中文
1. 适用范围
本政策适用于 Luxury collection 在 Facebook Messenger 与 Meta Business Suite 中使用的 AI 回复建议服务。该服务为员工提供候选回复，不代表 Meta 提供或认可本服务。
2. 我们处理的数据
- 用于关联 Facebook 公共主页、客户和会话的平台标识符。
- 通过 Meta Webhook 收到的消息文本、时间、发送方角色和消息标识符。
- 附件的类型和数量，以及是否包含媒体或分享；我们不会下载附件、识别附件内容或执行 OCR。
- AI 候选回复、生成状态，以及员工选择、复制或填入候选回复的审计记录。
- 在得到单独授权时导入的离线历史记录；系统不会自动从 Meta 页面抓取旧聊天。
3. 处理目的与 AI 使用
我们使用这些数据识别当前会话、生成三条候选回复、保持服务可靠并记录人工操作。生成候选时，完成任务所必需的最少消息上下文可能发送给配置的 DeepSeek 服务提供商处理。
AI 生成的回复仅作为建议；员工必须在 Meta Business Suite 中审核并亲自点击发送。本服务不会自动向客户发送 Meta 消息。
4. 存储与安全
业务数据优先保存在运营方控制的本地 Windows 设备和 PostgreSQL 数据库中。我们采用访问限制、回环接口、受限公网入口、备份与恢复检查等措施降低未经授权访问、丢失或滥用风险。
5. 共享与披露
我们不会出售个人数据，也不会将消息用于第三方广告。数据只会在提供 Messenger 平台功能、生成 AI 候选回复、维护基础设施或遵守法律所必需的范围内，由 Meta、DeepSeek 及必要的基础设施服务商处理。
6. 保留与删除
数据仅在提供服务、处理争议、保障安全或履行法律义务所需期间保留。经核实的删除请求通常会在 30 天内处理；依法必须保留的数据除外。备份中的副本会随受控备份生命周期逐步清除。
7. 您的权利
您可以联系我们查询、更正或删除与本服务相关的数据，并可反对或限制适用的数据处理。我们可能要求提供最少必要信息，以核实请求人与相关会话的关系。
8. 未成年人
本服务面向与 Luxury collection 沟通的商业客户，不以未满 18 周岁的未成年人为目标。若发现误收未成年人数据，请联系我们删除。
9. 政策更新与联系
我们可能因产品、法律或安全要求更新本政策，并在本页公布新的生效日期。如有隐私问题，请发送邮件至 15767804422@163.com。
English
1. Scope
This policy applies to the Luxury collection AI reply-assistance service used with Facebook Messenger and Meta Business Suite. The service provides reply candidates to staff and is not provided or endorsed by Meta.
2. Data we process
- Platform identifiers needed to associate a Facebook Page, customer, and conversation.
- Message text, time, sender role, and message identifiers received through Meta webhooks.
- Attachment type and count and whether media or a share is present. We do not download attachments, recognize their contents, or perform OCR.
- AI reply candidates, generation status, and audit events when staff select, copy, or fill a candidate.
- Offline history imported only with separate authorization. The service does not automatically scrape old chats from Meta pages.
3. Purpose and AI processing
We use this data to identify conversations, generate three reply candidates, maintain reliability, and audit human actions. The minimum message context necessary for that task may be sent to the configured DeepSeek provider for processing.
AI replies are suggestions only. A staff member must review them in Meta Business Suite and personally click Send. The service does not automatically send Meta messages to customers.
4. Storage and security
Business data is stored primarily on a locally controlled Windows device and in PostgreSQL. Access controls, loopback-only interfaces, restricted public ingress, and tested backup and recovery procedures are used to reduce unauthorized access, loss, and misuse.
5. Sharing and disclosure
We do not sell personal data or use messages for third-party advertising. Meta, DeepSeek, and necessary infrastructure providers process data only as needed to provide Messenger functionality, generate AI candidates, maintain infrastructure, or comply with law.
6. Retention and deletion
Data is retained only as needed to provide the service, resolve disputes, protect security, or meet legal duties. Verified deletion requests are normally processed within 30 days unless retention is legally required. Backup copies expire through the controlled backup lifecycle.
7. Your rights
You may ask to access, correct, or delete data connected with this service and may object to or restrict processing where applicable. We may request the minimum information needed to verify your relationship to the relevant conversation.
8. Children
This service is intended for business customers communicating with Luxury collection and is not directed to children under 18. Contact us if you believe a child’s data was collected by mistake.
9. Changes and contact
We may update this policy for product, legal, or security reasons and will publish the new effective date here. For privacy questions, email 15767804422@163.com.