隐私政策 Privacy Policy
1. 引言与适用范围 1. Introduction & scope
本《隐私政策》（“本政策”）适用于一键大卖（OneClickSell，“本服务”）的网站、应用及其相关功能（包括浏览器插件、AI 内容生成、店铺绑定与发布等）。本政策解释了我们在您使用本服务时如何收集、使用、共享、存储和保护您的个人信息，以及您可如何行使与个人信息相关的权利。
This Privacy Policy (“Policy”) applies to OneClickSell (“Service”), including our website, app, browser extension, AI generation features, store binding, and publishing workflows. It explains how we collect, use, share, store, and protect personal information, and the rights you may have.
重要提示：我们不会要求您提供与提供服务无关的个人信息。您可以选择不提供某些信息，但这可能会影响部分功能（例如店铺绑定或支付）。
Important: We only request information necessary to provide the Service. You may choose not to provide certain information, but some features (e.g., store binding or payments) may not work.
“个人信息”的定义可能因您所在地区法律而不同（例如 GDPR、CCPA/CPRA、中国《个人信息保护法》）。如本政策中某些条款与您所在地强制性法律不一致，以法律为准。
Definitions of “personal information” may vary by jurisdiction (e.g., GDPR, CCPA/CPRA, China PIPL). If this Policy conflicts with mandatory local laws, those laws prevail.
2. 我们收集的信息 2. Information we collect
我们可能收集以下类别的信息（具体取决于您如何使用本服务）：
We may collect the following categories of information depending on how you use the Service:
- 账号与身份信息：手机号、邮箱、昵称/头像、密码摘要（我们不会以明文存储密码）。
- 交易与计费信息：订阅/充值状态、订单号、支付结果与对账所需信息。银行卡号等敏感支付信息通常由第三方支付机构直接处理。
- 店铺与平台凭证：您主动绑定的第三方平台店铺信息（例如 Ozon 的 Client ID、API Key 等）以及与店铺相关的配置。
- 内容与业务数据：您导入/采集的商品信息、图片、文本、类目、属性、AI 生成的标题/文案/图片/富文本、发布记录等。
- 设备与日志信息：IP 地址、浏览器类型、设备标识、操作日志、错误日志、请求时间等（用于安全与运维）。
- Account information: phone number, email, nickname/avatar, password hash (we do not store passwords in plain text).
- Billing/transaction data: subscription/top-up status, order numbers, payment results. Sensitive payment details (e.g., card numbers) are typically handled by payment processors.
- Store & platform credentials: third-party store information you provide (e.g., Ozon Client ID/API Key) and related configuration.
- Content & business data: product data you import/collect, images, text, categories/attributes, AI-generated content, publishing records, etc.
- Device & log data: IP address, browser/device details, operational and security logs, timestamps.
我们也可能从您授权的第三方或公开来源获得信息（例如第三方平台返回的类目信息、属性字典、发布任务状态等）。
We may also obtain information from third parties you authorize or public sources (e.g., category/attribute dictionaries, publish task statuses returned by marketplaces).
3. 我们如何使用信息 3. How we use information
我们使用信息通常基于以下目的（并在必要时取得您的授权或同意）：
We use information for the following purposes (and obtain authorization/consent when required):
- 提供与维护服务：登录、账号管理、采集/生成/发布流程、客服与通知。
- 安全与风控：身份验证、人机验证、异常检测、防刷与防欺诈、审计与追踪。
- 支付与结算：订单处理、对账、发票与税务合规（如适用）。
- 产品改进：故障排查、性能优化、功能迭代（通常以聚合或去标识化方式分析）。
- 合规与争议处理：遵守法律法规、处理侵权/滥用投诉、执行我们的条款。
- Provide and maintain the Service: login, account management, collection/generation/publishing workflows, support, notifications.
- Security and fraud prevention: verification, bot protection, anomaly detection, auditing.
- Payments and billing: order processing, reconciliation, invoices/tax compliance where applicable.
- Improve the product: troubleshooting, performance optimization, feature development (typically using aggregated or de-identified analytics).
- Compliance and dispute handling: legal obligations, IP/abuse reports, enforcing our terms.
4. AI 与自动化处理说明 4. AI & automated processing
本服务包含 AI 生成能力（例如生成标题、文案、富文本、图片与属性补全等）。为实现这些功能，我们可能将您提交的商品内容与上下文数据发送给第三方 AI 服务提供商进行处理，并接收生成结果返回到本服务。
The Service includes AI features (e.g., titles, copywriting, rich content, images, attribute completion). To provide these features, we may send your submitted product content and context to third-party AI providers for processing and return generated results.
请注意：AI 生成结果可能存在不准确、偏差或不符合平台规则的情况。您应在发布前进行审核与必要的修改。您对最终发布内容及其合规性承担责任。
Please note: AI outputs may be inaccurate, biased, or non-compliant with marketplace rules. You should review and edit before publishing. You are responsible for the final published content and its compliance.
5. 共享、披露与第三方 5. Sharing & third parties
我们不会出售您的个人信息。仅在下列情形下共享或披露信息：
We do not sell your personal information. We share/disclose information only in the following cases:
- 为提供服务所必需：与云基础设施、存储、消息发送、人机验证、支付、AI 服务等供应商共享（其代表我们处理信息并受合同约束）。
- 按您的指令：当您绑定店铺并发起发布时，我们会与对应平台的 API 交互以完成发布/同步。
- 合规与权利保护：为遵守法律、回应监管/司法请求、执行条款或保护用户与公众安全。
- 业务变更：在并购、重组或资产转让等交易中，信息可能作为交易的一部分被转移（我们会依法通知）。
- Service providers: infrastructure hosting, storage, messaging, bot protection, payment processors, AI providers (acting on our behalf under contractual obligations).
- At your direction: when you bind a store and publish products, we interact with marketplace APIs as instructed.
- Legal compliance and protection: to comply with laws, respond to authorities, enforce terms, or protect safety.
- Business transfers: in mergers, acquisitions, or asset transfers, information may be transferred as part of the transaction.
6. Cookies 与类似技术 6. Cookies
我们可能使用 Cookies 或类似技术来实现登录态维持、安全防护与偏好设置等必要功能。我们通常不使用跨站行为广告 Cookies。如未来引入分析或营销类 Cookies，我们将按照法律要求提供通知与选择。
We may use cookies or similar technologies for essential functions such as authentication, security, and preferences. We generally do not use cross-site behavioral advertising cookies. If we introduce analytics/marketing cookies in the future, we will provide notice and choices as required by law.
7. 保存期限与安全 7. Retention & security
我们会在实现本政策所述目的所需的最短期限内保存信息，并在不再需要时删除或匿名化处理（除非法律法规另有要求或为解决争议、执行协议所必需）。
We retain information for the minimum period necessary to fulfill the purposes described in this Policy, and delete or anonymize it when no longer needed, unless required by law or necessary to resolve disputes and enforce agreements.
我们采取合理的技术与组织措施保护信息安全，包括但不限于传输加密（HTTPS）、访问控制、最小权限、日志审计、备份与灾备等。但互联网环境并非绝对安全，我们无法保证信息在任何情况下都不被泄露、损坏或丢失。
We implement reasonable technical and organizational measures such as encryption in transit (HTTPS), access controls, least privilege, audit logging, backups and disaster recovery. However, no system is 100% secure.
8. 您的权利与选择 8. Your rights
根据您所在地区法律，您可能拥有以下权利（适用时）：访问、更正、删除、复制/导出、撤回同意、限制处理、反对处理、投诉等。我们可能需要验证您的身份后再处理请求。
Depending on your jurisdiction, you may have rights to access, correct, delete, port/export, withdraw consent, restrict/opt-out, object to processing, and lodge complaints. We may need to verify your identity before processing requests.
如需行使权利或咨询，请通过本政策的“联系我们”渠道提出。我们将依据适用法律在合理期限内回应。
To exercise your rights, contact us via the channel in the “Contact” section. We will respond within a reasonable timeframe as required by applicable law.
9. 跨境传输 9. International transfers
我们的服务可能在多个国家/地区部署或由位于不同国家/地区的服务提供商提供支持。若发生跨境传输，我们将采取适当的保护措施（例如签订数据处理协议、采用标准合同条款或其他法律认可机制）。
Our Service may be hosted globally and supported by providers in different countries/regions. Where cross-border transfers occur, we use appropriate safeguards (e.g., data processing agreements, standard contractual clauses, or other lawful mechanisms).
10. 未成年人 10. Children
本服务面向成年人或企业用户，原则上不面向未满 18 周岁的未成年人。我们不会在知情情况下收集未成年人的个人信息。如您认为我们可能收集了相关信息，请联系我们，我们将尽快处理。
The Service is intended for adults or business users and not for children under 18. We do not knowingly collect children’s personal information. If you believe we may have collected such information, please contact us.
11. 政策更新 11. Changes
我们可能不时更新本政策。若更新将对您的权益产生重大影响，我们会通过站内通知、邮件或其他合理方式提示。继续使用本服务即表示您理解并同意更新后的政策（法律另有要求的除外）。
We may update this Policy from time to time. If changes materially affect your rights, we will provide notice via in-service notice, email, or other reasonable means. Continued use means you accept the updated Policy unless otherwise required by law.
12. 联系我们 12. Contact
隐私相关问题、权利请求或安全事件报告，请联系：
For privacy questions, rights requests, or security incident reports, contact:
- 运营主体：Meridian Flow Inc（如您所在地法律另有要求，以实际披露为准）
- 隐私邮箱：privacy@meridianflowinc.com
- 法务邮箱：legal@meridianflowinc.com
- Operator: Meridian Flow Inc (subject to local legal requirements and disclosures)
- Privacy: privacy@meridianflowinc.com
- Legal: legal@meridianflowinc.com
13. 地区性补充条款 13. Regional disclosures
美国加州（CCPA/CPRA）：您可能拥有知情、访问、删除、更正、数据可携带、拒绝“出售/共享”以及不因行使权利而被歧视等权利。我们不出售个人信息，也不为跨场景行为广告“共享”个人信息（如未来发生变化将提供“Do Not Sell or Share”选择）。您可通过上文联系方式提交请求。
California (CCPA/CPRA): You may have rights to know/access, delete, correct, data portability, opt out of “sale/sharing”, and non-discrimination. We do not sell personal information and do not share it for cross-context behavioral advertising. Contact us to submit requests.
欧盟/英国（GDPR/UK GDPR）：我们通常基于履行合同、合法利益或您的同意处理信息。您可能拥有访问、更正、删除、限制、反对、数据可携带、撤回同意等权利，并可向监管机构投诉。
EU/UK (GDPR/UK GDPR): We typically process information under contract necessity, legitimate interests, or consent. You may have rights including access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
中国大陆（《个人信息保护法》）：我们会在提供服务所必需范围内处理个人信息，并明示处理目的、方式与保存期限。您可请求查阅复制、更正补充、删除、撤回同意等。我们可能在跨境场景下采取必要措施并依法履行义务（如适用）。
China (PIPL): We process personal information within the necessary scope for providing the Service, and disclose purposes, methods, and retention periods. You may request access/copy, correction, deletion, withdrawal of consent, etc. For cross-border scenarios, we will take necessary measures and fulfill legal obligations where applicable.