私隱政策

AgentCraft 由 Exacto Company Limited（「本公司」，香港註冊）營運。本公司是《個人資料（私隱）條例》（第 486 章，「PDPO」）下的資料使用者，並會按照其六項保障資料原則處理你的個人資料。本政策適用於公開測試（beta）階段。

AgentCraft is operated by Exacto Company Limited (the “Company”), incorporated in Hong Kong. The Company is the data user under the Personal Data (Privacy) Ordinance (Cap. 486, “PDPO”) and handles personal data in line with its six Data Protection Principles. This policy applies during the public beta.

• 帳戶資料：電郵地址、顯示名稱、密碼（經加密雜湊，由 Supabase Auth 處理）、Google 登入時的基本資料、年齡組別、角色、所屬學校／班別。
• 同意記錄：你接受條款的版本及時間，以及（如適用）家長／監護人同意。
• 專案內容：你建立的智能體（積木、skill.md、版本記錄）。
• 智能體執行記錄：每次執行的輸入、步驟、輸出、安全事件。
• Token 用量：每次執行所用的模型及 token 數量，用於配額及成本控制。
• 技術及分析資料：如已啟用，我們使用 PostHog（產品分析）及 Sentry（錯誤監測），收集頁面瀏覽、裝置／瀏覽器資料及錯誤報告。

• Account: email, display name, password (hashed, handled by Supabase Auth), basic Google profile if you use Google sign-in, age band, role, school/class membership.
• Consent record: version and time you accepted these terms and, where applicable, parent/guardian consent.
• Projects: agents you build (blocks, skill.md, version history).
• Agent runs: inputs, steps, outputs and safety events for each run.
• Token usage: model and token counts per run, for quotas and cost control.
• Technical/analytics: when enabled, PostHog (product analytics) and Sentry (error monitoring) collect page views, device/browser data and error reports.

當你執行智能體時，你的提示（prompt）、智能體指示及相關內容會經由本公司伺服器傳送至 OpenRouter，再轉送至其合作的 AI 模型供應商以產生回應；這些供應商可能位於香港以外（例如美國）。測試版期間，AgentCraft 經 OpenRouter 使用免費 AI 模型；這些模型的供應商可能會使用你的提示及模型輸出來訓練或改進其模型。因此請勿輸入任何個人或敏感資料。內容安全：所有輸入及輸出均先經平台內置的規則過濾器檢查（自我傷害、色情、暴力、仇恨言論、繞過指示的嘗試），不適合未成年人的內容會被攔截；電郵、電話、香港身份證號碼及信用卡號碼等個人資料會被自動遮蓋。如啟用，平台亦可能把文字傳送至 OpenRouter 上的 AI 審核模型作第二重檢查。每次攔截或遮蓋均會記錄為安全事件（只記錄類別及嚴重程度，不保存原文）。請勿在提示中輸入真實姓名、地址、電話、身份證號碼等個人資料——上述自動過濾不能保證攔截所有內容。其他處理者包括 Supabase（資料庫、身份驗證及儲存）、雲端託管供應商，以及（如啟用）PostHog 和 Sentry。

When you run an agent, your prompts, agent instructions and related content are sent through our servers to OpenRouter, which forwards them to AI model providers to generate responses; these may be located outside Hong Kong (e.g. the United States). During the beta, AgentCraft uses free AI models via OpenRouter, and the providers of these models may use your prompts and the model outputs to train or improve their models. Please do not enter any personal or sensitive information. Content safety: every input and output is first checked by our built-in rule-based filter (self-harm, sexual content, violence, hate, attempts to bypass instructions) and content unsuitable for minors is blocked; emails, phone numbers, HKID and card numbers are automatically redacted. If enabled, text may also be sent to an AI moderation model via OpenRouter as a second check. Each block or redaction is logged as a safety event (category and severity only, never the original text). Do not put real names, addresses, phone numbers, ID numbers or other personal data into prompts — these automated filters cannot catch everything. Other processors include Supabase (database, auth, storage), our cloud hosting provider and, if enabled, PostHog and Sentry.

提供及營運平台、讓教師管理班別及功課、執行安全審核及防濫用、控制成本及配額、改善產品，以及履行法律責任。我們不會出售你的個人資料，亦不會用於直接促銷。

To provide and operate the platform, let teachers manage classes and assignments, perform safety moderation and abuse prevention, control costs and quotas, improve the product and meet legal obligations. We do not sell personal data or use it for direct marketing.

本平台主要服務學生。未滿 18 歲的用戶須在家長或監護人知悉並同意下使用；未滿 13 歲的兒童應由學校或家長代為建立及管理帳戶。如我們得悉在未有適當同意下收集了兒童的資料，會盡快刪除。家長可透過下方聯絡方法查閱、更正或要求刪除子女的資料。

The platform mainly serves students. Users under 18 must use it with the knowledge and consent of a parent or guardian; accounts for children under 13 should be created and managed by their school or parent. If we learn that a child’s data was collected without appropriate consent, we will delete it promptly. Parents may request access to, correction or deletion of their child’s data using the contact below.

• 帳戶及專案資料：帳戶有效期間保留；帳戶刪除後 30 日內刪除（備份最多再保留 30 日）。
• 智能體執行記錄及 token 用量：保留最多 12 個月，用於安全審核及成本分析，其後刪除或匿名化。
• 安全事件及審計記錄：保留最多 24 個月。
• 分析及錯誤資料：依 PostHog／Sentry 設定，一般不超過 12 個月。

• Account and project data: kept while the account is active; deleted within 30 days after account deletion (backups up to a further 30 days).
• Agent runs and token usage: up to 12 months for safety review and cost analysis, then deleted or anonymised.
• Safety events and audit logs: up to 24 months.
• Analytics and error data: per PostHog/Sentry settings, generally no more than 12 months.

我們使用加密傳輸、資料庫行級安全（RLS）及權限控制保護資料。由於部分處理者位於香港境外，你的資料可能被轉移至其他司法管轄區，我們會要求處理者採取適當保障措施。

We protect data with encrypted transport, database row-level security (RLS) and access controls. Because some processors are outside Hong Kong, data may be transferred to other jurisdictions; we require processors to apply appropriate safeguards.

根據 PDPO，你有權要求查閱及更正你的個人資料。你亦可要求刪除帳戶。請電郵至 exactocompanylimiteddevelopera@gmail.com。我們可能就查閱資料要求收取合理費用。

Under the PDPO you may request access to and correction of your personal data, and you may ask us to delete your account. Email exactocompanylimiteddevelopera@gmail.com. A reasonable fee may be charged for data access requests.

我們使用必要的 cookies／本地儲存以維持登入狀態及保存草稿。如啟用分析服務，PostHog 可能設置分析 cookies。

We use essential cookies/local storage to keep you signed in and save drafts. If analytics is enabled, PostHog may set analytics cookies.

我們可能更新本政策；重大變更會在平台上通知，並在需要時要求你重新同意。

We may update this policy; material changes will be announced on the platform and, where required, we will ask for renewed consent.