隐私政策

生效日期：2026-09-26 ｜ 数据控制者：南京德睿信息技术有限公司

本《隐私政策》说明 南京德睿信息技术有限公司（"我们"）在您访问本网站、购买或使用 DeruiKnow 产品与服务时，如何收集、使用、共享与保护您的信息。

1. 适用范围

本政策适用于本网站及我们的销售、交付与支持活动。本产品为私有化部署软件：您在本地服务器中的知识库素材、向量数据、日志与生成内容均由您自行控制，我们不会访问或收集这些数据。

2. 我们收集的信息

  • 网站与偏好：本网站为静态页面，使用浏览器本地存储（localStorage）记忆语言偏好（中文/英文）。本网站本身不设置跟踪型广告 Cookie。
  • 联络信息：当您通过邮件或咨询表单与我们联系时，我们会收到您主动提供的信息（如姓名、邮箱、产品与需求描述）。
  • 交易信息：购买与支付由 Paddle 处理（见第 4 节）；我们通常仅收到订单确认与必要的账单/交付信息。
  • 产品运行数据：本产品在您的服务器本地运行与落盘；我们不会接收您的知识库内容或问答日志。产品调用外部 LLM/Embedding 接口时，请求由您配置的服务提供方接收，受其隐私政策约束。

3. 使用目的与法律依据（GDPR）

  • 履行合同：向您交付产品、提供服务与支持、处理订单与售后。
  • 合法利益：保障网站与产品的安全、防止滥用、改进产品。
  • 法律义务：履行税务、财务与合规要求。
  • 同意：在需要时（如营销通讯）征得您的同意，您可随时撤回。

4. 支付与 Paddle

我们的订单与支付由 Paddle.com Market Ltd. 及其关联方（"Paddle"） 作为记录商户（Merchant of Record）处理。当您完成购买时，Paddle 会作为独立的控制者/处理者收集和处理您的支付与身份信息（如姓名、账单地址、支付方式、税务信息），以处理付款、税费与开票。该等处理适用 Paddle 的隐私政策（paddle.com/legal/privacy）。

5. 信息共享

  • Paddle：用于处理支付、税费、开票与退款。
  • 服务提供商：用于网站托管、邮件与必要的运维支持，仅按指示处理并受保密义务约束。
  • 法律要求：为遵守法律、法规或有效法律程序而披露。
  • 我们不会出售您的个人信息。

6. 跨境传输

由于使用全球化的支付与服务提供商，您的信息可能被传输至您所在国家/地区以外处理；我们将采取适当措施（如标准合同条款）保护您的信息。

7. 数据保留

我们仅在实现本政策所述目的、履行合同与法律义务所必需的期间内保留信息，之后予以删除或匿名化。

8. 您的权利

在适用法律（如 GDPR/UK GDPR、CCPA）下，您可能有权访问、更正、删除、限制或反对处理您的个人信息，并有权获取可携带副本。您可发送邮件至 deruiinfo@163.com 行使上述权利；涉及支付数据，请同时联系 Paddle。您也有权向所在辖区的主管监管机构投诉。

9. Cookie 与本地存储

本网站主要使用 localStorage 记忆语言偏好。若引入分析或结账（Paddle）组件，其可能设置必要的 Cookie；届时我们会更新本政策。

10. 儿童隐私

本产品面向企业用户，不面向未成年人，我们不会有意收集儿童的个人信息。

11. 政策变更

我们可能更新本政策，更新后在页面公布并标注生效日期。

12. 联系我们

数据控制者：南京德睿信息技术有限公司
注册地址：【待填：公司注册地址】
邮箱：deruiinfo@163.com

Privacy Policy

Effective date: 2026-09-26 | Data controller: Nanjing Derui Information Technology Co., Ltd.

This Privacy Policy explains how Nanjing Derui Information Technology Co., Ltd. ("we", "us") collects, uses, shares and protects your information when you visit this website, purchase or use the DeruiKnow product and services.

1. Scope

This policy applies to this website and our sales, delivery and support activities. The Product is self-hosted software: the knowledge material, vector data, logs and generated content on your own server are controlled by you, and we do not access or collect them.

2. Information we collect

  • Website & preferences: this website is static and uses browser local storage to remember your language preference (zh/en). The site itself sets no advertising/tracking cookies.
  • Contact information: when you email us or use the enquiry form, we receive the information you choose to provide (e.g. name, email, product and requirements).
  • Transaction information: purchases and payments are handled by Paddle (see section 4); we typically receive only order confirmation and the billing/delivery details necessary to fulfil your order.
  • Product runtime data: the Product runs and stores data locally on your server; we do not receive your knowledge-base content or Q&A logs. When the Product calls external LLM/Embedding APIs, requests go to the provider you configure and are governed by that provider's privacy policy.

3. Purposes and legal bases (GDPR)

  • Performance of a contract: delivering the Product, providing services and support, handling orders and after-sales.
  • Legitimate interests: keeping our website and products secure, preventing abuse, improving the Product.
  • Legal obligations: tax, accounting and compliance requirements.
  • Consent: where required (e.g. marketing), which you can withdraw at any time.

4. Payments and Paddle

Orders and payments are processed by Paddle.com Market Ltd. and its affiliates ("Paddle") acting as Merchant of Record. When you make a purchase, Paddle collects and processes your payment and identity information (such as name, billing address, payment method and tax information) as an independent controller/processor in order to process payment, taxes and invoicing. That processing is governed by Paddle's privacy policy (paddle.com/legal/privacy).

5. Sharing

  • Paddle: to process payment, tax, invoicing and refunds.
  • Service providers: for website hosting, email and necessary operational support, processing only on our instructions and under confidentiality.
  • Legal requirements: disclosure to comply with law, regulation or valid legal process.
  • We do not sell your personal information.

6. International transfers

Because we use global payment and service providers, your information may be transferred to and processed outside your country/region. We apply appropriate safeguards (such as standard contractual clauses) to protect it.

7. Retention

We retain information only as long as necessary to fulfil the purposes described here and to meet contractual and legal obligations, after which we delete or anonymise it.

8. Your rights

Under applicable law (e.g. GDPR/UK GDPR, CCPA) you may have the right to access, correct, delete, restrict or object to the processing of your personal information, and to obtain a portable copy. You can exercise these rights by emailing deruiinfo@163.com; for payment data, please also contact Paddle. You also have the right to lodge a complaint with your local supervisory authority.

9. Cookies and local storage

This website mainly uses localStorage to remember your language preference. If analytics or checkout (Paddle) components are introduced, they may set necessary cookies; we will update this policy accordingly.

10. Children

The Product is intended for business users and not for minors; we do not knowingly collect children's personal information.

11. Changes

We may update this policy; updates will be posted on this page with an effective date.

12. Contact

Data controller: Nanjing Derui Information Technology Co., Ltd.
Registered address: [To be filled: registered business address]
Email: deruiinfo@163.com