Haitun Agent Privacy Protection Policy (V1.0)

Last Updated: 2026-08-13 · Effective Date: 2026-08-13

This English version is provided for reference only. In the event of any discrepancy, the Chinese version shall prevail.

Introduction

Welcome to the Haitun Agent software (hereinafter referred to as the “Software” or “Haitun”) and its services.

The services are provided by Hefei Genuine Knowledge Artificial Intelligence Application Software Co., Ltd. (hereinafter referred to as “we” or “us”), whose registered address is Room 796-6, Floor 7, Buildings A3A4, Zhong’an Chuanggu Science & Technology Park, No. 900 Wangjiang West Road, Chengxiqiao Community Service Center, High-tech Development Zone, Hefei City, Anhui Province.

We attach great importance to the protection of users’ personal information and will protect the security of your personal information in accordance with laws and regulations. This Haitun Agent Privacy Protection Policy (hereinafter referred to as this “Policy”) is intended to explain to you: how we collect, store, use, share, and otherwise process your personal information during your use of the services, and the ways for you to consult, correct, delete personal information, and exercise other related rights. For some key content that may be related to your personal information rights and interests, we will highlight it in bold for your special attention.

We hope that you will carefully read and understand this Policy before using the services, so that you can better understand the services and make appropriate choices.

This Policy applies to the functions and services provided by Haitun through Windows and Mac clients and their supporting remote functions, unless otherwise specially stated or governed by separate privacy terms. The functions and services provided by different terminals or versions may differ. If certain terminals or versions do not have the relevant functions and services, the processing of the corresponding personal information is not involved.

In specific scenarios, we may provide you with supplementary explanations on the purposes, scope, and methods of information collection of specific functions or services through the Haitun Agent Software License and Service Agreement, pop-up windows, service pages, function update instructions, and other means. The aforementioned supplementary explanations constitute an integral part of this Policy and have the same effect as this Policy.

You can understand our privacy protection policy by reading the following summary:

I. Definitions

1.1 Individual User: refers to a user who uses the Software and its services as a natural person.

1.2 User: unless otherwise stated, this term refers to an Individual User, also referred to as “you”.

1.3 Input Content: refers to the content that you proactively submit or authorize the Software to obtain during your use of the Software and its services, in the form of text, images, files, operation instructions, etc.

1.4 Output Content: refers to the content generated by the Software based on your Input Content through technologies such as Large Model invocation.

1.5 Laws and Regulations: refers to applicable and effective legal documents, including laws, interpretations of laws, administrative regulations, local regulations, autonomous regulations and separate regulations, departmental rules, local government rules, military regulations, military rules, supervision regulations, other regulatory documents, interpretations for the concrete application of laws, etc.

II. Scope of Application of this Policy

2.1 This Policy is intended to explain how we process the personal information submitted and generated by users during the registration, login, and use of the Software and its services, as well as the personal information we collect in order to provide services to users. The processing of personal information includes the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information.

2.2 This Policy does not apply to products and services independently provided to users by other third parties, such as third-party Large Models, plugins, data sources, or other services configured and used by users themselves. The data processing rules, service agreements, and other matters involved in the aforementioned products and services shall be separately determined between users and the corresponding third parties. If we connect and invoke third-party Large Models or other service providers in order to provide users with the Software and its services, the provisions of this Policy shall still apply to the personal information we collect, use, share, or entrust for processing therein.

III. Information We Collect

3.1 We may collect users’ personal information through the following ways:

3.1.1 Proactive submission by users. For example, users fill in and upload information by themselves or authorize others to do so when registering accounts or improving information.

3.1.2 During the process of users’ use of the services, we collect information by proactively collecting or generating corresponding records. For example, the login time recorded in the background when users log in to their service accounts, and the operation records of users’ use of the services.

3.2 Registration and Login

3.2.1 The services provide you with two registration methods: email registration and mobile phone number registration. You shall comply with this Policy and the relevant usage rules for service accounts published by us.

3.2.2 When you register with an email address, we will collect your email address; when you register with a mobile phone number, we will collect your mobile phone number. The username, password, nickname, avatar, and other information you set to complete the registration will also be collected by us.

3.2.3 In order to meet the requirements of laws and regulations and regulatory requirements, achieve anti-fraud risk control, and verify users’ identity information, we may collect and verify your mobile phone number or email address when you use specific services and functions. For example, when you use the “password recovery” function, we may collect and verify your mobile phone number or email address so that you can recover your password; refusing to provide such information will only result in your inability to use functions such as password recovery, but will not affect your normal use of other services provided by the Software.

3.3 Real-Name Authentication

3.3.1 In accordance with the provisions of laws and regulations, you are required to complete real-name authentication when using certain functions of the Software and related services. Real-name authentication is an important basis for determining account ownership. We will collect your true identity information (such as your name and ID card number) in accordance with the requirements of laws and regulations for completing real-name authentication.

3.3.2 The aforementioned information includes sensitive personal information, and you may refuse to provide it. If you refuse to provide it, you may not be able to use the functions requiring real-name authentication, but this will not affect your use of other functions and services.

3.3.3 The information involved in registering and managing accounts is closely related to user management and use of the services (such as verifying the user’s identity). Please be sure to submit lawful, true, and valid information. When the aforementioned information changes, please update it in a timely manner.

3.6 In order to provide continuous services and ensure service quality, during the period of users’ use of the services, we will record and store the relevant information of users’ login and use of the services, for example:

3.6.1 Operation records. We will receive and record users’ operation records and related information when using the services, such as identity ID, operation time, operation content, and IP address.

3.6.2 Log data. Including users’ browser information and type, device information (for example, Linux: /var/lib/dbus/machine-id, macOS: IOPlatformUUID, Windows: registry MachineGuid/wmic UUID), browser fingerprint information (used for personalized recommendations), the date and time of user input and model output, etc.

3.6.3 Intelligent conversation. The intelligent conversation function is designed to understand users’ input content and form output that can be executed as tasks. The input content proactively sent by users or authorized by users for us to obtain through the dialogue box will be collected by us and sent to third-party Large Models, which will process it independently and directly return the output content to users. In order to provide users with a coherent and intelligent service experience, realize subsequent operations, and ensure service quality, we will collect from users’ local devices the conversation records between users and the services, including users’ input content, output content, and the conversation topics formed based on the aforementioned information. When users proactively paste content from the local device’s system clipboard into the intelligent dialogue box, we will collect users’ clipboard information locally.

3.6.4 Intelligent operation. The intelligent operation function is designed to assist users in executing corresponding tasks or completing corresponding operations based on the output content formed by “intelligent conversation”. Depending on the type of operation, the data processing methods are as follows:

(1) Local operations: if the task corresponding to the output content is an operation that can be completed within the user’s local device environment, such as opening local files or modifying system settings, the corresponding output content will be executed by tools on the user’s local device. During this operation, we only provide technical assistance such as tool invocation and will not collect users’ information.

(2) Third-party software operations: if the task corresponding to the output content involves operations on third parties, such as visiting websites or operating software, the corresponding output content will be executed by third-party software on the user’s device (for example, a browser). During this process, the interaction information between the user and the third party is directly collected and independently processed by the third party, and we will not collect information, unless the user proactively submits new input content to us through the service dialogue box during the process.

3.6.5 Remote functions. To facilitate users’ remote use of the intelligent operation function, we provide remote functions. Users can conduct remote conversations through channels such as mini programs and apps:

(1) Mini program remote function: it is designed to provide users with the ability to remotely send input content to Haitun through the mini program. The input content sent by users through the Haitun mini program or authorized by users for us to obtain will be processed in accordance with Article 3.6.3 (Intelligent Conversation) of this Policy.

(2) App remote function: it is designed to provide users with the ability to remotely send input content to Haitun through the app. The input content sent by users through the app or authorized by users for us to obtain will be processed in accordance with Article 3.6.3 (Intelligent Conversation) of this Policy.

3.6.6 Description of terminal permission applications. In order to realize the relevant functions of the services, we need to invoke necessary permissions according to the specific scenarios of the aforementioned information processing; we will ask users through pop-up windows before invocation. Sensitive permissions will not be enabled by default and will only be invoked after explicit authorization by users. The granting of permissions does not mean that we will continuously collect relevant information. We undertake to process relevant information through the obtained permissions only during the period when you use the corresponding functions and within the scope necessary for realizing such functions.

The specific permission invocations are as follows:

Windows permission list:

Mac permission list:

3.6.7 Work order records and consultation and communication records. We will receive and use the consultation information initiated to us by users through work orders, consultation channels, etc., in order to better locate users’ problems and provide solutions to users.

3.6.8 When you use functions such as experts, skills, and custom instructions, the relevant capabilities usually operate as prompt words, task orchestration, or tool invocation capabilities of the intelligent assistant and do not additionally collect your personal information; however, the relevant functions may process information that you proactively input, upload, or authorize access to according to your instructions. When you use functions such as knowledge bases and connectors, we will, after obtaining your authorization and consent, process the relevant files, knowledge base contents, or information in third-party services in accordance with the stated purposes, scope, and permissions, and provide you with authorization management and revocation methods.

3.7 Memory Function

3.7.1 In order to make the output content of intelligent conversation better fit users’ needs and improve the coherence, personalization, and service experience of intelligent conversation and intelligent operation, we provide users with cross-session memory capability in the memory function.

3.7.2 The memory function will, based on the conversation content between users and Haitun, automatically extract and remember personal information of reference value therein through Large Models and related artificial intelligence technologies (for example, identity, occupation, projects, preferences, etc. proactively provided by users, or information that users can ask Haitun to remember in conversations, such as users’ work background, personal background, current concerns, and recent developments, collectively referred to as “Memory Data”), and update it periodically. Users may also import memory data from other AI systems in accordance with the relevant guidelines of the services, so as to synchronize their usage habits on other AI systems.

3.7.3 During subsequent conversations or task execution, the services may use the Memory Data related to the current request as background information and use it together with users’ input content to generate output content or execute tasks.

3.7.4 Users may, in the “Settings - Memory - View and Edit Memory” page of the service client, issue instructions through conversations to add, delete, or correct Haitun’s Memory Data about users.

3.7.5 If users need to turn off the memory function, they may do so in the “Settings - Memory” page of the service client. After turning it off, the services will no longer extract Memory Data.

IV. How We Use Cookies and Related Technologies

4.1 We may collect and use users’ information through cookies and other related technologies. The specific purposes for which we use cookies include:

4.1.1 Remembering users’ identities. For example, cookies help us identify registered users.

4.1.2 Analyzing users’ use of the services, so as to provide users with more thoughtful personalized services, such as customized pages and recommendations.

4.2 Users may refuse or manage cookies through browser settings. Please note that disabling cookies may affect users’ service experience, and the availability of some functions may also be affected.

4.3 The relevant information recorded through cookies in the services shall be subject to this Policy.

V. How We Use the Collected Information

In order to provide users with high-quality, convenient, and safe services, and on the premise of complying with relevant laws and regulations, we may use the collected information for the following purposes:

5.1 Providing services to users.

5.2 Meeting users’ personalized needs. For example, language settings, location settings, personalized help services and instructions, or responding to users in other aspects.

5.3 Service optimization and development. For example, based on the operation records, log information, function usage, system responses, error information, and user feedback generated during users’ use of the services, we will analyze, improve, and optimize product functions, interaction experience, system performance, and service quality, and use them for product iteration and development of new functions.

5.4 Protecting the services, users, and our partners. For example, using users’ personal information for identity verification, security prevention, fraud monitoring, and account security status assessment; detecting malicious programs and viruses when users use security functions or similar services, or identifying fraudulent information for users; and providing necessary information to the parties concerned when handling disputes or complaints, so as to promote the proper resolution of disputes or complaints.

5.5 Pushing service-related messages (such as product messages and product updates) and commercial advertisements to users. For example, through users’ contact methods such as mobile phone numbers and email addresses, pushing commercial advertisements to them by means of SMS, email, push notifications, etc., to publicize and promote Haitun or other services.

5.6 Providing users with services more relevant to them. For example, based on the statistics and analysis of users’ information or other data statistics and analysis of the services, providing users with functions or services they may be interested in.

5.7 Inviting users to participate in surveys on our products and services.

5.8 We may integrate and analyze the data of users’ use of one or more services, separately or together with the usage data of users of other services, to form statistical user reports, business analyses, and other materials (collectively referred to as “Statistics”), and share, publish, display, etc. them internally or externally. We will ensure that the Statistics do not involve information that can identify a specific user.

5.9 Other scenarios that may require information processing. If the usage scenario is not reasonably related to the purpose stated at the time of collection, we will obtain users’ consent separately before use.

VI. How We Entrust Processing, Share, Transfer, and Publicly Disclose Information

6.1 We strictly limit the sharing of information in accordance with the provisions of laws and regulations. When cooperating with third parties, we will process the relevant data safely and prudently in accordance with the principle of minimum necessity.

6.2 Sharing with third parties: In order to enable you to use the services conveniently, your information may be shared among various service providers. We will use security protection measures such as encryption, anonymization, and de-identification to ensure the security of your information. Once the sharing of your sensitive personal information is involved, we will obtain your separate consent in accordance with the law. Currently, the situations in which the services share your information with third parties are as follows:

6.3 We may share your information with our affiliated companies, third-party service providers, vendors, and agents, solely for the following purposes:

6.3.1 As necessary for providing the functions or services described in “III. Information We Collect” of this Policy, or as necessary for realizing the purposes described in “V. How We Use the Collected Information”.

6.3.2 Fulfilling our obligations and exercising our rights under the Haitun Agent Software License and Service Agreement or this Policy.

6.3.3 In order to provide you with better services, we may entrust third-party service providers, vendors, and agents (collectively referred to as “Partners”) to assist us in providing services, such as consulting services, customer services, product recommendations, and technical services. To the extent necessary for realizing the aforementioned service purposes, we may share with Partners necessary personal information such as your account identifier, contact information, identity verification status, service usage records, consultation or work order contents, device information, log information, and related operation records.

6.3.4 For products and services jointly developed and provided by us and Partners, in order to realize your purpose of using such products and services, we may need to share part of your information with Partners.

If we share your information with any of the aforementioned third parties, we will only share your information with them based on the principles of lawfulness, legitimacy, and necessity, within the scope necessary for providing the services, and we will endeavor to ensure that third parties comply with this Policy and other appropriate confidentiality and security measures we require them to observe when using your information, and undertake not to use your information for other purposes.

6.4 As our business develops, we may undergo division, merger, acquisition, asset transfer, or similar transactions, and your information may be transferred as part of such transactions. When we transfer your information due to the aforementioned reasons, we will comply with the requirements of laws and regulations and fulfill the corresponding responsibilities and obligations.

6.5 In accordance with the provisions of laws and regulations, in the following circumstances, we may share, transfer, and publicly disclose your information without separately obtaining your consent:

6.5.1 As necessary for concluding and performing a contract to which an individual is a party, or as necessary for implementing human resources management in accordance with labor rules and regulations formulated in accordance with the law and collective contracts signed in accordance with the law.

6.5.2 As necessary for performing statutory duties or statutory obligations.

6.5.3 As necessary for responding to public health emergencies, or for protecting the life, health, and property safety of natural persons in emergency situations.

6.5.4 Processing personal information within a reasonable scope for news reporting, supervision by public opinion, and other acts for the public interest.

6.5.5 Processing personal information disclosed by individuals themselves or otherwise lawfully disclosed within a reasonable scope in accordance with the provisions of laws and regulations.

6.5.6 Other circumstances provided by laws and administrative regulations.

VII. Information Storage Location and Retention Period

7.1 In general, we will only store your personal information for the period necessary to realize the purpose of the services or under the conditions provided by laws and regulations. If you choose to cancel your account, we will delete your information or anonymize it, except for information that must be retained for a certain period in accordance with relevant laws and regulations. For the aforementioned information that must be retained, we will delete or anonymize it after the retention period provided by laws and regulations expires.

7.2 We will protect the security of your personal information in accordance with laws and regulations. Given that the Large Model services and servers of the Software are currently deployed overseas, the relevant information generated during your use of the Software may be transmitted overseas for processing. By ticking the box to agree to the Haitun Agent Software License and Service Agreement and this Policy during the installation of the Software, you shall be deemed to have read and agreed to the personal information processing arrangements set out in this Policy. We take necessary technical and management measures to ensure the security of your information. After we complete the filing and migrate the services back to mainland China, we will update this Policy and notify you separately. If you choose to configure Custom Models yourself, you understand and agree that we do not have control over the information processing behaviors of third parties, and the information transmission and processing rules shall be governed by the agreement between you and the relevant Large Model service provider. Please evaluate and bear the corresponding responsibilities and risks by yourself.

7.3 We usually retain your information only during the period of providing services to you, and the retention period will not exceed the period necessary to meet the relevant purposes of use. However, in the following circumstances, and only for purposes related to the following circumstances, we may need to retain your information for a longer period:

7.3.1 Complying with applicable laws, regulations, and other relevant provisions.

7.3.2 Complying with the requirements of court judgments, rulings, or other legal procedures.

7.3.3 Complying with the requirements of relevant administrative, judicial, or other competent authorities.

7.3.4 As reasonably necessary for implementing relevant service agreements or this Policy, handling complaints and disputes, or protecting the personal and property safety or legitimate rights and interests of users and others.

VIII. Information Security

8.1 We endeavor to ensure information security to prevent the loss, improper use, unauthorized access, or disclosure of information.

8.1.1 We use various security technologies to ensure the security of information. For example, adopting security protection measures such as encryption to prevent personal information from unauthorized access, modification, disclosure, damage, or loss.

8.1.2 We have established strict management systems and processes to ensure the security of information. For example, strictly limiting the scope of personnel who access information, conducting audits, and requiring relevant personnel to comply with confidentiality obligations.

8.1.3 We attach great importance to information security compliance and protect the security of your information with industry-leading solutions.

8.1.4 In the event of a personal information leakage security incident, we will immediately activate the emergency response plan to curb the further expansion of the incident, report it in a timely manner in accordance with the requirements of laws and regulations such as the National Emergency Response Plan for Cybersecurity Incidents, and inform you of the relevant situation and security handling suggestions through email, system notifications, announcements, and other forms.

8.2 To more effectively ensure the security of your information, we hope that you can strengthen your self-protection awareness and measures. The service account is equipped with security protection functions, but you also need to properly protect your own information and keep your account password properly to avoid damage to your own rights and interests. We only bear corresponding responsibility for personal information leakage directly caused by the faults of the services themselves.

IX. How You Manage Personal Information

9.1 We attach great importance to and guarantee your rights related to personal information. You may exercise the rights to consult, copy, modify, and delete information, and to withdraw authorization, through the functions in the services or the contact information disclosed in Article XII. In order to ensure the security of your account and your legitimate rights and interests, different information access, modification, and deletion may have different requirements (for example, changing real-name authentication information requires identity verification), and, based on legitimate reasons such as technical logic, requirements of laws and regulations, and information security protection, part of your information may not be accessible, modifiable, or deletable.

9.2 After completing registration, you may improve and modify your account information.

9.3 You may modify your message subscription settings and choose the method of receiving subscription messages or the categories of messages to which you wish to subscribe. The messages pushed by the services may involve important matters such as your account security and service use. It is recommended that you keep the subscriptions to avoid missing important information.

9.4 If the information we collect or store about you is incorrect, or you wish to withdraw the authorization of relevant permissions, and you cannot correct or operate it by yourself, you may contact us through the contact information disclosed in Article XII. We will review the matters in question as soon as possible and reply within fifteen working days after verifying your user identity.

9.5 If you need to cancel your account, you may do so through the account cancellation function in “Settings - Account Management” of the Software. After successful cancellation, all services and data under the account will be deleted and cannot be recovered. After you cancel your account, we will retain your relevant information in accordance with the requirements of relevant laws and regulations; after the statutory retention period expires, we will delete or anonymize your relevant information in accordance with the law.

X. Revision of the Policy

10.1 We may revise the terms of this Policy from time to time, and such revisions shall constitute a part of this Policy.

10.2 After the revision of the terms of this Policy, if you continue to use the services, you shall be deemed to have accepted the revised content. If you do not accept the revised content, you should stop using the services.

XI. Protection of Minors

11.1 We attach great importance to the protection of minors’ personal information. The services are mainly provided to adults. If you are a minor under the age of 18, you may use the services only after carefully reading and agreeing to this Policy under the custody, guidance, and consent of your guardian.

11.2 In particular, if you are a minor under the age of 14, before using the services, please ask your guardian to carefully read the Children’s Privacy Protection Statement specially formulated by us. Only after the guardian confirms consent to this Policy and the Children’s Privacy Protection Statement may minors under the age of 14 use the services.

11.3 If you are the guardian of a minor, please pay attention to whether the minor under your guardianship uses the services after obtaining your authorization and consent. If you have any questions about the personal information of the minor under your guardianship, please contact us through the contact information in this Policy.

XII. Contact Us

We have established a dedicated personal information protection team and a personal information protection officer. If you have any questions, complaints, or suggestions about this Policy or matters related to personal information protection, you may contact us in the following ways:

12.1 Send your questions to market@genuineknowledge.cn;

12.2 Mail your questions to the following address: Room 796-6, Floor 7, Buildings A3A4, Zhong’an Chuanggu Science & Technology Park, No. 900 Wangjiang West Road, Chengxiqiao Community Service Center, High-tech Development Zone, Hefei City, Anhui Province (Postal Code: 230088).

We will review the matters in question as soon as possible and reply within fifteen working days from the date of receiving your request.