隐私政策

Draw Studio（以下简称"本平台"）非常重视您的个人信息与隐私保护。本政策说明我们在您使用本平台服务过程中如何收集、使用、存储、共享和保护您的信息，以及您享有的权利。请在使用前仔细阅读；一旦您注册、登录或使用本平台服务，即表示您已理解并同意本政策。

一、我们收集的信息

  1. 账号信息：注册与登录时提供的用户名、邮箱、手机号、密码（仅保存不可逆的加密哈希）、头像；您选择以微信、QQ 或其他第三方账号登录时，从该平台获取的您授权的昵称、头像及该平台分配的唯一标识（如 OpenID / UnionID）。我们不会获取您的第三方账号密码。
  2. 使用信息：您提交的提示词与对话内容、上传的参考图、商品图、人物模特图、视频素材等文件，生成的图像与视频，画布项目及其编辑记录，素材库中的文件、文件夹与标签，作品广场投稿，团队及其成员关系，以及电商美工等功能中填写的商品与场景描述。
  3. 交易信息：套餐订单、积分变动明细、支付渠道返回的交易流水号、卡密兑换记录、退款与开票申请。您的银行卡号、支付账户密码等由支付机构处理，本平台不收集。
  4. 设备与日志信息：为保障安全与正常运行，我们会记录 IP 地址、浏览器类型、访问时间、操作日志、请求频率，以及您的设备时区（用于按您所在时区显示时间与签到日期，您可在账号设置中修改）和语言偏好。
  5. 审查记录：为履行内容合规义务，对于经语义审查判定风险较高的提示词，我们会保留该提示词、评估结果及时间等审查记录，保留期限以后台配置为准。
  6. Cookie 与本地存储：我们使用一个 Cookie 保存您的语言偏好，并在浏览器本地存储中保存登录凭证、界面偏好及少量缓存（如站点名称、登录方式），以便刷新页面时立即恢复状态。这些数据不用于跨站跟踪。本平台不接入第三方广告或统计跟踪代码。

二、我们如何使用信息

  1. 提供服务：创建与识别您的账号；执行图像、视频生成与编辑；保存您的项目、素材与生成结果；提供团队协作与作品广场功能。
  2. 调用 AI 模型：您的提示词、参考图、素材及对话内容将被发送至本平台接入的第三方 AI 模型供应商以完成生成。如您使用对话式创作助手的联网搜索功能，由助手根据您的问题生成的搜索关键词会发送至搜索服务商，您的原话不会直接外发。
  3. 内容合规：对输入内容进行敏感词过滤和提示词语义审查（审查由文本模型完成），并按法律要求在生成内容上添加显式与隐式 AIGC 标识（角标、水印、文件元数据）。
  4. 身份验证与通知：向您的手机号发送短信验证码、向您的邮箱发送注册验证码、密码重置、团队邀请等事务性邮件；在站内向您推送通知与公告。
  5. 计费与交易：扣减和返还积分、处理订单与支付回调、发放签到与邀请奖励、处理退款与开票申请。
  6. 安全与风控：识别异常登录、刷量、滥用行为，执行频率限制，防范欺诈与攻击。
  7. 改进服务：以汇总、去标识的方式统计功能使用情况与模型运行状态（如模型可用率），用于改进产品；面向公众展示的模型状态页只包含汇总数据。
  8. 法律合规：履行法律法规规定的义务，包括响应监管要求。

三、我们如何共享信息

除以下情形外，我们不会向第三方共享您的个人信息：

  1. AI 模型供应商：为完成生成，您的提示词、素材与对话内容会发送给相应的模型供应商。供应商可能位于境外；我们仅发送生成所必需的内容，不附带您的账号身份信息。
  2. 搜索服务商：对话式创作助手启用联网搜索时，由助手生成的搜索关键词会发送给搜索服务商。
  3. 对象存储服务商：您上传的素材与生成结果存储于本平台配置的对象存储服务。
  4. 支付机构：购买套餐时，订单号与金额会发送给支付宝、微信支付、Stripe 或易支付等支付渠道；退款处理同样经由相应渠道。
  5. 短信与邮件服务商：用于发送验证码和事务性通知。
  6. 第三方登录平台：您使用微信、QQ 或其他 OAuth 账号登录时，会与相应平台交换授权信息。
  7. 团队成员：您加入团队后，团队管理员和成员可以看到您的团队昵称、角色及团队内共享的积分分配等信息。
  8. 公开展示：您投稿至作品广场并获通过（或在开启自动发布时）的作品及其提示词将对所有访客公开。
  9. 法律要求：根据法律法规、监管要求或司法程序需要披露。
  10. 取得您明确同意的其他情形。

上述第三方均须承担相应的保密与安全义务，其处理信息的行为同时受其各自隐私政策约束。

四、信息的存储与保护

  1. 存储期限：您的账号信息与内容在账号存续期间保存。账号注销冷静期届满后，我们会删除或匿名化您的个人信息，法律法规要求保留的交易记录等除外。数据导出生成的文件在有效期（以页面提示为准）后自动删除；审查记录按后台配置的保留天数自动清理。
  2. 安全措施：密码以不可逆哈希存储；第三方服务密钥加密保存；登录凭证使用有时效的令牌，修改密码或重置密码后旧令牌立即失效；我们对访问频率进行限制并记录异常操作。
  3. 尽管采取了合理措施，互联网环境并非绝对安全。如发生个人信息安全事件，我们将按法律要求及时告知您并采取补救措施。

五、您的权利

  1. 访问与更正：您可在账号设置中查看和修改用户名、头像、密码、时区等信息，绑定或更换手机号与第三方账号。
  2. 导出：您可在账号设置中申请导出个人数据，我们会生成包含您的账号信息、项目、素材、订单与积分记录等的压缩包供您下载。
  3. 删除：您可随时删除自己的项目、素材、对话记录，撤回作品广场的投稿；也可申请注销账号（详见《用户协议》）。
  4. 撤回同意：您可通过停止使用相关功能或注销账号撤回同意；撤回不影响此前基于同意进行的处理。
  5. 投诉举报：如您认为我们的处理侵害了您的权益，或发现平台上存在违规内容，可通过页脚的投诉举报入口或帮助中心联系我们。

六、未成年人保护

本平台主要面向成年人。若您是未成年人，应在监护人指导下使用本平台，并请监护人协助阅读本政策。我们不会故意收集未成年人的个人信息；如发现在未获监护人同意的情况下收集了未成年人信息，将及时删除。

七、政策更新

我们可能适时更新本隐私政策。更新后的政策将在平台公布，重大变更时会通过版本号更新要求您重新确认；公布后即生效。请您定期查阅。

八、联系我们

如您对本政策或个人信息处理有任何疑问、意见或投诉，可通过本平台页脚或帮助中心提供的联系方式与我们联系，我们将在合理期限内答复。

Privacy Policy

Draw Studio (the "Platform") takes the protection of your personal information and privacy seriously. This Policy explains how we collect, use, store, share and protect your information while you use the Platform, and the rights you have. Please read it before use; by registering, signing in or using the Platform you confirm that you understand and agree to it.

1. Information we collect

  1. Account information: the username, email address, phone number, password (stored only as an irreversible hash) and avatar you provide when signing up or in; and, when you sign in with WeChat, QQ or another third-party account, the nickname, avatar and platform-assigned identifier (such as an OpenID / UnionID) you authorise. We never receive your third-party account password.
  2. Usage information: the prompts and conversation messages you submit; the reference images, product photos, model photos, video materials and other files you upload; the images and videos you generate; canvas projects and their edit history; files, folders and tags in your asset library; showcase submissions; teams and their membership; and product or scene descriptions entered in features such as e-commerce visuals.
  3. Transaction information: package orders, credit ledger entries, transaction references returned by payment channels, redeem-code usage, and refund or invoice requests. Card numbers and payment-account credentials are handled by the payment institution; the Platform does not collect them.
  4. Device and log information: to keep the service secure and running we record IP addresses, browser type, access times, activity logs, request rates, your device time zone (used to display times and check-in days in your local zone; you can change it in account settings) and your language preference.
  5. Review records: to meet content-compliance obligations, for prompts that semantic review rates as high-risk we keep the prompt, the assessment and the time; the retention period is set by the operator.
  6. Cookies and local storage: we use one cookie for your language preference, and browser local storage for your sign-in token, interface preferences and a small cache (such as the site name and available sign-in methods) so the page restores instantly on reload. None of this is used for cross-site tracking, and the Platform embeds no third-party advertising or analytics scripts.

2. How we use information

  1. Providing the services: creating and recognising your account; running image and video generation and editing; storing your projects, assets and results; providing team collaboration and the showcase.
  2. Calling AI models: your prompts, reference images, materials and conversation content are sent to the third-party AI model providers the Platform integrates in order to perform generation. If you use the creative assistant's web search, the search queries the assistant composes from your question are sent to a search provider; your own words are not sent directly.
  3. Content compliance: filtering input for sensitive words and reviewing prompts semantically (performed by a text model), and adding the explicit and implicit AI-generated-content labels the law requires (corner marks, watermarks, file metadata) to generated content.
  4. Verification and notifications: sending SMS verification codes to your phone number; sending transactional emails such as registration codes, password resets and team invitations; and delivering in-app notifications and announcements.
  5. Billing and transactions: deducting and refunding credits, processing orders and payment callbacks, granting check-in and referral rewards, and handling refund and invoice requests.
  6. Security and risk control: detecting abnormal sign-ins, bulk abuse and other misuse, enforcing rate limits, and preventing fraud and attacks.
  7. Improving the services: producing aggregated, de-identified statistics on feature usage and model health (such as model availability) to improve the product; the public model-status page shows aggregates only.
  8. Legal compliance: meeting obligations under applicable law, including responding to regulatory requests.

3. How we share information

We do not share your personal information with third parties except:

  1. AI model providers: to perform generation, your prompts, materials and conversation content are sent to the relevant model provider, which may be located outside your country. We send only what generation requires and do not attach your account identity.
  2. Search providers: when the creative assistant's web search is enabled, the queries the assistant composes are sent to a search provider.
  3. Object storage providers: your uploads and generated results are stored with the object storage service the Platform is configured to use.
  4. Payment institutions: when you buy a package, the order reference and amount are sent to the payment channel (such as Alipay, WeChat Pay, Stripe or an EPay gateway); refunds are processed through the same channel.
  5. SMS and email providers: for verification codes and transactional notifications.
  6. Third-party sign-in platforms: when you sign in with WeChat, QQ or another OAuth account, authorisation data is exchanged with that platform.
  7. Team members: once you join a team, its administrators and members can see your team display name, role and team credit allocations.
  8. Public display: works you submit to the showcase that are approved (or published automatically where the operator enables that) are visible, together with their prompts, to all visitors.
  9. Legal requirements: where disclosure is required by law, regulators or legal process.
  10. Any other case with your explicit consent.

All of these third parties are bound by confidentiality and security obligations, and their handling of your information is also governed by their own privacy policies.

4. Storage and protection

  1. Retention: your account information and content are kept for as long as your account exists. After the account-deletion cooling-off period ends we delete or anonymise your personal information, except records such as transactions that the law requires us to keep. Data-export files are deleted automatically after their validity period (shown on the page); review records are purged automatically after the operator-configured retention period.
  2. Security measures: passwords are stored as irreversible hashes; third-party service credentials are stored encrypted; sign-in uses expiring tokens that are invalidated immediately when you change or reset your password; we rate-limit access and log abnormal activity.
  3. Despite reasonable measures, no internet environment is completely secure. In the event of a personal-information security incident we will notify you and take remedial action as the law requires.

5. Your rights

  1. Access and correction: in account settings you can view and change your username, avatar, password and time zone, and bind or replace your phone number and third-party accounts.
  2. Export: in account settings you can request an export of your personal data; we generate a downloadable archive containing your account information, projects, assets, orders and credit records.
  3. Deletion: you can delete your own projects, assets and conversations at any time, withdraw showcase submissions, and request account deletion (see the Terms of Service).
  4. Withdrawing consent: you can withdraw consent by stopping use of the relevant feature or deleting your account; withdrawal does not affect processing already carried out on the basis of consent.
  5. Complaints and reports: if you believe our processing harms your rights, or you find non-compliant content on the Platform, contact us through the report link in the footer or the help center.

6. Minors

The Platform is intended for adults. If you are a minor, use the Platform under the guidance of a guardian and ask them to help you read this Policy. We do not knowingly collect personal information from minors; if we learn that we have done so without a guardian's consent, we delete it promptly.

7. Changes to this Policy

We may update this Policy from time to time. Updates are published on the Platform, and material changes are accompanied by a version bump that asks you to confirm again; they take effect on publication. Please review this Policy periodically.

8. Contact

If you have questions, comments or complaints about this Policy or our handling of personal information, contact us through the channels listed in the Platform footer or help center; we will respond within a reasonable time.