プライバシーポリシー

Personal information handler: (), unified social credit code .

For anything concerning personal information protection, contact . The same address reaches the person responsible for personal information protection.

This policy covers the AI WorkDeck website, desktop application, Office add-ins and related services. It exists in Chinese and English; in the event of any discrepancy, the Chinese version prevails.

We collect on a "no more than needed" basis. The table sets out what we collect, why, and on what basis.

以下のドキュメントおよびAI会話に関する記述は、ローカルでのデスクトップ利用に関するものです。Office/WPSアドインは、第6条および第8条で説明する通り、当社がホストするバックエンドを通じてドキュメントと会話を処理します。それ以外の場合、当社は以下の情報を能動的に収集しません:

• お客様のドキュメント、案件ファイルまたはプロジェクトファイルおよびその内容 — デスクトップアプリケーションはローカルファーストであり、これらはお客様のデバイス上に保存されます。特定のコンテンツを特定の外部サービスに渡す場合(画像をテキスト認識に、録音を文字起こしに渡す場合など)は、その呼び出しに必要な部分のみをベンダーに中継します。一時的に保持される会議音声を除き、当社はこれらを一切保持しません(第6条および第8条を参照);
• デスクトップでのAI会話 — デスクトップアプリケーションはモデルプロバイダーと直接通信します。Office/WPSアドイン向けのホスト型処理および保持については、第6条および第8条に別途定めます;
• 電話番号、ID番号、顔画像、指紋などの要配慮個人情報;
• 位置情報、連絡先、通話履歴、メッセージ、フォトライブラリ;
• 本サービス以外での閲覧履歴 — 当社はサードパーティのアナリティクスや広告SDKを使用していません。

当社はお客様のコンテンツをモデルの学習に使用せず、個人情報を販売することもありません。

The site sets one cookie:

This cookie is strictly necessary for signing in and cannot be disabled while staying signed in. We use no analytics, advertising or cross-site tracking cookies. Web fonts are bundled into the site at build time, so loading a page makes no font request to any third party.

You can delete the cookie in your browser; the effect is the same as signing out.

• Running the service: identifying accounts, checking entitlements, settling charges, delivering what you bought;
• Security: spotting anomalous sign-ins and abuse, rate limiting, mitigating attacks, diagnosing faults;
• Improving the product: aggregate statistics from anonymous telemetry showing which features get used and where people drop off;
• Legal obligations: keeping records required by tax, accounting and cybersecurity rules;
• Communicating with you: service changes, security incidents, changes to the terms.

We do not use the information for anything else. If we ever need to, we will ask for your consent separately. We do not carry out automated decision-making, and we do not use personal information for targeted messaging or differential pricing.

We do not provide your personal information to third parties except as follows:

We may also disclose information where the law requires: cooperating with judicial or administrative authorities, where necessary to protect the public interest or someone's vital interests, or where you have made the information public yourself. In a merger, division or transfer of assets we will transfer personal information along with the business, telling you the recipient's name and contact details beforehand; the recipient must continue to honour this policy or seek your consent afresh.

Given the architecture described above, your information is transferred outside mainland China in the following cases:

• Content sent through the platform AI channel, the Office/WPS add-in or the website's AI-assisted Skill drafting goes to OpenRouter, Inc. in the United States for inference and metering;
• Downloading a desktop installer sends your request to GitHub, Inc. in the United States;
• Visitors outside mainland China are served by a cache node in Singapore, which fetches from the origin server in Beijing.

As required by the Personal Information Protection Law, we tell you separately the name and contact details of each overseas recipient, the purpose and method of processing, the categories of information involved and how to exercise your rights against that recipient, and we obtain your separate consent. You may withdraw that consent at any time; we will then stop the corresponding transfer, though the related features will no longer work.

Beyond these periods we delete or anonymise. Where the law requires longer, the law governs.

• In transit: HTTPS is enforced site-wide;
• Passwords: stored as salted scrypt hashes — we cannot recover your original password;
• Account keys: only the hash and prefix are stored; the plaintext is shown to you once at generation and then exists nowhere in our systems;
• Model keys: stored encrypted;
• Access control: production access is limited to those who need it;
• Durability: financial data is written transactionally and backed up regularly.

No system is perfectly secure. If personal information is leaked, altered or lost in a way that may harm you, we will take remedial action immediately and notify you and the competent authorities as the law requires.

Under the Personal Information Protection Law you have the following rights over the personal information we handle:

• Access and copy — find out what we hold about you and obtain a copy;
• Correct and supplement — have inaccurate or incomplete information fixed; account details can also be edited yourself;
• Delete — where the purpose is fulfilled, you withdraw consent, or we have processed unlawfully;
• Portability — have your information transferred to another handler you designate, where it meets the conditions set by the national cyberspace authority;
• Withdraw consent — for anything processed on the basis of consent, such as telemetry and cross-border transfers;
• Restrict or object — ask us to limit or refuse particular processing;
• Explanation — ask us to explain this policy and our processing rules;
• Close your account — at any time, after which we handle your information as set out in clause 8.

How to exercise them: edit your details and revoke account keys yourself in your account; for anything else, write to identifying your account and what you want. We may ask you to verify your identity first. We respond within fifteen working days, and will explain if a complex request needs longer.

A close relative of a deceased user may exercise rights of access, copying, correction and deletion over that user's relevant personal information, unless the user arranged otherwise during their lifetime.

The Service is aimed at professionals and is not offered to children under 14. We do not knowingly collect children's personal information. If we find we have collected it without prior guardian consent, we will delete it promptly.

Guardians who become aware of such a case can reach us at .

We may revise this policy. For substantive changes to purposes, methods or categories of information, we will notify you by website announcement or email before they take effect, and will seek fresh consent where the law requires it.

Earlier versions are available on request by email.

For any question, comment or complaint about this policy or our handling of personal information, write to . We reply within fifteen working days.

If you believe our processing has harmed your rights and our reply does not resolve it, you may also complain to the local cyberspace, telecommunications, public security or market regulation authorities, or pursue the dispute resolution route set out in the Terms of Service.