1. Information processed

Depending on the features you use, information includes your email, display name, account identifiers, authentication records, messages, uploaded files, generated results, model usage, orders and payment status. Technical information such as IP addresses, browser details, cookies and security logs supports operation and abuse prevention.

2. Why information is used

Information is used to authenticate accounts, deliver AI responses and tools, retain signed-in chat history, calculate usage, fulfill purchases, resolve support requests and protect the service.

Depending on the purpose and applicable law, we process information as necessary to provide the service and perform our agreement with you, for our legitimate interests in operating, securing and improving the service, with your consent where required, and to comply with applicable legal obligations.

3. AI, tools and payment providers

Relevant messages, context and attachments may be sent to the AI or tool providers needed for the requested feature. When Stripe payments are enabled and selected, Stripe processes payment information under its Privacy Policy. Authentication, hosting and email providers may also process information needed for their functions.

We use third-party service providers to operate Haoya, including AI model and tool providers, cloud hosting and infrastructure providers, authentication services, email providers, analytics and security services, and payment processors such as Stripe where payments are enabled. Depending on the provider and feature used, information may be processed in countries or regions outside your place of residence. Where required by applicable law, we use appropriate contractual, technical or organizational safeguards for cross-border processing.

The data retention and training practices of AI model providers depend on their applicable policies. We do not make a blanket promise of zero retention or no training.

4. Cookies and local storage

The site uses cookies and browser storage for sign-in, visitor trial limits, language and theme preferences, and release routing where enabled. Visitor trial conversations are stored by the service and restored after refresh using the visitor cookie and a conversation reference saved in the browser. Clear chat removes the displayed session and starts a new conversation; it does not reset daily limits or imply immediate deletion of service records or data held by upstream processors. Clearing browser storage can sign you out and reset preferences.

Website and desktop analytics

We use self-hosted Umami to measure page visits, referral sources, campaign parameters, approximate location, browser and device information, and use of major features in our website and desktop client. Events include login, registration, message submission and execution outcomes, project and file operations, sharing, extensions, scheduled tasks, starting checkout and submitting feedback. We distinguish Web and desktop and cloud, local and SSH execution where available. The tracker does not use analytics cookies or account identifiers to link devices. We filter private URL parameters and user-defined titles, and do not send messages, file names, file contents, search text, commands, feedback contents, passwords or authentication tokens to analytics. Session replay and heatmaps are not enabled. Collection is disabled when your browser sends Do Not Track or Global Privacy Control signals.

5. Retention and security

Signed-in conversations, files, account records, billing and operational records may be stored for their respective purposes.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the service, maintaining accounts, fulfilling purchases, resolving disputes, preventing fraud and abuse, maintaining security, and complying with legal obligations.

Account information, signed-in conversations and uploaded files may be retained while the account or relevant feature remains active. Billing and transaction records may be retained for the period required for accounting, tax, fraud prevention and legal compliance. Security and operational logs are retained only for as long as reasonably necessary for security, troubleshooting and abuse prevention.

When information is no longer required, it may be deleted, anonymized or removed through our normal retention and backup processes.

Access controls and authentication help protect information, but no storage or transmission system is risk-free.

6. Your choices and requests

You can use available product controls to manage conversations and account information. Contact the operator to request access, correction, deletion, export or other rights available under applicable law.

To make a privacy request, contact support@haoya.ai using the email address associated with your account and describe the request. We may ask for information reasonably necessary to verify account ownership and protect your information.

We will respond within the period required by applicable law and aim to respond to verified requests within 30 days where reasonably practicable. Some information may need to be retained where required for billing, fraud prevention, security, dispute resolution or legal compliance.

7. Updates and privacy contact

Material changes will be reflected in the updated policy and communicated as required by law. The operator and privacy contact are listed below.

Haoya is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If we learn that a child has provided personal information in violation of this requirement, we may delete the information and restrict or close the relevant account. If you believe a child has provided personal information to Haoya, please contact support@haoya.ai.

Contact

1. 处理的信息

根据您使用的功能，相关信息可能包括邮箱、显示名称、账号标识、身份验证记录、消息、上传文件、生成结果、模型用量、订单及支付状态。IP 地址、浏览器信息、Cookie 和安全日志等技术信息用于维持服务及防止滥用。

2. 信息用途

相关信息用于账号验证、提供 AI 回复和工具功能、保留登录后的聊天记录、计算用量、交付购买内容、处理客服请求以及保护服务安全。

根据处理目的及适用法律，我们可能基于提供服务和履行与您的协议所需、运营及保障和改进服务的合法利益、在需要时取得您的同意，以及遵守适用法律义务来处理信息。

3. AI、工具与支付服务商

为完成您请求的功能，相关消息、上下文或附件可能发送给相应的 AI 或工具服务商。当 Stripe 支付已启用且您选择该方式时，Stripe 按其隐私政策处理支付信息。身份验证、托管和邮件服务商也可能处理提供相关功能所需的信息。

我们使用第三方服务商运营好呀，包括 AI 模型和工具服务商、云托管与基础设施服务商、身份验证服务、邮件服务商、分析与安全服务，以及在启用支付时提供服务的 Stripe 等支付处理机构。根据所使用的服务商和功能，信息可能在您居住地以外的国家或地区处理。在适用法律要求时，我们会采取适当的合同、技术或组织措施保护跨境处理的信息。

AI 模型服务商的数据保留与训练规则取决于其适用政策。我们不作一概“零留存”或“不用于训练”的承诺。

4. Cookie 与本地存储

网站使用 Cookie 和浏览器存储维持登录、限制访客试用次数、保存语言和主题偏好，并在启用时维持版本路由。访客试聊对话保存在服务端，刷新后通过访客 Cookie 和浏览器保存的会话标识恢复。点击“清空对话”会清空当前展示并开始新对话，不重置每日次数，也不代表服务记录或上游处理方的数据已立即删除。清除浏览器存储可能退出登录并重置偏好。

网站与桌面客户端统计

我们使用自部署 Umami 统计页面访问、来源网站、投放参数、近似地区、浏览器、设备和主要功能的使用情况。事件包括登录注册、消息提交与执行结果、项目和文件操作、分享、扩展、定时任务、进入支付及提交反馈；在能够确定时区分 Web／桌面以及云端、本机、SSH 执行。统计不使用统计 Cookie，不通过账号标识合并不同设备。我们过滤私密网址参数和用户自定义标题，不发送消息、文件名、文件内容、搜索词、命令、反馈正文、密码或身份验证令牌，也不启用会话回放及热力图。浏览器发送 Do Not Track 或 Global Privacy Control 信号时，停止采集。

5. 保留期限与安全

登录后的对话、文件、账号资料、账单及运行记录可能按各自用途保存。

我们仅在为收集目的而合理必要的期限内保留个人信息，包括提供服务、维护账号、交付购买内容、解决争议、防止欺诈及滥用、维护安全以及遵守法律义务。

账号信息、登录后的对话和上传文件可能在账号或相关功能保持活跃期间保留。账单和交易记录可能按会计、税务、防欺诈及法律合规所需期限保留。安全与运行日志仅在安全、故障排查及防止滥用合理必要的期限内保留。

信息不再需要时，可能通过正常的数据保留和备份流程删除、匿名化或移除。

访问控制和身份验证用于保护信息，但任何存储或传输系统都无法完全消除风险。

6. 您的选择与请求

您可以通过产品已有功能管理对话与账号信息，也可以联系经营者申请访问、更正、删除、导出数据，或行使适用法律规定的其他权利。

提出隐私请求时，请使用与账号关联的邮箱联系 support@haoya.ai，并说明请求内容。为核实账号归属和保护您的信息，我们可能要求提供合理必要的信息。

我们会在适用法律规定的期限内答复，并争取在合理可行的情况下，于核实请求后 30 天内答复。部分信息可能因账务、防欺诈、安全、争议处理或法律合规要求需要保留。

7. 更新与隐私联系

重大变更会反映在更新后的政策中，并按法律要求告知。经营者及隐私联系方式见下方。

好呀面向年满 18 岁的用户。我们不会在明知的情况下收集未满 18 岁儿童的个人信息。如果发现儿童违反该要求提供了个人信息，我们可能删除相关信息，并限制或关闭相关账号。如果您认为儿童向好呀提供了个人信息，请联系 support@haoya.ai。

联系方式