1. 适用范围 / Scope
本政策说明 AgentChatBridge 官网、账户与许可证服务、macOS 桌面应用如何处理信息。AgentChatBridge 是独立开发工具，不是 OpenAI 官方产品。
This policy explains how the AgentChatBridge website, account and licensing service, and macOS desktop app handle information. AgentChatBridge is independently developed and is not an OpenAI product.
2. 本机处理与试用 / Local processing and trial
桌面应用的本机接口仅监听 127.0.0.1。普通日志不会被设计为记录提示词、回复、工具参数、工具结果、登录令牌、本机访问密钥、激活码、邮箱或工作区路径。
The desktop app exposes its local interface only on 127.0.0.1. Normal logs are not designed to record prompts, responses, tool arguments or results, login tokens, local access keys, activation codes, email addresses, or workspace paths.
提示词、上传内容和图像生成请求会发送到用户本人已登录的第三方聊天服务以完成请求。生成图像仅在本机进程内存中保留，最长 30 分钟；不会写入磁盘或普通日志。
Prompts, uploaded content, and image-generation requests are sent to the third-party chat service signed in by the user. Generated images remain only in local process memory for up to 30 minutes and are not written to disk or normal logs.
未激活用户可试用至累计 2000 万估算 token。该汇总仅保存在本机系统凭据库与应用状态中，不显示、不上传、不进入普通日志；试用完成或付费激活后以无数字的完成标记替代并停止计量。普通卸载、删除应用或重装不会重新发放试用。
An unactivated user may try the app until an estimated cumulative 20 million tokens. This aggregate is kept only in local system credentials and app state, is not displayed, uploaded, or written to normal logs, and is replaced by a non-numeric completion marker when the trial ends or a paid license is activated. Ordinary uninstall or reinstall does not grant a new trial.
3. 网站与账户 / Website and account
静态官网不使用广告、会话回放或行为分析。Cloudflare 会为托管、安全和防滥用处理正常网络信息，例如 IP 地址、请求时间、路径和 User-Agent。
The static website does not use ads, session replay, or behavioral analytics. Cloudflare processes ordinary network information such as IP address, request time, path, and user agent for hosting, security, and abuse prevention.
注册或登录使用邮箱验证码。服务端保存加密邮箱、不可逆账户标识、验证码摘要和会话摘要；验证码 10 分钟失效，最多尝试 5 次，登录会话最长 30 天。浏览器会话令牌仅保存在当前标签页会话存储中。
Registration and sign-in use an email verification code. The service stores the encrypted email address, a one-way account identifier, and digests of verification codes and sessions. Codes expire after 10 minutes with at most five attempts; sign-in sessions last no more than 30 days. The browser keeps its session token only in the current tab's session storage.
4. 购买、许可证与设备 / Purchases, licenses, and devices
Paddle 作为 Merchant of Record 和结账卖方处理付款、税务、收据、退款和付款资料；本站不接触完整银行卡信息。许可证服务从已验证交易取得交付所需的付款邮箱和交易状态。
Paddle acts as Merchant of Record and checkout seller, handling payments, taxes, receipts, refunds, and payment details. This site does not receive full card details. The licensing service receives the payment email and transaction status needed to fulfill a verified purchase.
服务保存交易标识、价格与权益身份、激活码摘要、退款或拒付状态、桌面应用生成的随机设备标识、平台、激活和校验时间。邮箱静态加密；网页只显示遮罩后的设备标识。不会读取硬件序列号作为设备标识。
The service stores transaction, price, and entitlement identifiers; an activation-code digest; refund or chargeback state; an app-generated random device identifier; platform; and activation and validation times. Email is encrypted at rest, and the account page shows only masked device identifiers. Hardware serial numbers are not used as device identifiers.
一个许可证保留最近激活的 3 台设备。用户可以移除设备；在线应用通常在 4 小时内的下次核验识别移除，离线应用最迟在固定 30 天宽限到期时要求重新联网。
One license keeps the three most recently activated devices. A user may remove a device. Online apps normally detect removal at the next check within four hours; an offline app must reconnect no later than the end of the fixed 30-day grace period.
5. 更新 / Updates
更新检查只发送提供下载所需的标准网络信息以及应用版本、平台和架构；不会附带邮箱、激活码、设备标识、本机密钥、提示词或回复。安装前必须通过发布签名校验。
Update checks send only ordinary network information plus the app version, platform, and architecture needed to offer a download. They do not include email, activation code, device identifier, local keys, prompts, or responses. Release signatures must verify before installation.
6. 用途、保留与共享 / Purposes, retention, and sharing
信息仅用于注册登录、履行购买、发放与维护许可证、防欺诈、防滥用、退款处理、安全和用户支持。依据适用地区，处理基础可能是履行合同、合法利益、同意或法定义务。
Information is used only for sign-in, purchase fulfillment, license delivery and maintenance, fraud and abuse prevention, refunds, security, and support. Depending on applicable law, processing may rely on contract, legitimate interests, consent, or legal obligation.
验证码和过期会话按上述期限删除。账户、交易关联、权益与设备记录在许可证和支持生命周期内保留；退款、反欺诈、会计或法律义务要求的最少记录可保留更久。处理方仅包括提供相应功能所必需的 Paddle、Cloudflare、Brevo 和 Proton，不出售个人数据。
Verification codes and expired sessions are deleted on the periods above. Account, transaction-link, entitlement, and device records are retained for the license and support lifecycle; minimum records required for refunds, fraud prevention, accounting, or law may be kept longer. Processors are limited to Paddle, Cloudflare, Brevo, and Proton as needed for their stated functions. Personal data is not sold.
7. 跨境、权利与未成年人 / Transfers, rights, and minors
上述服务商可能在用户所在国家或地区之外处理信息，并按各自隐私与传输机制保护数据。用户可通过品牌支持邮箱申请访问、更正、删除、限制或反对处理，以及提交投诉；我们会使用付款邮箱、交易号或其他最少信息核验请求。部分法定记录不能立即删除。
These providers may process information outside the user's country or region under their privacy and transfer safeguards. Users may contact the brand support address to request access, correction, deletion, restriction, objection, or to complain. We verify requests using the payment email, transaction ID, or other minimum information. Some legally required records cannot be deleted immediately.
本产品不面向未满 18 周岁的儿童。若发现未成年人未经适当授权提供信息，请联系我们处理。
The product is not directed to children under 18. Contact us if a minor has provided information without appropriate authorization.
8. 变更与联系 / Changes and contact
重大变更会在本页更新生效日期；若适用法律要求，还会提供额外通知。隐私或安全问题请联系 agentchatbridge@proton.me。
Material changes update the effective date on this page and, where required, include additional notice. Contact agentchatbridge@proton.me for privacy or security questions.