不可变版本 / Immutable version 2026-10-25.3. 本副本不加载分析或应用脚本 / No analytics or app scripts.
本政策说明 Laintas 的账户、计费、托管产品、数据存储、推理、长期记忆及训练处理。请结合您所使用产品的数据条款、数据用途说明与服务商清单阅读。
2026-10-25.3 · 2026-10-25
湖北林塔斯科技有限公司是主站、统一账户及由我们决定目的和方式的处理活动的个人信息处理者，联系方式为 [email protected]。企业客户自行决定目的和方式的数据，可能由客户负责、Laintas 按委托处理；职责以具体部署和有效数据处理约定为准。用户自有设备、自部署实例、接单方、支付代售方和外部供应商可能独立承担相应义务，不能一概视为由 Laintas 控制。
我们按功能处理用户名、邮箱、验证和登录标识、角色与组织关系、会话和设备凭据、安全验证结果、IP 和技术日志、订单与订阅、余额和使用记录、客服与争议资料、偏好、提示词、上下文、文件片段、附件、图片音视频、工具结果、世界状态及您主动保存的内容。托管 key 功能另处理您主动提交的供应商凭据。数据由您、设备、授权登录提供商、支付渠道或使用活动产生；不为所有功能收集全部类别。手机号仅在相应验证或通知功能实际开放且您主动使用时处理，可用于可选交易通知，不因绑定就成为登录或账户找回方式；短信接收方见服务商清单和当次提示。
必要处理用于账户与身份、交付请求、执行您授权的工具、计费结算、退款、支持、安全防护和履行法定义务。保存聊天和文件、形成工作区经验、公开问题和模型训练是可区分的用途，详情见数据用途说明。依据所在地法律，处理可能基于同意、订立或履行合同所必需、法定义务或其他法定事由；合法利益仅在适用法律承认且满足条件时使用，不作为中国大陆法律下一般性替代依据。额外用途不得仅凭接受总条款概括授权。
Helpwo 浏览器工作区通常使用本机 IndexedDB；桌面版和已连接运行环境可访问所选机器上的文件与终端。用户主动使用 Laintas 存储、GitHub 或其他同步功能时，相应数据会上传。主站聊天历史在有云存储额度时可按账户同步，其他情况下保留在浏览器。Scene 世界、日志和角色记忆由其服务端保存。关闭页面、退出登录或卸载客户端不等于删除这些不同位置的数据；清除浏览器数据可能丢失仅在本机的内容。
云端功能会向 Laintas 网关及完成所选功能所需的模型、搜索、媒体或计算服务传输必要输入和结果。联网搜索会处理查询和所需页面内容；语音功能需要处理您提交的音频，浏览器或系统自身的语音服务另遵循其规则。模型名称不必然等于直接签约的处理实体；实际接入服务和按需下游见服务商清单、功能提示及可请求的处理信息。使用自己的模型、key 或设备也应核对网络路径，不应仅凭「本地模型」推定请求完全不经过网关。
您可主动让网关验证并加密托管供应商 API key，用于按您设定的路由调用。密文、名称、可用模型、优先级和必要调用记录保存在服务端；调用时由网关临时解密，不能把加密托管理解成服务端永远无法使用凭据。删除托管来源并在供应商处撤销 key 可终止后续使用；关闭激活不等于删除 key。Google/GitHub 登录与仓库或云盘授权是不同权限，断开 Laintas 连接也未必撤销第三方已保存的授权。
工作区经验与训练数据分开处理：经验用于当前账户跨会话延续工作，可包括用户表达、任务结果和摘要；CLI 训练数据在服务端记录有效主动选择后才收集对应 CLI 调用，不因此开启其他产品训练。关闭训练阻止新采集，不会自动清除既有数据集；涉及可识别个人信息的删除、限制和其他请求仍依法处理。Issues 公开问题与被采纳回答另有公开内容训练规则；仅在 Issues 不保存的私密流、用户自己的 key 和组织等旁路的处理范围见专用说明。
不出售个人信息。为相应目的按必要范围使用托管、数据库、Cloudflare 网络和对象存储、Resend 邮件、Google/GitHub 授权、支付及反欺诈、模型与搜索、GPU 机房和依法要求的接收方。公开发布是向不特定人提供内容；Issues 的「匿名」仅隐藏前台署名，不代表对平台匿名或内容无法识别个人。向独立处理者提供、公开、处理敏感信息或跨境等依法需要单独同意时，应依适用法律处理，不能只援引本政策代替。
保存期以实现具体目的的最短必要期限及法律要求为限。主站详细按量与会员用量当前清理超过十二个月的记录；Compute 调用明细九十天、日汇总四百天；Search 请求元数据当前最多四百天，内部较短周期记录另行清理。订单、核心账本、税务、安全、投诉及争议记录依义务和未决事项保留。云内容在用户保存和账户使用期间保留，依法有效删除后停止非必要使用并清理可控副本，备份按轮换处理；删除公开内容无法保证消除他人已取得的副本。训练原始台账清理与导入后数据集不同，不把原始台账的技术清理周期当作全部训练数据保存期。
Laintas 及服务商的基础设施可能位于中国大陆、美国、欧洲及所选供应商或租用机器显示的其他地区；Cloudflare 等全球服务的处理不固定在单一国家。本服务不作所有数据仅在本地或境内处理的承诺。对依法属于个人信息出境的活动，应核对境外接收方、目的、方式、种类、权利渠道，履行所需告知、单独同意和影响评估，并按条件采用法定机制或适用豁免。若您的业务要求特定驻留地区，请在传输前联系确认，不以模型品牌或界面语言推定处理地点。
采取与风险相称的身份验证、权限、加密、日志、凭据保护和安全处置，但不存在绝对安全。普通提示词、公开问题或客服不要提交密码、私钥、完整卡号或不必要的医疗等敏感信息；专门凭据输入框按其目的处理，不表示允许凭据出现在公开内容。涉及敏感个人信息时，须有特定目的、充分必要性和依法要求的保护及同意。发现泄露、篡改或丢失风险时，依法采取补救、报告并在适用时通知有关个人。
您可通过功能内入口或账户邮箱联系 [email protected]，请求查阅、复制、更正、删除、撤回同意、限制或反对依法可限制的处理、可携带副本和处理说明，并可依法投诉或诉讼。核实身份仅索取必要资料，不要求密码、完整卡号或私钥。我们按适用期限处理，不能满足时说明理由与救济途径。注销、撤销授权、停止训练、删除云内容和清除本机数据是不同操作；财务或安全等依法须保留的资料应限制用途。客户控制的数据可先向组织管理员请求，我们按职责协助。
未成年人数据处理需符合年龄、监护和专门保护要求；监护人可联系核实并请求处理。不能仅凭监护人同意就豁免法律禁止提供的内容或功能。处理目的、数据类别、接收方或其他重要事项变化时，应提供与影响相称的提示，并在法律要求时重新征求同意。历史版本可以在文档中心查看，本政策更新不自动扩大已有授权。
云端处理不等于内容对所有员工开放。支持、安全调查、争议举证或依法处理时，确有必要的人员可能在受限权限下接触相关内容，应限定目的、范围和保密责任。提交客服材料前请删去无关第三人资料；不需要为排查账单提交整个代码仓库。Issues 密封人工任务原则上只向被选接单方开放，平台人员查看须与争议、举报或其他合法必要事由相对应。这里不作无人能够接触明文或全部服务自动实现零留存的承诺。
请通过账户邮箱或产品内入口说明请求类型、涉及产品、时间范围和可定位的记录标识；不知道完整编号不影响先行提出。我们按风险核实身份与代理权限，仅在必要时要求补充材料，避免索取与请求无关的身份证件。处理期限按适用法律执行；需补证、延期或不能全部满足时，说明理由、范围和后续途径。一般请求不收费，法律允许针对明显过度或重复请求收费或拒绝的，应说明依据。组织控制的数据可能需要组织决定，Laintas 应按实际职责协助而不是一概拒绝。
删除账户不会替您取消第三方平台上的全部订阅、销毁仍运行的租机或撤回已公开内容的外部副本，请分别办理并核对结果。应删除的数据在生产环境清理后，备份仅为恢复、安全或法定目的隔离保留，并按轮换删除；若从备份恢复，应重新应用有效删除要求。依法必须保留的财务、争议和安全记录仅限相应用途。导出可能不含他人秘密、第三方受限资料或会危及安全的信息，不能提供时应解释范围；本地唯一副本应在清理或卸载前自行备份。
能够上传文件不代表您有权将其中所有个人信息交给模型、公开广场或接单方。请只提供完成任务必要的片段，并确认客户、雇主及个人信息主体所需的授权。身份、健康、金融账户、精确位置及不满十四周岁未成年人等信息可能需要特别保护。误提交密钥应立即在原提供方撤销或轮换，并通知我们定位可控副本；删除一条消息不使已泄露密钥重新安全。未经确认的普通对话和公开问题不适合作为必须满足特定保密、驻留或行业保护条件的数据通道。
Search 当前请求去重记录保留七天、周期用量记录三十五天、请求元数据四百天；后者不包含原始查询正文。Compute 九十天明细与四百天日汇总指其调用记录，不是租用磁盘、模型上游、客户端历史或全部账本的统一期限。主站十二个月详细用量周期同样不等于全部订单保留上限。自动清理依定时任务执行，故障、未决争议或法定保留可影响清理，应限定原因和范围；技术延误不是无限延期使用数据的依据。其他数据未在此列明固定天数的，仍须遵守必要最短期限原则。
This policy covers accounts, billing, hosted products, storage, inference, long-term memory and training. Read it with your product’s data terms, the Data Use Notice and the Service Provider Directory.
2026-10-25.3 · 2026-10-25
Hubei Laintas Technology Co., Ltd., reachable at [email protected], is responsible for the main site, unified accounts and processing whose purposes and means we determine. An enterprise customer may control its own data with Laintas acting on instructions, depending on deployment and a valid processing agreement. Own devices, self-hosted instances, contractors, merchants of record and external suppliers may have independent duties; they are not all controlled by Laintas.
Depending on the feature, we process usernames, email, verification and login identifiers, roles and organisation relationships, sessions and device credentials, security checks, IP and technical logs, orders and subscriptions, balance and usage, support and disputes, preferences, prompts, context, file excerpts, attachments, image/audio/video, tool results, world state and content you choose to save. Hosted keys also process provider credentials you submit. Sources include you, your device, authorised login providers, payment channels and service activity. Not every category is collected for every feature. Phone numbers are processed only when an available verification or notice feature is used, including optional transaction notices; linking does not make the number a sign-in or recovery method. See the directory and feature notice for the SMS recipient.
Necessary processing supports accounts and identity, requested delivery and authorised tools, billing, refunds, support, security and legal duties. Saving chats or files, workspace experience, publication and model training are distinguishable purposes described in the Data Use Notice. The lawful basis depends on local law and may include consent, contractual necessity, legal obligation or another statutory ground. Legitimate interests are used only where recognised and its conditions met, not as a general substitute under mainland Chinese law. General contractual acceptance is not blanket authority for extra purposes.
Helpwo browser workspaces generally use local IndexedDB; desktop and connected runtimes can access files and terminals on the selected machine. Laintas Storage, GitHub or other sync features upload the relevant data when used. Main-site chat history can sync with cloud-storage entitlement and otherwise stays in the browser. Scene stores worlds, logs and character memories on its server. Closing a page, signing out or uninstalling does not delete every copy; clearing browser storage can destroy local-only content.
Cloud features transmit necessary inputs and results through Laintas and the model, search, media or compute service needed for the selected function. Search processes queries and relevant page content. Voice processes audio you submit; browser or operating-system speech services have their own rules. A model name does not necessarily identify the directly contracted processor; consult the directory, feature notices and available processing information. Verify the network path even with your own model, key or machine rather than assuming no gateway is involved.
You may have the gateway validate and encrypt provider API keys for your chosen routing. Ciphertext, labels, available models, priorities and necessary call records are stored server-side. The gateway temporarily decrypts keys for calls; encrypted storage does not mean the server can never use them. Delete the hosted source and revoke the provider key to end future use; disabling activation does not delete a key. Login and repository/drive permissions are separate; disconnecting Laintas may not revoke permissions held by the provider.
Workspace experience and training are separate: experience supports continuity within the account and can contain user statements, task outcomes and summaries. CLI training capture requires a current server-recorded opt-in for covered CLI calls and does not opt other products in. Turning it off stops new capture, not automatically existing datasets; lawful deletion, restriction and other rights concerning identifiable information remain available. Issues has separate rules for training on public questions and accepted answers. See the specific notices for private streams not retained by Issues, own-key paths and organisation routes.
We do not sell personal information. Necessary recipients may include hosting, databases, Cloudflare networking and object storage, Resend email, Google/GitHub authorisation, payment and fraud services, models and search, GPU infrastructure and legally required recipients. Publication makes content available to an indefinite audience. “Anonymous” on Issues hides the display name, not identity from the platform or identifying details within content. Separate consent requirements for independent recipients, publication, sensitive information or international transfers must be handled under applicable law rather than by citing this policy alone.
Retention is limited to the minimum needed for the purpose and legal requirements. Detailed main-site metered and membership usage older than 12 months is currently purged; Compute call details last 90 days and daily aggregates 400; Search request metadata currently lasts up to 400 days, with shorter internal records purged separately. Orders, core ledgers, tax, security, complaints and disputes follow their duties and open matters. Saved cloud content remains while saved and the account is used; valid deletion ends unnecessary use and clears controlled copies, with backups rotated. Public deletion cannot remove every copy held by others. Raw training-ledger pruning and imported datasets are different; the former is not the retention period of all training data.
Laintas and supplier infrastructure may be in mainland China, the United States, Europe and other locations identified by the supplier or rented machine. Global services such as Cloudflare are not confined to one country. We do not promise exclusively local or domestic processing. Transfers legally involving personal information require the relevant recipient, purpose, method, categories and rights channels to be identified, required notice, separate consent and assessments, and an applicable legal mechanism or exemption. Confirm residency requirements before transmitting; model branding or interface language does not determine processing location.
We apply risk-appropriate authentication, permissions, encryption, logging, credential protection and incident response, without a promise of absolute security. Do not put passwords, private keys, full card numbers or unnecessary health or other sensitive information into ordinary prompts, public questions or support. Dedicated credential fields serve their stated purpose, not public disclosure. Sensitive processing needs a specific necessary purpose, required safeguards and consent. We address suspected leakage, alteration or loss and make legally required reports and notifications.
Use in-product controls or contact [email protected] from your account email for access, copies, correction, deletion, consent withdrawal, legally available restriction or objection, portability and explanations. Complaints and court remedies remain available. Identity verification requests only necessary evidence, never passwords, full card numbers or private keys. Requests follow applicable deadlines; refusals include reasons and remedies. Closure, disconnection, stopping training, cloud deletion and local clearing are different. Legally retained financial or security data has restricted purposes. For customer-controlled data, contact its administrator; we assist within our role.
Processing children’s data requires the applicable age, guardian and special safeguards. Guardians may contact us for verification and requests. Guardian consent does not permit content or features prohibited by law. Material changes to purposes, categories, recipients or other matters require appropriate notice and fresh consent where legally required. Historical versions are available in the legal centre; an update does not automatically expand prior authority.
Cloud processing does not make content available to every employee. Necessary support, security investigations, dispute evidence and legal handling may involve authorised people with restricted access, purpose and confidentiality duties. Remove irrelevant third-party data from support submissions; billing investigation does not require an entire repository. Sealed Issues work is ordinarily disclosed to the selected contractor; staff access must relate to a dispute, report or other lawful necessity. This is not a promise that nobody can access plaintext or that every service has automatic zero retention.
Use your account email or the product channel to identify the request, product, time range and locatable records; missing a full ID does not prevent an initial request. Identity and representative authority checks should match risk and require only necessary evidence, avoiding unrelated identity documents. Applicable legal deadlines govern. Explain reasons, scope and next steps for additional evidence, extensions or partial refusal. Ordinary requests are free; legally permitted charges or refusals for excessive or repetitive requests require an explanation. Organisation-controlled data may require its decision, with Laintas assisting within its actual role.
Closing an account does not cancel every subscription on external platforms, destroy running rentals or recall external copies of published material; address each and check its result. After required production deletion, backup copies remain isolated for recovery, security or legal purposes and rotate out; valid deletion requirements should be reapplied after restoration. Legally retained finance, dispute and security records are restricted to those purposes. Exports may exclude others’ secrets, restricted third-party material or security-sensitive information, with an explanation of exclusions. Back up local-only material before clearing storage or uninstalling.
The ability to upload a file does not authorise disclosure of all personal data within it to models, the public board or contractors. Submit only necessary excerpts and verify required authority from customers, employers and individuals. Identity, health, financial accounts, precise location and children-under-14 data can require special protection. Revoke or rotate accidentally submitted secrets at their provider and notify us to locate controlled copies; deleting a message does not secure an exposed key. Unconfirmed chat and public posting channels are unsuitable where specific confidentiality, residency or regulated safeguards are required.
Search currently keeps request-deduplication records for seven days, period usage for 35 days and request metadata for 400 days; metadata excludes raw queries. Compute’s 90-day details and 400-day daily aggregates concern call records, not rental disks, upstream services, client history or every ledger. Main-site 12-month detailed usage retention is likewise not a universal order-record limit. Scheduled pruning can be affected by failures, unresolved disputes or legal holds, limited to their reason and scope. Technical delay is no basis for unlimited reuse. Data without a fixed interval listed here remains subject to minimum necessary retention.