1. 我们处理哪些信息

Atelier 在当前浏览器保存笔记、日程、待办、网站、阅读内容和设置，以提供工作台与离线使用。登录后，还会处理账号邮箱、内部用户标识、登录会话以及必要的安全和运行记录。

你允许相应 Chrome 权限后，扩展可在本机读取、展示和管理浏览器书签或历史。原始浏览历史和原生书签树不随账号同步；你主动保存进 Atelier 的网站、来源和阅读内容属于工作区内容。

2. Google 登录只用于识别账号

选择 Google 登录时，Atelier 仅请求 openid、email 和 profile 范围，用于验证身份、获取邮箱和基本账号资料，并建立 Atelier 登录会话。Google 密码由 Google 处理，Atelier 不收集你的 Google 密码。

这次登录不请求 Gmail、Google 日历或 Google Drive 的访问权限，也不会因登录就读取你的邮件、日历事件或云端文件。Google 登录资料用于账号识别、登录管理和必要的安全处理。

3. 登录后的同步与暂停

Atelier 使用 Supabase 提供账号认证、数据库和私有存储。在扩展内登录后，这台设备默认同步允许的笔记、日程、待办、主动保存的网站、阅读来源、收藏和适用设置。已在本机为当前账号保存的暂停选择会继续有效；新设备没有该选择时默认开启同步。

启用同步时，自定义背景先在本机重新绘制并压缩为不超过 500,000 字节的 WebP，再进入当前账号的私有云存储，并保留设备缓存。原始图片文件和原有元数据不上传，背景图片不发送给 AI。

可在「设置 → 账号与订阅 → 同步设置」暂停这台设备的同步。暂停保留本机内容和已有云端记录，不会删除云数据，也不改变其他设备的选择。个人 DeepSeek Key、原始浏览历史、原生书签树、临时页面缓存和调试任务不进入账号同步。

不同账号使用独立工作区；切换账号不会自动合并另一个账号的内容。需要跨账号转移时，必须取得明确授权并完成账号核验。

4. AI 请求与自己的 Key

所有 AI 都需要登录。使用 AI 或配置的自动整理功能时，会向 DeepSeek 发送该功能所需的信息，例如安排描述、受限长度的笔记内容、分类标签、阅读偏好、选定的来源或文章。你可以在设置中管理 AI 连接与自动功能；云同步不等于把全部笔记发给 AI。

使用自己的 DeepSeek Key 时，Key 按账号保存在当前设备，请求从设备直接发送给 DeepSeek，费用由你的 DeepSeek 账号承担。Key 不进入云同步或数据导出；你可以在 AI 设置中移除它。本机保存不是系统钥匙串，也不代表模型在本机运行。

使用 Pro 内置 AI 时，请求通过 Atelier 服务端进行身份、权限与用量检查后发送给 DeepSeek；产品共用凭据保存在服务端。内置 AI 到期或受限不会静默切换到你的个人 Key。AI 供应商的处理也适用其服务规则，请只提交你有权处理的内容。

5. 其他服务与必要记录

邮箱登录使用事务邮件服务发送验证码。天气功能会向天气或地理编码服务发送你选择的城市或城市级位置；读取公开网站和阅读来源时，会与该网站建立连接。

如果你使用订阅功能，付款资料在 Creem 托管结账中处理。Atelier 保留核验权益与对账所需的客户、订单和订阅状态，不收集或保存完整银行卡号。

为运行服务、保护账号、防止滥用和计算容量，必要记录可能包含账号标识、操作时间、请求结果、同步版本及 AI 用量。这些信息用于提供和维护你选择的服务。

6. 导出、注销与保留

账号页提供本机与云端数据副本导出；个人 Key 和登录凭据被排除。笔记也可单独导出为 Markdown。你可以删除界面中支持删除的条目，或在账号页申请注销。

注销需要近期身份验证及确认当前邮箱；尚未取消的自动续费、待处理付款或无法确认的账单须先处理。成功后，服务会清理账号云端内容和当前设备该账号的副本。注销不代替取消订阅或申请退款。

其他离线设备的副本、你已下载的文件、供应商记录、备份和必要技术清理记录不保证立即全部消失。为运行、安全或依法保存所需的信息可能继续保留，第三方记录按其适用规则处理。如需协助导出、删除或处理隐私请求，请联系 [email protected]。

7. 安全与数据选择

Atelier 使用 HTTPS 传输、账号权限与按用户隔离的访问控制。目前不提供端到端加密或零知识保证；服务商可能在不同地区处理数据。

你可以管理浏览器的可选权限、暂停设备同步、关闭自动 AI 功能、移除本机 Key、导出内容或申请注销。清理浏览器数据或卸载扩展可能影响本机副本，请先保存需要的内容。

8. 本网站与联系我们

本网站的页面、样式、脚本和品牌图由同源提供，不包含广告或分析脚本。账号页沿用扩展的同一套 Supabase 账号，支持 Google 或邮箱验证码登录，并读取已验证账号的邮箱、会员状态与必要的账单信息。网站与扩展各自保存登录会话；只在网站登录不会让扩展自动登录，也不会在网站同步笔记、网站或工作区设置，更不会开始试用或产生付款。

网站账号页会在当前浏览器保存登录会话及续期凭据，以维持你选择的登录状态；还会保存中英文偏好和仅用于验证码重发倒计时的时间戳。退出网站账号不请求退出扩展或其他设备。选择账单管理后会前往 Creem 托管页面；本站不收集或保存完整卡号。Google 和邮箱认证、账号与账单核验会连接对应服务。

隐私或产品问题请联系 [email protected]。本政策更新时，会在此页更新内容与日期。

1. Information we process

Atelier stores notes, plans, tasks, sites, reading content, and settings in your browser to provide the workspace and offline use. After sign-in, it also processes your account email, internal user identifier, login session, and necessary security and operational records.

With the corresponding optional Chrome permissions, the extension can read, display, and manage browser bookmarks or history locally. Raw browsing history and the native bookmark tree are not synced. Sites, sources, and reading content you choose to save in Atelier become workspace content.

2. Google sign-in identifies your account

When you choose Google sign-in, Atelier requests only openid, email, and profile to verify identity, obtain your email and basic account information, and establish an Atelier session. Google handles your Google password; Atelier does not collect it.

This sign-in requests no access to Gmail, Google Calendar, or Google Drive. Signing in does not let Atelier read your email, calendar events, or cloud files. Google account information is used for account identification, sign-in management, and necessary security processing.

3. Sync after sign-in and how to pause it

Atelier uses Supabase for authentication, its database, and private storage. Signing in to the extension enables supported notes, plans, tasks, saved sites, reading sources, favorites, and preferences to sync on this device by default. A saved off preference remains in effect for that account on this device; a new device without that preference defaults to sync on.

When sync is enabled, custom backgrounds are redrawn locally and compressed to WebP at no more than 500,000 bytes before entering private account cloud storage, with a device cache retained. The original image file and its original metadata are not uploaded. Background images are not sent to AI.

Pause this device in Settings → Account & subscription → Sync settings. Pausing keeps local content and existing cloud records; it does not delete cloud data or change other devices. Personal DeepSeek keys, raw browsing history, the native bookmark tree, temporary page caches, and debug tasks are not part of account sync.

Different accounts have separate workspaces. Switching accounts does not automatically merge another account’s content. Any cross-account transfer requires explicit authorization and account verification.

4. AI requests and your own key

All AI requires sign-in. When you use AI or configured automatic organization features, the information needed for that feature is sent to DeepSeek. It may include plan descriptions, bounded note content, category labels, reading preferences, or selected sources and articles. Manage AI connections and automatic features in Settings. Syncing does not send every note to AI.

With your own DeepSeek key, the key is stored for your account on this device. Requests go directly from your device to DeepSeek and are billed to your DeepSeek account. The key is excluded from cloud sync and data exports and can be removed in AI settings. Local storage is not an operating-system keychain and does not mean the model runs locally.

With Pro AI, requests go through Atelier’s server for identity, access, and usage checks before being sent to DeepSeek; shared credentials stay server-side. Expired or limited built-in AI does not silently use your personal key. The AI provider’s processing is also subject to its service rules. Submit only content you have the right to process.

5. Other services and necessary records

Email sign-in uses a transactional email service to deliver verification codes. Weather features send your chosen city or city-level location to weather or geocoding services. Reading public websites and sources also connects to those websites.

If you use subscription features, payment information is handled in Creem’s hosted checkout. Atelier keeps customer, order, and subscription information needed to verify access and reconcile billing, without collecting or storing full card numbers.

To operate the service, protect accounts, prevent abuse, and measure capacity, necessary records may include account identifiers, operation times, request outcomes, sync versions, and AI usage. This information supports and maintains the services you choose.

6. Export, account deletion, and retention

The Account page provides separate exports of local and cloud data. Personal keys and login credentials are excluded. Notes can also be exported individually as Markdown. Delete supported items in the interface or request account deletion from Account settings.

Account deletion requires recent identity verification and confirmation of your current email. Recurring billing that has not been canceled, pending payments, or unverified billing must be resolved first. On successful deletion, the service clears account cloud content and that account’s copy on the current device. Deletion does not replace subscription cancellation or a refund request.

Copies on offline devices, downloaded files, provider records, backups, and necessary technical cleanup records are not guaranteed to disappear immediately. Information needed for operations, security, or legal retention may remain; third-party records follow their applicable rules. For help with exports, deletion, or privacy requests, contact [email protected].

7. Security and your choices

Atelier uses HTTPS, account permissions, and access controls that separate users. It does not currently provide end-to-end encryption or a zero-knowledge guarantee. Providers may process data in different regions.

Manage optional browser permissions, pause device sync, turn off automatic AI features, remove your local key, export content, or request account deletion. Clearing browser data or uninstalling may affect local copies; save anything you need first.

8. This website and how to contact us

This website serves its pages, styles, scripts, and brand images from the same origin, without advertising or analytics scripts. The account page uses the same Supabase account as the extension for Google or email-code sign-in and reads the verified account email, membership status, and necessary billing information. Website and extension sessions are stored separately. Website sign-in does not sign the extension in, sync notes, sites, or workspace settings on the website, start a trial, or make a payment.

The account page stores its login session and refresh credentials in this browser to maintain your selected sign-in, plus a Chinese/English preference and a timestamp for the email-code resend countdown. Website sign-out does not request sign-out of the extension or other devices. Choosing billing management takes you to Creem’s hosted portal; this website does not collect or store full card numbers. Google/email authentication and account/billing verification connect to the corresponding services.

For privacy or product questions, contact [email protected]. When this policy changes, its content and update date will be revised here.