服务与隐私条款Terms of Service and Privacy
一、适用范围1. Scope
本条款适用于我们运营的多色性账号、配置同步、远程控制、模型中转及其他托管服务。自行部署的开源软件适用其对应的开源许可证，自部署实例的数据由部署者管理，但其连接的 Pleochroic Gateway 服务仍适用本条款。These terms apply to the Pleochroic account, configuration sync, remote control, model relay and other hosted services that we operate. Self-deployed open-source software is governed by its respective open-source licence, and data in a self-hosted instance is managed by whoever deployed it; however, the Pleochroic Gateway services that such an instance connects to remain subject to these terms.
二、信息收集与使用2. Collection and use of information
我们仅收集、处理提供服务、安全防护及履行法定义务所必需的信息，可能包括账号资料、用户主动同步的配置与凭据、为处理请求而提交的内容，以及必要的运行和安全日志。具体收集项目、用途、处理依据和保存期限将在隐私政策或相应功能页面中说明。We collect and process only the information necessary to provide the service, safeguard its security and fulfil our legal obligations. This may include account information, configuration and credentials that users choose to sync, content submitted for the processing of requests, and necessary operational and security logs. The specific items collected, together with their purposes, legal bases and retention periods, will be set out in the privacy policy or on the relevant feature page.
我们不会仅因用户使用服务而收集其全部本地文件或对话。配置同步、记忆保存及远程访问应限定在用户启用、授权的范围内。用户内容的权利不因使用本服务而转移给我们，我们仅为上述目的处理这些内容。We do not collect all of a user’s local files or conversations merely because they use the service. Configuration sync, memory storage and remote access are limited to the scope that users have enabled and authorised. Using the service does not transfer the rights in user content to us; we process such content solely for the purposes described above.
三、加密与安全保护3. Encryption and security
我们承诺以欧洲经济区（EEA）适用的数据保护要求，包括《通用数据保护条例》（GDPR）的相关要求，作为用户信息保护的设计与运营基准，并在法律适用时履行相应义务。We commit to adopting the data protection requirements applicable in the European Economic Area (EEA), including the relevant requirements of the General Data Protection Regulation (GDPR), as the baseline for how we design and operate the protection of user information, and to fulfilling the corresponding obligations wherever the law applies.
所有由我们持久化保存的用户信息，包括数据库、日志及备份中的用户信息，均采用与风险相适应的加密措施保护。传输过程采用加密连接。密码采用适当的单向加盐哈希保存，不以可恢复明文形式保存。我们实施访问控制、最小权限、密钥管理及必要的安全审计。All user information that we store persistently, including user information in databases, logs and backups, is protected by encryption measures appropriate to the risk. Data in transit travels over encrypted connections. Passwords are stored as appropriately salted one-way hashes and are never kept in recoverable plaintext. We implement access control, least privilege, key management and necessary security audits.
加密保存不等于端到端加密。为完成用户请求，相关信息可能需要在受控环境中解密处理。本条款不表示数据必然存储于 EEA 境内，实际存储地点及跨境处理安排应在隐私政策中披露。Encrypted storage is not end-to-end encryption. To fulfil a user’s request, the relevant information may need to be decrypted and processed in a controlled environment. These terms do not imply that data is necessarily stored within the EEA; the actual storage locations and any cross-border processing arrangements will be disclosed in the privacy policy.
四、保密与第三方处理4. Confidentiality and third-party processing
我们不会出售、出租或公开用户信息，不会将其提供给广告商或数据经纪商，也不会允许未经授权的访问或披露。We will not sell, rent or make public any user information, will not provide it to advertisers or data brokers, and will not permit unauthorised access or disclosure.
为完成用户请求，我们可能向必要的基础设施、模型或搜索服务提供商传输最低限度的信息。例如，模型中转需要将请求内容发送给相应模型提供商，搜索服务可能需要将查询内容发送给搜索提供商。我们将在使用前披露相关接收方、用途及数据处理条件，并依适用法律建立必要的数据保护安排。To fulfil user requests, we may transmit the minimum necessary information to the infrastructure, model or search service providers involved. For example, model relay requires sending the request content to the corresponding model provider, and search services may require sending the query to a search provider. We will disclose the relevant recipients, purposes and data processing conditions before use, and put the necessary data protection arrangements in place in accordance with applicable law.
除上述必要处理、用户明确要求或有效授权的披露，以及依法必须履行的披露义务外，我们不向第三方提供用户信息。对于依法提出的披露要求，我们将审查其效力，将披露限制在必要范围，并在法律允许时通知受影响用户。Other than the necessary processing described above, disclosures explicitly requested or validly authorised by users, and disclosures we are legally obliged to make, we do not provide user information to third parties. For disclosure requests made under the law, we will review their validity, limit disclosure to what is necessary, and notify affected users where the law permits.
任何系统均无法保证绝对不存在安全风险。发生用户信息安全事件时，我们将及时采取补救措施，并依法向主管机构及受影响用户履行通知义务。No system can guarantee the complete absence of security risks. In the event of a security incident involving user information, we will promptly take remedial measures and fulfil our notification obligations to the competent authorities and affected users in accordance with the law.
五、不用于模型训练5. No use for model training
我们不会将用户信息用于训练、微调或蒸馏模型，也不会将用户输入、模型输出、上传文件、同步配置、记忆内容或可关联到用户的日志制作成训练数据。我们不会以「研究」「服务改进」或去标识化为由规避本承诺。We will not use user information to train, fine-tune or distil models, nor will we turn user inputs, model outputs, uploaded files, synced configurations, memory content or logs that can be linked to a user into training data. We will not circumvent this commitment on the grounds of “research”, “service improvement” or de-identification.
我们仅接入能够通过适用协议与实际配置满足上述不训练要求的模型服务。无法满足时，不通过该服务处理用户信息。用户使用本服务，不构成对模型训练用途的授权。We only integrate model services that can meet the above no-training requirement through the applicable agreements and their actual configuration. Where this requirement cannot be met, user information will not be processed through that service. A user’s use of this service does not constitute authorisation for model training.
用户主动启用的记忆功能，其信息保存、整理、检索及在后续请求中的调用，仅用于向该用户提供服务，不代表允许我们将其用于模型训练。相关数据仍受本条款约束。Where a user actively enables memory features, the storage, organisation and retrieval of that information, and its use in subsequent requests, serve solely to provide the service to that user, and do not mean that we may use it for model training. Such data remains subject to these terms.
六、保存、删除与用户权利6. Retention, deletion and user rights
我们仅在实现已说明目的所必需的期限内保存用户信息。用户可以通过账号功能或联系邮箱申请访问、更正、导出或删除相关信息，关闭同步、撤销远程访问授权，并在适用法律规定的范围内行使限制处理、反对处理及撤回同意等权利。We retain user information only for as long as is necessary to achieve the stated purposes. Through account features or the contact email, users may request access to, correction, export or deletion of their information, turn off sync, revoke remote-access authorisation and, to the extent provided by applicable law, exercise rights such as restricting processing, objecting to processing and withdrawing consent.
删除请求涉及的在线数据、备份副本及依法必须保留的记录，应分别按照隐私政策公布的期限处理。依法保留的记录仅用于对应目的，不继续用于一般服务处理。用户亦可依法向有管辖权的数据保护机构投诉。Online data, backup copies and records that must be retained by law, insofar as they are covered by a deletion request, will each be handled within the periods published in the privacy policy. Records retained by law are used only for the purpose for which they are kept and are not further used for general service processing. Users may also lodge a complaint with a competent data protection authority in accordance with the law.
用户可通过门户系统进行删除账户请求，我方会在 5 个工作日后答复，在此之前用户可撤销删除申请。5 个工作日后，我方将在法律允许的情况下将用户信息清除出系统。已经删除的邮箱不可重新注册，删除完成的账户及其信息无法恢复。Users may request account deletion through the portal. We will respond after 5 business days, and until then the user may withdraw the deletion request. After 5 business days, we will purge the user’s information from our systems to the extent permitted by law. A deleted email address cannot be registered again, and once deletion is complete, the account and its information cannot be recovered.
七、账号与服务使用7. Accounts and use of the service
用户应妥善保管账号、密钥及设备授权，不得利用服务实施违法活动、侵犯他人权利或危害服务安全。对存在明确安全风险或严重违反本条款的使用行为，我们可以采取必要且适度的限制措施，并在法律和安全条件允许时说明理由、提供申诉渠道。Users must keep their accounts, keys and device authorisations secure, and must not use the service to carry out unlawful activities, infringe the rights of others or endanger the security of the service. Where use poses a clear security risk or seriously breaches these terms, we may take necessary and proportionate restrictive measures and, where law and security conditions permit, explain our reasons and provide a channel for appeal.
模型输出可能存在错误，不应未经核实即作为重要决定的唯一依据。服务可能因维护、故障或上游服务变化而中断；我们将合理告知重大变化。本条款不排除或限制依法不得排除或限制的责任与用户权利。Model outputs may contain errors and should not be relied on as the sole basis for important decisions without verification. The service may be interrupted by maintenance, failures or changes to upstream services; we will give reasonable notice of significant changes. Nothing in these terms excludes or limits any liability or user right that cannot be excluded or limited by law.
八、条款变更与联系8. Changes to these terms and contact
对用户权利或信息处理方式有重大影响的变更，我们将提前以适当方式通知，并在法律要求时重新取得有效同意。条款更新不会自动授权我们将此前收集的信息用于模型训练。For changes that materially affect user rights or the way information is processed, we will give advance notice by appropriate means and, where required by law, obtain valid consent afresh. Updates to these terms do not automatically authorise us to use previously collected information for model training.