 / We implement the following security measures to protect your information:

• 数据传输和存储的加密 / Encryption of data in transit and at rest
• 人机验证和速率限制防护 / Human verification and rate limiting
• 多层认证和访问控制 / Multi-layer authentication and access control
• 数据库行级安全保护 / Database row-level security
• 定期安全审计 / Regular security audits

然而，没有任何互联网传输或电子存储方法是100%安全的。我们无法保证绝对安全。

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Cookie 政策 Cookie Policy

• 必要 Cookies / Essential Cookies: 用户认证和会话管理 / User authentication and session management
• 功能 Cookies / Functional Cookies: 记住您的偏好设置 / Remember your preferences

您可以通过浏览器设置管理 Cookie 偏好。禁用必要 Cookie 可能会影响服务功能。

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect service functionality.

8. 数据保留 Data Retention

我们会在您拥有账户期间保留您的信息。AI 对话记录将在您的账户活跃期间持续保留。当您删除账户时，我们将在 30 天内删除或匿名化您的个人信息和对话数据，除非法律要求我们保留。

We retain your information for the duration of your account. AI conversation records are maintained while your account is active. When you delete your account, we will delete or anonymize your personal information and conversation data within 30 days, unless legally required to retain it.

9. 您的权利 Your Rights

根据适用法律，您有权 / Under applicable law, you have the right to:

• 访问 Access: 请求我们持有的关于您的个人信息的副本 / Request a copy of your personal information
• 更正 Correction: 请求更正不准确的信息 / Request correction of inaccurate information
• 删除 Deletion: 请求删除您的个人信息和对话数据 / Request deletion of your personal information and conversation data
• 导出 Portability: 请求以结构化格式接收您的数据 / Request your data in a structured format
• 撤回同意 Withdraw Consent: 随时撤回先前给予的同意 / Withdraw previously given consent at any time

要行使这些权利，请联系 privacy@aiyuan.ai

To exercise these rights, contact privacy@aiyuan.ai

10. 儿童隐私 Children's Privacy

我们的服务不面向 18 岁以下的个人。我们不会故意收集儿童的个人信息。

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. 国际数据传输 International Data Transfers

您的信息可能会被传输到加拿大以外的服务器进行处理（包括美国的 Google Cloud 和 Vercel 服务器）。我们确保所有数据传输符合适用的数据保护法规。

Your information may be transferred to servers outside Canada for processing (including Google Cloud and Vercel servers in the United States). We ensure all data transfers comply with applicable data protection regulations.

12. 加拿大隐私法 Canadian Privacy Law (PIPEDA)

作为一家在加拿大安大略省运营的公司，我们遵守《个人信息保护和电子文件法》（PIPEDA）。根据 PIPEDA，您享有知情权、同意权、访问权、更正权、撤回同意权和投诉权。我们的隐私官负责确保合规。

As a company operating in Ontario, Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to know, consent, access, correct, withdraw consent, and file complaints. Our Privacy Officer ensures compliance.

隐私官联系方式 Privacy Officer: privacy@aiyuan.ai

13. 加拿大反垃圾邮件法 CASL Compliance

我们遵守加拿大反垃圾邮件法（CASL）。我们仅在获得您的同意后发送商业电子信息，每封邮件都包含发件人标识、联系信息和取消订阅链接。您可以随时退订，我们将在 10 个工作日内处理。

We comply with Canada's Anti-Spam Legislation (CASL). We only send commercial electronic messages with your consent. Every email includes sender identification, contact information, and an unsubscribe link. You can opt out at any time, and we process requests within 10 business days.

14. 加州居民权利 California Residents (CCPA)

如果您是加州居民，您有权了解我们收集的个人信息、请求删除、以及不因行使隐私权而受到歧视。我们不出售加州消费者的个人信息。

If you are a California resident, you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your privacy rights. We do not sell California consumers' personal information.

15. 隐私政策变更 Policy Changes

我们可能会更新本隐私政策。重大变更将通过电子邮件或服务内通知告知您。继续使用服务即表示接受更新后的政策。

We may update this Privacy Policy. Material changes will be communicated via email or in-service notification. Continued use of the Service constitutes acceptance of the updated policy.

16. 联系方式 Contact Us