公开隐私政策:说明AI Window Manager本地数据、Paddle支付与最小授权元数据的处理方式。

隐私政策

生效日期:2026-10-31

核心承诺

任务工作数据默认Local-first。任务URL、页面标题、用户备注、网页正文、聊天正文和浏览历史不会发送到License服务。Free无需账号,也不会因为不购买Pro而失去导出、删除、迁移、基础恢复或权限撤销能力。

1. 扩展本地保存的数据

为实现用户主动使用的任务管理功能,扩展可在浏览器本地保存:任务URL、页面标题、任务名/备注、状态、身份色、提醒时间、本地工作区/模板/保存视图、恢复日志及用户明确授予的站点权限记录。这些数据用于在用户自己的浏览器中恢复和展示任务。

2. 默认不做的事情

3. Pro支付与授权元数据

当用户主动购买/激活V2 Pro时,支付由Paddle处理。最小License服务计划只处理履约所需的元数据,例如:随机/内部license_id、Paddle transaction/customer标识、plan、授权状态、激活记录的随机instance哈希、签名权益状态和必要的安全审计时间。服务端不需要任务URL、标题、备注、网页/聊天正文或浏览历史。

4. 第三方

Paddle作为支付/结账服务提供方,会依其自身隐私条款处理支付、账单、税务、风控和退款所需信息。浏览器商店(Chrome Web Store、Microsoft Edge Add-ons)按各自规则处理安装、商店账号和发布相关数据。

5. 站点权限

扩展默认不拥有站点访问权限。需要页面可见增强时,由用户对当前站点明确授权;用户可随时在扩展内撤销。我们坚持最小权限原则。

6. 用户控制

用户可以导出本地数据、删除单个任务、忘记窗口/网站、清空全部本地数据、撤销站点权限。退款或Pro降级不会删除已有本地任务。

7. 安全与保留

支付/授权服务仅通过HTTPS提供;Webhook必须验签;授权密钥不以明文保存;激活实例使用随机标识而不是硬件指纹。具体服务端保留周期将在生产部署前按最小化原则锁定并更新本政策。

8. Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

9. 联系

隐私控制者/提供方:王一飞
联系邮箱:ywang2933@gmail.com
官网:https://tougao.ywang2933.xyz/aiwm

Public Privacy Policy describing AI Window Manager local data, Paddle payments, and minimal license metadata.

Privacy Policy

Effective date: 2026-10-31

Our core promise

Your task data is local-first. Task URLs, page titles, your notes, page content, chat content and browsing history are never sent to the license service. Free needs no account, and not buying Pro never takes away export, deletion, migration, recovery or permission revocation.

1. Data the extension keeps on your device

To provide the task features you use, the extension may store in your browser: task URL, page title, task name/note, status, identity color, reminder time, local workspaces / templates / saved views, recovery journal, and records of site permissions you explicitly granted. This data is used only to restore and show your tasks in your own browser.

2. What we don't do

3. Pro payment and license metadata

When you buy or activate V2 Pro, payment is handled by Paddle. The minimal license service only processes metadata needed to deliver the license, such as a random/internal license_id, Paddle transaction/customer identifiers, plan, license status, a hash of a random activation instance ID, the signed entitlement state and security audit timestamps. The server does not need task URLs, titles, notes, page/chat content or browsing history.

4. Third parties

Paddle, as the payment / checkout provider, processes the information needed for payment, billing, tax, fraud prevention and refunds under its own privacy terms. Browser stores (Chrome Web Store, Microsoft Edge Add-ons) process installation, store account and publishing data under their own rules.

5. Site permissions

The extension has no site access by default. On-page enhancements are enabled only when you explicitly allow the current site, and you can revoke that at any time inside the extension. We follow the principle of least privilege.

6. Your controls

You can export local data, delete a single task, forget a window or site, erase all local data and revoke site permissions. A refund or Pro downgrade never deletes existing local tasks.

7. Security and retention

Payment and license services are HTTPS only; webhooks are signature-verified; license keys are not stored in plain text; activations use random identifiers, not hardware fingerprints. Server-side retention periods will be fixed on a data-minimization basis before production and this policy will be updated.

8. Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

9. Contact

Controller / provider: 王一飞
Email: ywang2933@gmail.com
Website: https://tougao.ywang2933.xyz/aiwm