Note legali

Informativa sulla privacy

Con effetto dal 2026-08-08

La presente informativa spiega come () raccoglie, utilizza, archivia e divulghe le informazioni personali quando utilizzi il sito web e l'applicazione desktop di AI WorkDeck, e quali diritti ti spettano. Ti consigliamo di leggerla per intero; se desideri solo i punti essenziali, il riepilogo riportato di seguito li copre.

La versione breve

  • 01

    Il componente aggiuntivo per Office/WPS utilizza l'elaborazione nel cloud. Il documento corrente, la cronologia delle conversazioni necessaria e i riferimenti selezionati arrivano al nostro backend ospitato, quindi a OpenRouter e al fornitore di inferenza che serve il modello da te selezionato. I corpi grezzi dei documenti utilizzano memoria temporanea; i messaggi degli utenti, le risposte dell'AI e il ragionamento restano memorizzati finché non elimini la conversazione. Vedi le clausole 6 e 8.

  • 02

    L'applicazione desktop è local-first: i tuoi documenti, progetti e la cronologia di lavoro restano sul tuo computer. Non vengono caricati, non conservati e non vengono mai utilizzati per addestrare modelli. L'eccezione è costituita da un servizio esterno che invochi tu stesso (ad esempio, inviare un'immagine al riconoscimento del testo) — vedi il punto successivo.

  • 03

    Sei servizi provenienti dalla piattaforma transitano per i nostri server (riconoscimento del testo, ricerca sul web, dati del registro delle imprese, dati su titoli e finanza, ricerca di normative e giurisprudenza, trascrizione di riunioni): li acquistiamo dal fornitore per tuo conto, così non ti serve una chiave propria, e il contenuto richiesto da ciascuna chiamata viene inoltrato tramite noi a quel fornitore. Tutti e sei i fornitori si trovano nella Cina continentale, quindi questa fascia non comporta trasferimenti transfrontalieri. Solo l'audio delle riunioni viene conservato brevemente da noi ed eliminato al termine della trascrizione. Ciascuno di essi può essere impostato con la tua chiave o disattivato. Vedi le clausole 2, 6, 7 e 8.

  • 04

    Il sito imposta esattamente un cookie (`awd_session`, per mantenerti connesso). Non è presente codice di terze parti per analisi, pubblicità o tracciamento, e i font web sono auto-ospitati, quindi nessuna richiesta viene inviata a terzi.

  • 05

    La telemetria desktop è anonima: un identificativo di installazione casuale, la versione dell'app e i nomi degli eventi consentiti. Nessun indirizzo IP viene memorizzato, nulla viene collegato al tuo account, nessun contenuto di documenti è incluso e può essere disattivata.

  • 06

    Due elementi lasciano la Cina continentale: i contenuti che invii tramite il canale AI della piattaforma, il componente aggiuntivo per Office/WPS o la funzione "Bozza assistita dall'AI per Skill" del sito vengono instradati a OpenRouter; i visitatori dall'estero raggiungono il sito tramite un nodo cache a Singapore. Vedi le clausole 6 e 7.

  • 07

    Per esercitare i tuoi diritti (accesso, rettifica, cancellazione, chiusura dell'account, revoca del consenso), scrivi a . Rispondiamo entro quindici giorni lavorativi.

1. Chi siamo

Titolare del trattamento delle informazioni personali: (), codice identificativo unificato di impresa .

Per qualsiasi questione relativa alla protezione delle informazioni personali, contatta . Lo stesso indirizzo raggiunge la persona responsabile della protezione delle informazioni personali.

La presente informativa copre il sito web AI WorkDeck, l'applicazione desktop, i componenti aggiuntivi per Office e i servizi correlati. È redatta in cinese e in inglese; in caso di discrepanza, prevale la versione cinese.

2. Cosa raccogliamo

Raccogliamo dati secondo un criterio di "non più del necessario". La tabella illustra cosa raccogliamo, perché e su quale base.

ContestoInformazioniFinalitàBase giuridica
RegistrazioneNome utente, email, password, nome visualizzato, biografia (facoltativa)Create and identify your account, account recovery, public profileNecessary to enter into and perform the contract
Staying signed inSession token (in the awd_session cookie)Maintain your sessionNecessary to perform the contract
Password storageSalted scrypt hash onlyVerify your passwordNecessary to perform the contract
Top-ups and paymentsOrder number, WeChat Pay transaction ID, payer WeChat openid, amount, status, timestampsTake payment, reconcile, handle refunds and disputesContract + legal obligation (tax and bookkeeping)
Wallet and transactionsBalance, ledger entries, purchases, entitlements, creator earningsAccounting, entitlement checks, settlementNecessary to perform the contract
Account keysSHA-256 hash and prefix only; no plaintext retainedAuthenticate the desktop applicationNecessary to perform the contract
AI creditRuntime key issued by the upstream model provider (stored encrypted), quota limit and usageProvision and meter your AI creditNecessary to perform the contract
Plaza submissionsThe Skill or plugin you submit and your author identityReview, publication, distribution, settlementNecessary to perform the contract
Desktop telemetryRandom install identifier (UUID), app version, whitelisted event names, a conversation sequence key, a small set of non-sensitive attributesMeasure activity and feature use, diagnose crashesYour consent (can be switched off)
Platform-sourced external servicesThe content each call requires (the image to recognize, a search query, a company name, a ticker, a search term, meeting audio), plus one ledger entry containing no content (service, quantity, amount, timestamp)Call the vendor on your behalf and meter the usageNecessary to perform the contract (your call is the request)
Server logsTimestamp, request path, status code, IP addressSecurity, troubleshooting, attack mitigationReasonably necessary security maintenance + legal obligation

About telemetry: the IP address of a telemetry request is used in memory for rate limiting only and is never written to the database. Nothing records a link between the random install identifier and your account, so we cannot trace telemetry back to a person.

3. What we do not collect

The document and AI-conversation statements below concern local desktop use. The Office/WPS add-in processes documents and conversations through our hosted backend, as explained in clauses 6 and 8. Otherwise, we do not actively collect the following:

  • Your documents, case files or project files and their contents — the desktop application is local-first and these stay on your device. When you hand a specific piece of content to a specific external service (an image to text recognition, a recording to transcription): we then relay the part of it that the call requires to the vendor. Apart from meeting audio held briefly, we retain none of it (see clauses 6 and 8);
  • Your desktop AI conversations — the desktop application talks to the model provider directly; hosted processing and retention for the Office/WPS add-in are covered separately in clauses 6 and 8;
  • Sensitive personal information such as phone numbers, ID numbers, facial images or fingerprints;
  • Location, contacts, call logs, messages or photo libraries;
  • Your browsing outside this service — we run no third-party analytics or advertising SDK.

We do not use any of your content to train models, and we do not sell personal information.

4. Cookies

The site sets one cookie:

NamePurposeAttributesLifetime
awd_sessionKeeps you signed inHttpOnly, SameSite=Lax30 days

This cookie is strictly necessary for signing in and cannot be disabled while staying signed in. We use no analytics, advertising or cross-site tracking cookies. Web fonts are bundled into the site at build time, so loading a page makes no font request to any third party.

You can delete the cookie in your browser; the effect is the same as signing out.

5. How we use it

  • Running the service: identifying accounts, checking entitlements, settling charges, delivering what you bought;
  • Security: spotting anomalous sign-ins and abuse, rate limiting, mitigating attacks, diagnosing faults;
  • Improving the product: aggregate statistics from anonymous telemetry showing which features get used and where people drop off;
  • Legal obligations: keeping records required by tax, accounting and cybersecurity rules;
  • Communicating with you: service changes, security incidents, changes to the terms.

We do not use the information for anything else. If we ever need to, we will ask for your consent separately. We do not carry out automated decision-making, and we do not use personal information for targeted messaging or differential pricing.

6. Disclosure and third parties

Recipients of add-in AI requests. Official add-in requests reach the AI WorkDeck cloud backend, then OpenRouter, then the inference provider serving the selected model. Available model developers include DeepSeek, Z.ai, Moonshot AI, Alibaba/Qwen, Anthropic, Google, OpenAI and xAI. A model's developer and its inference host can differ depending on routing. Requests include the current question, necessary conversation history, the current document and references the user selects. OpenRouter and each inference provider have their own retention, training and processing-location policies; our transient processing rule does not promise third-party zero retention. See the OpenRouter provider list (https://openrouter.ai/providers/) and OpenRouter privacy policy (https://openrouter.ai/privacy/).

We do not provide your personal information to third parties except as follows:

RecipientInformationPurposeLocation
Tenpay Payment Technology Co., Ltd. (WeChat Pay)Order number, amount, item descriptionCollect payment, refunds, reconciliationMainland China
OpenRouter, Inc.Content you send to the AI; the quota key issued for youRoute model calls, meter usageUnited States
GitHub, Inc.Network request data when downloading installersHost installers and open-source codeUnited States
Alibaba Cloud Computing Ltd.Server and network-level technical dataHosting and network accelerationMainland China + Singapore node
Alibaba Cloud (Tingwu)Your meeting audio and its transcriptSpeech transcription and speaker separationMainland China
Alibaba Cloud (OCR)The image you submit for recognitionImage text recognitionCina continentale
Bocha (ricerca web)La tua query di ricercaRestituisce i risultati della ricerca webCina continentale
QichachaIl nome dell'azienda o il codice di credito sociale unificato che cerchiRestituisce i dati del registro delle impreseCina continentale
TushareIl ticker e i campi che interroghiRestituisce dati di borsa e finanziariCina continentale
PKULawIl termine di ricerca per normative e giurisprudenzaRestituisce i risultati relativi a normative e giurisprudenzaCina continentale

Come fluiscono i sei servizi forniti tramite piattaforma. Le ultime sei righe sono i fornitori behind del livello "fornito tramite piattaforma": acquistiamo da loro per conto tuo, quindi non ti serve una chiave propria, e il contenuto richiesto da ciascuna chiamata viene inoltrato al fornitore attraverso i nostri server e addebitato sul tuo saldo. Tutti e sei si trovano nella Cina continentale, quindi questo livello non comporta alcun trasferimento transfrontaliero. Non registriamo, archiviamo né usiamo per addestramento ciò che inoltriamo; l'unica eccezione è l'audio delle riunioni, che viene conservato brevemente nel nostro object storage affinché il servizio di trascrizione possa leggerlo, e viene eliminato una volta completata l'elaborazione (vedi clausola 8). Ciascuno di essi può essere sostituito, in Impostazioni → Servizi Piattaforma nell'app desktop, con la tua chiave (l'app comunicherà quindi direttamente con quel fornitore, bypassandoci) o disattivato del tutto.

Dove finiscono davvero i contenuti AI merita una nota. La connessione desktop diretta descritta di seguito non si applica al componente aggiuntivo Office/WPS, che utilizza il percorso in hosting descritto in questa clausola. Quando usi il canale AI della piattaforma nell'applicazione desktop, i tuoi contenuti vanno direttamente dalla tua macchina a OpenRouter e non passano mai per i nostri server — noi rilasciamo soltanto la chiave di quota e non possiamo vedere le tue conversazioni. Quando usi la "Redazione di Skill con assistenza AI" del sito web, il brief che digiti viene inoltrato a OpenRouter dal nostro server. In entrambi i casi, il contenuto esce dalla Cina continentale.

Potremmo inoltre divulgare informazioni quando la legge lo richiede: collaborando con autorità giudiziarie o amministrative, quando necessario per proteggere l'interesse pubblico o interessi vitali di una persona, o quando tu stesso abbia reso pubbliche le informazioni. In caso di fusione, scissione o trasferimento di asset, trasferiremo le informazioni personali insieme all'attività, comunicandoti in anticipo nome e recapiti del destinatario; il destinatario dovrà continuare a rispettare questa informativa o richiedere nuovamente il tuo consenso.

7. Trasferimenti al di fuori della Cina continentale

Data l'architettura descritta sopra, le tue informazioni vengono trasferite al di fuori della Cina continentale nei seguenti casi:

  • I contenuti inviati tramite il canale AI della piattaforma, il componente aggiuntivo Office/WPS o la redazione di Skill con assistenza AI del sito web vengono inviati a OpenRouter, Inc. negli Stati Uniti per inferenza e misurazione;
  • Il download del programma di installazione desktop invia la tua richiesta a GitHub, Inc. negli Stati Uniti;
  • I visitatori al di fuori della Cina continentale sono serviti da un nodo cache a Singapore, che recupera i dati dal server di origine a Pechino.

The six platform-sourced services do not leave the country. The vendors behind text recognition, web search, company registry data, securities and financial data, statute and case law search and meeting transcription are all inside mainland China (see clause 6). Content in that tier never leaves the mainland, and no separate cross-border consent is required for it. The three cases listed above are the complete set of transfers.

AI content need not leave the country. The desktop application lets you configure your own model provider, including mainland providers and fully local models; once you do, AI content no longer passes through OpenRouter. Installers are currently distributed only via GitHub, which cannot be avoided.

As required by the Personal Information Protection Law, we tell you separately the name and contact details of each overseas recipient, the purpose and method of processing, the categories of information involved and how to exercise your rights against that recipient, and we obtain your separate consent. You may withdraw that consent at any time; we will then stop the corresponding transfer, though the related features will no longer work.

8. How long we keep it

Add-in document and conversation retention. Inline document bodies and raw tool arguments/results are used for the current turn and transient memory caches, not stored in the request queue or conversation history. The add-in does not automatically create durable conversation summaries. Queued input bodies expire after at most 30 minutes and may be evicted earlier or lost on restart; a new upload is then required. User messages, AI replies and reasoning remain as conversation history until the user deletes the conversation, with no separate automatic expiry. This includes document text pasted by the user or quoted by the AI. Conversation deletion also removes queue requests and derived summaries and clears document caches; billing usage records remain. Copies already mirrored to a desktop project follow that project's rules and are not remotely erased by deleting the cloud conversation. Earlier versions stored inline bodies in the queue and tool excerpts and summaries in conversation storage. This update removes historical inline bodies from the live request queue. It also removes raw tool excerpts and derived summaries from conversations still identifiable as Office/WPS add-in conversations through their request-source records. Historical conversations without those source records cannot be reliably classified and are not covered by this Office-specific cleanup. Operational backups and material already sent to third parties are separate; this is not a promise of retrospective erasure of every copy.

CategoryRetention
Account informationWhile the account exists; deleted or anonymised within 30 days of closure
Session tokens30 days, then expire automatically
Account key hashesDeleted on revocation or account closure
Orders, ledger and invoicing recordsAt least 10 years from completion of the transaction (Article 29 of the Detailed Rules for the Implementation of the Tax Collection and Administration Law); closing your account does not shorten this
Plaza submissionsDeleted within 90 days of removal; copies already distributed are unaffected
Content relayed for platform-sourced callsNot retained. It passes through our servers only while that call is being made
Meeting audio filesDeleted by the program as soon as transcription finishes or the task fails; a 24-hour lifecycle rule on the object storage clears anything missed. The transcript is not kept on our side once returned to the desktop app
Anonymous telemetry24 months, then deleted on a rolling basis
Server logs6 months (Article 21 of the Cybersecurity Law requires no less than 6 months)

Beyond these periods we delete or anonymise. Where the law requires longer, the law governs.

9. How we protect it

  • In transit: HTTPS is enforced site-wide;
  • Passwords: stored as salted scrypt hashes — we cannot recover your original password;
  • Account keys: only the hash and prefix are stored; the plaintext is shown to you once at generation and then exists nowhere in our systems;
  • Model keys: stored encrypted;
  • Access control: production access is limited to those who need it;
  • Durability: financial data is written transactionally and backed up regularly.

No system is perfectly secure. If personal information is leaked, altered or lost in a way that may harm you, we will take remedial action immediately and notify you and the competent authorities as the law requires.

10. Your rights

Under the Personal Information Protection Law you have the following rights over the personal information we handle:

  • Access and copy — find out what we hold about you and obtain a copy;
  • Correct and supplement — have inaccurate or incomplete information fixed; account details can also be edited yourself;
  • Delete — where the purpose is fulfilled, you withdraw consent, or we have processed unlawfully;
  • Portability — have your information transferred to another handler you designate, where it meets the conditions set by the national cyberspace authority;
  • Withdraw consent — for anything processed on the basis of consent, such as telemetry and cross-border transfers;
  • Restrict or object — ask us to limit or refuse particular processing;
  • Explanation — ask us to explain this policy and our processing rules;
  • Close your account — at any time, after which we handle your information as set out in clause 8.

How to exercise them: edit your details and revoke account keys yourself in your account; for anything else, write to identifying your account and what you want. We may ask you to verify your identity first. We respond within fifteen working days, and will explain if a complex request needs longer.

A close relative of a deceased user may exercise rights of access, copying, correction and deletion over that user's relevant personal information, unless the user arranged otherwise during their lifetime.

11. Minors

The Service is aimed at professionals and is not offered to children under 14. We do not knowingly collect children's personal information. If we find we have collected it without prior guardian consent, we will delete it promptly.

Guardians who become aware of such a case can reach us at .

12. Changes to this policy

We may revise this policy. For substantive changes to purposes, methods or categories of information, we will notify you by website announcement or email before they take effect, and will seek fresh consent where the law requires it.

Earlier versions are available on request by email.

13. Contact and complaints

For any question, comment or complaint about this policy or our handling of personal information, write to . We reply within fifteen working days.

If you believe our processing has harmed your rights and our reply does not resolve it, you may also complain to the local cyberspace, telecommunications, public security or market regulation authorities, or pursue the dispute resolution route set out in the Terms of Service.