图译工坊 Privacy Policy

1. Introduction

• We formulate this Privacy Policy in accordance with the Personal Information Protection Law of the People’s Republic of China, the Cybersecurity Law of the PRC, the Data Security Law of the PRC, and other applicable laws and regulations, to explain how we process your personal information.
• This Policy applies to the 图译工坊 web workbench, the local assistant, and related services (collectively, the "Service"). Your checking the agreement box to accept this Policy upon registration, and your subsequent use of the Service, are both deemed as your having read and understood this Policy.
• Where this Policy and the User Agreement differ on data processing, the interpretation more favorable to your rights and interests shall prevail.

2. What we collect and why

• We collect only the minimum information necessary to deliver the Service’s functions (the principle of minimum necessity), including:
• ① Account information: email address, invite code, password hash, login session — for registration, login, identity authentication, and password recovery;
• ② Email-verification and reset credentials: one-time verification tokens (encrypted with AES-256-GCM at rest) — for email verification and password reset;
• ③ Device and network-security information: IP address (hashed), anonymous device identifier, browser type, login-failure counter — for security, brute-force protection, abuse prevention, and rate limiting;
• ④ Usage and operation data: task type, operation time, success rate, and other operational metrics (excluding file content) — for service-quality improvement;
• ⑤ Credits and billing information: credit-package orders, credit balance, settlement records — for credit issuance, consumption, and billing reconciliation.
• Except for the content expressly itemized in Section 5, we do not collect your design-file bodies, file names, paths, or client names as user-content plaintext for the long term, and we do not use them for model training or any non-service purpose. Font names are used only in de-identified TopN-count form for typography statistics, and for no other purpose. Temporary snapshots needed for review and billing are retained only briefly during processing (at most 7 days, then de-identified or deleted).

3. Smart learning

• Checking the agreement box upon registration is deemed as your consent to processing the de-identified typography-feature data described in this section (excluding file bodies, file names, paths, or client names; font names are counted only in TopN form and used for no other purpose).

4. Cookies and local storage

• We use browser Cookies to store the login session (essential Cookies). If you reject or delete essential Cookies, you may be unable to log in normally. We do not use Cookies for advertising tracking.
• Local activation state is stored in your browser’s local storage (localStorage) and in the local files of your local assistant on this machine (bound to your hardware, obfuscated), to keep the Service running. After uninstalling the local assistant, the related credentials are cleaned per the uninstall flow; activation records are retained to support reinstall identification and do not contain your design-file content.

5. Third-party processing

• To provide the Service, we cooperate with third-party processors to process necessary data, including categories such as AI model services, email-sending services, network-acceleration and security-protection services; the scope of cooperation is limited to what is necessary to deliver the Service’s functions. The name, activity, hosting region, headquarters or registered location, and the types of your data for each processor are itemized in the List of Subprocessors (linked below in this section); the Policy body does not repeat the list. When a processor is added or replaced, we announce it on the List page at least 30 days in advance.
• The scope of "stays on your machine" is as follows: your design-file bodies (.psd, .psb, etc.) and the exported images after replacement are processed only on your machine; we compute file digests on your machine solely for reconciliation and do not upload these files; third-party software running on your machine (e.g., Photoshop) executes tasks only on your machine.
• We must also state: layer text, the source and translated text in your tables, and troubleshooting information leave your machine — itemized in the table below. "Design-file bodies stay on your machine" does not mean "your data does not leave your machine".
• Except as stated above, we do not provide your personal information to any third party; we do not sell, rent, or use it for third-party marketing.

This table aggregates by content type; per-channel details (including each channel’s purpose and limits) are in the List of Subprocessors page and Section 5 table of this Policy’s master copy. Retention periods in this table are the part this Service can commit to; the retention periods on the third-party processor side are per their published policies, which this Service does not commit to on their behalf.

View the List of Subprocessors

6. Storage location, retention, and deletion

• Storage location: the core business data of this Service is stored on controlled servers located outside the territory of the People’s Republic of China (currently deployed in Singapore, cloud provider Tencent Cloud, availability zone ap-singapore-4). When providing personal information to a foreign recipient, we will lawfully obtain your separate consent and adopt corresponding security-protection measures (for example, the content package in "upload troubleshooting information" requires your explicit opt-in at the failure site before upload, see Section 7). CDN edge nodes only perform transmission acceleration and temporary caching; cached content is not stored long term. If the storage location or jurisdiction changes, we will notify you at least 30 days in advance per Section 11 and update the List of Subprocessors synchronously.
• Retention period is the minimum time necessary to achieve the processing purpose: account information is retained during your use of the Service; login-failure and rate-limit records at most 90 days; learning-feature data is periodically deleted per the retention policy (server-side signals at most 180 days, typography layer data at most 365 days, local evidence at most 30 days); email verification/reset tokens invalidated upon expiry, event records retained no more than 7 days; review snapshots at most 7 days; usage and event metrics at most 90 days; credit and billing records per financial and tax compliance (de-identified for information identifiable to individuals during retention). The retention-period attribution for each content channel is in the Section 5 itemized table.
• Where the processing purpose has been achieved, you withdraw consent, or you request deletion, we proactively delete or de-identify the relevant personal information.

7. Troubleshooting information (optional upload)

• To locate the cause of execution/scan failures, the local assistant generates a troubleshooting snapshot on your machine when a failure occurs (error codes, stage, build identity, Photoshop environment probe, diagnostic tail, and receipt digest), and auto-uploads it when online; the snapshot contains no translated text, layer source, file name, or path (path-type information is always de-identified), and is auto-deleted after at most 7 days.
• For deeper diagnosis, you may click "Upload troubleshooting info" in the failure prompt and **separately opt in** to "also upload translated text and layer source": this content package contains translated lines and layer source, is transmitted to the server in Singapore, used only by the author to diagnose this failure, and auto-deleted after at most 7 days; you may turn it off at any time, or request early deletion via the email at the end of this Policy.
• You may also enable "Support mode (24 hours)": during the enabled period, each failure auto-uploads the above content within the scope you choose, auto-expires on expiry, and may be turned off at any time. Withdrawing consent does not affect deletion requests for content already uploaded.

8. Your rights

• You have the following rights regarding your personal information:
• ① Access and copy: review the account information and processing status we hold about you;
• ② Correction: correct inaccurate or incomplete personal information;
• ③ Deletion: submit a deletion request via the email at the end of this Policy; we delete or de-identify your personal information;
• ④ Copy and portability (right to data portability): submit a request via the email at the end; we provide a copy of your personal information in a structured, commonly used, machine-readable format; where technically feasible, at your request we transfer the relevant personal information to a third party you designate;
• ⑤ Withdraw consent: for processing based on your consent, you may withdraw consent. Because smart learning is a prerequisite for providing this Service (see Section 3), withdrawing consent for smart learning is deemed as your cessation of use of this Service, and we will process your data per the deletion-request flow;
• ⑥ Account cancellation: the current beta version does not yet provide a user self-service cancellation feature; we are planning it for a later version; before it launches, if you need to cancel, please contact our operations staff via the email at the end of this Policy;
• ⑦ Complaint and report: file a complaint or report with the supervisory authority, or require us to explain the processing rules.
• We will respond to and process your request within 15 business days; if we decline your request, we will state the reason.

9. Minor protection

• This Service is for adults and users with full civil capacity. We do not actively collect minors’ personal information.
• If you are a minor under 14, do not register or use this Service; if you are the guardian of a minor and discover their use, contact the email at the end of this Policy to delete the relevant personal information.
• If you are a minor aged 14 or above but under 18, you should use this Service under the consent and guidance of a guardian. We process minors’ personal information only where permitted by law, with the guardian’s explicit consent, or where necessary to protect the minor; if we discover we have collected a minor’s personal information without guardian consent, we will delete it as soon as practicable.

10. Security measures

• We take the following measures to protect your personal information: passwords stored with salted slow hashing (scrypt), no plaintext kept; session credentials encrypted at rest, tokens stored as hashes; email-verification tokens encrypted on disk with AES-256-GCM; rate limiting and brute-force protection on login, registration, and reset endpoints; logs do not record passwords, full tokens, or user-content bodies; production obtains the real client IP only through a trusted proxy chain.
• If a security incident involving personal-information leakage, tampering, or loss occurs or is likely to occur, we will immediately activate the emergency plan and take remediation, and timely inform you under law of the basic facts and possible impact of the incident, the measures taken or to be taken, the suggestions you may adopt to prevent and reduce risk, and the remediation for you; and report to the supervisory authority per regulations.
• We recommend you safeguard your account password, do not disclose verification codes to others, and log out promptly after use on public devices. If you find account anomalies or theft, change your password promptly and contact us via the methods at the end of this Policy.

11. Policy changes

• We may revise this Policy per changes in laws/regulations or business adjustments. Material changes include but are not limited to: material changes in the purpose, type, or manner of processing personal information; material changes in ownership structure or organizational structure; changes in the main recipients of personal-information sharing, transfer, or public disclosure; changes in third-party processor cooperation, or addition/replacement of processors in the List of Subprocessors; changes in the storage location or jurisdiction of personal information; changes in the responsible department, contact method, or complaint channel for personal-information security; where a personal-information security impact assessment indicates high risk.
• Material changes will be notified at least 30 days in advance via a prominent in-Service method or the contact method you provided; immaterial changes (text corrections, format adjustments, explanatory revisions that do not affect your rights and obligations) take effect immediately upon update.
• After the change takes effect, your continued use of the Service is deemed as acceptance of the change; if you disagree, you have the right to stop using the Service and may contact us to process your data.

12. Contact us

• Privacy / deletion-request email: [email protected]
• Complaint and report channel: same email
• Response time: no more than 15 business days after receiving the email and verifying identity