隐私政策
1. 我们收集的信息
- 账号信息：您注册时提供的电子邮箱；密码由 Firebase Authentication 以哈希形式保管，我们无法读取明文。
- 使用记录：您提交的股票代码、研究视角选项、订单状态、点数余额与流水。
- 付款信息：付款由 Stripe 处理，我们只保存订单号、金额与到账状态，不存储银行卡号。
- 技术信息：服务器日志中的访问时间、IP 地址与浏览器信息，用于安全与故障排查。
2. 信息的用途
用于向您提供服务（生成与发送报告、扣除与退回点数）、账号安全（邮箱验证、密码重置）、以及必要的客户支持与故障排查。我们不会出售您的个人信息，也不用于第三方广告。
3. 第三方服务
我们使用 Firebase（Google）进行身份认证与数据存储，使用 Stripe 处理付款，通过电子邮件服务发送报告与账号通知。这些服务商依其各自的隐私政策处理数据。
4. 存储与安全
数据存储于 Google Cloud。传输全程使用 HTTPS 加密。我们采取合理的技术与管理措施保护数据，但无法保证绝对安全。
5. 保留期限
账号存续期间我们保留上述信息；订单与点数流水作为交易记录保留。长期未验证的注册账号可能被清理。
6. 您的权利
您可在账户页查看订单与流水。如需更正邮箱、导出或删除您的数据，请通过 [email protected] 联系我们。
7. Cookie 与本地存储
我们使用浏览器本地存储保存登录令牌与语言偏好，不使用第三方跟踪 Cookie。
8. 政策变更
本政策更新后会在本页标注日期。
本政策为初稿，正式生效前需经法律专业人士审阅（适用的数据保护法律与跨境传输条款待补）。
Privacy Policy
1. Information we collect
- Account information: the email address you register with. Passwords are stored as hashes by Firebase Authentication; we cannot read them.
- Usage records: the tickers you submit, research-angle options, order status, points balance and ledger.
- Payment information: payments are processed by Stripe. We keep only the order reference, amount and settlement status, never card numbers.
- Technical information: access times, IP addresses and browser details in server logs, used for security and troubleshooting.
2. How we use it
To provide the Service (generate and deliver reports, deduct and refund points), keep your account secure (email verification, password reset), and provide necessary support and troubleshooting. We do not sell your personal information or use it for third-party advertising.
3. Third-party services
We use Firebase (Google) for authentication and data storage, Stripe for payments, and an email service to deliver reports and account notices. These providers process data under their own privacy policies.
4. Storage and security
Data is stored on Google Cloud. All transmission is encrypted over HTTPS. We take reasonable technical and organisational measures to protect data but cannot guarantee absolute security.
5. Retention
We retain the above information while your account exists; orders and points ledgers are kept as transaction records. Registrations left unverified for an extended period may be removed.
6. Your rights
You can view orders and ledgers on the account page. To correct your email, or export or delete your data, contact [email protected].
7. Cookies and local storage
We use browser local storage for your session token and language preference. We do not use third-party tracking cookies.
8. Changes
Updates to this policy will be dated on this page.
This is a draft. It requires review by a legal professional before taking effect (applicable data-protection law and cross-border transfer clauses to be added).