不可变版本 / Immutable version 2026-10-25.1. 本副本不加载分析或应用脚本 / No analytics or app scripts.
本政策说明 Laintas 的账户、计费、托管产品、数据存储、推理、长期记忆及训练处理。请结合您所使用产品的数据条款、数据用途说明与服务商清单阅读。
2026-10-25.1 · 2026-10-25
湖北林塔斯科技有限公司是主站、统一账户及由我们决定目的和方式的处理活动的个人信息处理者，联系方式为 [email protected]。企业客户自行决定目的和方式的数据，可能由客户负责、Laintas 按委托处理；职责以具体部署和有效数据处理约定为准。用户自有设备、自部署实例、接单方、支付代售方和外部供应商可能独立承担相应义务，不能一概视为由 Laintas 控制。
我们按功能处理用户名、邮箱、验证和登录标识、角色与组织关系、会话和设备凭据、安全验证结果、IP 和技术日志、订单与订阅、余额和使用记录、客服与争议资料、偏好、提示词、上下文、文件片段、附件、图片音视频、工具结果、世界状态及您主动保存的内容。托管 key 功能另处理您主动提交的供应商凭据。数据由您、设备、授权登录提供商、支付渠道或使用活动产生；不为所有功能收集全部类别。手机号仅在相应验证或通知功能实际开放且您主动使用时处理，可用于可选交易通知，不因绑定就成为登录或账户找回方式；短信接收方见服务商清单和当次提示。
必要处理用于账户与身份、交付请求、执行您授权的工具、计费结算、退款、支持、安全防护和履行法定义务。保存聊天和文件、形成工作区经验、公开问题和模型训练是可区分的用途，详情见数据用途说明。依据所在地法律，处理可能基于同意、订立或履行合同所必需、法定义务或其他法定事由；合法利益仅在适用法律承认且满足条件时使用，不作为中国大陆法律下一般性替代依据。额外用途不得仅凭接受总条款概括授权。
Helpwo 浏览器工作区通常使用本机 IndexedDB；桌面版和已连接运行环境可访问所选机器上的文件与终端。用户主动使用 Laintas 存储、GitHub 或其他同步功能时，相应数据会上传。主站聊天历史在有云存储额度时可按账户同步，其他情况下保留在浏览器。Scene 世界、日志和角色记忆由其服务端保存。关闭页面、退出登录或卸载客户端不等于删除这些不同位置的数据；清除浏览器数据可能丢失仅在本机的内容。
云端功能会向 Laintas 网关及完成所选功能所需的模型、搜索、媒体或计算服务传输必要输入和结果。联网搜索会处理查询和所需页面内容；语音功能需要处理您提交的音频，浏览器或系统自身的语音服务另遵循其规则。模型名称不必然等于直接签约的处理实体；实际接入服务和按需下游见服务商清单、功能提示及可请求的处理信息。使用自己的模型、key 或设备也应核对网络路径，不应仅凭「本地模型」推定请求完全不经过网关。
您可主动让网关验证并加密托管供应商 API key，用于按您设定的路由调用。密文、名称、可用模型、优先级和必要调用记录保存在服务端；调用时由网关临时解密，不能把加密托管理解成服务端永远无法使用凭据。删除托管来源并在供应商处撤销 key 可终止后续使用；关闭激活不等于删除 key。Google/GitHub 登录与仓库或云盘授权是不同权限，断开 Laintas 连接也未必撤销第三方已保存的授权。
工作区经验与训练数据分开处理：经验用于当前账户跨会话延续工作，可包括用户表达、任务结果和摘要；CLI 训练数据在服务端记录有效主动选择后才收集对应 CLI 调用，不因此开启其他产品训练。关闭训练阻止新采集，不会自动清除既有数据集；涉及可识别个人信息的删除、限制和其他请求仍依法处理。Issues 公开问题与被采纳回答另有公开内容训练规则；仅在 Issues 不保存的私密流、用户自己的 key 和组织等旁路的处理范围见专用说明。
不出售个人信息。为相应目的按必要范围使用托管、数据库、Cloudflare 网络和对象存储、Resend 邮件、Google/GitHub 授权、支付及反欺诈、模型与搜索、GPU 机房和依法要求的接收方。公开发布是向不特定人提供内容；Issues 的「匿名」仅隐藏前台署名，不代表对平台匿名或内容无法识别个人。向独立处理者提供、公开、处理敏感信息或跨境等依法需要单独同意时，应依适用法律处理，不能只援引本政策代替。
保存期以实现具体目的的最短必要期限及法律要求为限。主站详细按量与会员用量当前清理超过十二个月的记录；Compute 调用明细九十天、日汇总四百天；Search 请求元数据当前最多四百天，内部较短周期记录另行清理。订单、核心账本、税务、安全、投诉及争议记录依义务和未决事项保留。云内容在用户保存和账户使用期间保留，依法有效删除后停止非必要使用并清理可控副本，备份按轮换处理；删除公开内容无法保证消除他人已取得的副本。训练原始台账清理与导入后数据集不同，不把原始台账的技术清理周期当作全部训练数据保存期。
Laintas 及服务商的基础设施可能位于中国大陆、美国、欧洲及所选供应商或租用机器显示的其他地区；Cloudflare 等全球服务的处理不固定在单一国家。本服务不作所有数据仅在本地或境内处理的承诺。对依法属于个人信息出境的活动，应核对境外接收方、目的、方式、种类、权利渠道，履行所需告知、单独同意和影响评估，并按条件采用法定机制或适用豁免。若您的业务要求特定驻留地区，请在传输前联系确认，不以模型品牌或界面语言推定处理地点。
采取与风险相称的身份验证、权限、加密、日志、凭据保护和安全处置，但不存在绝对安全。普通提示词、公开问题或客服不要提交密码、私钥、完整卡号或不必要的医疗等敏感信息；专门凭据输入框按其目的处理，不表示允许凭据出现在公开内容。涉及敏感个人信息时，须有特定目的、充分必要性和依法要求的保护及同意。发现泄露、篡改或丢失风险时，依法采取补救、报告并在适用时通知有关个人。
您可通过功能内入口或账户邮箱联系 [email protected]，请求查阅、复制、更正、删除、撤回同意、限制或反对依法可限制的处理、可携带副本和处理说明，并可依法投诉或诉讼。核实身份仅索取必要资料，不要求密码、完整卡号或私钥。我们按适用期限处理，不能满足时说明理由与救济途径。注销、撤销授权、停止训练、删除云内容和清除本机数据是不同操作；财务或安全等依法须保留的资料应限制用途。客户控制的数据可先向组织管理员请求，我们按职责协助。
未成年人数据处理需符合年龄、监护和专门保护要求；监护人可联系核实并请求处理。不能仅凭监护人同意就豁免法律禁止提供的内容或功能。处理目的、数据类别、接收方或其他重要事项变化时，应提供与影响相称的提示，并在法律要求时重新征求同意。历史版本可以在文档中心查看，本政策更新不自动扩大已有授权。
This policy covers accounts, billing, hosted products, storage, inference, long-term memory and training. Read it with your product’s data terms, the Data Use Notice and the Service Provider Directory.
2026-10-25.1 · 2026-10-25
Hubei Laintas Technology Co., Ltd., reachable at [email protected], is responsible for the main site, unified accounts and processing whose purposes and means we determine. An enterprise customer may control its own data with Laintas acting on instructions, depending on deployment and a valid processing agreement. Own devices, self-hosted instances, contractors, merchants of record and external suppliers may have independent duties; they are not all controlled by Laintas.
Depending on the feature, we process usernames, email, verification and login identifiers, roles and organisation relationships, sessions and device credentials, security checks, IP and technical logs, orders and subscriptions, balance and usage, support and disputes, preferences, prompts, context, file excerpts, attachments, image/audio/video, tool results, world state and content you choose to save. Hosted keys also process provider credentials you submit. Sources include you, your device, authorised login providers, payment channels and service activity. Not every category is collected for every feature. Phone numbers are processed only when an available verification or notice feature is used, including optional transaction notices; linking does not make the number a sign-in or recovery method. See the directory and feature notice for the SMS recipient.
Necessary processing supports accounts and identity, requested delivery and authorised tools, billing, refunds, support, security and legal duties. Saving chats or files, workspace experience, publication and model training are distinguishable purposes described in the Data Use Notice. The lawful basis depends on local law and may include consent, contractual necessity, legal obligation or another statutory ground. Legitimate interests are used only where recognised and its conditions met, not as a general substitute under mainland Chinese law. General contractual acceptance is not blanket authority for extra purposes.
Helpwo browser workspaces generally use local IndexedDB; desktop and connected runtimes can access files and terminals on the selected machine. Laintas Storage, GitHub or other sync features upload the relevant data when used. Main-site chat history can sync with cloud-storage entitlement and otherwise stays in the browser. Scene stores worlds, logs and character memories on its server. Closing a page, signing out or uninstalling does not delete every copy; clearing browser storage can destroy local-only content.
Cloud features transmit necessary inputs and results through Laintas and the model, search, media or compute service needed for the selected function. Search processes queries and relevant page content. Voice processes audio you submit; browser or operating-system speech services have their own rules. A model name does not necessarily identify the directly contracted processor; consult the directory, feature notices and available processing information. Verify the network path even with your own model, key or machine rather than assuming no gateway is involved.
You may have the gateway validate and encrypt provider API keys for your chosen routing. Ciphertext, labels, available models, priorities and necessary call records are stored server-side. The gateway temporarily decrypts keys for calls; encrypted storage does not mean the server can never use them. Delete the hosted source and revoke the provider key to end future use; disabling activation does not delete a key. Login and repository/drive permissions are separate; disconnecting Laintas may not revoke permissions held by the provider.
Workspace experience and training are separate: experience supports continuity within the account and can contain user statements, task outcomes and summaries. CLI training capture requires a current server-recorded opt-in for covered CLI calls and does not opt other products in. Turning it off stops new capture, not automatically existing datasets; lawful deletion, restriction and other rights concerning identifiable information remain available. Issues has separate rules for training on public questions and accepted answers. See the specific notices for private streams not retained by Issues, own-key paths and organisation routes.
We do not sell personal information. Necessary recipients may include hosting, databases, Cloudflare networking and object storage, Resend email, Google/GitHub authorisation, payment and fraud services, models and search, GPU infrastructure and legally required recipients. Publication makes content available to an indefinite audience. “Anonymous” on Issues hides the display name, not identity from the platform or identifying details within content. Separate consent requirements for independent recipients, publication, sensitive information or international transfers must be handled under applicable law rather than by citing this policy alone.
Retention is limited to the minimum needed for the purpose and legal requirements. Detailed main-site metered and membership usage older than 12 months is currently purged; Compute call details last 90 days and daily aggregates 400; Search request metadata currently lasts up to 400 days, with shorter internal records purged separately. Orders, core ledgers, tax, security, complaints and disputes follow their duties and open matters. Saved cloud content remains while saved and the account is used; valid deletion ends unnecessary use and clears controlled copies, with backups rotated. Public deletion cannot remove every copy held by others. Raw training-ledger pruning and imported datasets are different; the former is not the retention period of all training data.
Laintas and supplier infrastructure may be in mainland China, the United States, Europe and other locations identified by the supplier or rented machine. Global services such as Cloudflare are not confined to one country. We do not promise exclusively local or domestic processing. Transfers legally involving personal information require the relevant recipient, purpose, method, categories and rights channels to be identified, required notice, separate consent and assessments, and an applicable legal mechanism or exemption. Confirm residency requirements before transmitting; model branding or interface language does not determine processing location.
We apply risk-appropriate authentication, permissions, encryption, logging, credential protection and incident response, without a promise of absolute security. Do not put passwords, private keys, full card numbers or unnecessary health or other sensitive information into ordinary prompts, public questions or support. Dedicated credential fields serve their stated purpose, not public disclosure. Sensitive processing needs a specific necessary purpose, required safeguards and consent. We address suspected leakage, alteration or loss and make legally required reports and notifications.
Use in-product controls or contact [email protected] from your account email for access, copies, correction, deletion, consent withdrawal, legally available restriction or objection, portability and explanations. Complaints and court remedies remain available. Identity verification requests only necessary evidence, never passwords, full card numbers or private keys. Requests follow applicable deadlines; refusals include reasons and remedies. Closure, disconnection, stopping training, cloud deletion and local clearing are different. Legally retained financial or security data has restricted purposes. For customer-controlled data, contact its administrator; we assist within our role.
Processing children’s data requires the applicable age, guardian and special safeguards. Guardians may contact us for verification and requests. Guardian consent does not permit content or features prohibited by law. Material changes to purposes, categories, recipients or other matters require appropriate notice and fresh consent where legally required. Historical versions are available in the legal centre; an update does not automatically expand prior authority.