隐私政策
Privacy Policy

中数慧智科技（成都）有限公司（下称“我们”）运营慧智AI超集平台（下称“本平台”）。我们依据《中华人民共和国个人信息保护法》《中华人民共和国网络安全法》《中华人民共和国数据安全法》及《电子商务法》处理您的个人信息。本政策说明我们处理哪些信息、为何处理、与谁共享、保存多久，以及您可以行使的权利。

一、个人信息处理者

• 名称：中数慧智科技（成都）有限公司
• 统一社会信用代码：91510100MADFR34B5H
• 注册地址：四川省成都市新津区普兴街道清云北路469号3栋3层1号（四川成都新津经济开发区）
• 个人信息保护负责人联系方式：caihui@alu.scu.edu.cn（邮件标题请注明“个人信息”）

二、本政策的适用范围

本政策适用于本平台网站、页面、账号系统、需求清单与订单流程、AI 导购与咨询服务，以及通过本平台发起的商务沟通。本政策不适用于第三方供应商、支付机构或外部网站自行开展的独立处理活动，该类活动适用其各自的隐私政策。

三、我们收集哪些信息

我们遵循最小必要原则，仅收集实现下述目的所必需的信息。

1. 账号与身份信息

电子邮箱地址、密码（以不可逆哈希形式存储，我们无法获知明文）、邮箱验证码。您通过第三方账号登录时，我们接收该方提供的必要标识（如用户 ID 与邮箱）。该等信息为创建账号所必需。

2. 交易与履约信息

联系人姓名、公司名称、联系电话、国家或地区、需求清单内容（商品 SKU、数量、备注）、订单金额与币种、合同签署信息、发票抬头与税号、交付地址或交付方式。该等信息为订立与履行合同所必需；未提供时我们无法完成报价、签约与交付。

3. 支付信息

支付方式、支付流水号、付款状态与到账时间。银行卡号、PayPal 账户凭证等支付工具信息由支付机构直接处理，我们不收集、不存储完整卡号或支付密码。该等信息为完成收款与对账所必需。

4. AI 对话与咨询内容

您在 AI 导购、在线咨询与工单中主动输入的文本，以及系统生成的回复、时间戳与所属会话标识。请勿在对话中提交身份证号、银行卡号、账号密码等敏感个人信息。

5. 技术与日志信息

IP 地址、浏览器类型与版本、操作系统、访问时间、请求路径、来源页面、错误日志。该等信息用于保障服务安全、排查故障与防御网络攻击。

6. 设备本地存储信息

语言偏好、需求清单（购物车）内容、登录会话令牌。该类信息存储于您的浏览器本地，您可随时清除。

敏感个人信息提示：我们不主动收集生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息。若业务确需处理，我们将单独告知处理目的、方式与必要性，并取得您的单独同意。

四、我们如何使用信息

• 提供与履行服务——账号注册与登录、报价、下单、签约、交付、开票、售后与技术支持（履行合同所必需）。
• 安全与风控——识别异常登录、防范欺诈、垃圾信息与网络攻击、限制接口滥用（我们的合法利益与法定义务）。
• 合规义务——出口管制与经济制裁筛查、税务与海关申报、配合监管与司法机关依法提出的要求（履行法定义务）。
• 服务改进——以聚合、去标识化的方式统计访问与转化情况，用于改进页面结构与商品供给。我们不会将您的对话内容用于训练对外提供的模型。
• 商务沟通——就您的咨询、订单与合同事项与您联系。我们不会向您发送与交易无关的营销信息，除非您另行同意。

我们不基于您的个人信息开展自动化决策以对您的权益产生重大影响；如未来开展，我们将提供说明与拒绝方式。

五、Cookie 与本地存储

本平台不使用第三方广告 Cookie。我们使用浏览器本地存储（localStorage）保存语言偏好、需求清单与登录态，以保证页面功能可用。您可通过浏览器设置清除本地存储；清除后语言偏好与需求清单将重置，但不影响账号与订单数据。

六、共享、委托处理与第三方清单

我们不出售您的个人信息。仅在下列必要范围内共享或委托处理，并与受托方约定处理目的、期限、方式与安全措施：

• 腾讯云（云服务器、数据库与对象存储）——承载本平台运行与数据存储，数据存储于中国境内节点。
• PayPal（支付机构）——在您选择在线支付时处理支付指令与账单信息。该等处理由 PayPal 作为独立处理者依其隐私政策进行。
• 银行与对公结算渠道——处理对公转账与对账。
• AI 推理服务提供方——为生成 AI 对话回复，将您输入的对话文本传输至模型服务接口进行处理；我们不会传输您的账号密码与支付信息。
• 专业顾问——律师、审计与税务机构，在保密义务约束下于必要范围提供协助。
• 法定披露——依法律法规、司法或行政机关的合法要求，或为保护用户、公众与我们的人身财产安全所必需时披露。

七、存储地点与跨境传输

您的个人信息存储于中华人民共和国境内的服务器与数据库中，我们不会主动向境外提供您的个人信息。以下情形可能涉及境外处理，提请您注意：

• 您主动选择境外支付渠道（如 PayPal）时，支付信息由该机构依其所在司法辖区的规则处理；
• 公共静态资源经全球分发网络加载，该网络可能接收到您的 IP 地址；
• 您主动通过境外邮箱、境外通讯工具与我们联系时，相应内容将经由该渠道传输。

如未来确需向境外提供个人信息，我们将依法履行告知、单独同意、安全评估或标准合同等法定程序后再行实施。

八、存储期限

• 账号信息：账号存续期间保存；您注销后 30 日内删除或匿名化。
• 订单与合同信息：自交易完成之日起不少于 3 年（依《电子商务法》商品与服务信息、交易信息留存要求），涉及税务、会计凭证的按法定期限保存。
• AI 对话内容：仅用于处理你的请求与服务质量核查，不用于营销用途；除法律要求外不对外提供，如需删除请联系我们。
• 访问与错误日志：不少于 6 个月（依《网络安全法》网络日志留存要求），期满后删除或匿名化。
• 咨询与工单记录：自结单之日起 1 年。

超过上述期限后，我们将删除或匿名化处理；因技术上难以立即删除的，我们将停止除存储与必要安全保护之外的处理。

九、我们如何保护信息

我们采取传输层加密（HTTPS）、密码不可逆哈希存储、数据库行级访问控制、最小权限与内部审批、访问日志审计等措施。我们仅允许因履行职责确需接触的工作人员访问个人信息，并要求其承担保密义务。互联网环境不存在绝对安全，若发生个人信息泄露、篡改或丢失，我们将按法律要求及时告知您并向监管部门报告。

十、您的权利

在法律规定范围内，您有权：

• 查阅与复制您的个人信息；
• 更正、补充不准确或不完整的信息；
• 删除个人信息（处理目的已实现、我们停止提供服务、您撤回同意等情形）；
• 撤回同意——不影响撤回前已进行的处理；
• 注销账号——注销后我们将停止为您提供服务并依第八条处理信息；
• 转移——请求将您的个人信息转移至您指定的处理者（符合国家网信部门规定条件时）；
• 要求解释说明我们的处理规则。

请通过本政策第一条的邮箱提出请求。我们将在核验身份后 15 个工作日内答复。为保护您的信息，我们可能要求您提供必要的身份验证信息。若您认为我们的处理损害了您的合法权益，可向网信、市场监管等部门投诉举报，或向有管辖权的人民法院提起诉讼。

十一、未成年人

本平台面向企业与具备完全民事行为能力的成年人提供服务，不面向未满 18 周岁的未成年人。我们不会主动收集未成年人的个人信息。若我们发现相关情形，将尽快删除。如您是未成年人的监护人并发现该情形，请通过上述邮箱联系我们。

十二、AI 功能的特别说明

AI 导购与咨询由机器学习模型生成，输出内容可能存在错误或不完整，仅供信息参考，不构成技术承诺、法律意见或成交要约。商品参数、价格、交付范围与服务水平以正式报价单、订单与合同为准。我们按《生成式人工智能服务管理暂行办法》等规定对生成内容采取必要标识与安全措施。

十三、本政策的更新

因业务调整或法律变化，我们可能更新本政策。更新后我们将在本页面公布新版本并修改生效日期；涉及处理目的、方式或信息类型的实质性变更，我们将以页面提示或邮件方式提请您注意，必要时重新取得您的同意。

十四、联系我们

个人信息保护负责人：caihui@alu.scu.edu.cn
电话：+86 199 5028 4149
通信地址：四川省成都市新津区普兴街道清云北路469号3栋3层1号（四川成都新津经济开发区）

本政策以简体中文版本为准。其他语言版本仅为便利目的提供，如与中文版本存在歧义，以中文版本为准。

Zhongshu Huizhi Technology (Chengdu) Co., Ltd. ("we", "us") operates the Huizhi AI Supermart platform (the "Platform"). We process personal information in accordance with the Personal Information Protection Law of the People's Republic of China, the Cybersecurity Law, the Data Security Law and the E-Commerce Law. This policy explains what we process, why, with whom we share it, how long we retain it, and the rights available to you.

1. Data Controller

• Entity: Zhongshu Huizhi Technology (Chengdu) Co., Ltd.
• Unified Social Credit Code: 91510100MADFR34B5H
• Registered address: Unit 1, 3/F, Building 3, No. 469 Qingyun North Road, Puxing Subdistrict, Xinjin District, Chengdu, Sichuan Province, China (Sichuan Chengdu Xinjin Economic Development Zone)
• Privacy contact: caihui@alu.scu.edu.cn (subject line: "Personal Data")

2. Scope

This policy applies to our website, account system, quotation and order workflows, AI assistant and consultation services, and business communications initiated through the Platform. It does not apply to independent processing carried out by third-party suppliers, payment institutions or external websites, which is governed by their own privacy policies.

3. Information We Collect

We apply the principle of minimum necessity and collect only what is required for the purposes below.

3.1 Account and identity data

Email address, password (stored as an irreversible hash; we cannot recover the plaintext) and email verification codes. When you sign in through a third-party account, we receive the minimum identifier provided by that party (such as user ID and email). This data is necessary to create an account.

3.2 Transaction and fulfilment data

Contact name, company name, telephone number, country or region, requirement list contents (SKU, quantity, notes), order value and currency, contract details, invoice title and tax number, delivery address or method. This data is necessary to conclude and perform the contract; without it we cannot issue a quotation, sign or deliver.

3.3 Payment data

Payment method, transaction reference, payment status and settlement time. Card numbers and PayPal credentials are processed directly by the payment institution; we do not collect or store full card numbers or payment passwords. This data is necessary for collection and reconciliation.

3.4 AI conversation content

Text you voluntarily enter into the AI assistant, online consultation or support tickets, together with generated replies, timestamps and session identifiers. Please do not submit identity numbers, card numbers or account passwords in a conversation.

3.5 Technical and log data

IP address, browser type and version, operating system, access time, request path, referring page and error logs. This data is used for service security, troubleshooting and attack mitigation.

3.6 Local browser storage

Language preference, requirement list (cart) contents and session token. This data is stored locally in your browser and can be cleared at any time.

Sensitive personal information: We do not intentionally collect biometric, religious, medical, financial-account or location-tracking data. Where a service genuinely requires it, we will separately inform you of the purpose, method and necessity and obtain your separate consent.

4. How We Use Information

• Service delivery — registration and sign-in, quotation, ordering, contracting, delivery, invoicing, after-sales and technical support (necessary for contract performance).
• Security and risk control — detecting anomalous sign-ins, preventing fraud, spam and attacks, limiting API abuse (our legitimate interest and legal obligations).
• Legal compliance — export control and sanctions screening, tax and customs filing, responding to lawful requests from regulators and judicial authorities.
• Service improvement — aggregated, de-identified statistics on traffic and conversion used to improve page structure and product coverage. We do not use your conversation content to train externally offered models.
• Business communication — contacting you about your enquiry, order or contract. We do not send marketing unrelated to a transaction unless you separately agree.

We do not make automated decisions based on your personal information that produce significant legal effects. Should this change, we will explain the logic and provide a means to object.

5. Cookies and Local Storage

We do not use third-party advertising cookies. We use browser local storage to remember your language preference, requirement list and session, so that the interface works as expected. You may clear local storage through your browser settings; language preference and the requirement list will reset, while account and order data are unaffected.

6. Sharing and Processors

We do not sell personal information. We share or entrust processing only as follows, under contracts specifying purpose, duration, method and security measures:

• Tencent Cloud — servers, databases and object storage hosting the Platform, with data stored in mainland China regions.
• PayPal — processes payment instructions and billing details when you choose online payment, as an independent controller under its own privacy policy.
• Banks and corporate settlement channels — corporate transfers and reconciliation.
• AI inference provider — your conversation text is transmitted to a model service to generate replies; passwords and payment data are never transmitted.
• Professional advisers — lawyers, auditors and tax advisers under confidentiality obligations, on a need-to-know basis.
• Legal disclosure — where required by law or by a lawful request of a judicial or administrative authority, or necessary to protect the safety of users, the public or ourselves.

7. Storage Location and Cross-Border Transfer

Your personal information is stored on servers and databases located in mainland China. We do not proactively provide personal information to recipients outside China. The following scenarios may involve processing outside mainland China:

• where you voluntarily choose an overseas payment channel (such as PayPal), payment data is processed by that institution under the rules of its jurisdiction;
• public static assets are loaded through a global delivery network, which may receive your IP address;
• where you contact us through an overseas email or messaging service, the content is transmitted through that channel.

Should a cross-border transfer become necessary, we will complete the statutory notification, separate consent, security assessment or standard-contract procedures before carrying it out.

8. Retention

• Account data: for the life of the account; deleted or anonymised within 30 days of closure.
• Order and contract data: at least 3 years from completion of the transaction (as required for product, service and transaction records under the E-Commerce Law); tax and accounting records for the statutory period.
• AI conversation content: used only to process your requests and for service quality review, never for marketing; not shared externally except as required by law — contact us to request deletion.
• Access and error logs: at least 6 months (cyber-log retention under the Cybersecurity Law), then deleted or anonymised.
• Enquiry and ticket records: 1 year from closure.

Beyond these periods we delete or anonymise the data. Where deletion is technically impracticable, we cease all processing other than storage and necessary security protection.

9. Security

We apply HTTPS transport encryption, irreversible password hashing, row-level database access control, least privilege with internal approval, and access-log auditing. Personnel access personal information only where required to perform their duties and are bound by confidentiality obligations. No internet environment is absolutely secure; if a breach, tampering or loss occurs, we will notify you and report to the regulator as required by law.

10. Your Rights

Within the limits of applicable law you may:

• access and obtain a copy of your personal information;
• correct or supplement inaccurate or incomplete information;
• request deletion where the purpose is fulfilled, we cease the service, or you withdraw consent;
• withdraw consent, without affecting processing already carried out;
• close your account, after which we stop providing the service and handle data under section 8;
• request portability to a designated processor where the conditions set by the cyberspace regulator are met;
• request an explanation of our processing rules.

Please write to the address in section 1. We respond within 15 business days of verifying your identity, and may ask for information necessary to verify it. If you believe our processing infringes your rights, you may complain to the cyberspace or market-regulation authorities, or bring an action before a competent people's court.

11. Minors

The Platform serves businesses and adults with full civil capacity and is not directed to anyone under 18. We do not knowingly collect personal information from minors and will delete it promptly upon discovery. Guardians who become aware of such data may contact us at the address above.

12. AI Features

AI assistance and consultation output is generated by machine-learning models and may be inaccurate or incomplete. It is provided for information only and does not constitute a technical warranty, legal advice or an offer to contract. Specifications, prices, delivery scope and service levels are governed by the formal quotation, order and contract. We apply required labelling and safety measures to generated content in accordance with the Interim Measures for the Management of Generative AI Services.

13. Changes

We may update this policy in response to business or legal changes. The revised version will be published on this page with a new effective date. Where a change materially affects the purpose, method or categories of processing, we will highlight it on the site or by email and, where required, seek your consent again.

14. Contact

Privacy contact: caihui@alu.scu.edu.cn
Telephone: +86 199 5028 4149
Postal address: Unit 1, 3/F, Building 3, No. 469 Qingyun North Road, Puxing Subdistrict, Xinjin District, Chengdu, Sichuan Province, China

The Simplified Chinese version of this policy prevails. Other language versions are provided for convenience only; in case of ambiguity, the Chinese version controls.