Privacy Policy

1. Scope

This policy covers information you provide or that is generated when you interact with us through the website, your account and support channels. If you use the Service on behalf of a company and upload videos showing employees, your company is the personal information handler for the people in those videos and we act only as your entrusted party on your instructions. Make sure you have informed them and obtained any consent required by law.

2. Information we collect

We collect the following categories of information:

• Account information: mobile number, email address, name (optional), password (stored only as a salted hash) and two-step verification records.
• Content you upload and produce: work videos, frames captured by the system, AI-generated analyses and documents, your edits on the platform, task names and notes.
• Transaction and usage information: point balance and ledger, purchased point packs, invite codes, how often each feature is used and the AI inference cost involved.
• Technical and security information: IP address and the country or region estimated from it (used only to choose the default interface language on your first visit; the estimate is not stored; the IP-to-country data comes from DB-IP (https://db-ip.com), used under the CC BY 4.0 licence), browser and device information, sign-in times and outcomes, error logs, and records of actions blocked by security mechanisms.
• Contact and feedback information: anything you send us through the support mailbox or the in-app feedback feature.

3. How we use data

We use your data for the following purposes:

• Providing the Service: storing and processing videos, running AI analysis, producing and exporting documents, keeping you signed in.
• Account security: verifying identity, detecting unusual sign-ins, enforcing sign-in lockouts and two-step verification, preventing abuse.
• Billing and support: calculating and deducting points, handling purchases and credits, answering your questions.
• Improving the Service: analyzing feature usage and model performance in aggregated, de-identified form.
• Legal obligations: keeping required transaction records and responding to lawful requests from authorities.

We do not use your videos or documents to train AI models, and we do not use your personal data for advertising.

4. Who we share information with

We share information only to the extent needed to provide the Service, with:

• AI model providers: to run an analysis, frames captured from your video, text and the related prompts are sent to Alibaba Cloud Model Studio (mainland China region) for inference. Under our agreement with the provider, this data is used only to respond to our requests and is not used to train its models.
• Cloud infrastructure: videos and files are stored on Alibaba Cloud Object Storage Service (OSS, mainland China) on servers we manage.
• Payment provider: online payments are handled by a third-party payment provider. Your payment account details are processed by that provider under its own privacy policy; we receive only the payment result, the amount and the order number.
• Legal requirements: to comply with laws and regulations or a lawful request from a judicial or administrative authority, or to protect the rights and safety of us, our users or the public.
• Business transfers: if we merge, split, are acquired or transfer assets, your information may be transferred as part of that transaction. We will notify you in advance, and the recipient will remain bound by this policy.

We do not sell your personal information to anyone.

5. Where information is stored

Our servers, databases and cloud storage are all located in mainland China (Alibaba Cloud China regions), and AI inference also runs on nodes in mainland China. We do not transfer your personal information outside the country. Should a business need to provide information abroad arise in the future, we will fulfil the legally required security assessment, certification or standard-contract obligations, inform you in advance and obtain your separate consent.

6. How long we keep information

• Account information and your content: kept for as long as your account exists. When you delete a task, its videos, frames and reports are deleted with it; backup copies are cleared within a reasonable period, normally no more than 30 days.
• Account deletion: all tasks, videos, reports and remaining points are deleted and cannot be recovered, and your mobile number and email address are released so they can be registered again.
• Transaction records: under the E-Commerce Law of the People's Republic of China and related regulations, point purchases and ledger entries are kept for at least three years from the date the transaction is completed.
• Security and audit logs: kept for at least six months as required by the Cybersecurity Law, and for no more than 12 months, then deleted or de-identified.

7. Cookies and browser storage

We use only the cookies and browser local storage (localStorage) that are necessary to run the Service, for example to hold your sign-in token, interface language, light / dark theme and sidebar state. We do not use advertising or third-party tracking cookies. See the Cookie Policy for the full list.

8. Your rights

Under the Personal Information Protection Law of the People's Republic of China, you have the following rights over your personal information:

• Access and copy: view your account information, points and usage history in Settings, and download your reports (PDF / Excel) at any time.
• Correction and completion: change your name, password and two-step verification settings in Settings; contact us to correct anything else.
• Deletion: delete individual tasks at any time, or delete your whole account under Settings → Account → Delete account.
• Withdrawing consent, restricting or refusing processing: contact us using the details below. Withdrawing consent does not affect processing already carried out on the basis of your consent.
• Explanation: you may ask us to explain this policy and our personal information processing rules.

We will respond within 15 working days of receiving your request. If you believe we have handled your personal information unlawfully, you also have the right to complain or report to the cyberspace administration or other competent authorities.

9. Security

We use reasonable technical and organizational measures to protect your data, including TLS encryption for all data in transit; storing only hashes of passwords and sign-in tokens; limits on failed sign-in attempts and account lockout; optional two-step verification; role-based internal access; and regular backups. No system is completely secure, however. If a data breach affects your rights, we will notify you as required by law.

10. Minors

The Service is intended only for users aged 18 or over. We do not knowingly collect personal information from minors, in particular from children under 14; if we learn that we have, we delete it promptly.

11. People who appear in videos

Work videos usually show the people working on the floor, and their facial images may count as sensitive personal information. Before uploading, tell the people involved what the video is for and obtain their separate consent as required by law. We use videos only for the analysis you request. We do not use them to identify specific individuals, and we do not build any facial-recognition or biometric database.

12. Changes to this policy

We may update this policy from time to time. We will announce material changes on the website or by email before they take effect, and the updated version will show a new "Last updated" date. Continuing to use the Service means you have taken note of the updated policy.

13. Contact us

If you have questions, comments or requests about this policy or your personal information, email us at info@gongxuai.com (personal-information matters are handled by a designated person). We will respond within 15 working days of receiving your request.