小咩魔法 CRM 隐私政策 / Magic CRM Privacy Policy

1. 适用范围与责任主体 / Scope and operator

本政策适用于 crm.magic-crm.trade 上的小咩魔法 CRM。平台运营及数据负责主体为浙江巨鹏杯业有限公司。各客户公司的管理员决定其工作区内客户关系管理的用途，平台按照授权提供服务。联系邮箱：info@magic-crm.trade。

This policy covers Magic CRM at crm.magic-crm.trade, operated by Zhejiang Jupeng Drinkware Co., Ltd. Each customer company's administrator determines its workspace's CRM purposes; the platform provides the authorized service. Contact: info@magic-crm.trade.

2. 收集的数据 / Data we process

账户及安全信息包括登录邮箱、加密验证信息、会话、浏览器设备、IP 地址及安全审计记录。工作区数据包括公司成员、客户资料、客户提交的询盘、沟通记录、附件，以及在使用相应功能时产生的用量、余额和账务记录。

连接 Meta 后，我们处理授权用户和所选广告账户、公共主页、表单的标识及名称、授权凭据、广告结构与成效指标，以及广告主授权获取的表单提交字段、留资编号和处理记录。表单字段由广告主的表单决定，可能包括姓名、邮箱、电话和询盘内容。

Account/security data includes sign-in email, protected authentication information, sessions, browser devices, IP addresses and security audit records. Workspace data includes members, customers, inquiries, communications, attachments and applicable usage/billing records. A Meta connection adds authorized user and selected ad-account/Page/form identifiers and names, authorization credentials, advertising structures and metrics, submitted lead fields and processing records. Fields can include name, email, telephone and inquiry content, depending on the advertiser's form.

3. 数据用途 / Purposes

我们用这些数据验证身份、保护账户、隔离各公司工作区、显示获授权的广告报表、接收与读取留资、支持客户跟进，以及处理用户主动使用的协作、通信和计费功能。Meta 数据用于广告主授权的 CRM 留资管理与广告成效展示。当前发布版本不创建、编辑或发布 Meta 广告。我们不出售 Meta 开放平台数据，也不把某租户的数据开放给其他租户。

We use data for authentication, security, workspace separation, authorized advertising reports, lead reception/retrieval, customer follow-up, and collaboration, communications and billing features that users choose to use. Meta data serves advertiser-authorized CRM lead management and advertising reporting. This release does not create, edit or publish Meta ads. We do not sell Meta Platform Data or expose one tenant's data to another tenant.

4. 访问与服务提供方 / Access and providers

各租户按成员权限访问其工作区数据。平台运维人员仅为运行、排障、安全和处理数据请求所需而访问相应数据。基础设施包括讯擎云 / DivCloud 的新加坡 VPS 托管服务（www.xqidc.cn）及 Cloudflare 的网络、TLS 与安全服务；这些服务可能在提供托管或传输服务时处理相应数据。平台支持邮箱使用网易企业邮箱。

客户主动启用邮件、短信电话或 AI 功能时，相应内容可能发送给该客户配置的通信或 AI 服务提供方，例如已配置的 Amazon SES、Telnyx 或 AI 服务。可用与启用状态以工作区设置为准；技术接入并不代表已经发送营销邮件或完成通信服务开通。

Tenant members access their own workspace according to permissions. Platform operations access data as needed to run, troubleshoot, secure the service and handle data requests. Infrastructure includes Singapore VPS hosting by Xunqing Cloud / DivCloud (www.xqidc.cn) and Cloudflare network, TLS and security services, which may process relevant data while hosting or transmitting it. The platform support mailbox uses NetEase enterprise email. When customers actively enable communications or AI features, relevant content may be sent to their configured provider, such as Amazon SES, Telnyx or an AI service. Workspace settings identify available/enabled services; technical integration does not imply marketing emails have been sent or a channel has been activated.

5. 保存、安全与跨境处理 / Retention, security and locations

平台使用 HTTPS、账户认证、成员权限、租户隔离和审计记录保护访问，服务器端保存授权凭据，前台不再次展示已保存的访问令牌。我们保存提供服务及客户关系管理所需的数据；断开 Meta 连接会停止后续同步并清除该连接的凭据，但不会自动删除已导入的客户及广告记录。

基础设施、网络服务和客户所选服务可能在中国以外处理数据，包括新加坡托管及网络服务商的其他处理地点。删除申请会分别说明活动数据、附件、备份和依法需保留的账务或安全记录的处理范围。备份存在轮换周期，不能把从活动系统删除解释为所有备份立即清除。

HTTPS, authentication, member permissions, tenant separation and audit records protect access. Authorization credentials are stored on the server; saved access tokens are not displayed again. Data is retained as needed for service and CRM operations. Disconnecting Meta stops subsequent synchronization and clears connection credentials but does not automatically erase imported records. Infrastructure and selected services may process data outside China, including Singapore hosting and other network-provider locations. Deletion handling distinguishes active data, attachments, backups and required billing/security records; backup rotation means active-system deletion does not imply immediate erasure of all backups.

6. 访问、更正与删除请求 / Access, correction and deletion

用户可联系其客户公司管理员或发送邮件至 info@magic-crm.trade，申请访问、更正、导出或删除与自己有关的数据，以及停止后续处理。请说明涉及的公司、登录邮箱或留资来源及请求范围，不要发送密码、访问令牌或不必要的身份证件。我们会核验请求者身份和数据关系，说明可处理范围、进度和结果。数据删除指引见 /data-deletion。

Contact your company's administrator or info@magic-crm.trade to request access, correction, export, deletion or cessation of processing of your data. Identify the company, account email or lead source and request scope. Do not send passwords, access tokens or unnecessary identity documents. We verify identity and the relationship to the data, then explain scope, progress and results. See /data-deletion for instructions.

7. 公共机构请求与政策更新 / Public authority requests and updates

收到公共机构的数据请求时，平台先核验来源、权限和法律依据；对不合法或范围过宽的请求提出质疑；仅在合法必要范围内披露；记录请求、决定、理由和实际披露范围。本文更新会在本页公布，并标明生效日期。

For public authority requests, the platform verifies the source, authority and legal basis, challenges unlawful or overbroad requests, limits disclosure to what is lawfully necessary, and records the request, decision, reasoning and disclosure scope. Updates are published here with an effective date.