Privacy Policy隐私政策

1. Overview1. 概述

IFox9Browser Inc. ("IFox9Browser," "we," "us," or "our") operates the website at https://www.ifox9browser.com/ and the IFox9Browser desktop application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

IFox9Browser Inc.（以下简称"IFox9Browser"、"我们"或"我方"）运营位于 https://www.ifox9browser.com/ 的网站及 IFox9Browser 桌面应用程序（统称"服务"）。本隐私政策说明我们在您使用本服务时如何收集、使用、披露和保护您的信息。

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our Service.

通过访问或使用本服务，您同意按照本政策收集和使用信息。如您不同意，请停止使用本服务。

2. Information We Collect2. 我们收集的信息

2.1 Information You Provide Directly2.1 您直接提供的信息

• Account Registration: Name, email address, password (hashed), and optionally a company name.账户注册：姓名、电子邮件地址、密码（哈希存储）以及可选的公司名称。
• Payment Information: Processed by Stripe. We store only the last four digits, card brand, billing address, and Stripe customer ID.支付信息：由 Stripe 处理。我们仅保留卡号后四位、卡品牌、账单地址及 Stripe 客户 ID。
• Support Communications: Emails or chat messages you send us, including attachments.支持沟通记录：您发送给我们的电子邮件或聊天消息（含附件）。
• Survey / Feedback Data: Optional information provided in feedback forms or beta surveys.调研/反馈数据：您在反馈表单或 Beta 测试问卷中提供的可选信息。

2.2 Information Collected Automatically2.2 自动收集的信息

• Log Data: IP address, browser type and version, pages visited, timestamps, referring URL, and error logs.日志数据：IP 地址、浏览器类型及版本、访问页面、时间戳、来源 URL 及错误日志。
• Device Information: Operating system, device type, screen resolution, and language settings.设备信息：操作系统、设备类型、屏幕分辨率及语言设置。
• Usage Analytics: Feature interactions, session duration, button clicks, and crash reports — collected in aggregate and anonymised where possible.使用分析：功能交互、会话时长、按钮点击及崩溃报告——尽可能以聚合匿名方式收集。
• Cookies and Similar Technologies: Session cookies, preference cookies, and analytics cookies (see Section 5).Cookie 及类似技术：会话 Cookie、偏好 Cookie 及分析 Cookie（详见第 5 节）。

2.3 Information from Third Parties2.3 来自第三方的信息

• Single Sign-On providers (e.g., Google OAuth) may share your name and email address upon authentication.单点登录服务商（如 Google OAuth）在验证时可能与我们共享您的姓名和电子邮件。
• Payment processors (Stripe) share transaction status and billing details to fulfil your subscription.支付处理商（Stripe）共享交易状态和账单详情以履行您的订阅。

3. How We Use Your Data3. 我们如何使用您的数据

• Service Delivery: To create and manage your account, process payments, and provide subscribed features.服务交付：创建和管理您的账户、处理付款并提供订阅功能。
• Customer Support: To respond to inquiries, diagnose technical issues, and resolve disputes.客户支持：回应咨询、诊断技术问题及解决纠纷。
• Product Improvement: To analyse usage trends, debug software, and develop new features.产品改进：分析使用趋势、修复软件漏洞并开发新功能。
• Communications: Transactional emails (receipts, security alerts) and, with consent, marketing newsletters. Opt out via the unsubscribe link or [email protected].通讯：事务性邮件（收据、安全提醒）及经您同意的营销通讯。可通过取消订阅链接或 [email protected] 退出。
• Legal Compliance: To fulfil obligations under applicable law, court orders, or regulatory requirements.法律合规：履行适用法律、法院命令或监管要求下的义务。
• Fraud Prevention: To detect and prevent fraudulent transactions, abuse, and unauthorised access.欺诈防范：检测并防止欺诈交易、滥用行为和未授权访问。

We will not sell your personal data to third parties, nor use it for automated decision-making that produces significant legal effects without your explicit consent.

未经您明确同意，我们不会将您的个人数据出售给第三方，也不会将其用于产生重大法律影响的自动化决策。

4. Sharing & Disclosure4. 共享与披露

• Service Providers: Trusted vendors who process data on our behalf (e.g., Stripe, AWS, Intercom, Google Analytics), bound by data processing agreements.服务提供商：受信任的代理处理商（如 Stripe、AWS、Intercom、Google Analytics），均签署数据处理协议，禁止将您的数据用于其商业目的。
• Business Transfers: If involved in a merger or acquisition, your data may be transferred. We will notify you before your data is subject to a different privacy policy.业务转让：若涉及合并或收购，您的数据可能被转移。在数据适用新隐私政策前，我们会提前通知您。
• Legal Requirements: We may disclose information when required by law, subpoena, or government authority.法律要求：依法律、传票或政府机构要求时，我们可能披露相关信息。
• Aggregate / Anonymised Data: We may share de-identified statistics publicly or with partners without restriction.聚合/匿名数据：我们可能向公众或合作伙伴不受限制地共享去标识化统计数据。

5. Cookies & Tracking Technologies5. Cookie 及跟踪技术

5.1 What We Use5.1 使用的 Cookie 类型

• Strictly Necessary Cookies: Required for authentication and session management. Cannot be disabled.必要 Cookie：用于身份验证和会话管理，不可禁用。
• Performance / Analytics Cookies: Help us understand visitor interactions. Collected only with your consent.性能/分析 Cookie：帮助我们了解访客行为，仅在您同意后收集。
• Functional Cookies: Remember preferences such as language and UI settings.功能性 Cookie：记录语言选择和界面设置等偏好。
• Marketing Cookies: Used only if you have explicitly opted in to marketing communications.营销 Cookie：仅在您明确选择接收营销通讯后使用。

5.2 Managing Cookies5.2 Cookie 管理

You may control cookies through your browser settings or our cookie consent banner. Disabling certain cookies may degrade Service functionality. To opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

您可通过浏览器设置或我们的 Cookie 同意横幅控制 Cookie。禁用某些 Cookie 可能影响服务功能。如需退出 Google Analytics，请访问 tools.google.com/dlpage/gaoptout。

6. Data Retention6. 数据保留

• Account data is retained for the duration of your account plus 90 days after deletion.账户数据在账户有效期内保留，注销后再保留 90 天。
• Billing records are retained for 7 years in compliance with tax and financial regulations.账单记录依税务及财务法规保留 7 年。
• Support tickets and communications are retained for 3 years.支持工单及沟通记录保留 3 年。
• Server log files are retained for a maximum of 12 months.服务器日志文件最多保留 12 个月后自动清除。

7. Security7. 安全措施

We implement industry-standard safeguards including:

我们采用行业标准安全措施，包括：

• TLS 1.2+ encryption for all data in transit.所有传输数据采用 TLS 1.2+ 加密。
• AES-256 encryption for sensitive data at rest.静态敏感数据采用 AES-256 加密。
• Role-based access controls and regular access reviews.基于角色的访问控制及定期访问审查。
• Bcrypt password hashing; passwords are never stored in plaintext.密码采用 Bcrypt 哈希，绝不明文存储。
• Regular third-party penetration testing and vulnerability assessments.定期进行第三方渗透测试和漏洞评估。

If you discover a security vulnerability, please report it responsibly to [email protected].

如发现安全漏洞，请通过负责任披露方式报告至 [email protected]。

8. Your Rights Under GDPR (EU / EEA)8. GDPR 用户权利（欧盟/欧洲经济区）

If you are located in the EEA or the UK, you have the following rights under GDPR:

如您位于欧洲经济区（EEA）或英国，您依据 GDPR 享有以下权利：

• Right of Access: Request a copy of personal data we hold about you.访问权：请求获取我们持有的关于您的个人数据副本。
• Right to Rectification: Request correction of inaccurate or incomplete data.更正权：请求更正不准确或不完整的数据。
• Right to Erasure: Request deletion where we no longer have a legitimate purpose.删除权（被遗忘权）：在我们不再有合法目的时请求删除数据。
• Right to Restriction: Request restriction of processing in certain circumstances.限制处理权：在特定情况下请求限制数据处理。
• Right to Data Portability: Receive your data in a machine-readable format.数据可携带权：以机器可读格式接收您的数据并传输至其他控制者。
• Right to Object: Object to processing based on legitimate interests or for direct marketing.反对权：反对基于合法利益的处理或直接营销目的的处理。
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.撤回同意权：随时撤回同意，不影响此前处理的合法性。

To exercise these rights, contact [email protected]. We respond within 30 days.

如需行使上述权利，请联系 [email protected]，我们将在 30 天内回复。

Legal Bases for Processing: (a) Contractual necessity; (b) Legitimate interests; (c) Legal obligation; (d) Consent.

处理的法律依据：（a）履行合同所需；（b）合法利益；（c）法律义务；（d）您的同意。

9. Your Rights Under CCPA (California Residents)9. CCPA 权利（加利福尼亚州居民）

• Right to Know: Request disclosure of categories and specific pieces of personal information collected over the past 12 months.知情权：请求披露过去 12 个月内收集的个人信息类别及具体内容。
• Right to Delete: Request deletion of personal information, subject to certain exceptions.删除权：请求删除个人信息（受特定例外情形限制）。
• Right to Opt-Out of Sale: We do not sell personal information. No action required.退出销售权：我们不出售个人信息，无需采取任何行动。
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.非歧视权：我们不会因您行使 CCPA 权利而对您实施差别对待。

To submit a request, email [email protected] with subject "CCPA Request." We respond within 45 days.

如需提交请求，请发送邮件至 [email protected]，主题注明"CCPA Request"，我们将在 45 天内回复。

10. Children's Privacy10. 儿童隐私

Our Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child under 16 has provided us data, contact [email protected] immediately.

本服务不面向 16 岁以下未成年人。我们不会故意收集儿童的个人信息。若您认为有 16 岁以下儿童向我们提供了数据，请立即联系 [email protected]。

11. International Data Transfers11. 跨境数据传输

IFox9Browser operates primarily from the United States. Your information may be transferred to and processed in the US or other countries. We ensure international transfers are protected by Standard Contractual Clauses (SCCs) or equivalent mechanisms.

IFox9Browser 主要在美国运营。您的信息可能被传输至美国或其他国家进行处理。我们确保国际数据传输受标准合同条款（SCC）或等效机制的保护。

12. Changes to This Policy12. 政策变更

When we make material changes, we will notify you by email and/or by prominently posting a notice at least 14 days before changes take effect. Continued use after the effective date constitutes acceptance.

当我们作出重大变更时，将通过电子邮件和/或网站显著通知，在变更生效前至少提前 14 天告知。变更生效后继续使用本服务即表示您接受修订后的政策。

13. Contact Us13. 联系我们

For questions about this Privacy Policy, contact our Data Privacy Team:

如对本隐私政策有疑问，请联系我们的数据隐私团队：