Legal

Privacy Policy

Last updated: 2026 年 5 月 17 日

1. 引言 / Introduction

PureCore（以下简称"我们"或"本平台"）非常重视您的隐私。本隐私政策旨在向您说明我们如何收集、使用、存储、共享和保护您的个人信息。使用本平台即表示您同意本政策所述的条款。
PureCore ("we," "us," or "the Platform") values your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information. By using the Platform, you agree to the terms described in this policy.

2. 我们收集的信息 / Information We Collect

根据您使用本平台的具体功能，我们可能收集以下几类信息：
Depending on how you use the Platform, we may collect the following categories of information:

2.1 账户信息 / Account Information

当您注册账户时，我们会收集您的姓名、邮箱地址和密码（经过 bcrypt 加密存储）。您还可以选择性地提供个人简介、个人网站、位置和头像。
When you create an account, we collect your name, email address, and password (stored with bcrypt hashing). You may optionally provide a bio, website URL, location, and avatar.

2.2 AI 对话数据 / AI Chat Data

您在使用 AI 聊天功能时发送的消息内容、上传的文件附件（图片、PDF、文本文件等）以及 AI 生成的回复内容均会被存储。这些数据用于提供聊天服务、改进模型体验以及进行用量统计和计费。
Messages you send while using the AI chat feature, file attachments you upload (images, PDFs, text files, etc.), and AI-generated responses are all stored. This data is used to provide chat services, improve model experience, and perform usage tracking and billing.

2.3 图片生成数据 / Image Generation Data

当您使用图片生成功能时，我们会存储您输入的提示词（prompt）和生成的图片。这些数据用于提供生成服务以及用量统计。
When you use the image generation feature, we store your prompts and the generated images. This data is used to provide generation services and usage tracking.

2.4 支付与交易数据 / Payment and Transaction Data

当您进行余额充值或购买服务时，我们会记录订单号、金额、币种、支付渠道（支付宝、微信支付、易支付）和交易状态。完整支付凭证（如银行卡号）由支付网关处理，我们不会直接存储。
When you recharge your balance or purchase services, we record the order number, amount, currency, payment channel (Alipay, WeChat Pay, YiPay), and transaction status. Full payment credentials (such as card numbers) are processed by payment gateways and are not directly stored by us.

2.5 OAuth 第三方账号数据 / OAuth Third-Party Account Data

当您通过 GitHub、Google、Discord、Apple 或 Telegram 登录时，我们会接收该平台提供的公开资料信息（如用户 ID、姓名、邮箱、头像）。我们会在您的账户中关联这些 OAuth 账号信息。
When you sign in via GitHub, Google, Discord, Apple, or Telegram, we receive your public profile information as provided by that platform (such as user ID, name, email, and avatar). We link these OAuth accounts to your account.

2.6 文件上传数据 / File Upload Data

您通过平台上传的文件（包括聊天附件、头像等）会存储在我们的服务器上。这些文件将仅用于为您提供相应的服务功能。
Files you upload through the Platform (including chat attachments, avatars, etc.) are stored on our servers. These files are used solely to provide the corresponding service features to you.

2.7 设备与会话信息 / Device and Session Information

我们会记录您的登录会话信息，包括 IP 地址、用户代理（浏览器和操作系统）、设备类型和设备型号。这些信息用于安全验证、多设备管理以及防止未授权访问。
We log your login session information, including IP address, user agent (browser and OS), device type, and device model. This information is used for security verification, multi-device management, and preventing unauthorized access.

2.8 Cookie 与类似技术 / Cookies and Similar Technologies

我们使用必要的 Cookie 来维护您的登录会话和偏好设置。这些 Cookie 对于平台的正常运行至关重要。未经您的同意，我们不会使用第三方跟踪 Cookie 或分析 Cookie。
We use essential cookies to maintain your login session and preferences. These cookies are necessary for the Platform to function properly. We do not use third-party tracking cookies or analytics cookies without your consent.

2.9 通信与通知数据 / Communication and Notification Data

当您启用了邮件通知功能（如二步验证码、账户验证邮件、密码重置邮件等），我们会使用您的邮箱地址向您发送事务性邮件。我们也会记录您在平台内的通知（站内消息和公告）。
When you enable email notifications (such as two-factor authentication codes, account verification emails, password reset emails, etc.), we use your email address to send you transactional emails. We also record in-platform notifications (in-app messages and announcements).

3. 我们如何使用您的信息 / How We Use Your Information

我们将收集的信息用于以下目的：
We use the information we collect for the following purposes:

• 服务提供 / Service Provision：为您提供 AI 聊天、图片生成、账户管理等核心功能。
  To provide core features such as AI chat, image generation, and account management.
• AI 模型调用 / AI Model Invocation：将您的对话内容发送至第三方 LLM API 提供商以生成回复。
  To send your conversation content to third-party LLM API providers to generate responses.
• 计费与结算 / Billing and Settlement：计算您的用量消耗（Token 用量、请求次数）并处理支付交易。
  To calculate your usage consumption (token usage, request counts) and process payment transactions.
• 身份验证与安全 / Authentication and Security：验证您的身份、保护账户安全，以及检测和防止欺诈行为。
  To authenticate your identity, protect account security, and detect and prevent fraudulent activity.
• 沟通与支持 / Communication and Support：向您发送重要账户通知（安全更新、服务变更）并回应您的支持请求。
  To send you important account notifications (security updates, service changes) and respond to your support requests.
• 法律合规 / Legal Compliance：遵守适用的法律义务，并执行我们的服务条款和可接受使用政策。
  To comply with applicable legal obligations and enforce our Terms of Service and Acceptable Use Policy.

4. 数据共享与第三方接收方 / Data Sharing and Third-Party Recipients

我们可能在以下必要范围内与第三方共享您的信息：
We may share your information with third parties to the extent necessary as follows:

• LLM API 提供商 / LLM API Providers：您的对话内容（prompt 和上下文）会发送至您选择的 AI 模型提供商（如 OpenAI、Anthropic 等）以生成回复。这些提供商根据其自身的隐私政策处理数据。
  Your conversation content (prompts and context) is sent to the AI model provider you select (such as OpenAI, Anthropic, etc.) to generate responses. These providers process data in accordance with their own privacy policies.
• 支付网关 / Payment Gateways：当您进行支付时，相关信息会传输至支付宝、微信支付或易支付以完成交易。我们不会直接处理或存储您的完整支付凭证。
  When you make a payment, relevant information is transmitted to Alipay, WeChat Pay, or YiPay to complete the transaction. We do not directly process or store your full payment credentials.
• OAuth 平台 / OAuth Platforms：当您使用第三方账号登录时，我们会与 GitHub、Google、Discord、Apple 或 Telegram 交换必要的认证信息。
  When you sign in with a third-party account, we exchange necessary authentication information with GitHub, Google, Discord, Apple, or Telegram.
• Cloudflare Turnstile：我们在注册和登录页面使用 Cloudflare Turnstile 进行人机验证，以防止自动化滥用。
  We use Cloudflare Turnstile on registration and login pages for human verification to prevent automated abuse.
• 邮件服务 / Email Service：当向您发送事务性邮件时，我们会使用您配置的 SMTP 邮件服务器。
  When sending you transactional emails, we use the SMTP mail server you have configured.

除上述情况外，我们不会向第三方出售、出租或以其他方式分享您的个人信息，除非获得您的明确同意或法律要求。
Except as described above, we do not sell, rent, or otherwise share your personal information with third parties, unless we have your explicit consent or are required to do so by law.

5. 数据存储与安全 / Data Storage and Security

您的数据存储在受行业标准安全措施保护的 PostgreSQL 数据库中。我们使用 HTTPS/TLS 加密传输中的数据，并对静态敏感数据（如密码、二步验证密钥）进行加密存储。然而，没有任何电子存储或传输方式是完全安全的，我们无法保证绝对安全。
Your data is stored in a PostgreSQL database protected by industry-standard security measures. We use HTTPS/TLS encryption for data in transit and encrypt sensitive data at rest (such as passwords, two-factor authentication secrets). However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. 您的权利 / Your Rights

根据适用的数据保护法律（包括 GDPR 和类似法规），您可能享有以下权利：
Depending on applicable data protection laws (including GDPR and similar regulations), you may have the following rights:

• 访问权 / Right of Access：请求访问我们持有的关于您的个人数据。
  Request access to the personal data we hold about you.
• 更正权 / Right to Rectification：请求更正不准确或不完整的个人数据。
  Request correction of inaccurate or incomplete personal data.
• 删除权 / Right to Erasure：请求删除您的个人数据（"被遗忘权"）。
  Request deletion of your personal data ("right to be forgotten").
• 限制处理权 / Right to Restrict Processing：请求限制对您个人数据的处理。
  Request restriction of processing of your personal data.
• 数据可携带权 / Right to Data Portability：以结构化、通用的机器可读格式接收您的数据。
  Receive your data in a structured, commonly used, machine-readable format.
• 反对权 / Right to Object：反对基于特定目的对您个人数据的处理。
  Object to processing of your personal data for specific purposes.

如需行使上述权利，请通过平台提供的联系方式与我们联系。我们将在合理时间内（通常为 30 天内）回应您的请求。
To exercise these rights, please contact us through the contact methods provided on the Platform. We will respond to your request within a reasonable timeframe (typically within 30 days).

7. 数据保留 / Data Retention

我们保留个人信息的期限如下：
We retain personal information for the following periods:

• 账户数据 / Account Data：在您的账户活跃期间保留。账户删除后，我们将在 90 天内删除或匿名化您的个人数据。
  Retained while your account is active. After account deletion, we will delete or anonymize your personal data within 90 days.
• 聊天记录 / Chat History：保留至您主动删除或账户删除之时。部分经过匿名化处理的对话数据可能用于模型评估和质量改进，此类数据不包含可识别的个人信息。
  Retained until you actively delete them or until account deletion. Some anonymized conversation data may be retained for model evaluation and quality improvement; such data does not contain identifiable personal information.
• 支付记录 / Payment Records：根据适用的财务和税务法律要求，保留法定年限。
  Retained for the period required by applicable financial and tax laws.
• 日志数据 / Log Data：服务器日志和会话记录保留不超过 12 个月。
  Server logs and session records retained for no more than 12 months.

8. 国际数据传输 / International Data Transfers

我们的服务器可能位于不同国家和地区。此外，当您使用 AI 服务时，您的数据可能被传输至 LLM API 提供商所在的国家/地区（可能位于您所在司法管辖区之外）。我们采取合理措施确保此类传输符合适用的数据保护法律，包括在必要时采用标准合同条款。
Our servers may be located in different countries and regions. Additionally, when you use AI services, your data may be transferred to the countries/regions where LLM API providers are located (which may be outside your jurisdiction). We take reasonable steps to ensure that such transfers comply with applicable data protection laws, including the use of standard contractual clauses where necessary.

9. 未成年人保护 / Protection of Minors

本平台不面向 13 岁以下的儿童。我们不会故意收集 13 岁以下儿童的个人信息。如果您是父母或监护人，并发现您的孩子向我们提供了个人信息，请与我们联系，我们将采取措施删除此类信息。
The Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and discover that your child has provided us with personal information, please contact us and we will take steps to delete such information.

10. 本政策的变更 / Changes to This Policy

我们可能会不时更新本隐私政策。对于重大变更，我们将通过站内公告、邮件或在平台上显著位置提示等方式通知您。变更生效后您继续使用平台即表示您接受更新后的政策。我们建议您定期查看本页面以了解最新信息。
We may update this Privacy Policy from time to time. For significant changes, we will notify you through in-platform announcements, email, or prominent notices on the Platform. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy. We recommend reviewing this page periodically for the latest information.

11. 联系方式 / Contact

如果您对本隐私政策有任何疑问、意见或投诉，请通过 PureCore 平台提供的支持渠道与我们联系。
If you have any questions, comments, or complaints about this Privacy Policy, please contact us through the support channels available on the PureCore platform.