PRIVACY

隐私政策

生效日期：2026 年 9 月 30 日

本政策说明魄影（Ploctor，以下称“我们”）在你使用魄影 Mac 应用、ploctor.com 网站及相关在线服务（以下合称“服务”）时，如何收集、使用、保存、共享和保护你的个人信息，以及你享有的权利。

服务由魄影团队提供。如对本政策有任何问题，或需要行使你的权利，请发邮件至 support@ploctor.com。

一、我们处理哪些信息

不需要账户的部分：在应用里编辑图片、使用本地调整、滤镜、选区和抠图等功能时，图片和项目只在你的 Mac 上处理和保存，不会发送给我们。

账户信息：注册时你提供的邮箱和密码。密码只以加盐哈希的形式保存，我们看不到原文。我们会向你的邮箱发送验证码，验证码只以哈希形式保存，10 分钟内有效。

登录与安全信息：登录会话（网站使用名为 compositor_session 的 Cookie，有效期最长 30 天）；为防止暴力破解，我们会按 IP 地址统计登录、注册尝试次数，这些计数在 24 小时内删除。网站使用 Cloudflare Turnstile 识别自动化请求。

积分与付款信息：积分余额和每一笔增减记录（购买、发放、使用、退回）；订单号、商品、金额、订阅状态。在网站付款由 Stripe 处理，在 App Store 付款由 Apple 处理，我们不会收到或保存你的银行卡号；我们会保存 Stripe 客户编号或 Apple 交易编号，用于发放积分、处理退款和订阅。

你交给在线 AI 处理的内容：当你使用生图、改图、放大、抠图、拆分图层、AI 助手等在线功能时，你输入的文字、选中的图片或画布截图、选区和相关设置会发送到我们的服务器，再由我们转交给相应的模型服务商处理，处理结果返回到你的应用。图片中可能包含人脸等信息，请只提交你有权处理的内容。

技术信息：访问网站和调用服务时的 IP 地址、时间、请求路径、应用版本等访问日志，用于排查故障和防范滥用。应用每天会向 ploctor.com 检查一次更新，这个请求只包含普通的网络信息和应用版本，不包含你的项目或图片。

我们不使用第三方广告或统计分析工具，也不会把你的个人信息用于广告。

二、我们如何使用这些信息

提供和维护服务：登录、同步积分、完成你发起的 AI 请求、发放和扣除积分、处理订阅与退款。

安全与防滥用：识别异常登录、自动化请求和违反使用条款的内容。

客户服务：回复你的问题，处理计费争议。

改进服务：用汇总的、不能识别到个人的数据（例如各功能的调用次数和成本）改进产品和定价。

我们不会用你的图片、提示词或生成结果训练任何模型。

三、保存期限

AI 请求的内容（提示词、文字、图片链接、模型的回复）在服务器上保存 30 天，用于失败重试、核对计费和处理滥用投诉，之后自动删除；只保留计费所需的信息（模型、所用积分、时间、生成张数）。你上传给模型的图片，我们记录的访问链接 1 天后失效。

账户信息在账户存续期间保存。你删除账户后，我们立即删除你的邮箱、密码和登录会话。

付款和积分记录按法律法规对财务、交易记录的要求保存；删除账户后，这些记录只以匿名编号保存。

访问日志通常保存不超过 30 天。

你 Mac 上的数据（项目、资产、品牌套件、AI 对话记录、技能等）由你自己保存和删除，我们无法访问。

四、我们与谁共享信息

我们不会出售你的个人信息。只有在提供服务所必需的范围内，我们才与以下服务商共享，并要求它们按约定保护信息：

Cloudflare, Inc.：网站托管、数据库、文件存储、邮件发送、Turnstile 人机验证和访问日志。

AtlasCloud（atlascloud.ai）：图像生成与编辑、放大、抠图、拆分图层等模型服务；它会把请求交给相应模型的开发方（例如 OpenAI、Google、字节跳动等）处理。

Google LLC（Gemini API）：AI 助手、结果检查和图片识别等功能，请求经美国的数据中心发送。

Stripe, Inc.：网站付款、订阅和发票。

Apple Inc.：App Store 版的购买与订阅。

此外，法律法规要求、司法或行政机关依法要求，或为保护你、其他用户或公众的人身财产安全所必需时，我们可能依法披露信息。

你在应用里自行连接的第三方服务（“连接器”），数据在你的 Mac 与该服务之间直接传输，受该服务自己的条款约束。

五、跨境处理

我们的服务由美国公司运营，上述服务商的服务器也主要位于美国及 Cloudflare 的全球网络，因此你的账户信息和提交给在线 AI 的内容会在你所在国家或地区以外处理。接收方的名称见第四条，联系方式见各自官网公布的隐私政策；处理目的、方式和信息种类见本政策第一、二条。你可以通过本政策第七条的方式向我们或上述接收方行使权利。使用在线功能即表示你同意上述出境处理；如不同意，你仍可以不登录、只使用应用的本地功能。

六、信息安全

网站和服务全部使用 HTTPS 加密传输；密码和验证码只保存哈希值；应用的登录凭据保存在 macOS 钥匙串中。只有需要处理你请求的人员（例如处理计费争议或滥用投诉）才能在必要范围内查看相关记录。如发生个人信息安全事件，我们会按法律要求告知你并采取补救措施。

七、你的权利

你可以查阅和复制你的账户信息与积分记录（登录网站账户页即可查看）；要求更正不准确的信息；撤回同意；要求删除你的个人信息；要求我们解释个人信息处理规则。

删除账户：在网站账户页选择“删除账户”即可。删除时会同时取消网站订阅；App Store 的订阅需先在 Apple 账户中取消。账户中剩余的积分会随账户一并作废。

其他请求请发邮件至 support@ploctor.com，我们会在 15 个工作日内回复。

八、未成年人

服务面向年满 14 周岁的用户。不满 18 周岁的未成年人，请在监护人同意和指导下使用；不满 14 周岁的儿童请勿注册账户。如果我们发现在未获监护人同意的情况下收集了不满 14 周岁儿童的信息，会尽快删除。

九、本政策的变更

我们可能会更新本政策。重大变更会在网站或应用中提示；更新后继续使用服务，即表示你接受更新后的政策。

Privacy Policy

Effective September 30, 2026

This policy explains how Ploctor ("we") collects, uses, keeps, shares and protects personal information when you use the Ploctor Mac app, the ploctor.com website and the related online services (the "Service"), and the rights you have.

The Service is provided by the Ploctor team. For any question about this policy, or to exercise your rights, email support@ploctor.com.

1. What we process

What needs no account: editing in the app — local adjustments, filters, selections and cutouts — happens on your Mac. Your pictures and projects stay there and are not sent to us.

Account: the email address and password you register with. Passwords are stored only as salted hashes; we cannot read them. We email you verification codes, stored only as hashes and valid for 10 minutes.

Sign-in and security: your session (the website uses a cookie named compositor_session, valid for up to 30 days). To stop password guessing we count sign-in and sign-up attempts per IP address; the counts are deleted within 24 hours. The website uses Cloudflare Turnstile to tell people from bots.

Credits and payments: your credit balance and every change to it (purchases, grants, use, refunds); order numbers, products, amounts and subscription status. Payments on the website are handled by Stripe and in the App Store by Apple; we never receive or store card numbers. We keep your Stripe customer ID or Apple transaction IDs to grant credits and handle refunds and subscriptions.

What you send to online AI: when you use online features — generating and editing images, upscaling, cutouts, splitting layers, the assistant — the text you enter, the pictures or canvas snapshots involved, selections and settings are sent to our servers and passed to the model provider that does the work; the result returns to your app. Pictures may show faces or other personal details; only send what you have the right to use.

Technical data: IP address, time, request path and app version in access logs, used to fix problems and prevent abuse. Once a day the app asks ploctor.com whether an update is available; that request carries ordinary network details and the app version, never your projects or pictures.

We do not use third-party advertising or analytics tools, and we never use your information for advertising.

2. How we use it

To run the Service: sign-in, syncing credits, carrying out the AI requests you make, charging and refunding credits, subscriptions and refunds.

For security: spotting unusual sign-ins, automated requests and content that breaks the Terms.

For support: answering your questions and billing disputes.

To improve the Service, using aggregated data that does not identify anyone (for example how often each feature is used and what it costs).

We never use your pictures, prompts or results to train any model.

3. How long we keep it

The content of AI requests (prompts, text, picture links, model replies) is kept on our servers for 30 days — for retries, billing questions and abuse reports — and then deleted automatically; only what billing needs stays (model, credits, time, number of pictures). The links we record to pictures you upload for a model expire after one day.

Account information is kept while your account exists. When you delete your account we delete your email, password and sessions at once.

Payment and credit records are kept for as long as the law requires for financial records; after you delete your account they are kept only under an anonymous ID.

Access logs are normally kept no longer than 30 days.

Data on your Mac — projects, assets, brand kits, assistant conversations, skills — is yours to keep or delete; we cannot access it.

4. Who we share it with

We do not sell personal information. We share it only as far as running the Service needs, with these providers, who must protect it:

Cloudflare, Inc.: website hosting, database, file storage, email delivery, Turnstile and access logs.

AtlasCloud (atlascloud.ai): image generation and editing, upscaling, cutouts, layer splitting; it passes each request to the developer of the model used (for example OpenAI, Google or ByteDance).

Google LLC (Gemini API): the assistant, result checks and picture recognition, sent through a data center in the United States.

Stripe, Inc.: website payments, subscriptions and invoices.

Apple Inc.: purchases and subscriptions in the App Store version.

We may also disclose information where the law, a court or an authority lawfully requires it, or where needed to protect the safety or property of you, other users or the public.

Third-party services you connect in the app yourself ("connectors") exchange data directly with your Mac under their own terms.

5. Processing in other countries

The Service is run by a company in the United States, and the providers above run servers mainly in the United States and on Cloudflare's global network, so your account information and what you send to online AI are processed outside the country where you live. The recipients are named in section 4; their contact details are in the privacy policies on their websites; the purposes, methods and kinds of information are in sections 1 and 2. You can exercise your rights with us or with them as described in section 7. Using the online features means you agree to this processing; if you do not, you can use the app's local features without signing in.

6. Security

All traffic is encrypted with HTTPS; passwords and codes are stored only as hashes; the app keeps its sign-in in the macOS keychain. Only people who need to handle your request — for example a billing dispute or an abuse report — can see the related records, and only as far as needed. If a security incident affects your information we will tell you and act as the law requires.

7. Your rights

You can see and copy your account information and credit history (on the website's account page); ask us to correct inaccurate information; withdraw consent; ask us to delete your information; and ask us to explain how we handle it.

Deleting your account: choose Delete Account on the website's account page. It also cancels a website subscription; an App Store subscription must first be cancelled in your Apple account. Credits left in the account are cancelled with it.

For anything else, email support@ploctor.com; we reply within 15 working days.

8. Children

The Service is for people aged 14 and over. Anyone under 18 should use it with a parent's or guardian's consent and guidance; children under 14 must not create an account. If we learn we have collected information from a child under 14 without a guardian's consent, we will delete it promptly.

9. Changes

We may update this policy. We will point out significant changes on the website or in the app; continuing to use the Service after an update means you accept it.