Privacy policy

1. Use of this website

This website provides brand, product, service and partnership information. Interactive examples illustrate services without connecting to live AI conversations, creating orders or charging fees. Browsing does not place an order, establish a contract or give blanket authorization for future data processing.

For inquiries and related personal-information questions, contact Mr. Bai at 15526188088 or bb@xiongqingqing.com.cn. Provide only information necessary for your request. Do not send passwords, verification codes or unrelated identity documents or financial-account information.

The website pages use no analytics tracking, advertising cookies or persistent browser storage and request no camera, microphone or location permissions. Telephone links invoke the device dialer; external websites apply their own rules. Technical logs processed for website operation and security are limited to those purposes under data minimization and are not used for advertising profiles or model training.

2. Scope and operating entity

This policy covers personal-information processing in the 小城智大 website, 小张罗, 张罗有方, 万般有应 and dedicated products. Businesses, property managers, homeowner committees, developers and other independent providers must identify their role, purposes and applicable rules for processing within their responsibilities. Unified access does not give every party access to all data.

The information panel identifies the operating entity, contact channel and effective date. Function-specific notices explain purposes, fields, recipients, retention and choices where needed; they cannot silently expand authorization under this policy.

3. When we process information

We process information needed for the functions you use: accounts and eligibility, contact details and service addresses, bookings and delivery, conversations and uploads, organizational roles and permissions, billing and entitlements, and support or dispute records. No function automatically requires every category. Optional permissions are distinguished from processing necessary for core services.

Each processing activity requires an applicable legal basis and follows clear purpose, necessity and transparency. Where consent is required, the relevant explanation precedes consent; changes to purpose, method or data categories require renewed notice and authorization as applicable. Website browsing is not blanket consent to training, third-party sharing or future functions.

Location, exact addresses, eligibility, minors’ information and other potentially sensitive data require scenario-specific explanations of necessity and impact, with applicable procedures. Location, microphone and camera permissions are requested for relevant functions, not as conditions for unrelated services.

4. AI input, memory and training

Private messages are not given to AI by default. Models and agents receive only authorized information needed for the task. People or agents joining a conversation see messages after joining by default; an authorized user chooses earlier context to share. Joining, changing models or staff handover does not open all history.

Raw orders, customer data, private knowledge and conversations are used for authorized services, not by default for training or helping other businesses. Additional training, evaluation datasets or other secondary purposes require separate explanation and appropriate authorization, without being bundled into normal use. Supplying a service alone does not permit providers or developers to retain, train on or reuse data.

Personal memory contains necessary authorized information with sources, update times and confirmation status distinguished. You may request correction, deletion or withdrawal of relevant authorization. Memory, original conversations, summaries, indexes, caches and formal records are managed separately; legally retained records do not thereby remain available as everyday assistant memory.

5. Service coordination and recipients

Businesses and providers receive needs, addresses, timing and orders needed for delivery. Property managers and homeowner committees process information within their distinct responsibilities and eligibility. Staff access follows role and responsibility. Unified sign-in does not merge personal information, private staff conversations or other organizations’ data.

Actual model, payment, messaging, storage and other technical providers must be identified in the integration inventory or function notice, with purpose, data scope, processing location and applicable information. Processor arrangements, independent recipients and public disclosures follow their respective requirements; a blanket reference to partners is not sufficient authorization.

Additional training, marketing and public display are not default secondary purposes of ordinary service. Requests for legally required disclosure are checked for their basis and limited to necessary information.

6. Retention, deletion and processing locations

Information is retained for the shortest period necessary for its purpose, with applicable legal or dispute-related retention distinguished. Expired information is deleted or otherwise handled as applicable. Backups, derived data and records retained by law require separate handling. Category-specific periods, starting points and exceptions must be defined; indefinite retention is not promised.

Processing locations and cross-border arrangements follow actual deployment and provider inventories. Overseas provision of personal information requires applicable notice, authorization and other procedures before it occurs. This policy is not blanket permission, nor does it make an unverified domestic-only storage claim.

7. Individual rights and requests

Subject to applicable conditions, you may request explanations, access or copies, correction, supplementation, deletion, withdrawal of consent, restriction or refusal of processing, and account closure. Identity checks should be proportionate to the request and avoid unrelated information. Where immediate handling is not possible, the applicable reason, effect and next steps should be explained.

Withdrawal may affect functions that depend on the information, without invalidating earlier processing based on valid authorization. Deletion requests are distinguished from legally retained accounting, delivery or dispute evidence. Use the actual published channels for rights requests; the dedicated channel and timing must be completed in release information.

8. Security, minors and policy updates

We apply access control, permission management, traceability and incident handling appropriate to sensitivity and use, to prevent irrelevant access and purpose expansion. Absolute security is not guaranteed. Actual incidents require response, notice and remediation appropriate to impact and applicable requirements.

Processing personal information of children under fourteen requires applicable guardian consent, dedicated rules and protective arrangements. Functions for minors must specify age, conditions and supervision rather than rely on ordinary adult-account rules.

Material changes should identify the version, scope and effective timing through appropriate notice. New charges or processing authorizations cannot be obtained by silently replacing a file. This release copy requires completed entity, contact, actual-processing inventory and effective-date information before formal publication.

9. Information boundaries for institutional subsidy projects

Consumer incentive projects process authorized institution and officer identities, authorization materials, necessary eligibility information, limits, redemption and reconciliation records. Funding, officer or finance status does not automatically grant all orders, private chats or other organizations’ data; reports and exports are limited by responsibility and necessity.

Eligibility and project integrations follow specific authorization; authorized imports and recorded manual review can be used without an interface. Project notices and inventories identify recipients, fields, bases and retention. Government collaboration is not blanket permission for expanded access.

10. Group, work and voice information

Agents in groups have identifiable roles. Group membership does not open private memory, and sharing history follows the original permissions. Work agents and organization-facing service agents have separate identities, information and fees; role changes and handover do not transfer all private staff conversations.

Live audio processing, recordings, transcripts and summaries require separate purposes, necessity, access and retention explanations. Recording is not default permission for training or voiceprint identification, nor does a snippet, similar voice or code substitute for identity and transaction authorization. Non-essential recording offers a choice; key actions still use a formal card, appropriate authentication and backend permissions.

11. Website browsing information

This website provides product, service and partnership information and does not directly process sign-in, uploads, applications or transactions. Demonstrations use preset content and do not call models. Page scripts set no cookies, use no persistent browser storage and include no analytics SDK. Browsers manage their own history and cache. Product data-processing rules apply when the corresponding service is used.

12. Private diary and assistant memory

Write, speak, take a photo or select images to prepare a private diary with 小张罗. Automatic organization is optional and uses only authorized material. Saving a diary and using it for long-term assistant memory are separate choices, including save-only entries. Your diary can be exported free of charge; export does not delete it.