笔锋官隐私政策
请重点阅读上传材料的授权责任、第三方处理、保存期限和权利申请方式。本政策说明我们如何处理个人信息，不构成对您个人信息的无限制授权。涉及单独同意、书面同意或其他法定程序的，我们依法另行履行；浏览本政策不视为您已经作出上述同意。
一、运营主体与适用关系
笔锋官由泰迩云算（上海）科技有限公司运营，以下称“我们”或“平台”。个人信息保护联系邮箱：service@taier.net.cn。您可通过该邮箱提出本政策相关咨询、投诉及权利申请。
本政策适用于我们作为个人信息处理者开展的处理活动。机构或团队用户决定其上传材料的处理目的和范围时，该机构或团队应依法履行告知、取得同意或具备其他合法处理基础等义务；我们按照服务约定及其合法指令作为受托方提供处理服务。因该机构或团队的违法指令、材料来源或权限瑕疵造成的责任，由相应责任方依法承担；平台自身过错及法定责任不因此免除。其他主体独立提供的产品、网站或小程序内第三方服务，另适用其向您展示的规则。
二、我们处理哪些信息、用于什么目的
我们根据您实际使用的功能处理必要信息。未开通、未选择或无权使用的功能，不因列入本政策而自动开启。为订立、履行您与平台的合同、履行法定义务所必需的处理，依法适用相应处理依据；其他以同意为依据的处理由您自愿选择。
| 使用场景 | 主要信息 | 目的与必要性 |
|---|---|---|
| 注册、登录与账户安全 | 账号、手机号、短信验证码及验证结果、邮箱、显示名称、密码校验信息；选择机构服务时的组织及权限信息 | 创建和验证账户、找回密码、识别权限、防止冒用。当前自助注册需填写页面标明的必填项；缺少必要信息无法完成相应注册或验证。 |
| 实名信息登记 | 您在实名入口提交的真实姓名、居民身份证号码，以及认证状态、时间和证件号码的哈希校验值 | 用于需要实名的业务及唯一账号校验。现有业务库保存姓名、证件哈希值和认证时间，身份证号码原文用于当次格式及重复校验，不写入该业务字段。该功能包含敏感个人信息，请按入口说明审慎提交。 |
| 文档、云盘与专业工具 | 您输入或上传的文字、图片、文档及附件，文件名称和格式、工具参数、处理结果、版本及必要操作记录 | 保存、解析、编辑、转换、生成、检索、下载及按您选择的范围分享内容。不使用某项工具不影响其他可独立提供的功能。 |
| 异步任务与协作 | 任务名称、需求、材料、执行参数、联系信息、方案、报价、确认或返工意见、成果及流程记录 | 受理需求、分配执行、沟通方案、跟踪进度、交付和处理争议。与任务相关的授权执行人员可在其职责及权限范围内接触必要材料。 |
| 计费、充值与权益 | 订单号、金额、支付状态、交易或退款标识、灵石及权益变动记录；您申请开票时提交的抬头、税号等信息 | 核对交易、记账、退款、开票和履行税务等义务。银行卡密码等支付验证信息由支付服务方按其规则处理，不应填入任务或客服文本。 |
| 移动端及微信相关功能 | 您主动授权后取得的微信账户标识、绑定关系、必要的手机号授权结果、订阅授权及通知送达记录 | 完成对应移动端登录、账户绑定、支付或您订阅的任务提醒。拒绝可选订阅不影响任务本身；具体授权以使用时的页面和系统提示为准。 |
| 客服、邮件与系统通知 | 联系邮箱、手机号、咨询内容、您提供的截图或附件、处理记录、必要的发送和送达记录 | 答复咨询、核验投诉、通知账户或任务状态。向您提供服务所需的通知与商业推广区别处理，依法提供商业推广的拒绝方式。 |
| 运行、安全与故障排查 | IP 地址、浏览器及操作系统信息、请求时间和结果、登录及操作日志、异常信息、必要的会话标识 | 维持登录和请求安全、排查故障、防止攻击、欺诈、越权及滥用，依法保存必要证据。不会因您使用网页而读取浏览器无法取得的设备硬件地址或本地全部文件。 |
经匿名化且无法识别特定个人、不能复原的信息不属于个人信息。平台可对这类统计信息进行服务质量分析、容量规划和产品改进；去标识化信息仍按个人信息保护。我们不会仅凭本政策取得将可识别的私人文档用于通用模型训练、出售个人信息或与本次服务无关营销的授权。
三、上传材料、敏感信息与 AI 处理
您应确保对上传、输入、共享和委托处理的材料享有合法权利或已取得必要授权，并完成对材料涉及人员的依法告知。请优先采用脱敏、化名或删减方式，不提交与任务无关的信息。不得上传国家秘密、违法取得的信息，或无权对外提供的商业秘密、第三方隐私与受保密义务约束的材料。
身份证件、医疗健康、金融账户、行踪轨迹、生物识别以及不满十四周岁未成年人的信息等可能属于敏感个人信息。只有在具体目的、充分必要性和适当保护措施具备时才应提交；依法需要单独同意、监护人同意或书面同意的，应事先完成相应程序。涉及真实身份核验的，以实际核验入口的专门说明为准。
您使用 AI 或异步处理功能时，与该请求相关的指令、选定文本、必要上下文及附件可能被传送至处理服务或执行环境，并生成中间文件、结果及必要的运行记录。为解决故障、核验交付、处理投诉或安全事件，授权人员可能在必要范围内访问相关内容。平台不承诺所有服务均仅在内存中处理、即时清除或完全没有人工参与。
依法需要对生成合成内容添加显式或隐式标识、记录用户选择或保存相关日志时，我们将处理生成内容、内容编号、服务提供者标识、生成时间及必要操作记录。您主动要求取得依法允许不带显式标识的内容时，我们可能记录该请求，并提示您在对外发布或传播时履行主动声明和标识义务。
平台可在有合理依据怀疑材料来源、权限或内容不合法时要求说明、暂停相关处理或限制分享，并依法保存必要证据。因您违法提供材料或违反授权义务造成损害的，您应依法承担相应责任；本条不免除平台自身过错及法律规定不得免除的责任。生成结果需由您结合用途核验，不应将未经核实的个人信息或推断直接用于对他人有重大影响的决定。
四、Cookie、本地存储与专属链接
我们使用必要的 Cookie、会话标识及类似技术维持登录、防止请求伪造、识别访问权限。浏览器本地存储还可保存语言、外观、折叠状态、近期使用项及提示是否已读等偏好。例如，PC 手机端使用提示按当前账号在本浏览器记录已读状态，清理浏览器数据或更换设备后可能再次显示。
您可以通过浏览器管理 Cookie 和本地存储。关闭必要存储可能影响登录和部分交互；退出账户并清理数据有助于保护共用设备上的信息。任务通知邮件可能包含具有访问或操作权限的专属链接，请勿转发或公开；如怀疑账户或链接泄露，请及时联系我们处理。
五、委托处理、对外提供与披露
为完成您选择的服务，平台可能使用短信、邮件、云计算、文档引擎、AI 处理、支付等服务。我们按实际合作关系区分受托处理与其他主体的独立处理，对受托方约定处理目的、范围、期限、安全措施及返还或删除要求，并依法监督。允许访问的人员及接收方仅取得实现该服务所需的信息。
| 相关服务 | 可能涉及的信息和用途 | 适用边界 |
|---|---|---|
| 短信服务（现有接口为丹米） | 接收手机号、验证码或服务通知内容、发送结果，用于身份验证和对应服务提醒 | 仅在请求验证码或发生必要通知时处理；不因此授权发送无关推广。 |
| 邮件服务 | 收件邮箱、通知内容、必要任务摘要、专属链接和您选择的附件，用于任务协作与客服沟通 | 邮件及附件可能由邮件服务系统保存；不作“发送后即时销毁”的承诺。 |
| 文档引擎、AI 及任务执行服务 | 所选材料、任务指令、必要上下文及结果，用于解析、生成、转换和交付 | 根据您使用的具体功能处理；对接网关可能继续调用相应服务，受托链路依法管理。 |
| 微信与支付服务 | 必要账号标识、授权结果、订单信息、支付状态和订阅消息内容 | 在您使用绑定、支付或订阅功能时适用，并受对应授权提示和服务方规则约束。 |
| 您指定的协作或分享对象 | 您选择的文档、任务、成员身份和协作记录 | 以您设置的分享范围及对象权限为限；接收方另行保存的副本需向其提出相应请求。 |
以上为功能分类说明，不替代依法应向您作出的具体接收方告知。向其他个人信息处理者提供信息时，我们依法另行告知接收方名称及联系方式、目的、方式和信息种类，并取得依法需要的单独同意；新增接收方或用途不因本政策中的分类描述而当然获得授权。您可通过联系邮箱查询与所用功能相关的处理和接收方信息。
因合并、分立、解散、破产等发生信息转移时，我们依法告知接收方，并要求其继续履行保护义务；变更原目的或方式时依法重新取得同意。公开披露个人信息须具备法律依据并履行相应程序。对于司法、行政机关依法提出的请求，平台可在核验其权限和依据后，于必要范围内配合，不作“任何情形均不披露”的承诺。
六、保存期限、删除与数据出境
我们以实现对应处理目的所必需的最短期限保存信息。账号信息在服务关系持续期间用于提供账户服务；业务材料结合任务履行、您选择的保存安排及页面提示确定期限；交易、账务、安全和争议记录按相应法定义务及必要举证期限保存。任务页面已显示文件到期时间的，请在到期前下载所需成果；平台不承诺永久保存所有附件和中间文件。
您删除文件、取消任务或注销账户后，在线展示、回收站、共享副本、日志和备份中的处理进度可能不同，不等于所有介质同步物理擦除。满足法定删除条件的，我们依法删除或匿名化；法定保存期限未满或者技术上暂难删除的，停止除存储和必要安全保护之外的处理，并在条件具备后处理。备份按适用的轮换及清理机制执行。
服务器和第三方服务的处理地点以具体服务的部署及接收方告知为准。因您选择的服务需要向境外提供个人信息的，我们应在发生前依法履行适用的出境条件，告知境外接收方、联系方式、处理目的和方式、信息种类及向其行使权利的程序，并取得依法需要的单独同意。该条款本身不构成您的出境授权。
七、您如何管理信息和提出申请
您享有依法知情、决定、限制或拒绝处理、查阅、复制、转移、更正、补充、删除个人信息及要求解释处理规则的权利。已提供的文档、云盘、账户功能可用于对应操作；页面未提供自助入口、入口不可用或需要超出单个文件范围处理时，请发邮件至 service@taier.net.cn。
申请时请说明注册账号、请求类型、涉及的信息和可联系您的方式，避免首次申请即发送完整身份证件或无关敏感材料。为防止冒用，我们可进行与风险相称的身份及代理权限核验；通常在完成必要核验后十五个工作日内答复或说明进度，法律规定更短期限的从其规定。一般合理申请不收费；对明显重复、超出合理范围的请求，可依法收取必要成本费用。存在无法核验身份、请求将损害他人合法权益、信息处于法定保存期或法律规定的其他不予处理情形时，我们可依法拒绝或限制处理，并说明理由和可用的申诉途径。
您可对以同意为依据的特定处理向上述邮箱申请撤回，无需一律先注销整个账号。撤回不影响撤回前合法处理，也不影响依法基于履行合同或法定义务所必需的处理。若相关信息为您申请的功能所必需，该项功能可能无法继续；可以独立提供的其他服务不因此停止。
申请注销账户时，我们会核实身份，并处理与结算、未完成任务和第三方合法权益相关的必要事项，不设置不合理障碍。注销后依本政策及法律要求处理信息，不保证您转交给其他用户或外部接收方的副本同步消失。近亲属依法就已故用户信息提出申请的，在核实证明和合法利益后处理，用户生前另有安排的除外。
八、安全保护与您的配合
我们采取与处理风险相适应的身份验证、权限控制、必要的传输保护、日志审计、备份和事件处置措施，限制不必要的访问和使用。网络及第三方服务存在客观风险，平台不保证绝对安全、永不故障或任何情况下均可恢复数据；我们仍依法履行安全保障、补救、报告和通知义务。
请使用可靠密码，保护邮箱、手机、微信账户及任务链接，及时更新共享权限，并对重要材料保留适当备份。发现异常时请尽快告知我们并配合核实。平台可以为控制风险采取临时限制访问、暂停相关任务或其他必要措施，并依法处理后续恢复及申诉。
九、未成年人信息
笔锋官的注册与业务服务主要面向具备完全民事行为能力的成年人。请勿以未成年人身份违规注册。成年人因合法的教育、案件或其他业务需要提交涉及未成年人的材料时，仍应遵循必要性原则并取得所需授权；不满十四周岁未成年人的信息按敏感个人信息及适用的监护人同意规则处理。
监护人如发现相关信息被不当提交，可联系我们申请核实、限制处理或删除。我们核验监护关系和相关事实后，依法采取保护措施并处理请求；对依法需要保存的业务记录，按照本政策的保存与删除规则处理。
十、政策更新、责任及争议
为适应业务、技术或法律变化，我们可更新本政策并公布日期。对处理目的、方式、种类、接收方等有实质影响的变更，将通过显著页面提示、站内通知或其他适当方式告知；依法需要重新取得同意的，在取得前不开展相应新增处理。一般文字整理不改变已经明确的处理边界。
本政策与服务协议中涉及个人信息的约定不一致时，以本政策的具体规则为准；法律有强制性规定的从其规定。本政策不限制您投诉、举报或寻求司法救济的权利，也不排除平台依法不得免除的责任。有关个人信息保护的问题请优先通过 service@taier.net.cn 联系我们，以便及时核查和处理。
Beefur Privacy Policy
Please pay particular attention to responsibility for uploaded materials, third-party processing, retention and your rights. This policy is not unrestricted permission to use personal information. Reading it does not constitute any separate or written consent required by law.
1. Operator and scope
Beefur is operated by Taier Yunsuan (Shanghai) Technology Co., Ltd. (“we” or the “Platform”). Privacy contact: service@taier.net.cn. This policy describes processing for which we determine the purposes and means. Organizations that determine how personal information in their materials is used remain responsible for their own lawful instructions and notices. We perform commissioned processing within the agreed scope. Independently provided services also have their own applicable rules; this does not remove our statutory responsibilities.
2. Information and purposes
We process information necessary for the functions you actually use. Listing a function does not activate a hidden or unavailable service. Processing necessary to enter into or perform your contract, or to meet a legal obligation, relies on the applicable legal basis; consent-based processing remains voluntary.
| Function | Information and purpose |
|---|---|
| Accounts and security | Account identifier, phone number, verification code and result, email, display name, password verification information, and relevant organization permissions, to register, sign in, recover access and prevent misuse. Required registration information is identified on the form. |
| Real-name information | Your submitted name and resident identity-card number, status, time and a hash of the number, for relevant real-name business requirements and account uniqueness checks. The current business database stores the name, hash and verification time. The original number is used for format and duplicate checks and is not written to that business field. This function involves sensitive personal information; review its entry-point notice before submitting. |
| Documents, storage and tools | Selected text, images, files, names, formats, tool parameters, results, versions and necessary operation records, to store, edit, parse, generate, convert, search, download or share as requested. |
| Asynchronous tasks | Task titles, requests, materials, parameters, contact information, plans, quotations, decisions, revision requests, deliverables and workflow records, to assess, execute, communicate, deliver and resolve disputes. Authorized task personnel may access necessary materials. |
| Billing and benefits | Order identifiers, amounts, transaction or refund identifiers, payment status, balance and benefit records, and invoice details you request, to reconcile, bill, refund and meet legal obligations. Do not submit payment passwords in tasks or support messages. |
| Mobile and WeChat services | Account identifiers, binding information, authorized phone information, subscription choices and delivery records obtained through relevant authorization, to support login, binding, payment and subscribed task reminders. Optional subscription refusal does not prevent task processing. |
| Support and communications | Contact details, correspondence, attachments you provide and necessary sending or delivery records, to respond, verify complaints and notify you about services. Marketing is handled separately with legally required refusal options. |
| Operation and risk control | IP address, browser and operating system information, request times and results, login and operation logs, errors and necessary session identifiers, to secure services, troubleshoot and prevent fraud or abuse. Using a website does not grant access to all local files or hardware addresses unavailable to the browser. |
Irreversibly anonymized statistics may be used for service analysis and improvement. Pseudonymized information remains protected personal information. This policy does not itself authorize use of identifiable private documents for general-purpose model training, sale of personal information or unrelated marketing.
3. Uploaded materials, sensitive information and AI
You must have lawful rights or authorization to submit, share and commission processing of your materials and fulfill applicable notice obligations. Minimize or redact information not needed for the task. Do not provide state secrets, unlawfully obtained information, or confidential or private materials you are not authorized to disclose.
Identity documents, health information, financial accounts, location, biometrics and information about children under fourteen may be sensitive. Only submit it for a specific and sufficiently necessary purpose with appropriate safeguards and any required separate, written or guardian consent. Actual identity verification uses the dedicated notice at that entry point.
AI and asynchronous requests may transmit instructions, selected content, necessary context and attachments to processing services or execution environments and create intermediate files, results and necessary logs. Authorized personnel may access relevant content to troubleshoot, verify delivery, investigate complaints or respond to security incidents. We do not promise memory-only processing, immediate deletion or the absence of human involvement.
Where applicable law requires labels for AI-generated or synthetic content, we may process the generated content, content identifier, provider identifier, generation time and necessary operation logs to provide visible or metadata labels and retain required records.
Where there are reasonable concerns about lawful rights or content, we may request clarification, suspend the affected processing, restrict sharing and preserve necessary evidence. You are responsible under applicable law for unlawful submissions and breaches of authorization duties. Our own fault and non-excludable legal responsibilities remain unaffected. Verify generated information before use, particularly before decisions significantly affecting others.
4. Cookies, local storage and task links
Necessary cookies and session identifiers maintain access, permissions and request security. Local storage may remember language, appearance, navigation, recent tools and read notices. The PC mobile-task notice stores a per-account read marker in that browser; clearing data or changing devices may show it again. You can manage storage in your browser, although disabling necessary storage may affect access. Sign out on shared devices.
Task emails may contain personal links granting task access or actions. Keep them private and contact us if you suspect exposure. Do not forward or publish these links.
5. Processors, recipients and disclosures
Relevant services may include SMS (the current interface uses Danmi), email, document engines, AI and task execution services, WeChat, payment, and recipients you choose for collaboration. SMS uses the receiving number, code or required notice and sending result. Email may include recipient details, a necessary task summary, private links and selected attachments. Document and AI processing uses the selected materials, instructions, context and results. WeChat and payment processing uses relevant identifiers, authorization, order status and subscribed messages. Collaboration follows your selected sharing scope.
We distinguish commissioned processing from independent processing and require processors to follow appropriate purpose, scope, term, security and return or deletion obligations. Authorized recipients receive only what the selected service needs. This category list does not replace legally required notice identifying a specific independent recipient, its contact details, purposes, means and data categories, or any required separate consent. A general category does not authorize new recipients or uses. Contact us for information relevant to the services you use.
For transfers resulting from corporate changes such as merger, dissolution or bankruptcy, we provide required notice and require the recipient to continue protection obligations. Changes to purposes or means require renewed consent where applicable. Public disclosure requires a lawful basis and applicable procedures. We may comply with lawful judicial or regulatory requests after checking their authority and scope; there is no promise that disclosure can never occur.
6. Retention, deletion and international processing
We retain personal information for the shortest period necessary for the relevant purpose. Account information supports the service relationship. Materials follow task fulfillment, your storage arrangements and stated expiry periods. Transaction, accounting, security and dispute records follow applicable legal and necessary evidence requirements. Download deliverables before any displayed expiry date; we do not promise permanent storage of attachments or intermediate files.
Removing a file, cancelling a task or closing an account does not mean simultaneous physical deletion from online records, recycle bins, shared copies, logs and backups. We delete or anonymize information when legally required. Where a statutory retention period remains or deletion is technically difficult, processing is restricted to storage and necessary security protection until deletion can lawfully be completed. Backups follow applicable rotation and clearance processes.
Processing locations depend on the deployment and recipient notices for the particular service. If your selected service requires a transfer abroad, we must first fulfill applicable legal conditions, notify you of the overseas recipient, contact details, purposes, means, categories and rights channels, and obtain any required separate consent. This clause is not itself your transfer authorization.
7. Your rights and requests
You have applicable rights to information, decisions, restriction or refusal, access, copies, portability, correction, completion, deletion and explanation. Use available account and document functions, or email service@taier.net.cn when a self-service option is unavailable or insufficient. Identify your account, request and affected information; do not initially send unnecessary identity documents or unrelated sensitive materials.
We may verify identity and authority proportionately to prevent impersonation. We ordinarily respond or explain progress within fifteen working days after necessary verification, subject to any shorter legal deadline. Reasonable requests are generally free; necessary costs may be charged for manifestly repetitive or excessive requests where lawful. We may lawfully refuse or limit a request if identity cannot be verified, another person's lawful rights would be harmed, a statutory retention period applies, or another legal exception applies, and will explain the reason and available complaint channels.
You may withdraw consent for specific consent-based processing through the contact email without invariably closing your entire account. Withdrawal does not invalidate prior lawful processing or necessary processing under another legal basis. The affected essential function may stop, while independently available functions remain available.
Account closure involves identity verification and necessary arrangements for settlement, unfinished tasks and third-party rights without unreasonable obstacles. Information is then handled under the retention rules, rather than an unconditional promise to erase all copies held by others. Lawful requests by close relatives of deceased users are assessed on verified evidence and legitimate interests, subject to the user's prior arrangements.
8. Security and cooperation
We use risk-appropriate authentication, access controls, necessary transmission protection, logs, backup and incident response. No absolute security, uninterrupted operation or recovery in every situation is promised. We still perform required safeguards, remediation, reporting and notification. Protect passwords, email, phone and WeChat access, private links and sharing permissions; retain appropriate backups and report suspected incidents. Necessary temporary access or task restrictions may be used to contain a risk, with applicable recovery and complaint handling.
9. Minors
Registration and business services are primarily intended for adults with full civil capacity. Adults submitting children's information for lawful education, casework or other necessary purposes must still minimize information and obtain required authorization. Information about children under fourteen receives sensitive-information and applicable guardian-consent protection. Guardians may request verification, restriction or deletion. After verifying guardianship and the relevant facts, we take legally required protective measures and address the request. Business records subject to legal retention requirements are handled under the retention and deletion rules in this Policy.
10. Updates, responsibility and disputes
We may update this policy for business, technical or legal changes and publish the date. Material changes to processing purposes, means, categories or recipients are notified prominently through appropriate channels. Where renewed consent is required, the affected new processing does not begin before it is obtained. Editorial changes do not expand processing authority.
Specific personal-information rules here prevail over inconsistent service terms, subject to mandatory law. This policy does not restrict complaints, reports or judicial remedies, or exclude responsibilities that cannot lawfully be excluded. Contact service@taier.net.cn so we can investigate and address concerns.