Privacy Policy
隐私政策
In short: we collect what is needed to run the Service, we do not sell your personal data, and we are not a backup service — please keep your own copies of everything you generate.
简要说明：我们只收集运行本服务所必需的信息，不出售你的个人数据；我们不提供备份服务，请自行保存你生成的全部内容。
1. Who We Are一、关于我们
Dooflo ("we") operates the platform available at dooflo.com. We act as the data controller for the personal data described below. For any privacy request, contact [email protected].
Dooflo（下称"我们"）运营 dooflo.com 平台，就下述个人数据而言为数据控制者。任何隐私相关请求请联系 [email protected]。
2. What We Collect二、我们收集的信息
| Category类别 | Examples示例 |
|---|---|
| Account data账号信息 | Email address, display name, language, plan, credit balance, consent records邮箱地址、显示名、语言、套餐、积分余额、同意记录 |
| Content data内容数据 | Scripts, prompts, reference images, generated images and video, project metadata剧本、提示词、参考图、生成的图像与视频、项目元数据 |
| Usage data使用数据 | Requests made, models selected, token/second credits consumed, error logs发起的请求、所选模型、消耗的 token/秒数、错误日志 |
| Device & technical设备与技术 | IP address, browser and OS type, device type, timestamps, referring pageIP 地址、浏览器与操作系统、设备类型、时间戳、来源页面 |
| Payment data支付数据 | Handled by our merchant of record (Lemon Squeezy); we receive order status, plan, and last digits — never your full card number由记录商户 Lemon Squeezy 处理；我们仅获取订单状态、套餐与卡号末四位，从不获取完整卡号 |
| Support data支持数据 | Messages you send to support and files you attach你发送给客服的消息及附件 |
We do not knowingly collect special-category data (such as health, biometric, political, or religious data). Please do not submit such data through the Service.
我们不会有意收集特殊类别数据（如健康、生物识别、政治或宗教数据）。请勿通过本服务提交此类数据。
3. How and Why We Use It三、使用目的与法律依据
- To provide the Service — authentication, generation, storage, billing, and support (performance of contract).提供本服务——身份认证、内容生成、存储、计费与客服（履行合同）。
- To secure and improve the Service — fraud prevention, abuse detection, rate limiting, debugging, aggregate analytics (legitimate interests).维护与改进本服务——防欺诈、滥用检测、限流、故障排查、聚合统计（合法利益）。
- To communicate — service notices, security alerts, product updates; marketing only where permitted or with consent, and you can opt out at any time.沟通——服务通知、安全告警、产品更新；营销信息仅在法律允许或经你同意时发送，你可随时退订。
- To comply with law — tax, accounting, lawful requests, and enforcement of our Terms.履行法定义务——税务、会计、合法请求及执行本协议。
4. Sharing and Disclosure四、共享与披露
We do not sell your personal data. We share it only as described here:
我们不会出售你的个人数据。仅在下列情形共享：
- Model providers. To generate output, your prompts, reference materials, and related parameters are transmitted to third-party AI model providers and their resellers. Their processing is governed by their own terms and privacy policies, which we do not control.模型供应商。为生成内容，你的提示词、参考素材及相关参数会被传输至第三方 AI 模型供应商及其经销商。其处理行为受其自身条款与隐私政策约束，我们无法控制。
- Infrastructure. Cloud hosting, object storage, CDN, queue, and email delivery providers, under contractual confidentiality and data-protection obligations.基础设施。云主机、对象存储、CDN、队列与邮件投递服务商，均受合同保密与数据保护义务约束。
- Payments. Lemon Squeezy as merchant of record processes payments and taxes.支付。记录商户 Lemon Squeezy 处理支付与税费。
- Legal and safety. Where required by law, court order, or to protect rights, safety, and property, including investigating abuse.法律与安全。依法律、法院命令要求，或为保护权利、安全与财产（含滥用调查）所必需。
- Business transfer. In a merger, acquisition, financing, or sale of assets, data may be transferred as part of the transaction, subject to this Policy.业务转让。在合并、收购、融资或资产出售中，数据可能作为交易的一部分被转让，并继续受本政策约束。
5. International Transfers五、跨境传输
We and our providers may process data in countries other than yours, including the United States, the European Union, and the Asia-Pacific region. Where required, we rely on appropriate safeguards such as standard contractual clauses. By using the Service you acknowledge that data may be transferred to jurisdictions with different protection standards.
我们及服务商可能在你所在国家/地区以外处理数据，包括美国、欧盟及亚太地区。在需要时，我们采用标准合同条款等适当保障措施。使用本服务即表示你知悉数据可能被传输至保护水平不同的法域。
6. Retention六、保存期限
| Data数据 | Retention保存期限 |
|---|---|
| Account record账号记录 | While your account is active, and up to 90 days after deletion for backup rotation账号存续期间；注销后最长 90 天（备份轮换） |
| Generated assets生成资产 | Free 7 days · Standard 30 days · Professional 90 days · Enterprise as agreed免费 7 天 · 标准 30 天 · 专业 90 天 · 企业另行约定 |
| Temporary intermediates中间过程文件 | Usually within 24 hours通常在 24 小时内 |
| Technical logs技术日志 | Up to 90 days, longer if needed for security investigation最长 90 天；安全调查所需时更长 |
| Billing records账单记录 | As required by tax and accounting law依税务与会计法要求 |
| Consent records同意记录 | Term of account plus 3 years (proof of consent)账号存续期加 3 年（同意证明） |
Storage is a convenience, not a backup. After the applicable window, content is deleted automatically and cannot be recovered. You are responsible for keeping your own copies.
存储是便利功能，不是备份。期限届满后内容将被自动删除且无法恢复。你应自行保存副本。
7. Security and Its Limits七、安全措施及其边界
We apply reasonable technical and organisational measures, including encryption in transit, access controls, secret isolation, and least-privilege operations. However, no system is perfectly secure, and we cannot guarantee that unauthorised access, disclosure, alteration, or destruction will never occur.
我们采取合理的技术与管理措施，包括传输加密、访问控制、密钥隔离与最小权限运维。但不存在绝对安全的系统，我们无法保证未经授权的访问、泄露、篡改或销毁绝不发生。
To the maximum extent permitted by law, we are not liable for any loss, disclosure, or unavailability of data resulting from force majeure, third-party infrastructure failure, cyber-attack, your own acts or omissions (including credential compromise), scheduled or emergency maintenance, or regulatory action.
在适用法律允许的最大范围内，因不可抗力、第三方基础设施故障、网络攻击、你自身的行为或疏忽（含凭据泄露）、计划内或紧急维护、监管行为导致的数据丢失、泄露或不可用，我们不承担责任。
8. Your Rights八、你的权利
Depending on where you live (including under the GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have the right to access, correct, delete, restrict, or object to processing, to data portability, to withdraw consent, and not to be discriminated against for exercising these rights.
根据你的所在地（包括 GDPR、英国 GDPR、CCPA/CPRA 及类似法律），你可能有权访问、更正、删除、限制处理或反对处理，有权获得数据可携，有权撤回同意，并有权不因行使上述权利而受到歧视。
To exercise a right, email [email protected] from your registered address. We will verify your identity and respond within 30 days, or within the period required by applicable law. Some requests may be limited where we must retain data for legal, tax, security, or dispute-resolution purposes.
行使权利请使用注册邮箱发送邮件至 [email protected]。我们将在核验身份后于 30 日内（或适用法律要求的期限内）回复。如我们因法律、税务、安全或争议解决需要保留数据，部分请求可能受到限制。
Deleting your account removes active data at the time of deletion; residual copies in backups are purged as backup rotation proceeds, within ninety (90) days at the latest. Deletion does not affect content already published by you or by us under a promotional licence granted before withdrawal.
注销账号将清空在用数据；备份中的残留副本随备份轮换清除，最长不超过 90 天。注销不影响你已发布的内容，亦不影响我们依据撤回前已授予的推广许可所制作的物料。
9. Cookies and Similar Technologies九、Cookie 与类似技术
We use strictly necessary cookies and local storage for session, security, and language preferences. Optional analytics cookies are used only where permitted. You can clear or block cookies in your browser, but parts of the Service may then not work.
我们使用必要的 Cookie 与本地存储，用于会话、安全与语言偏好。可选的分析类 Cookie 仅在法律允许时使用。你可在浏览器中清除或阻止 Cookie，但本服务的部分功能可能因此无法使用。
10. Children十、未成年人
The Service is not intended for anyone under 18. We do not knowingly collect data from children. If we learn that a child has provided personal data, we will delete the account and associated data.
本服务不面向未满 18 周岁者。我们不会有意收集儿童数据。如发现儿童提供了个人数据，我们将删除该账号及相关数据。
11. AI and Model Training十一、AI 与模型训练
We do not use your private content to train our own foundation models, and we do not sell your prompts. Third-party model providers may process your inputs under their own policies, including retention for abuse monitoring or, in some cases, model improvement — you should review their terms before uploading sensitive material.
我们不会使用你的私密内容训练自有基础模型，也不会出售你的提示词。第三方模型供应商可能依据其自身政策处理你的输入，包括为滥用监控留存，或在某些情况下用于模型改进；上传敏感素材前请先审阅其条款。
We may use aggregated, de-identified statistics (such as feature usage counts and error rates) to operate and improve the Service.
我们可能使用经过聚合、去标识化的统计数据（如功能使用次数与错误率）来运营与改进本服务。
12. Changes to This Policy十二、政策变更
We may update this Policy. The revised version takes effect when published on this page with an updated version number and date. Where changes are material, we will use reasonable efforts to notify you by email or in-app notice. Continued use constitutes acceptance.
我们可能更新本政策。修订版自本页发布并更新版本号与日期时生效。如属重大变更，我们将尽合理努力通过邮件或应用内通知告知。继续使用即视为接受。
13. Contact十三、联系方式
Privacy requests: [email protected] · General support: [email protected]
隐私请求：[email protected] · 一般支持：[email protected]