隐私保护政策 (Privacy Policy)
生效日期：2026 年 11 月 1 日
本政策说明 HANWEN Hu（以下称“我们”）在你使用 ZHITONG 软件、官网 zhitong.xingyuzhitong.com 及账号与订阅服务时，收集哪些信息、怎么用、交给谁、保存多久，以及你有哪些权利。
一句话版本
ZHITONG 主要在你自己的 Mac 上运行。你的代码、项目文件、终端内容和各 AI 厂商的账号凭据留在你的 Mac 上，我们的云端不接收。云端只处理 ZHITONG 账号登录、设备管理和会员订阅所需的少量信息。软件不做使用统计、不上报崩溃、不投放广告追踪。
1. 留在你 Mac 上、我们收不到的信息
- 终端内容、项目文件、线程记录、你发给 AI 智能体的指令。
- 你在 Claude Code、Codex、Gemini、Antigravity 等工具里登录的账号凭据。ZHITONG 的“账号库”会把你保存的账号快照存进 macOS 钥匙串，只在本机使用。
- 语音输入：语音识别在本机完成，录音不上传到我们的服务器。
- 语音识别模型：首次使用或在设置里选择模型时，软件会从 GitHub（k2-fsa/sherpa-onnx 项目的发布页）下载模型文件。下载请求由你的 Mac 直接发给 GitHub，GitHub 会看到你的 IP 地址等网络信息，适用 GitHub 的隐私政策；我们不经手这次下载。
请注意两种由你自己发起、不经过我们的数据流动：
- 你使用的 AI 智能体会把你的指令、代码等发送给对应厂商（Anthropic、OpenAI、Google 等），适用这些厂商自己的隐私政策。
- 如果你开启“语音 AI 校对”，识别出的文字会发送给你选择的 AI 模型处理。
2. 我们的云端收集的信息
| 信息 | 用途 |
|---|---|
| 邮箱地址 | 注册登录、发送验证码、订阅与账号相关通知 |
| 用户 ID、注册时间、登录方式（邮箱 / 以后的 Google、Apple 账号标识） | 识别你的账号 |
| 设备信息：你命名的设备名、平台（Mac / 网页）、软件版本、登录时的 IP 地址、最近活跃时间 | 让你在用户中心查看和撤销设备；安全防护 |
| 设备令牌、验证码（都只存不可逆的 SHA-256 哈希，不存原值） | 登录校验 |
| 验证码请求的 IP 地址和时间 | 防止滥发验证码（限流） |
| 订阅信息：档位、状态、到期时间、Stripe 客户号和订阅号 | 判断会员权益 |
| 服务器日志（可能包含邮箱、IP、请求时间、错误信息） | 排查故障、防范攻击 |
我们不收集银行卡号：付款信息由 Stripe 直接收集和处理。
官网只在你的浏览器本地存储里保存语言偏好（zt_lang）和登录令牌（zt_token），不使用第三方统计或广告 Cookie。
3. 我们把信息交给谁
我们不出售你的个人信息。仅在提供服务所需的范围内，使用以下服务商：
| 服务商 | 用途 | 涉及的信息 |
|---|---|---|
| Cloudflare | 托管官网和云端接口、数据库，发送验证码邮件 | 第 2 节所列信息 |
| Stripe | 处理订阅付款、发票、管理订阅 | 邮箱、Stripe 客户号，以及你在 Stripe 页面填写的付款信息 |
以后若接入 PayPal、Google 登录、Apple 登录，会在接入前更新本政策。
除此之外，只有在法律要求、配合有权机关依法调查，或为保护你、其他用户或我们的合法权益所必需时，我们才会披露信息。
4. 存储地点与跨境传输
上述服务商可能在你所在国家或地区以外（包括美国）处理数据。我们使用这些服务商时，依赖其提供的数据保护承诺（包括 Cloudflare、Stripe 提供的数据处理协议和标准合同条款等跨境传输保障）。使用本服务即表示你知悉你的上述信息会被传输到中国香港、美国等地处理；你可以随时注销账号来停止这种处理。
5. 保存多久
- 账号信息、设备记录、订阅记录：在你的账号存续期间保存；你在用户中心注销账号时立即从我们的数据库删除（备份副本按 Cloudflare 的备份周期自然过期）。
- 已撤销的设备记录：撤销后 90 天内删除。
- 验证码记录：30 天内删除。
- 付款与发票记录：保存在 Stripe，为满足税务、会计等法律要求，注销后仍会保存法律要求的期限。
- 服务器日志：按 Cloudflare 的日志保留期自动删除。
6. 你的权利
你可以：
- 在用户中心查看你的账号、设备和订阅；撤销任何设备；退出登录。
- 通过 Stripe 管理订阅页面更新付款方式、取消订阅。
- 在官网用户中心自助注销账号（有生效中的订阅时，需先取消并等当前周期结束）。
- 发邮件到 huhuwen09@gmail.com，申请获取你的个人信息副本或更正信息，我们会在核实身份后 30 天内处理。
根据你所在地的法律，你可能还享有其他权利（例如反对或限制处理、数据可携、向监管机构投诉）。
7. 安全
云端只保存令牌和验证码的哈希，传输全程使用 HTTPS；本机面板默认只允许本机（127.0.0.1）访问。但任何系统都无法保证绝对安全，如发生影响你的安全事件，我们会按法律要求通知你。
8. 未成年人
本服务不面向 16 周岁以下的人。如发现我们误收集了未成年人的信息，请联系我们删除。
9. 政策更新
本政策变化时，我们会更新生效日期；重大变化会通过邮件或官网提前通知。
10. 联系我们
HANWEN Hu · huhuwen09@gmail.com
Effective date: November 1, 2026
This policy explains what information HANWEN Hu ("we", "us") collects when you use the ZHITONG software, the website zhitong.xingyuzhitong.com and our account and subscription services, how we use it, who we share it with, how long we keep it, and your rights.
In Short
ZHITONG runs mainly on your own Mac. Your code, project files, terminal content and AI vendor credentials stay on your Mac; our cloud does not receive them. The cloud only handles the small amount of information needed for ZHITONG sign-in, device management and subscriptions. The software has no usage analytics, no crash reporting and no ad tracking.
1. Information That Stays on Your Mac
- Terminal content, project files, thread records, and the instructions you give AI agents.
- The credentials you use to sign in to Claude Code, Codex, Gemini, Antigravity and similar tools. ZHITONG's account vault stores the snapshots you save in the macOS Keychain, for use on that Mac only.
- Voice input: speech recognition runs on your Mac, and recordings are not uploaded to our servers.
- Speech models: when you first use voice input or pick a model in Settings, the software downloads model files from GitHub (the k2-fsa/sherpa-onnx releases page). Your Mac sends this request directly to GitHub, which can see your IP address and similar network information under GitHub's own privacy policy; the download does not pass through us.
Two data flows that you start yourself and that do not pass through us:
- The AI agents you use send your instructions, code and other content to their vendors (Anthropic, OpenAI, Google and others) under those vendors' own privacy policies.
- If you turn on "AI proofreading" for voice input, the recognized text is sent to the AI model you choose.
2. Information Our Cloud Collects
| Information | Purpose |
|---|---|
| Email address | Sign-up and sign-in, sending one-time codes, subscription and account notices |
| User ID, sign-up time, sign-in method (email; Google or Apple account identifier in future) | Identifying your account |
| Device information: the device name you set, platform (Mac / web), app version, IP address at sign-in, last active time | Letting you view and revoke devices in the account page; security |
| Device tokens and one-time codes (stored only as irreversible SHA-256 hashes, never in plain form) | Verifying sign-in |
| IP address and time of code requests | Preventing abuse of code sending (rate limiting) |
| Subscription information: plan, status, period end, Stripe customer and subscription IDs | Determining your plan |
| Server logs (may include IP addresses, request times and error details) | Troubleshooting and preventing attacks |
We do not collect card numbers: payment details are collected and processed directly by Stripe.
The website stores only your language preference (zt_lang) and sign-in token (zt_token) in your browser's local storage. It uses no third-party analytics or advertising cookies.
3. Who We Share Information With
We do not sell your personal information. We use the following service providers only as needed to run the Service:
| Provider | Purpose | Information involved |
|---|---|---|
| Cloudflare | Hosting the website, cloud API and database; sending one-time code emails | The information listed in Section 2 |
| Stripe | Processing subscription payments and invoices; subscription management | Email, Stripe customer ID, and the payment details you enter on Stripe's pages |
If we add PayPal, Google sign-in or Apple sign-in, we will update this policy first.
Apart from this, we disclose information only when required by law, to cooperate with lawful investigations by competent authorities, or when necessary to protect the rights of you, other users or us.
4. Where Data Is Stored and International Transfers
These providers may process data outside your country or region, including in the United States. When using them, we rely on the data protection commitments they provide (including the data processing agreements and Standard Contractual Clauses offered by Cloudflare and Stripe). By using the Service, you acknowledge that the information above is transferred to and processed in places such as Hong Kong and the United States; you can stop this processing at any time by deleting your account.
5. How Long We Keep Information
- Account information, device records and subscription records: kept while your account exists; deleted from our database immediately when you delete your account in the account page (backup copies expire on Cloudflare's normal backup cycle).
- Revoked device records: deleted within 90 days of revocation.
- One-time code records: deleted within 30 days.
- Payment and invoice records: kept by Stripe, and retained after account deletion for the period required by tax and accounting law.
- Server logs: deleted automatically under Cloudflare's log retention period.
6. Your Rights
You can:
- View your account, devices and subscription in the account page; revoke any device; sign out.
- Update your payment method or cancel your subscription in Stripe's subscription management page.
- Delete your account yourself in the account page (if you have an active subscription, cancel it first and wait for the current period to end).
- Email huhuwen09@gmail.com to request a copy of your personal information or to correct it; we will respond within 30 days after verifying your identity.
Depending on where you live, you may have other rights (such as objecting to or restricting processing, data portability, or complaining to a regulator).
7. Security
Our cloud stores only hashes of tokens and codes, all traffic uses HTTPS, and the local panel accepts connections only from your own Mac (127.0.0.1) by default. No system is perfectly secure; if a security incident affects you, we will notify you as required by law.
8. Children
The Service is not intended for anyone under 16. If you believe we have collected information from a child by mistake, contact us and we will delete it.
9. Changes to This Policy
When this policy changes, we will update the effective date; we will give advance notice of material changes by email or on the website.
10. Contact
HANWEN Hu · huhuwen09@gmail.com