CloudArc（以下简称「本应用」）由 CloudArc 提供。我们重视您的隐私，本政策说明我们如何对待您的数据。
一、数据存储原则（本地优先）
1.1 本应用采用「本地优先」设计。您的以下数据默认仅存储在您使用本应用的设备本地（如策略配置、回测记录、数据管理设置、API 配置等），我们不会主动收集或上传至我们的服务器。
1.2 本地数据存储采用本机数据库（如 SQLite）及本地文件，您可自行备份或删除。
二、我们可能接触到的数据
2.1 您主动填写的 API 密钥（如数据源 API、大模型 API 等）：仅保存在您设备本地的系统钥匙串（macOS 钥匙串 / Windows 凭据管理器），用于本应用向相应服务发起请求。我们不会收集、存储或查看您的 API 密钥明文；密钥不会上传至我们的服务器。
2.2 当您使用需要网络的功能时（如行情数据、新闻、AI 分析等），本应用会向以下类型的第三方发送请求，具体以您配置的数据源为准：
- 数据源：第三方数据源或您配置的数据接口；
- 大模型服务：如您自行配置的大模型兼容接口。
上述请求由您的设备直接发往相应服务商，其数据处理遵循各服务商之隐私政策。
2.3 我们不会收集您的姓名、邮箱、手机号等个人身份信息，除非您在未来使用需账号登录的功能并自愿提供。
2.4 产品改进分析：为改进 CloudArc，本应用可能发送匿名或经脱敏的产品使用与诊断信息（例如功能使用情况、订阅相关状态、设备与应用版本、故障相关技术信息）。我们不会因此收集您的 API 密钥，也不会上传策略代码、对话原文、行情明细或本地数据库内容。仅在应用启用相关分析能力时才会发送；未启用时不会发送此类信息。
二之一、第三方大模型（AI）服务（数据披露与同意）
当您使用本应用中的 AI 对话、AI 分析等功能时：
- 我们会将您输入的对话内容、消息文本及相关上下文发送至您在本应用「模型设置」中所配置的大模型服务商（具体以您配置为准）。上述数据由您的设备直接发往该服务商，我们不经手存储或转发。
- 我们会在您首次使用 AI 对话前明确说明上述数据发送对象与用途，并在您同意后再发送。
- 我们不会控制上述第三方服务商对数据的使用与保留，其数据处理以该服务商的隐私政策为准。我们建议您在使用前查阅所配置服务商的隐私政策。
- 本政策其他条款中关于「我们可能接触到的数据」「数据来源与合规」等同样适用于上述场景。
简要说明：使用 AI 功能时，您的输入会发往您自行配置的大模型服务商；应用内会在首次使用前征得您的同意，并可在设置中查看完整隐私政策。
三、数据来源与合规
3.1 行情、资讯等数据可能来自第三方数据源（包括但不限于默认数据源或您配置的数据服务）。使用这些数据时，请您遵守相关数据源的使用条款与合规要求。
3.2 本应用不向第三方出售您的个人数据，也不将本地存储的数据用于广告定向或与无关第三方共享。
四、权限与安全
4.1 本应用仅在您授权或系统要求范围内使用网络、本地文件访问等权限，用于实现数据下载、导出、配置存储等功能。
4.2 我们建议您妥善保管本机系统钥匙串中的 API 密钥及本地数据，避免设备丢失或未授权访问带来的风险。卸载应用不一定自动清除钥匙串条目；您可在应用内删除对应密钥配置。
五、政策更新与联系
5.1 我们可能适时更新本政策，更新后的版本将在应用内或本页面发布。继续使用本应用即视为接受更新后的政策。
5.2 如您对本政策有疑问，请通过邮箱 cloudarcquant@gmail.com 与我们联系。
CloudArc (the “App”) is provided by CloudArc. We take your privacy seriously, and this policy explains how we handle your data.
1. Local-First Data Storage
1.1 The App is built local-first. By default, your data — including strategy configurations, backtest records, data-management settings, and API configurations — is stored only on the device where you run the App. We don’t collect or upload this data to our servers.
1.2 Local data lives in an on-device database (such as SQLite) and local files. You can back it up or delete it at any time.
2. Data We May Handle
2.1 API keys you enter (for data-source APIs, AI model APIs, etc.) are stored only in your device’s system keychain (macOS Keychain / Windows Credential Manager) and used solely to let the App call the corresponding services. We never collect, store, or view your API keys in plaintext, and keys are never uploaded to our servers.
2.2 When you use features that need network access (such as market data, news, or AI analysis), the App sends requests to the following types of third parties, depending on how you’ve configured your data sources:
- Data sources: third-party data providers or data endpoints you configure;
- AI model services: for example, an AI model–compatible endpoint you configure yourself.
These requests go directly from your device to the relevant provider; each provider’s own privacy policy governs how it processes that data.
2.3 We don’t collect your name, email, phone number, or other personal information, unless you voluntarily provide it for a future feature that requires sign-in.
2.4 Product improvement analytics: To improve CloudArc, the App may send anonymous or redacted product usage and diagnostic information (for example, feature usage, subscription-related status, device and app version, and technical details related to failures). We do not use this to collect your API keys, and we do not upload strategy code, conversation text, market data details, or your local database. Such information is sent only when analytics is enabled in the build; otherwise the App does not send it.
2a. Third-Party AI Model Services (Disclosure and Consent)
When you use AI chat or AI analysis features in the App:
- We send the conversation text you enter, along with related context, to the AI model provider you’ve configured under Model Settings (depending on your setup). This data goes directly from your device to that provider — we never store or relay it ourselves.
- Before you first use AI chat, we’ll clearly explain who receives this data and why, and we’ll only send it once you agree.
- We don’t control how that third-party provider uses or retains your data; their own privacy policy governs their data handling. We recommend reviewing your configured provider’s privacy policy before use.
- Other sections of this policy — including “Data We May Handle” and “Data Sources and Compliance” — apply equally here.
In short: When you use AI features, your inputs go to the model provider you configured. The App asks for consent before the first AI chat, and you can review this full policy in Settings.
3. Data Sources and Compliance
3.1 Market data, news, and similar content may come from third-party data sources (including default sources or ones you configure). When using this data, you’re responsible for complying with that source’s terms of use.
3.2 The App doesn’t sell your personal data to third parties, and doesn’t use locally stored data for ad targeting or share it with unrelated third parties.
4. Permissions and Security
4.1 The App only uses network access, local file access, and similar permissions within the scope you authorize or the system requires, to support features like data downloads, exports, and configuration storage.
4.2 We recommend safeguarding the API keys and local data stored in your device’s system keychain to reduce the risk from device loss or unauthorized access. Uninstalling the App may not automatically clear keychain entries — you can delete the corresponding key configurations from within the App.
5. Policy Updates and Contact
5.1 We may update this policy from time to time; updated versions will be published in the App or on this page. Continuing to use the App means you accept the updated policy.
5.2 If you have questions about this policy, contact us at cloudarcquant@gmail.com.