Alpha Squad Privacy Policy

Last updated: October 8, 2026 Effective: October 8, 2026

中文

Alpha Squad (外贸A队, “Alpha Squad” or the “Service”) includes the Alpha Squad web version and the iOS, Android and HarmonyOS Apps. We process your personal information in accordance with the Personal Information Protection Law of the People’s Republic of China and other laws and regulations, and have formulated this policy accordingly.

1. Who We Are

The personal information handler for this service is Hangzhou Youyexingzhou Technology Co., Ltd. (杭州幽夜行舟科技有限公司). Contact email: leon@alphasquad.cn

2. What Information We Collect

2.1 Information you provide

  • Registration information: mobile phone number and password (stored encrypted); nickname and invitation code are optional
  • Business data: customer records, emails, website content and the like that you create in the product
  • Personal WeChat binding: when you bind your personal WeChat to the Service to receive reminders and talk with AI employees through WeChat, we store the identifier used to recognize your WeChat identity and the related conversation content
  • Files you upload: product images, documents and the like that you upload by taking photos or by choosing from your photos or files
  • Feedback: bug reports and suggestions you submit

2.2 Information collected automatically

  • Device information: browser, operating system, IP address
  • Device information when you use the App:
    • A device identifier randomly generated when the App is installed (not a hardware identifier such as the IMEI; it changes if you reinstall the App)
    • Phone model name, system version and App version (the system version and App version are also written to server operation logs, which are purged periodically)
    • Push token (the “delivery address” the push service assigns to this phone, used to deliver reminders to your phone)
  • Usage logs: login times, operation records, error logs
  • Approval records: when you approve or reject a pending item directly from a notification, we record the device used and the time
  • AI-generated content logs: for content you ask AI employees to generate that is sent or published externally without a visible “AI-generated” notice (for example, business letters to overseas buyers, copy published to your website, social media posts, ad creatives, and product descriptions in external stores), and for AI-generated images and videos you download without an explicit label, we retain the related logs; see Section 8 for the retention period

2.3 What we do not actively collect

Sensitive information such as national ID numbers and bank card numbers; your biometric characteristics such as your face or fingerprints (face / fingerprint verification in the App is completed by the phone system on the device, and we only receive the result “verified or not verified”, see 2.4); your location information (unless a feature requires it).

2.4 Permissions the App requests

Every permission is requested only the first time you use the related feature, not all at once when you open the App. You can turn them on or off at any time in your phone’s system settings.

CameraTaking photos of products and documents and uploading them directlyThe first time you tap “Take photo”You cannot upload by taking photos; you can still upload by choosing from your photos or files
Photos and filesChoosing images and documents from your photos or phone files to uploadThe first time you choose from your photos or files (some systems use the built-in system picker, which needs no separate authorization)You cannot upload by choosing from your photos or files; you can still upload by taking photos
NotificationsReminding you of items awaiting approval and of review progress updatesThe first time the App needs to send you a reminderYou will not receive reminders and cannot approve or reject directly from a notification; you can still handle everything normally after opening the App
Face / fingerprint (biometrics)Before you approve a pending item from a lock-screen notification, the phone system confirms on the device that it is youThe first time you approve from a notificationYou cannot approve directly from a notification; you can still handle everything normally after opening the App
Microphone and speech recognition (iPhone)Entering text by voice in conversationsThe first time you tap voice inputYou cannot use voice input; you can still type
NetworkConnecting to the Alpha Squad service to send and receive dataWhen you first open the App (some phone systems show a prompt)The App cannot be used

About face / fingerprint: verification is completed entirely by the phone system on the device. We do not collect, upload or store any of your biometric information, and we have no access to it.

3. How We Use Your Information

  • To provide and maintain the service
  • To fix bugs and improve the product
  • To communicate with you (service-related matters only)
  • To push work reminders to your phone: only work to-dos and review progress messages, never advertising
  • To manage your login devices: showing the phones you have logged in on in the “Login devices” list, alerting you when a new device logs in, and letting you sign a device out remotely
  • To comply with laws and regulations

4. Information About Your Customers (Entrusted Processing)

If you enter the email addresses or contact details of your foreign-trade customers into this service, we act as an entrusted processor:

  • We process such information only according to your instructions
  • We will not use it for any other purpose (including not for model training)
  • We will not share it with other users
  • We protect such information with security measures including encrypted transmission and access isolation
  • In the event of a data breach, we will notify you promptly and assist you in fulfilling your external notification obligations
  • When your customers exercise rights of access, correction, deletion and the like against you, we provide the necessary assistance (exporting, correcting or deleting the corresponding data)
  • After you stop using the service or delete the corresponding data, we delete it accordingly and do not retain it separately
  • You must ensure that you have obtained authorization from the individuals to whom such information relates

If your customers are located outside mainland China, their jurisdiction may impose additional requirements applicable to you (as the personal information handler); as the entrusted processor, we will cooperate with you in fulfilling those obligations as set out above.

5. Where Data Is Stored

Your personal information is stored on servers in Hong Kong. We assume the same protection responsibilities as we would within mainland China and comply with the cross-border transfer duties described below.

Legal basis: pursuant to Article 5, paragraph 1, items (1) (necessary to conclude or perform a contract to which the individual is a party) and (4) (cumulative transfer of personal information of fewer than 100,000 individuals since January 1 of the current year, excluding sensitive personal information) of the Regulations on Facilitating and Regulating Cross-border Data Flows (《促进和规范数据跨境流动规定》, March 2024), transfers meeting the applicable conditions may be exempt from the data export security assessment, personal information export standard contract, and personal information protection certification requirements. Item (4) applies only to data handlers other than critical information infrastructure operators.

Under Article 39 of the Personal Information Protection Law (PIPL), when providing personal information overseas, the individual must be informed of the overseas recipient's name, contact details, processing purposes and methods, categories of personal information, and the methods and procedures for exercising their rights with the overseas recipient, and the individual's separate consent must be obtained.

Under Article 10 of the Regulations on Facilitating and Regulating Cross-border Data Flows, these exemptions do not remove the duties to inform individuals, obtain their separate consent, and conduct a personal information protection impact assessment as required by law.

6. Who We Share Data With

6.1 Principle of no third-party sharing: we do not sell or share your personal information with third parties.

6.2 Necessary third-party processing

  • Third-party AI data processing notice

    Depending on the features you use, we send the conversations you enter and relevant history, uploaded documents, images, audio or video, and the company, product, customer communications, knowledge base and business information needed to complete your tasks. We send only the content needed for the task and do not proactively send login passwords or payment credentials. Please avoid including unnecessary sensitive personal information in your input or uploads.

    This is used for AI employee conversations, information recognition and retrieval, text, image, video and voice-over generation, business analysis, and automatic or scheduled tasks you enable. The services used depend on the task and the platform's model configuration; backup models may be used when the primary model is unavailable.

    • Alibaba Cloud Model Studio (阿里云百炼: Qwen / 通义千问, Qwen-Image 3.0, Qwen speech synthesis / 通义千问语音合成, speech recognition and embedding models): Conversation, writing and analysis, backup image generation, speech to text, video narration voice-over, and information recognition and retrieval
    • DeepSeek (深度求索): Backup conversation, incoming message classification, customer profile organization and outbound content review
    • Volcano Engine (Doubao Seedream 5.0 Flash / 豆包 Seedream 5.0 Flash): Image generation, including product images and posters
    • MiniMax (MiniMax-H3, called via Metaso / 秘塔): Video generation

    System voice input on iPhone is recognized by the Apple system. Separate account consent is required before third-party AI processing; declining leaves non-AI features available.

    These providers' retention of request content and use of it for training depend on their terms and the configuration of the service used.

  • Web search and web page reading — when AI employees look things up, search keywords or web page addresses are sent to search services such as Bocha (博查) and Tavily (overseas); when a web page cannot be read directly, it is read through Firecrawl (overseas)
  • Cloud services (Alibaba Cloud) — used solely to operate the service
  • App push messages — see 6.5

6.3 Legal obligations: when lawfully required by law enforcement authorities or courts.

6.4 Transfer upon change of operating entity

If the operating entity of this service changes in the future due to a merger, division, dissolution, declaration of bankruptcy or similar reason, your information will be transferred accordingly, and the recipient will continue to perform this policy. If the recipient changes the original purpose or method of processing, it will obtain your consent again.

6.5 Third-party SDK used by the App

To deliver work reminders to your phone, the App integrates the Alibaba Cloud Mobile Push SDK (provider: Alibaba Cloud). Reminders are delivered according to your phone system: iPhones through the Apple Push Notification service, HarmonyOS phones through Huawei Push Kit, and Android phones through Alibaba Cloud Mobile Push’s own channel. The information collected for this is the device identifier and push token listed in 2.2, used only to deliver reminders to your phone.

7. How We Protect Your Information

  • Encryption in transit (HTTPS)
  • Encryption at rest (password hashing, encryption of sensitive fields)
  • Access control (only authorized personnel can access it)
  • Protection for lock-screen approval: before you approve a pending item from a notification, the phone system asks you to unlock or verify your face / fingerprint; every approval records the device and time so that you can check it

8. Retention Periods

  • While your account exists: all information is retained
  • After account deletion: your account and associated data are deleted from our online systems immediately; data in backup copies is only stored securely, no longer used, and automatically purged within 30 days (backups of AI employees’ long-term memory are purged within 90 days)
  • Backup copies: off-site backups of the database and files are retained for at most 30 days, and backups of AI employees’ long-term memory for at most 90 days; all are automatically purged by the object storage lifecycle policy
  • Records the law requires us to keep: AI-generated content logs that must be retained under the Measures for Labeling AI-Generated Synthetic Content (《人工智能生成合成内容标识办法》) are kept, even if you delete your account, until the statutory period (no less than 6 months) expires and are then deleted; during that time they are only stored and not used for any other purpose. These logs include the account’s mobile phone number, used to identify to whom the content was provided
  • App device information: when you log out on a phone, sign it out remotely from another device, or delete your account, that device’s device information and push token are deleted immediately
  • AI-generated content logs: retained for no less than 6 months, then deleted

9. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your information
  • Withdraw your consent: choose “Withdraw privacy consent” in Settings → Security and confirm. We sign you out, clear this device’s login state and local caches, stop App push notifications, and block subsequent AI requests, including queued jobs, scheduled tasks and follow-up calls in multi-turn conversations. Requests already sent to third-party model providers cannot be recalled. Server data is retained; use the existing account deletion process to delete it. Sign in and agree again to restore the service.
  • Delete your account
  • Lodge a complaint

How to exercise them:

  • Delete your account: on the “Settings” home page on the web or in the App, tap “Delete account” and confirm as prompted. After deletion, your account and associated data are deleted as described in Section 8; your push tokens are cleared and all login devices are signed out at the same time. This cannot be undone
  • Turn off push: turn off Alpha Squad notifications in your phone’s system settings, or turn off push in the App’s “Settings”
  • Turn off permissions: turn off camera, photos, notifications and other permissions in your phone’s system settings; see 2.4 for the effects
  • Other rights: send an email to leon@alphasquad.cn

10. Minors

This service is not directed to minors under 18 years of age.

11. Changes to This Policy

If this policy changes materially, we will notify you by in-product notification and ask you to read the updated policy the next time you open the web version or the App; you can continue to use the service only after you agree.

12. Contact Us

Email: leon@alphasquad.cn