Privacy Policy

隐私政策 · Version 2026-08-01

1. Scope / 适用范围

This Policy covers Penta Sophy websites, accounts, AI conversations, reports, memberships, payments, customer support and security operations. It does not govern an independent third-party service you visit under that provider’s own policy.

本政策适用于 Penta Sophy 网站、账户、AI 对话、报告、会员、付款、客户支持和安全运营； 通过链接访问的独立第三方服务由其自身政策约束。

2. Data we collect / 收集的资料

• Account: email, display name, authentication identifiers, language and preferences.
• Birth and profile: birth date, time, place, gender selection and profile details you choose to provide.
• Content: prompts, conversations, saved memories, reports, feedback and support messages.
• Membership and billing: plan, billing interval, invoice and transaction identifiers, amount, currency, discount, tax, payment/refund/dispute status, renewal and cancellation timing, and consent records.
• Payment and fraud signals: Stripe customer/payment-method identifiers, billing name/address, card brand and last four digits where supplied by Stripe, authentication and risk outcomes. We do not receive or store full card numbers or CVCs.
• Technical and security: IP address or privacy-preserving hashes, browser/device information, timestamps, request logs, referral data, failed attempts and security events.
• Acquisition attribution: first landing path, referring website host, campaign parameters, advertising click identifier, browser language/timezone and country/region code. If registration begins from user-shared content, we may attribute that registration to the sharing account without exposing the private share token or issuing a referral reward. The first-touch record does not store a raw IP address or full referring URL.

我们收集账户和语言偏好、用户主动提供的出生与个人资料、对话与报告、会员和发票状态、交易金额及退款争议、 条款同意记录，以及运行和安全所需的设备、时间与网络资料。Stripe 可向本站提供账单地址、卡品牌和尾号、 身份验证及风险结果；本站不接收或保存完整卡号或 CVC。首次来源归因可能记录落地路径、来源网站域名、 推广参数、广告点击标识、浏览器语言／时区及国家／地区代码，但不保存原始 IP 或完整来源网址。如果注册始于用户分享的内容， 我们可能把该次注册归因到分享账户；不会保存私密分享令牌，也不会因此自动发放邀请奖励。

3. Why we use it / 使用目的

• Create and secure your account, calculate requested analyses and provide personalized AI responses.
• Deliver paid access, calculate quotas, process subscription changes, reconcile invoices, prevent duplicate billing and provide support.
• Send essential account, security, payment, renewal, failure, refund and service notices. These are not marketing messages.
• Detect fraud, card testing, abuse, account takeover, disputes and service attacks.
• Debug, measure reliability, improve product quality and comply with accounting, tax, legal and regulatory duties.
• Understand which first-touch campaigns and referring sites lead to account registration.

资料用于建立和保护账户、完成用户请求的分析和 AI 回答、交付会员权益与额度、处理和核对付款、 发送必要的账户及账单通知、防止盗刷和滥用、了解首次推广来源、排查故障、改进可靠性并履行会计税务及法律义务。

We do not sell personal data. We do not use your conversation content for third-party advertising. The current Service does not offer a switch that enrolls conversations into general-purpose model training; we will not claim such consent exists. If that practice changes, we will provide a separate, specific notice and choice before the new use begins where required.

我们不出售个人资料，也不将对话用于第三方广告。当前服务没有“同意把对话加入通用模型训练”的开关， 因此不会虚构用户已作出该同意；如未来用途改变，会在开始前按要求单独明确告知并提供选择。

4. Legal grounds / 处理依据

Depending on location, processing is based on performing our contract with you, taking steps you request, complying with law, protecting legitimate interests in security and reliable operations, and consent where a law specifically requires it. You can withdraw consent for a consent-based optional use without affecting earlier lawful processing. Essential billing, fraud and accounting records cannot always be deleted on demand.

依据用户所在地，处理可能基于履行合约、执行用户请求、遵守法律、保障安全与可靠运营的合法利益， 或法律明确要求的同意。可撤回基于同意的可选用途，但不影响撤回前的合法处理；必要的账单、防欺诈和会计记录 不一定能按要求立即删除。

5. Service providers and disclosures / 服务商与披露

We disclose only what is reasonably needed to providers acting for the following purposes:

• Supabase: authentication, database and storage infrastructure.
• Vercel: hosting, delivery and request logs.
• DeepSeek and configured AI providers: process the prompt and relevant context to generate the response you request.
• Stripe: checkout, cards, subscriptions, invoices, tax calculations when enabled, authentication, fraud prevention, refunds and disputes.
• Communication providers: delivery of essential email or linked-channel notifications when configured.

We may also disclose data to professional advisers, auditors, banks, card networks, regulators, courts or law enforcement when reasonably necessary, and in a merger or business transfer subject to appropriate confidentiality and notice. We do not give birth or conversation data to payment providers unless needed to investigate a specific support, fraud or legal matter.

我们仅向完成相应工作的 Supabase、Vercel、DeepSeek／已配置 AI 服务商、Stripe 及通知服务商提供合理必要资料。 在审计、银行或卡组织调查、监管、司法、执法或受保密约束的业务转让中，也可能依法披露。 除具体支持、防欺诈或法律事项确有需要外，不向付款服务商提供出生或对话内容。

6. International transfers / 跨境传输

Providers and users operate in multiple countries, so data can be processed outside Hong Kong or your residence. We use contractual, access-control and provider safeguards appropriate to the transfer and assess additional requirements where applicable. No cross-border mechanism can eliminate every risk.

服务商与用户分布在不同国家，资料可能在香港或用户居住地以外处理。我们按适用要求采用合同、访问控制及服务商保障， 并评估额外的跨境要求；任何跨境机制都无法消除全部风险。

7. Retention and account deletion / 保存期限与账户删除

Active account content is kept while needed to provide the Service. You can delete individual conversations and memories or request account deletion. Operational copies are removed or de-identified on a reasonable schedule, subject to backups and legal holds. Deleting an account does not erase records we must retain for accounting, tax, fraud, chargeback, consent or legal claims.

Hong Kong business transaction records, including invoices and payment evidence, generally must be kept for at least seven years. We keep only the fields needed for that purpose and restrict their use after account deletion. Security logs are retained for a shorter risk-based period unless an investigation requires longer.

活跃账户内容在提供服务所需期间保存；用户可删除单条对话、记忆或申请删除账户。运营副本会在合理周期内删除或去标识化， 但受备份和法律保全限制。账户删除不会抹除依法须保存的会计、税务、防欺诈、拒付、同意或法律主张记录。 香港交易与会计证据通常至少须保存七年；账户删除后仅保留该目的必要字段并限制使用。安全日志按风险采用较短期限， 调查需要时除外。

8. Security and payment safety / 安全与付款保护

We use role-based access, row-level authorization, transport encryption, provider-managed encryption at rest, secret separation, signed payment callbacks, server-side price calculation, idempotency, logging and reconciliation. Stripe hosts card entry and applies authentication and fraud controls. Never send a full card number or CVC to Penta Sophy support. No system is absolutely secure; we assess and notify qualifying data incidents as required by applicable law.

我们采用分级访问、逐用户授权、传输加密、服务商托管的静态加密、密钥隔离、付款回调签名、服务端计价、 幂等、防重、日志及对账。卡资料由 Stripe 托管输入并执行身份验证和风控。切勿向支持人员发送完整卡号或 CVC。 没有系统绝对安全；符合通报条件的资料事件会按适用法律评估和通知。

9. Cookies and local storage / Cookie 与本地存储

We use authentication/session cookies and local storage needed for login, security, language, appearance and preserving first-touch attribution until account registration. We do not currently use third-party advertising cookies. If non-essential analytics or advertising storage is introduced, we will provide the notice and controls required in relevant regions before activating it.

本站使用登录、会话、安全、语言、外观及在注册前保存首次来源所需的 Cookie 与本地存储，目前不使用第三方广告 Cookie。 如未来引入非必要分析或广告存储，会在启用前按相关地区要求提供告知与控制。

10. Your choices and rights / 用户选择与权利

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Profile tools provide access, correction, export and deletion for many categories. We may verify identity and may retain or withhold information where law allows or requires. You can complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong or your competent local authority.

在适用法律范围内，可请求访问、更正、删除、限制、反对、可携带或撤回同意；个人中心已提供多项访问、更正、导出和删除工具。 我们可核实身份，并可在法律允许或要求时保留或不披露部分资料。可向香港个人资料私隐专员公署或所在地主管机关投诉。

11. Children / 未成年人

The Service is not intended for anyone under 16. We do not knowingly collect a child’s personal data. A parent or guardian who believes a child submitted data should contact us for review and deletion.

服务不面向 16 岁以下人士，也不会明知而收集儿童个人资料。家长或监护人如认为儿童提交了资料，请联系我们核查并删除。

12. Changes and contact / 更新与联系

We will update the version date and provide reasonable notice before a material change takes effect where required. Privacy requests and questions: pentasophy1@gmail.com.

政策更新会修改版本日期；重大变更会按要求在生效前合理通知。隐私请求与问题请联系：pentasophy1@gmail.com。

This Policy describes current operations and does not promise a feature or retention workflow that the Service does not actually provide.