Privacy notice

广东虎山科技有限公司, 广东省佛山市顺德区龙江镇西溪社区文华路11号盈信城市广场3区西座510号 operates BaoChat and is responsible for the account, billing, and service-administration information described here. Customers may separately control personal information in the messages and workflows they submit.

Information we process

We process account identity, workspace membership, business website, billing references, service configuration, usage counters, security and audit records, support communications, and customer messaging content needed to provide BaoChat. Passwords are one-way hashed, and the BaoChat control-plane provider credential bundle is encrypted at the application layer.

Why and on what basis we process it

Processing is used to perform the service contract, fulfill billing, secure the service, prevent abuse, support customers, comply with law, and pursue legitimate reliability and security interests. Consent is used where applicable. We do not sell personal information or use customer message content for unrelated advertising.

Service providers and disclosures

BaoChat uses infrastructure and specialist processors, including managed messaging infrastructure, configured model providers for AI workflows, Stripe for payments, and the configured transactional email provider. Information is disclosed only as needed for those functions, customer instructions, legal compliance, safety, or a business transfer subject to appropriate protections.

Retention and deletion

Active-workspace records are kept while needed to deliver and secure the service. A closure request disables the workspace and starts a 30-day deletion waiting period. Legal, fraud-prevention, billing, security, and backup records may be retained longer where required, then expire under the applicable retention schedule.

Your choices

Workspace owners can manage members, billing, and closure in the product. Depending on applicable law, people may request access, correction, export, deletion, restriction, objection, or withdrawal of consent, and may complain to their privacy regulator. We may need to verify identity and authority before fulfilling a request.

Security, children, and international transfers

We apply access controls, tenant-scoped authorization, encryption, audit records, and monitored backups. No system is risk-free. BaoChat is not directed to children, and account holders must be able to form a binding contract. Data may be processed where configured providers operate, subject to applicable contractual or other transfer safeguards.

Contact and changes

Privacy requests may be sent to [email protected]. We may update this notice and will post or notify material changes as required.