概要
我们充分理解个人信息对您来说至关重要，我们承诺将严格遵守法律法规，遵循隐私保护原则，竭尽全力保护您的个人信息安全，为您提供安全、可靠的服务。
PivotOne（以下简称"本服务"）是由北京支点互动科技有限公司（以下简称"我们"）提供的 AI 智能工作台，包括 macOS、Windows 桌面应用以及 iOS、Android 移动客户端，面向各类职能角色设计。您只需用自然语言描述需求，PivotOne 便能像同事一样自主规划、调用工具并执行任务，交付可验收的结果。
我们的注册地为北京市海淀区原点大厦 AB 座裙楼 319 室。
我们对可能收集的您的敏感信息及相关重点内容，已采用粗体特别提示，希望您在阅读时特别关注。
1. 我们收集的信息
1.1 账号注册与登录
当您使用手机号注册、登录本服务时，我们会收集您的手机号码，用于核实您的身份。
当您使用邮箱注册、登录本服务时，我们会收集您的邮箱地址，用于核实您的身份及发送验证信息。
1.2 设备与网络信息
在您使用本服务过程中，我们将收集您的设备型号、操作系统版本、唯一设备标识符、IP 地址、网络类型等信息，用于保障账户安全、进行故障诊断和推送必要的服务配置更新。
1.3 对话与交互信息
在您与本服务对话过程中，我们会收集您的输入信息和输出信息，用于与模型进行交互并向您输出工作结论。
未经您的单独明确同意，我们不会将您的输入内容、输出内容、文件、记忆数据用于训练或改进通用人工智能模型，也不会将相关信息用于广告、用户画像或出售给第三方。
1.4 文件与多媒体信息
您在使用本服务过程中，如需本服务读取您的文件或多媒体内容（包括文档、图片、音频、视频等），我们将收集您主动选择的文件信息，用于根据您的指令对文件进行处理的目的。我们不会在未经您授权的情况下主动访问您设备上的任何文件或文件夹。
1.5 剪切板信息
您在使用本服务过程中，如需复制对话信息或内容，我们会收集您的剪切板信息，以实现您复制内容并在其他场景下粘贴的功能。
1.6 系统权限调用
您使用本服务过程中，在特定场景下我们将会调用您的设备权限，包括相册/照片库、麦克风、摄像头、文件系统访问、通知、网络访问、辅助功能等权限。上述权限均为实现特定功能所需，您可以在系统设置中随时撤回授权。
1.7 记忆功能
为了使智能对话的输出内容更贴合您的需求，提升智能对话和智能操作的连贯性、个性化及服务体验，我们在记忆功能中为用户提供跨会话的记忆能力。
记忆功能将基于您与 PivotOne 的对话内容，通过大模型及相关人工智能技术自动提取并记住其中具有参考价值的个人信息（例如您主动提供的身份、职业、项目、偏好等），并定期更新。
在后续对话或任务执行过程中，本服务可能将与当前请求相关的记忆数据作为背景信息，与您的输入内容一并用于生成输出内容或执行任务。
您可以随时增加、删除或更正 PivotOne 关于您的记忆数据。如您需要关闭记忆功能，可以通过本指引披露的联系方式与我们联系。
1.8 第三方人工智能服务
为向您提供 AI 对话、任务执行、文件分析及多媒体处理功能，我们接入了以下第三方人工智能服务：
1. 阿里云百炼提供的千问模型，服务提供方为阿里云计算有限公司，隐私说明：https://help.aliyun.com/zh/model-studio/privacy-notice；
2. 火山引擎方舟提供的人工智能模型，服务提供方为北京火山引擎科技有限公司，隐私说明：https://www.volcengine.com/trust/privacy；
3. OpenAI API 提供的 GPT 模型，服务提供方为 OpenAI, L.L.C.，隐私政策：https://openai.com/policies/privacy-policy/。
当您主动选择并使用相应模型时，我们可能向对应的服务商发送您主动输入的文字和任务指令、与当前请求相关的对话上下文、您主动选择并要求处理的文件、图片、音频或视频，以及您启用记忆功能后与当前请求相关的记忆数据。
上述数据仅用于理解您的指令、执行您主动发起的任务并生成相应结果。除非相关信息由您主动写入或上传，我们不会主动向第三方人工智能服务商发送您的手机号码、邮箱地址或设备唯一标识符。
我们不会授权上述服务商将您的内容用于广告、用户画像、出售数据或训练其通用人工智能模型。服务商可能根据其服务条款，为提供即时推理、安全防护、防止服务滥用以及履行法律义务，进行必要的数据处理或短期日志保存。
在首次向第三方人工智能服务商发送数据前，我们会通过独立授权页面向您明确说明数据接收方、可能发送的数据类型、处理目的及相关隐私规则，并取得您的明确同意。您可以拒绝授权；拒绝后，相关 AI 功能将无法使用，但不会影响其他无需第三方人工智能服务的功能。
您可以通过应用内的相关设置或本指引第 10 节所列联系方式撤回授权。撤回后，我们将不再向对应服务商发送新的数据，但不影响撤回前已经合法完成的数据处理。
1.9 第三方 SDK
为保障本服务的稳定运行或实现相关功能，我们可能会接入由第三方提供的软件开发包（SDK）。如相关 SDK 涉及个人信息处理，我们将按照最小必要原则，在相关功能启用前向您说明 SDK 名称、服务提供方、处理的数据类型和处理目的，并依法取得您的同意。
1.10 无需征得同意的情形
根据法律法规规定，我们在以下情形下收集您的个人信息无需征得您的同意：为订立、履行合同所必需；为履行法定职责或法定义务所必需；为应对突发公共卫生事件或紧急情况所必需；为公共利益实施新闻报道、舆论监督等行为；在合理范围内处理已合法公开的个人信息；法律、行政法规规定的其他情形。
2. 信息的存储
2.1 信息存储的方式和期限
我们会通过安全的方式存储您的信息，包括本地存储、数据库和服务器日志。一般情况下，我们仅在为实现目的所必需的最短时间内保留您的个人信息，但为遵守法律法规、法院判决或政府机关要求的情况除外。
2.2 信息存储的地域
原则上，我们会按照法律法规规定，将在中华人民共和国境内收集的用户个人信息存储于境内。因您主动选择使用 OpenAI API 提供的 GPT 模型，相关请求数据可能被传输至中华人民共和国境外进行处理。发生跨境处理时，我们会在传输前向您告知境外接收方、处理目的、数据类型、处理方式以及您行使个人信息权利的方式，取得您的单独同意，并依法履行适用的个人信息跨境合规义务。
当我们的产品或服务停止运营时，我们将采取推送通知、公告等形式通知您，并在合理期限内删除或匿名化处理您的个人信息。
3. 信息安全
我们严格遵守法律法规保护用户的通信秘密。我们使用不低于行业同行安全水平的安全保护措施以保障信息的安全，例如加密技术、匿名化处理等手段。我们建立专门的管理制度、流程和组织确保信息安全，严格限制访问信息的人员范围，要求他们遵守保密义务。
若发生个人信息泄露等安全事件，我们会启动应急预案，阻止安全事件扩大，并以推送通知、公告等形式告知您。
4. 我们如何使用信息
我们会在本隐私保护指引所涵盖的用途内使用收集的信息。如我们使用您的个人信息，超出了与收集时所声称的目的及具有直接或合理关联的范围，我们将在使用您的个人信息前，再次向您告知并征得您的明示同意。
5. 第三方数据处理及信息的公开披露
5.1 委托处理
我们与第三方合作过程中，将遵守法律规定，按照最小必要原则，安全审慎地处理相关数据。我们将通过协议约束、安全评估和必要的技术措施对受托处理方进行管理，要求其仅按照我们的指示和约定目的处理数据，并提供与本指引相同或同等水平的个人信息保护。
5.2 与第三方共享
除本指引第 1.8 节列明的第三方人工智能服务，以及实现您主动选择的其他第三方功能所必需的情形外，我们不会向第三方共享您的个人信息。如相关功能涉及数据交互，我们将在数据发送前通过单独的授权页面向您明确说明数据接收方、数据类型、处理目的和处理方式，并依法取得您的明确同意。我们会对相关第三方进行安全评估和持续监督。
5.3 信息的公开披露
我们不会对外公开披露所收集的个人信息，如必须公开披露时，我们会向您告知此次公开披露的目的、披露信息的类型及可能涉及的敏感信息，并征得您的明示同意。
5.4 转让
随着我们业务的持续发展，我们有可能进行合并、收购、资产转让等交易，我们将告知您相关情形，按照法律法规及不低于本隐私政策所要求的标准继续保护或要求新的个人信息处理者继续保护您的个人信息。
5.5 例外情形
根据相关法律法规，以下情形中，共享、转让、公开披露您的个人信息无需事先征得您的授权同意：为订立、履行合同所必需；为履行法定职责或法定义务所必需；为应对突发公共卫生事件或紧急情况所必需；为公共利益实施新闻报道、舆论监督等行为；在合理范围内处理已合法公开的个人信息；法律、行政法规规定的其他情形。
6. 您的权利
在您使用本服务期间，为了让您更便捷地查询访问、删除、更正、复制您的个人信息，同时保障您撤回个人信息使用的同意和注销账户的权利，我们在产品设计中为您提供了相应的操作设置。
您可以访问、更正您的账号信息；删除本地对话记录和缓存数据；撤回系统权限授权或第三方人工智能服务数据共享授权；退出登录；注销账号。撤回第三方人工智能服务授权后，我们将不再向相关服务商发送新的数据。注销账号后，我们将删除或匿名化处理您的个人信息，法律法规另有规定的除外。
您也可以通过本指引披露的方式与我们联系进行投诉和举报。
7. 变更
我们可能会适时对本隐私保护指引进行修订。当隐私保护指引的条款发生变更时，我们会在版本更新时以弹窗提示或应用内通知等方式向您提示变更后的隐私保护指引，并向您说明生效日期。
8. 未成年人保护
我们非常重视对未成年人个人信息的保护。本服务主要面向成年人。
根据相关法律法规的规定，若您是 18 周岁以下的未成年人，在使用本服务前，应事先取得您的家长或法定监护人的同意。
根据相关法律法规的规定，若您是 14 周岁以下的儿童，在使用本服务前，应当按照注册、使用流程，事先取得您的家长或法定监护人的同意，并由您的家长或法定监护人帮助您完成本服务注册流程。
9. 其他
在本服务的某些具体服务或功能项下，我们可能还会通过交互文案、产品界面或弹窗等方式向您另行告知处理个人信息的目的、方式或范围，若另行告知的内容与本隐私政策不一致的，以另行告知的内容为准。
本隐私政策适用于我们通过 PivotOne 桌面应用及 iOS、Android 移动客户端向您提供的服务。如我们的某一功能单独设置了隐私政策条款的，单独的隐私政策条款优先于本隐私政策适用。
请您注意，本隐私政策不适用于其他第三方向您提供的软件、产品或服务。如您通过 PivotOne 链接到的第三方软件、产品或服务，您受该第三方相关协议或政策的约束。
Summary
We fully understand that personal information is critical to you. We commit to strictly complying with applicable laws and regulations, following privacy protection principles, and doing our utmost to protect the security of your personal information and provide safe, reliable services.
PivotOne (the “Service”) is an AI intelligent workbench provided by Beijing PivotMatrix Interactive Technology Co., Ltd. (“we,” “us,” or “our”), including macOS and Windows desktop applications as well as iOS and Android mobile clients. It is designed for various functional roles. You only need to describe your needs in natural language, and PivotOne can plan, call tools, and execute tasks like a colleague to deliver verifiable results.
Our registered address is Room 319, Podium, Buildings A/B, Yuandian Building, Haidian District, Beijing.
We have specially highlighted in bold the sensitive information we may collect and other key content. Please pay particular attention when reading.
1. Information We Collect
1.1 Account Registration and Login
When you register or log in with a mobile number, we collect your mobile number to verify your identity.
When you register or log in with an email address, we collect your email address to verify your identity and send verification information.
1.2 Device and Network Information
While you use the Service, we collect information such as device model, operating system version, unique device identifier, IP address, and network type to protect account security, diagnose faults, and push necessary service configuration updates.
1.3 Conversation and Interaction Information
During conversations with the Service, we collect your input and output information to interact with models and provide work conclusions.
Without your separate explicit consent, we will not use your input content, output content, files, or memory data to train or improve general artificial intelligence models, nor will we use such information for advertising, user profiling, or sale to third parties.
1.4 File and Multimedia Information
If the Service needs to read your files or multimedia content (including documents, images, audio, and video) while you use the Service, we will collect the file information you actively select for processing according to your instructions. We will not actively access any files or folders on your device without your authorization.
1.5 Clipboard Information
If you need to copy conversation information or content while using the Service, we may collect clipboard information to enable copying and pasting in other scenarios.
1.6 System Permission Calls
In specific scenarios, we may request device permissions, including photo library, microphone, camera, file system access, notifications, network access, and accessibility permissions. These permissions are required only for specific functions, and you may withdraw authorization at any time in system settings.
1.7 Memory Feature
To make intelligent conversation outputs better match your needs and improve continuity, personalization, and experience, we provide cross-session memory capabilities.
The memory feature automatically extracts and remembers personal information of reference value from your conversations with PivotOne through large models and related AI technologies (for example, identity, occupation, projects, and preferences you actively provide), and updates it periodically.
In subsequent conversations or task execution, the Service may use memory data related to the current request as background information together with your input to generate outputs or execute tasks.
You may add, delete, or correct PivotOne’s memory data about you at any time. If you need to disable the memory feature, contact us through the methods disclosed in this Guide.
1.8 Third-Party Artificial Intelligence Services
To provide AI conversation, task execution, file analysis, and multimedia processing, we integrate the following third-party AI services:
1. Qwen models provided by Alibaba Cloud Model Studio, provided by Alibaba Cloud Computing Co., Ltd.; privacy notice: https://help.aliyun.com/zh/model-studio/privacy-notice;
2. AI models provided by Volcengine Ark, provided by Beijing Volcano Engine Technology Co., Ltd.; privacy notice: https://www.volcengine.com/trust/privacy;
3. GPT models provided via the OpenAI API, provided by OpenAI, L.L.C.; privacy policy: https://openai.com/policies/privacy-policy/.
When you actively select and use a corresponding model, we may send to the relevant provider the text and task instructions you actively enter, conversation context related to the current request, files, images, audio, or video you actively select for processing, and memory data related to the current request after you enable the memory feature.
Such data is used only to understand your instructions, execute tasks you initiate, and generate corresponding results. Unless you actively write or upload the information, we will not proactively send your mobile number, email address, or unique device identifier to third-party AI providers.
We will not authorize the above providers to use your content for advertising, user profiling, data sale, or training their general artificial intelligence models. Providers may, under their terms of service, perform necessary data processing or short-term log retention for real-time inference, security protection, abuse prevention, and compliance with legal obligations.
Before first sending data to a third-party AI provider, we will clearly explain through an independent authorization page the data recipient, types of data that may be sent, processing purposes, and related privacy rules, and obtain your explicit consent. You may refuse authorization; if you refuse, related AI features will be unavailable, but other features that do not require third-party AI services will not be affected.
You may withdraw authorization through in-app settings or the contact methods in Section 10. After withdrawal, we will no longer send new data to the corresponding provider, without affecting data processing lawfully completed before withdrawal.
1.9 Third-Party SDKs
To ensure stable operation or implement related features, we may integrate third-party software development kits (SDKs). If an SDK involves personal information processing, we will, under the principle of minimum necessity, explain the SDK name, provider, data types processed, and processing purposes before enabling the related feature, and obtain your consent as required by law.
1.10 Circumstances Where Consent Is Not Required
Under applicable laws and regulations, we may collect your personal information without your consent where necessary to conclude or perform a contract; where necessary to perform statutory duties or obligations; where necessary to respond to public health emergencies or other emergencies; where necessary for news reporting or public opinion supervision in the public interest; where lawfully disclosed personal information is processed within a reasonable scope; and in other circumstances provided by laws and administrative regulations.
2. Storage of Information
2.1 Storage Methods and Retention Period
We store your information securely, including local storage, databases, and server logs. Generally, we retain your personal information only for the shortest time necessary to achieve the purposes, except where required to comply with laws and regulations, court judgments, or government requests.
2.2 Storage Location
In principle, personal information of users collected within the People’s Republic of China will be stored within China as required by law. If you actively choose to use GPT models provided via the OpenAI API, related request data may be transmitted outside China for processing. When cross-border processing occurs, we will inform you before transmission of the overseas recipient, processing purpose, data types, processing methods, and how you may exercise your personal information rights, obtain your separate consent, and fulfill applicable cross-border compliance obligations.
If our products or services cease operations, we will notify you by push notification, announcement, or similar means, and delete or anonymize your personal information within a reasonable period.
3. Information Security
We strictly comply with laws and regulations protecting users’ communication secrets. We use security measures no lower than industry peer levels, such as encryption and anonymization. We establish dedicated management systems, processes, and organizations to ensure information security, strictly limit access to information, and require confidentiality obligations.
If a personal information leakage or similar security incident occurs, we will activate contingency plans to contain the incident and notify you by push notification, announcement, or similar means.
4. How We Use Information
We use collected information within the purposes covered by this Privacy Protection Guide. If we use your personal information beyond the stated purposes at collection or beyond a directly or reasonably related scope, we will inform you again and obtain your express consent before such use.
5. Third-Party Data Processing and Public Disclosure
5.1 Entrusted Processing
When cooperating with third parties, we will comply with the law and process related data securely and prudently under the principle of minimum necessity. We will manage entrusted processors through contractual constraints, security assessments, and necessary technical measures, require them to process data only according to our instructions and agreed purposes, and provide personal information protection at the same or equivalent level as this Guide.
5.2 Sharing with Third Parties
Except for the third-party AI services listed in Section 1.8 and other circumstances necessary to implement third-party features you actively choose, we will not share your personal information with third parties. If related features involve data exchange, we will clearly explain through a separate authorization page before sending data the recipient, data types, processing purposes, and processing methods, and obtain your explicit consent as required by law. We will conduct security assessments and ongoing supervision of relevant third parties.
5.3 Public Disclosure
We will not publicly disclose collected personal information. If disclosure is necessary, we will inform you of the purpose, types of information disclosed, and any sensitive information that may be involved, and obtain your express consent.
5.4 Transfer
As our business develops, we may engage in mergers, acquisitions, asset transfers, or similar transactions. We will inform you of the relevant circumstances and continue to protect, or require the new personal information handler to continue to protect, your personal information in accordance with laws and regulations and standards no lower than those required by this privacy policy.
5.5 Exceptions
Under applicable laws and regulations, prior authorization is not required for sharing, transfer, or public disclosure of your personal information where necessary to conclude or perform a contract; where necessary to perform statutory duties or obligations; where necessary to respond to public health emergencies or other emergencies; where necessary for news reporting or public opinion supervision in the public interest; where lawfully disclosed personal information is processed within a reasonable scope; and in other circumstances provided by laws and administrative regulations.
6. Your Rights
While using the Service, to help you more conveniently access, delete, correct, and copy your personal information, and to safeguard your rights to withdraw consent and cancel your account, we provide corresponding settings in product design.
You may access and correct your account information; delete local conversation records and cache data; withdraw system permission authorizations or third-party AI data sharing authorizations; log out; and cancel your account. After withdrawing third-party AI authorization, we will no longer send new data to the relevant providers. After account cancellation, we will delete or anonymize your personal information, except as otherwise provided by laws and regulations.
You may also contact us through the methods disclosed in this Guide to make complaints and reports.
7. Changes
We may revise this Privacy Protection Guide from time to time. When terms change, we will present the updated Guide through pop-up prompts or in-app notices upon version updates and explain the effective date.
8. Protection of Minors
We attach great importance to protecting minors’ personal information. The Service is primarily intended for adults.
If you are a minor under 18, you should obtain prior consent from your parent or legal guardian before using the Service.
If you are a child under 14, you should obtain prior consent from your parent or legal guardian according to the registration and use process, and have your parent or legal guardian help complete registration.
9. Miscellaneous
For certain specific services or features, we may separately inform you of the purposes, methods, or scope of personal information processing through interactive copy, product interfaces, or pop-ups. If such separate notices conflict with this privacy policy, the separate notices prevail.
This privacy policy applies to services we provide to you through the PivotOne desktop applications and iOS/Android mobile clients. If a feature has separate privacy policy terms, those separate terms prevail over this privacy policy.
Please note that this privacy policy does not apply to software, products, or services provided by other third parties. If you access third-party software, products, or services through PivotOne, you are bound by the third party’s related agreements or policies.