Privacy Policy

Last Updated: 30 December 2024

1. Introduction

Clouchie Limited (“Clouchie”) and Dalian Yunzhihui Technology Co., Ltd. (“Dalian Yunzhihui”) (collectively referred to as “we,” “us,” or “our”) are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our desktop application, Gatsbi (the “Software”), and our website (the “Website”). By accessing or using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Definitions

• “User” refers to any individual who accesses or uses the Software.
• “Personal Information” means any information relating to an identified or identifiable natural person.
• “AI Functionality” refers to the backend AI features developed by Clouchie Limited.
• “Front-End Functionality” refers to the front-end interface, local data storage, login and authentication, and file export functions developed by Dalian Yunzhihui Technology Co., Ltd.
• “AI Service Providers” are third-party artificial intelligence service providers, such as OpenAI, chosen by the User.
• “Transparent AI Services” are additional backend AI services used by the Software, which are transparent to the User.
• “Research Interests Description” refers to the description of research interests provided by the User during registration.
• “User Queries” refers to the content entered by the User within the Software, including but not limited to questions, prompts, and other inputs.
• “Payment Processor” refers to Stripe, the third-party service we use to process payments.

3. Information We Collect

3.1. Personal Information Provided by Users

• Account Registration Information:
  • Email Address: Collected as your account name during registration.
  • Password: Stored in encrypted form.
  • Research Interests Description:
    • Collected and stored during registration.
    • Users are required not to include any identity or personal privacy information in this text.
    • Used to generate research direction recommendations and other content.
  • Login Records: Dates and times of user logins for security, auditing, and compliance monitoring purposes.
  • Desensitized Device Identifiers: Device IDs collected in a desensitized form to monitor compliance with our Terms and Conditions, specifically the device usage limitations.
  • Payment Status: Whether the user has paid and the payment time (excluding payment account information), used for basic user access verification.

3.2. User Queries and Interactions

• User Queries:
  • While we do not collect or store User Queries of monthly and yearly subscription users on our servers, the queries you input into the Software will be sent to the AI Service Providers you have selected (e.g., OpenAI) to provide AI functionalities.
  • User Responsibility: Do not include personal or sensitive information in your User Queries.
• Critical Exception Logs:
  • We collect logs of critical exceptions that occur during software operation to maintain and improve service stability.
  • These logs may contain your query content and technical information about software errors when exceptions occur.
  • The logs are used only for debugging and improving service quality.

3.3. Cookies

• Usage of Cookies in the Software:
  • Our Software uses cookies solely to store your login information in order to provide a more convenient access experience.
  • These cookies may contain your user ID, username, or other necessary credentials for identification.
  • We do not use these cookies for tracking, advertising, or traffic analytics in the Software.
• Usage of Cookies in the Website:
  • Our Website also uses cookies to store your login information and enhance your browsing experience.
  • With your consent, we may employ additional cookies for analytics, traffic analysis, advertising, or other marketing-related purposes.
  • These optional cookies will only be enabled if you opt in through our cookie banner or settings in the Website. You can manage your cookie preferences or opt out at any time via your browser settings or our cookie consent tool.
  • Any data collected from these cookies is used to improve our services, measure performance, and better understand user behavior.

We do not collect or store sensitive personal data within cookies without your explicit consent.

3.4. Information We Do Not Collect

• API Keys:
  • API keys provided by you for third-party AI services are stored locally on your device and are not collected or stored by us.

3.5. Data Collection Policy for Trial Users

Clouchie Limited reserves the right to: - Collect and store User Queries submitted during the 1-day trial period - Collect and store AI-generated responses to these queries

4. How We Use Your Information

4.1. Dalian Yunzhihui

• Providing Front-End Services:
  • To operate, maintain, and provide the front-end functionalities of the Software, including login, authentication, local data storage, and file export features.
• Generating Recommendations:
  • Use your Research Interests Description to generate research direction recommendation lists and other content. This is done by sending the description to certain Transparent AI Services.
  • User Responsibility: You are required not to include any identity or personal privacy information in your Research Interests Description.
• Compliance Monitoring:
  • Use login records and desensitized device identifiers to monitor and enforce compliance with our Terms and Conditions, specifically the device usage limitations.
• Access Verification:
  • Use payment status information to verify user access permissions.
• Security and Fraud Prevention:
  • To detect and prevent fraudulent activity, unauthorized access, and other illegal activities.

4.2. Clouchie

• Service Improvement:

  • Enhance response accuracy and relevance
  • Optimize system performance and stability
  • Improve user experience and interface design
  • Identify and fix technical issues

• Quality Assurance:

  • Monitor system output quality
  • Evaluate AI model performance
  • Detect and prevent potential misuse
  • Ensure compliance with our content policies

• Product Development:

  • Guide new feature development
  • Refine existing functionalities
  • Develop specialized solutions for specific use cases
  • Improve AI model training

• Research Purposes:

  • Advance AI technology capabilities
  • Study user interaction patterns
  • Analyze usage trends and patterns
  • Support academic research collaborations

4.3. Communication

• Service or Transactional Emails
  • We use your email address to send important service-related communications, such as updates to the Software, security alerts, account notifications (e.g., password resets, login confirmations), and support messages.
  • These emails are considered essential for providing our services. Therefore, you may not opt out of receiving these mandatory service notifications unless you stop using the Software entirely.
• Marketing or Promotional Emails
  • If have specifically opted in to receiving promotional or marketing communications during registration or through other voluntary means, we may use it to send you promotional or marketing communications related to our products, features, or services.
  • These emails may include special offers, upcoming events, new feature announcements, or other relevant information.
  • You have the right to opt out (unsubscribe) from these marketing emails at any time by clicking the “unsubscribe” link provided in each message.
  • Once you opt out, we will no longer send you marketing or promotional emails; however, you may still receive essential service or transactional emails as described above.
• Updates to Terms & Policies
  • If there are significant updates to our Terms & Conditions or Privacy Policy, we reserve the right to notify you via email.
  • Such notifications may not offer an unsubscribe option if they are critical to informing you of changes affecting your legal rights or obligations under our Terms & Conditions.
• Opt-Out and Preference Management
  • In addition to the unsubscribe links in marketing emails, you may also manage your communication preferences, including opting out of promotional emails, by contacting us directly.

5. How We Share Your Information

5.1. Sharing with Third Parties

• AI Service Providers (Chosen by User):

  • Data Shared: Your User Queries are sent to the AI Service Providers you have selected (e.g., OpenAI) to provide AI functionalities within the Software.
    • Purpose: To generate responses and provide AI services based on your queries.
    • User Responsibility: Do not include personal or sensitive information in your User Queries.
  • Data Shared: Your Research Interests Description is sent to the AI Service Providers you have selected (e.g., OpenAI) to generate research direction recommendations and other content.
    • Purpose: To provide you with personalized content and recommendations.
    • User Responsibility: Do not include any identity or personal privacy information in your Research Interests Description.

• Third-Party Terms: You are responsible for reviewing and agreeing to the AI Service Providers’ privacy policies and terms:

  • OpenAI Privacy Policy: https://openai.com/policies/privacy-policy
  • Together Computer Inc Privacy Policy: https://www.together.ai/privacy

5.2. Legal Requirements

• Compliance with Laws:
  • We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Protection of Rights:
  • To protect and defend our rights or property, or to prevent wrongdoing.

5.3. Business Transfers

• Merger or Acquisition:
  • In the event of a merger, acquisition, or asset sale, your personal information may be transferred.

5.4. Consent

• User Consent:
• We may share your information with third parties if you have given explicit consent.

6. Data Storage and Security

6.1. Data Storage Location

• Dalian Yunzhihui:
  • Your data is stored on secure servers provided by Amazon Web Services (AWS) and Alibaba Cloud, located in the United States and Europe regions.

6.2. Security Measures

• AWS Compliance and Security:
  • AWS provides a secure and compliant infrastructure for data storage, adhering to industry-standard security protocols and certifications such as ISO 27001, SOC 2, and GDPR compliance.
• Alibaba Cloud Security & Privacy Compliance:
  • Alibaba Cloud maintains rigorous security standards and holds multiple international certifications including ISO 27001, SOC 1/2, and CSA STAR, offering secure cloud computing services with comprehensive privacy protection and regulatory compliance across global markets.
• Encryption:
  • We use encryption technologies to protect your data both in transit and at rest.
• Access Controls:
  • We implement strict access controls and monitoring to prevent unauthorized access to your data.

6.3. No Absolute Security Guarantee

• While we strive to protect your personal data, we cannot guarantee its absolute security due to inherent risks associated with data transmission and storage over the internet.

7. User Rights and Choices

7.1. Access and Correction

• For Account and Front-End Data (Dalian Yunzhihui):
  • You may access and update your account information at any time by logging into your account or by contacting us at gatsbi@dlyzh.com.

7.2. Data Deletion

• Account Deletion:
  • You may request deletion of your account and personal data by contacting Dalian Yunzhihui at gatsbi@dlyzh.com.

7.3. Opt-Out Options

• Marketing and Service Communications:
  • By default, we may send service content updates and other product-related notifications to your registered email address.
  • Unsubscribe: You have the right to unsubscribe from these messages at any time by following the instructions provided in the emails.

8. International Data Transfers

• Data Transfer Notice:
  • Your information may be transferred to—and maintained on—servers located outside of your state, province, country, or other governmental jurisdiction, including servers operated by AWS and the servers of the AI Service Providers (e.g., OpenAI).
• Compliance with Laws:
  • We ensure compliance with applicable data protection laws regarding international data transfers, including the use of Standard Contractual Clauses and adherence to GDPR requirements.

9. Retention of Data

9.1. Dalian Yunzhihui

• Account Information:
  • Retained as long as your account is active.
• Login Records and Desensitized Device Information:
  • Retained for up to 24 months for security and compliance monitoring purposes.
• Research Interests Description:
  • Retained as long as necessary to provide you with recommendations and other related services.

9.2. Clouchie

• User Queries & AI Generated Contents:
  • Retained without a deletion timeline.

10. Children’s Privacy

• Not Intended for Children:
  • Our services are not intended for individuals under the age of 18.
• Parental Consent:
  • We do not knowingly collect personal information from children under 18 without parental consent.

11. Cookies and Tracking Technologies

11.1. Use of Cookies

• Our Software uses cookies to store your login information to provide a more convenient access experience.
• These cookies are used only to remember your username.
• We do not use cookies for tracking or advertising purposes.

11.2. User Choices

• Cookie Management:
  • You can manage or disable cookies through your device or browser settings.
• Impact of Disabling Cookies:
  • Please note that disabling cookies may affect the functionality of the Software, including your ability to stay logged in.

12. Data Security Enhancements

12.1. Additional Security Measures

• Access Logs: We maintain logs of access to your account to detect suspicious activities.
• Encryption: All data transmissions are secured using industry-standard encryption protocols.

12.2. Payment Information Security

• Handled by Stripe: Payment information is securely processed by Stripe.
• No Liability: We disclaim liability for any data breaches or unauthorized access involving Stripe.

12.3. No Guarantee

• We cannot guarantee absolute security and are not liable for breaches beyond our control.

13. User Notifications

• Compliance Alerts:
  • If unusual activity is detected on your account, such as access from more than three devices, we may notify you to verify the activity.
• Account Suspension:
  • In cases of violation of our Terms and Conditions, we may suspend your account. You will be notified of such actions via email.

14. Your Choices Regarding Device Data

14.1. Opt-Out

Collection of desensitized device identifiers is necessary for compliance and security purposes. If you do not agree with this, you may choose to discontinue using our services.

14.2. Access and Correction

You may request information about the device data we have collected about you by contacting us at gatsbi@dlyzh.com.

15. Legal Basis for Processing (Under GDPR)

If you are a resident of the European Economic Area (EEA), we rely on the following legal bases for processing your personal data:

15.1. Dalian Yunzhihui

• Contractual Necessity:
  • Processing is necessary for the performance of a contract with you.
• Legitimate Interests:
  • Processing of your Research Interests Description is necessary for our legitimate interests in providing personalized recommendations and improving our services.
• Consent:
  • We rely on your consent for storing cookies on your device.

15.2. Clouchie

• Legitimate Interests:
  • Processing of your User Queries is necessary for our legitimate interests in:
    • Providing and improving our AI services
    • Developing new features and capabilities
    • Ensuring system security and stability
    • Preventing misuse and abuse
    • Conducting research and development
    • Training and refining AI models
    • Maintaining service quality standards
    • Creating specialized industry solutions

16. Compliance with Laws

• Legal Requirements:
  • We comply with all applicable data protection laws and regulations, such as GDPR and CCPA.

17. Changes to This Privacy Policy

17.1. Notice of Changes

We may update our Privacy Policy from time to time. Changes will be posted on this page.

17.2. Effective Date

Changes become effective when they are posted on this page.

17.3. User Consent

Continued use of our services after changes indicates acceptance of the new policy.

18. Contact Information

18.1. Dalian Yunzhihui Technology Co., Ltd.

• Email: gatsbi@dlyzh.com
• Address: 202-1, 3 Gaoxin Street, High-Tech Industrial Park, Dalian, 116085, China

18.2. Clouchie Limited

• Email: gatsbi@clouchie.ai
• Address: 55 Baker St, London, W1U 8EW, United Kingdom

19. User Responsibilities

19.1. Accuracy of Information

You are responsible for providing accurate personal information.

19.2. Personal or Sensitive Information in User Queries and Research Interests

• Do not include any identity or personal privacy information in your Research Interests Description or User Queries.
• We process this information by sending it to certain Transparent AI Services and your chosen AI Service Providers to generate personalized recommendations and content.

20. Third-Party Services

20.1. AI Service Providers

• User Choice:
  • You may choose from a list of AI service providers (e.g., OpenAI).
• API Keys:
  • You provide API keys for your chosen AI service provider, which are stored locally on your device. We do not collect these keys.
• Data Sent:
  • Your User Queries are sent to the AI Service Providers you have selected to provide AI functionalities.
• Third-Party Terms:
  • You are responsible for reviewing and agreeing to the third-party service’s privacy policies and terms.
    • OpenAI Privacy Policy: https://openai.com/policies/privacy-policy
    • Together Computer Inc Privacy Policy: https://www.together.ai/privacy

20.2. Payment Processor (Stripe)

• Direct Collection:
  • Payment information is collected directly by Stripe when you make payments.
• Privacy Policy:
  • Please review Stripe’s Privacy Policy for more information.

21. Links to Other Websites

• No Third-Party Links:
  • Our Software and Website do not contain links to external websites.

22. Data Breach Notification

22.1. Obligation to Notify

In the event of a data breach, we will notify you and relevant authorities as required by law.

22.2. Timeframe

Notifications will be made promptly, within the timeframes required by applicable laws.

23. Severability

• Independent Provisions:
  • If any provision of this Privacy Policy is held to be invalid or unenforceable, such provision shall be severed, and the remaining provisions shall remain in effect.

24. Entire Agreement

• Complete Understanding:
  • This Privacy Policy constitutes the entire agreement between you, Clouchie Limited, and Dalian Yunzhihui Technology Co., Ltd. regarding your personal information.

25. Consent

• User Agreement:
  • By using our Software and services, you consent to this Privacy Policy.

By using our Software and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.