隐私政策 / Privacy Policy
隐私政策
欢迎使用“小汐助手”（“本服务”）。本隐私政策说明北京汐途智观科技有限公司（TideVision Technology，“我们”）在提供小汐助手网站、移动应用及相关功能时，如何收集、使用、存储、共享和保护个人信息。
1. 我们收集的信息
根据您实际使用的功能，我们可能处理以下信息：
- 账号与个人资料：登录邮箱、显示名称、真实姓名（如填写）、性别（如填写）、生日（如填写）、学校、专业和头像。
- 邮箱连接信息：当您主动连接 Gmail 时，我们会通过 Google OAuth 获取授权，并在授权范围内处理提供邮件整理功能所必需的邮箱账号信息、邮件元数据、邮件正文及相关内容。
- 学习与日程信息：课程、作业、考试、截止日期、地点、课程表、日历事件及您创建或确认的事项。
- 您提交的内容：向 AI 助理或作业助手输入的文字、上传的文件或图片，以及实现课表识别、证件识别、作业分析等功能所需处理的内容。
- 技术与安全信息：登录会话、访问令牌、必要日志、错误信息和安全审计信息，用于身份验证、故障排查和防止滥用。
2. 我们如何使用信息
- 创建、维护和保护您的账号；
- 提供您主动使用的邮件分类、翻译、重要事项识别、课程/作业/考试/截止日期提取和日程相关功能；
- 提供 AI 问答、作业分析、课程和学习辅助；
- 处理您主动上传的课表、文件、图片或其他材料；
- 发送注册验证码、安全通知和必要的服务性邮件；
- 维护服务稳定性、安全性，并诊断故障；
- 在符合适用法律和平台政策的前提下改进小汐助手面向用户的功能；通过 Google Workspace API 获取的数据不会用于训练、开发或改进通用或非个性化的 AI/ML 模型。
3. Google / Gmail 数据
只有在您主动授权后，小汐助手才会连接您的 Google / Gmail 账号。我们仅在提供您明确请求的邮件助手功能所必需的范围内访问和使用 Google 用户数据，包括读取邮件元数据和正文，以进行邮件整理、分类、翻译，以及提取课程、作业、考试、截止日期、时间、地点和日程变更等信息。
小汐助手不会使用 Gmail 权限发送、删除、修改、归档、加标签或以其他方式更改您 Gmail 账号中的邮件。我们不会出售 Google 用户数据，也不会将其用于广告、广告定向、再营销、信用评估、数据经纪或与您明确请求的功能无关的数据库构建。
您可以随时通过 Google 账号权限页面撤销小汐助手的访问权限。撤销后，我们将停止该 Google 账号的后续同步。
4. AI 与第三方服务提供商
在您主动使用相关功能并同意相应数据处理后，为提供您明确请求的 AI 分类、翻译、问答和信息提取等功能，我们可能将完成该请求所必需的最少内容发送给代表我们处理数据的第三方技术服务提供商。此类数据仅可用于提供相关用户请求功能，不得用于广告、数据经纪或训练通用/非个性化 AI 或机器学习模型。
目前，小汐助手的第三方 AI 服务提供商包括 OpenAI API Platform。我们通过 API 使用该服务处理用户请求所需的数据。OpenAI 的 API Platform 默认不会使用 API 输入和输出训练或改进其模型，除非 API 客户明确选择加入数据共享。小汐助手不会将 Google Workspace API 数据选择加入用于通用模型训练的数据共享机制。
我们还可能使用云托管、数据库、邮件发送、身份验证和安全服务提供商来运行本服务。目前服务基础设施主要托管于加拿大；部分服务提供商可能在其他国家或地区处理数据。
5. 数据存储与保留
我们仅在提供用户明确请求的功能、维持账号、履行法律义务、处理争议和保障安全所合理需要的期间保留信息。不同类型的数据可能具有不同的保留期限，我们不会为了建立独立数据库、广告或通用 AI/ML 模型训练而长期保留 Google Workspace API 数据。
如果您断开邮箱连接，我们会停止对该邮箱的后续同步。某些已经根据您的请求生成并保存到小汐助手账号中的日程或学习事项，可能继续保留，直到您删除、提出删除请求，或不再存在合理的保留需要。
6. 数据共享
我们不会出售您的个人信息。我们仅会在以下必要情形共享信息：
- 向代表我们运行服务、并仅为提供您请求的功能处理数据的技术服务提供商共享；
- 在获得您明确指示或同意的情况下共享；
- 为安全、防欺诈和防止滥用之目的，在合理必要范围内处理或共享；
- 为遵守适用法律、法院命令或合法监管要求；
- 在适用法律允许的企业交易场景中；对于通过 Google Workspace API 获取的数据，仅在事先取得用户明确同意后进行相关转移。
对于 Google Workspace API 数据，我们仅会按照 Google API Services User Data Policy 允许的目的进行传输和处理。
7. 您的选择和权利
在适用法律允许的范围内，您可以请求访问、更正或删除与您相关的个人信息，并可以撤回某些授权。部分资料可直接在账号设置中修改；其他请求可通过我们在官网公布的联系渠道提出。
8. 安全
我们采取合理的技术和组织措施保护信息，例如身份验证、访问控制、加密传输和受控服务器环境。但任何网络或存储系统都无法保证绝对安全。
9. 未成年人
本服务主要面向高等教育阶段及具备相应民事行为能力的用户。若您所在地区要求未成年人取得监护人同意，请在获得必要同意后使用本服务。
10. 国际和跨境处理
由于我们使用跨境云服务和技术服务提供商，您的信息可能在您所在国家或地区以外被处理或存储。我们会根据适用法律采取合理措施保护这些信息。
11. 政策更新
我们可能随着功能、法律或业务变化更新本隐私政策。重大变更时，我们会通过网站、应用或其他合理方式提供通知。页面顶部的“最后更新”日期反映最新版本。
12. 联系我们
如您对本隐私政策、个人信息处理方式或权利请求有疑问，请通过 xiaoxiassistant.com 上公布的官方联系渠道与我们联系。
Privacy Policy
Welcome to Xiaoxi Assistant (the “Service”). This Privacy Policy explains how Beijing Xitu Zhiguan Technology Co., Ltd. (TideVision Technology, “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when providing the Xiaoxi Assistant website, mobile applications, and related features.
1. Information We Process
Depending on the features you use, we may process:
- Account and profile information: login email, display name, legal name (if provided), gender (if provided), date of birth (if provided), university, major, and profile image.
- Connected email information: when you choose to connect Gmail, we use Google OAuth and may process account information, message metadata, message bodies, and related content within the permissions you authorize and only as needed for email-assistant features.
- Study and calendar information: courses, assignments, exams, deadlines, locations, timetables, calendar events, and items you create, keep, or confirm.
- Content you submit: text entered into AI or assignment features, files or images you upload, and content needed to provide timetable recognition, document recognition, assignment analysis, and similar functions.
- Technical and security information: authentication sessions, access tokens, necessary logs, error information, and security records used for authentication, troubleshooting, and abuse prevention.
2. How We Use Information
- to create, maintain, and secure your account;
- to provide user-requested email classification, translation, important-item identification, course/assignment/exam/deadline extraction, and calendar-related features;
- to provide AI assistance, assignment analysis, course, and study support;
- to process timetables, documents, images, and other materials you choose to upload;
- to send registration codes, security notices, and necessary transactional messages;
- to maintain service reliability, security, and troubleshooting; and
- to improve Xiaoxi Assistant's user-facing features in accordance with applicable law and platform policies. Data obtained through Google Workspace APIs is not used to train, develop, or improve generalized or non-personalized AI/ML models.
3. Google / Gmail Data
Xiaoxi Assistant connects to your Google / Gmail account only after you explicitly authorize access. We access and use Google user data only to the extent necessary to provide the Email Assistant features you explicitly request, including reading message metadata and message bodies in order to organize and classify emails, translate email content, and extract academic information such as courses, assignments, exams, deadlines, times, locations, and schedule changes.
Xiaoxi Assistant does not use Gmail permissions to send, delete, modify, archive, label, or otherwise alter messages in your Gmail account. We do not sell Google user data, and we do not use it for advertising, targeted advertising, retargeting, credit evaluation, data brokerage, or creation of databases unrelated to functionality explicitly requested by the user.
You may revoke Xiaoxi Assistant's access at any time through your Google Account permissions. After access is revoked, future synchronization for that Google account will stop.
4. AI and Service Providers
When you actively use the relevant feature and consent to the associated data processing, we may transmit the minimum content necessary to third-party technology providers acting on our behalf in order to provide AI-powered classification, translation, question answering, and information extraction that you explicitly request. Such data may only be processed to provide the relevant user-requested functionality and may not be used for advertising, data brokerage, or generalized/non-personalized AI or machine-learning model training.
Our current third-party AI service provider includes the OpenAI API Platform. We use the API service to process data necessary to fulfill user requests. OpenAI states that API Platform inputs and outputs are not used to train or improve OpenAI models by default unless an API customer explicitly opts in to data sharing. Xiaoxi Assistant does not opt Google Workspace API data into data-sharing mechanisms for generalized model training.
We may also use cloud hosting, database, email delivery, authentication, and security providers to operate the Service. Our core infrastructure is currently hosted primarily in Canada, while some providers may process data in other jurisdictions.
5. Storage and Retention
We retain information only for as long as reasonably necessary to provide user-requested functionality, maintain accounts, comply with legal obligations, resolve disputes, and protect security. Different categories of information may have different retention periods. We do not retain Google Workspace API data for the purpose of building independent databases, advertising, or generalized AI/ML model training.
If you disconnect an email account, future synchronization from that account stops. Certain calendar or study items that were generated and saved to your Xiaoxi Assistant account at your request may remain until you delete them, request deletion, or there is no longer a reasonable need to retain them.
6. Sharing
We do not sell your personal information. We share information only when necessary:
- with technology providers acting on our behalf and processing data only to provide functionality you request;
- when you expressly direct or consent to the sharing;
- for security, fraud prevention, and abuse prevention where reasonably necessary;
- to comply with applicable law, court orders, or lawful regulatory requests; or
- in an applicable corporate transaction where permitted by law; for data obtained through Google Workspace APIs, such transfer will occur only after obtaining the user's explicit prior consent.
Google Workspace API data is transferred and processed only for purposes permitted by the Google API Services User Data Policy.
7. Your Choices and Rights
Subject to applicable law, you may request access to, correction of, or deletion of personal information associated with you, and you may withdraw certain permissions. Some profile information can be edited directly in account settings. Other requests may be submitted through the official contact channels published on our website.
8. Security
We use reasonable technical and organizational safeguards, such as authentication, access controls, encrypted transmission, and controlled server environments. No network or storage system can be guaranteed to be completely secure.
9. Minors
The Service is primarily intended for users in higher education and users who have the legal capacity to use the Service. Where local law requires parental or guardian consent, you should obtain the required consent before using the Service.
10. International Processing
Because we use cross-border cloud and technology providers, information may be processed or stored outside your country or region. We take reasonable measures to protect information in accordance with applicable law.
11. Changes to This Policy
We may update this Privacy Policy as our features, laws, or business practices change. For material changes, we will provide notice through the website, application, or another reasonable method. The “Last updated” date at the top reflects the current version.
12. Contact
If you have questions about this Privacy Policy, our data practices, or a privacy-rights request, please use the official contact channel published at xiaoxiassistant.com.