隐私政策
1. 我们是谁
ClawAI（小爪 AI）运营网站 xiaozhuapingtai.com，提供 AI 接口中转服务：注册用户取得 API 密钥后，经我们的网关调用 AI 模型，用量从账户余额中结算。本政策说明我们收集哪些信息、为什么收集、以及你有哪些选择。
2. 我们收集的信息
- 账号信息：邮箱注册时的邮箱地址与经安全哈希处理的密码；使用谷歌登录时，我们会取得经你同意由谷歌提供的邮箱与基本资料（如姓名），并保存一个谷歌账号标识，用于日后认出你的账号。
- 头像图片：如果你自愿上传头像图片，我们会把它与你的账号一起保存并在应用内显示。上传完全自愿，你可以随时移除。
- 使用与计费记录：运营与结算所必需的记录，包括你账号下的调用记录（时间、模型、token 数）、余额变动（充值、扣费、调整）及相应账本。
- 安全与访问日志：登录事件与安全日志，包括 IP 地址、浏览器/设备信息与登录结果，用于保护账号、防范滥用。
- 你通过接口发送的内容：你发给模型的请求（如提示词）经网关转发至上游模型供应商以生成回复。我们不使用你的接口内容训练模型。
- 语音通话：你使用实时语音通话时，通话音频会经我们的中转实时传给你所选模型的上游服务商处理，并受该服务商自身政策约束。我们不录制、不保存你的通话音频。通话的转写文本（通话中转成的文字）与一张计费收据（时长与扣费）会像普通消息一样保存到发起通话的那个会话里；删除该会话即一并删除转写。
- 聊天会话：聊天记录同步开启时（默认开启），你在站内聊天窗口的会话（标题与消息正文）会保存到我们的服务器并与你的账号关联，以便你换设备接着聊。正文以明文形式存放在数据库中（未做端到端加密），靠账号登录与服务器访问控制保护。附件的图片与文件内容本身不会被同步，只有文件名与大小会随消息保存。你可以随时在「设置 → 聊天记录同步」里关闭同步，或关闭并删除云端副本。
- AI 记忆：记忆功能开启时（默认开启），你在聊天里对某条消息点「记住」的内容（或自己手动添加的条目）、以及长对话的历史摘要，会保存到我们的服务器并与你的账号关联。若「自动记忆」子开关开启（默认开启，可单独关闭），系统还会在对话结束后自动从聊天中提取关于你的持久事实（如偏好、长期计划、你定下的事）存入同一记忆库，条目标有「自动记住」，与手动条目一样可逐条查看、删除，也可一键清空全部自动记忆；密码、密钥、证件号、银行卡等敏感信息不会被自动记录。此后聊天时，与当前话题相关的记忆会被带入请求，让模型能接上以前聊过的事。记忆正文以明文形式存放在数据库中（未做端到端加密）。你可以随时在「我的 → AI 记忆」里查看、逐条删除、清空或关闭该功能；关闭后记忆不再被带入聊天。删除云端聊天会话副本不会删除记忆，记忆在「AI 记忆」页单独管理。
- 客服沟通：你联系我们时发送的消息，我们会保存以便答复与处理问题。
- Cookie 与本地存储：使用会话 Cookie 保持登录状态，本地存储保存语言、主题等偏好。我们不使用广告 Cookie。你在聊天输入框里还没发送的草稿只保存在这台设备的本地存储中，不会上传到我们的服务器；切换或删除会话、退出登录时，相应草稿会被清除。
3. 信息的使用
- 提供服务：验证身份、转发你的接口调用、展示你的账号、密钥与用量；
- 准确计费：按实测用量计算费用并维护可核对的账本；
- 保障安全：识别并防范欺诈、滥用与未授权访问；
- 提供客服支持、答复你的问题；
- 在适用时履行法律义务。
我们不出售你的个人信息，也不将你的个人信息用于广告。
4. 谷歌用户数据
若你选择「使用 Google 登录」，我们只申请你的邮箱与基本资料，并仅用于创建与验证你的 ClawAI 账号。我们对从谷歌接口取得信息的使用遵循《Google API 服务用户数据政策》及其「有限使用」要求。
5. 信息的共享
- 上游模型供应商：你发送的接口请求会转发给你所调用模型的供应商，仅用于处理请求并返回回复；
- 支付处理方：充值由第三方支付机构处理，我们只接收交易结果与记账所需的记录，不保存你的完整支付凭据；
- 法律要求：适用法律或合法请求要求时，我们可能披露相关信息。
6. 数据保留与账号注销
账号存续期间我们保留账号信息。你可随时在产品内的账号设置中自助注销。注销后，你的资料与登录数据将被删除或匿名化、API 密钥将被吊销，剩余余额按注销流程中的说明处理。为防范滥用，被注销邮箱的单向哈希记录保留 90 天，期满删除。账号注销时，云端同步的聊天会话正文一并删除，AI 记忆也一并删除。云端同步的聊天内容也会出现在我们的例行数据库备份中，备份最多保留 7 天，其后被覆盖。计费与安全记录可能在记账、安全与法律所需的期限内保留。
7. 你的权利
在账号设置中，你可以查看与修改资料、导出你的账号数据、注销账号。如需协助，请通过下方方式联系我们。
8. 儿童
本服务不面向 13 岁以下儿童，我们不会有意收集其个人信息。
9. 政策变更
如本政策变更，我们会在本页发布更新版本并更新上方生效日期。
10. 联系我们
邮箱：[email protected]
QQ：2586031869
微信：LINGJIARO
Privacy Policy
1. Who we are
ClawAI (小爪 AI, "we", "us") operates the website xiaozhuapingtai.com and provides an AI API relay service: registered users obtain an API key and call AI models through our gateway, and usage is billed against their account balance. This policy explains what information we collect, why, and what choices you have.
2. Information we collect
- Account information. Your email address and a securely hashed password when you register with email. If you sign in with Google, we receive your email address and basic profile information (such as your name) that Google shares with your consent, together with a Google account identifier we store to recognise your account on future sign-ins.
- Profile avatar. If you choose to upload a profile avatar image, we store it with your account and display it inside the app. Uploading one is entirely optional, and you can remove it at any time.
- Usage and billing records. Records needed to operate and bill the service: API calls made under your account (timestamps, model used, token counts), balance movements (top-ups, charges, adjustments) and related ledger entries.
- Security and access logs. Login events and security logs, including IP address, browser/device information, and sign-in results, used to protect accounts and prevent abuse.
- Content you send through the API. The requests you send to models (for example prompts) pass through our gateway to the upstream model provider so the provider can generate a response. We do not use your API content to train models.
- Voice calls. If you use realtime voice calls, your call audio is streamed through our relay to the upstream model provider that serves the model you picked, and is processed by that provider under its own policies. We do not record or store your call audio. The call transcript (the text of what was said, as transcribed during the call) and a billing receipt (duration and charge) are saved into the conversation the call was started from, like a normal message; deleting that conversation deletes the transcript with it.
- Chat conversations. When chat sync is on (it is on by default), the conversations you have in our chat window — titles and message text — are stored on our servers, linked to your account, so you can continue them on another device. Message text is stored in plaintext in our database (not end-to-end encrypted), protected by account sign-in and server access controls. The file and image contents of attachments are not synced; only their file names and sizes are kept, as part of the message. You can turn sync off — or turn it off and delete the cloud copies — at any time under Settings → Chat sync.
- AI memories. When the memory feature is on (it is on by default), the items you choose to remember from a chat (by tapping "Remember" on a message, or adding them yourself) and summaries of long conversations are stored on our servers, linked to your account. If the separate "Auto memory" toggle is on (it is on by default and can be turned off on its own), the system also automatically extracts durable facts about you from your chats after a conversation turn (such as preferences, long-term plans, and decisions you make) and saves them into the same memory store, tagged "Auto-remembered"; like manual items, they can be viewed and deleted one by one, or cleared all at once. Passwords, keys, ID numbers, and bank card numbers are never auto-recorded. When you chat, memories relevant to the current topic are included in the request so the model can pick up on things you discussed before. Memory text is stored in plaintext in our database (not end-to-end encrypted). You can view your memories, delete them one by one, clear them all, or turn the feature off at any time under Me → AI Memory. Deleting synced chat copies does not delete memories; memories are managed separately on that page.
- Support communications. If you contact us, we keep the messages you send us so we can answer and resolve your issue.
- Cookies and local storage. We use a session cookie to keep you signed in, and local storage for preferences such as language and theme. We do not use advertising cookies.
3. How we use information
- To provide the service: authenticate you, route your API calls, and display your account, keys and usage.
- To bill accurately: calculate charges from measured usage and maintain a verifiable billing ledger.
- To keep accounts secure: detect and prevent fraud, abuse and unauthorised access.
- To provide support and respond to your questions.
- To comply with legal obligations where applicable.
We do not sell your personal information. We do not use your personal information for advertising.
4. Google user data
If you choose "Sign in with Google", we only request your email address and basic profile. We use this data solely to create and authenticate your ClawAI account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
5. Who we share information with
- Upstream model providers. The API requests you send are forwarded to the provider of the model you call, solely so it can process your request and return a response.
- Payment processors. If you top up your balance, payment is handled by third-party payment providers; we receive transaction results and records needed for accounting, not your full payment credentials.
- Legal requirements. We may disclose information if required to do so by applicable law or a valid legal request.
6. Data retention and account deletion
We keep account information while your account is active. You can delete your account yourself at any time from the account settings in the product. When you delete your account, your profile and sign-in data are removed or anonymised, your API keys are revoked, and any remaining balance is handled as described in the deletion flow. To prevent abuse, a one-way hashed record of the deleted email address is kept for 90 days, after which it is removed. When you delete your account, the synced chat conversation content stored in the cloud is deleted as well, and so are your AI memories. Synced chat content may also appear in our routine database backups, which are kept for up to 7 days before being overwritten. Billing and security records may be retained for as long as necessary for accounting, security and legal purposes.
7. Your rights
From your account settings you can view and update your profile, export your account data, and delete your account. If you need help with any of these, contact us using the details below.
8. Children
The service is not directed at children under 13, and we do not knowingly collect their personal information.
9. Changes to this policy
If we change this policy, we will post the updated version on this page and update the effective date above.
10. Contact us
Email: [email protected]
QQ: 2586031869
WeChat: LINGJIARO