More Token（以下简称"我们"）尊重并保护您的隐私权。本隐私政策（"本政策"）说明我们在您使用 More Token（"服务"）时，如何收集、使用、存储和共享您的个人信息，以及您依法享有的相关权利。
More Token ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use More Token (the "Service"), and the rights available to you.
请您在使用本服务前仔细阅读本政策。使用本服务即表示您已阅读并同意本政策。我们可能不时更新本政策，如发生重大变更将通过邮件或站内通知提前告知您。
Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy periodically and will notify you of material changes via email or in-product notice.
1. 数据控制者Data Controller
本服务的数据控制者为：
The data controller for this Service is:
-
运营者名称：More Token（个人运营者）
Operator Name: More Token (Individual Operator)
-
注册国家/地区：中华人民共和国
Registered Country/Region: People's Republic of China
-
隐私联系邮箱：[email protected]
Privacy Contact Email: [email protected]
-
数据保护负责人（DPO）：暂未设立。有关个人信息保护的任何问题，请联系上述隐私联系邮箱。
Data Protection Officer (DPO): Not established. For any questions regarding personal information protection, please contact the privacy email above.
-
网站：https://more-token.top
Website: https://more-token.top
说明：More Token 是由一名依据中华人民共和国法律经营的个人运营者提供的 AI 服务平台。
Note: More Token is an AI service platform operated by an individual sole proprietor under the laws of the People's Republic of China.
2. 我们收集的个人信息Personal Information We Collect
2.1 您主动提供的信息Information You Provide Directly
| 类别Category |
具体信息Specific Information |
收集目的Purpose |
| 账户信息Account Info |
姓名、邮箱、密码（加密存储）Name, email, password (stored encrypted) |
创建和管理您的账户To create and manage your account |
| 支付信息Payment Info |
交易金额、支付状态、交易IDTransaction amount, payment status, transaction ID |
处理付款、开具收据、处理退款To process payments, issue receipts, handle refunds |
| 沟通记录Communications |
您发给客服的邮件、工单、反馈Emails, support tickets, and feedback you send us |
回应您的咨询和请求To respond to your inquiries and requests |
⚠️
支付卡数据说明：我们不存储完整卡号。所有支付卡数据由我们的 Merchant of Record 合作伙伴
Waffo Pancake（符合 PCI-DSS 标准）独家处理，不存储于 More Token 的服务器上。详见第 5 条。
⚠️ Payment Card Data: We do not store full card numbers. All payment card data is processed exclusively by our Merchant of Record partner, Waffo Pancake (PCI-DSS certified), and is not stored on More Token's servers. See Section 5.
2.2 我们自动收集的信息Information We Collect Automatically
| 类别Category |
具体信息Specific Information |
收集目的Purpose |
| 设备与网络Device & Network |
IP 地址、设备型号、操作系统、浏览器类型、时区IP address, device model, OS, browser type, time zone |
保障服务安全与兼容性To ensure service security and compatibility |
| 使用行为Usage Behavior |
页面访问、功能使用、操作日志、会话时长Page visits, feature usage, operation logs, session duration |
改进服务质量与用户体验To improve service quality and user experience |
| 日志数据Log Data |
请求时间、错误日志、性能数据Request time, error logs, performance data |
故障排查与性能监控Troubleshooting and performance monitoring |
3. 我们如何使用您的个人信息How We Use Your Personal Information
我们将您的个人信息用于以下目的：
We use your personal information for the following purposes:
-
提供服务：创建和管理账户，处理积分购买，提供 AI 功能访问。
Providing the Service: Creating and managing accounts, processing credit purchases, providing access to AI features.
-
账单与支付：处理交易、开具收据、处理退款和账单争议。
Billing & Payment: Processing transactions, issuing receipts, handling refunds and billing disputes.
-
安全保障：检测和防止欺诈、滥用、安全威胁。
Security: Detecting and preventing fraud, abuse, and security threats.
-
服务改进：分析使用趋势，优化功能和用户体验。
Service Improvement: Analyzing usage trends, optimizing features and user experience.
-
沟通通知：发送服务更新、安全通知、账单收据等必要信息。
Communications: Sending service updates, security notices, billing receipts, and other essential information.
-
法律合规：遵守适用法律法规的要求。
Legal Compliance: Complying with applicable laws and regulations.
3.1 处理的合法性基础（GDPR）Legal Basis for Processing (GDPR)
如您位于欧洲经济区（EEA），我们处理您个人信息的合法性基础包括：
If you are located in the European Economic Area (EEA), our legal bases for processing your personal information include:
-
合同履行：为履行您与我们之间的服务协议所必需的处理。
Performance of Contract: Processing necessary to perform our service agreement with you.
-
合法利益：为保障服务安全、防止欺诈、改进服务所必需的处理。
Legitimate Interests: Processing necessary for service security, fraud prevention, and service improvement.
-
同意：基于您明确同意的处理（如营销通讯）。您可随时撤回同意。
Consent: Processing based on your explicit consent (e.g., marketing communications). You may withdraw consent at any time.
-
法律义务：为遵守适用法律所必需的处理。
Legal Obligation: Processing necessary to comply with applicable law.
4. 我们如何共享您的个人信息How We Share Your Personal Information
我们不出售您的个人信息。
We do not sell your personal information.
我们仅在以下情况下共享您的个人信息：
We share your personal information only in the following circumstances:
| 共享对象Recipient |
共享信息Information Shared |
目的Purpose |
Waffo Pancake
Merchant of Record / 支付处理方 |
交易金额、支付状态、邮箱、账单信息Transaction amount, payment status, email, billing info |
支付处理、税务代收代缴、退款处理Payment processing, tax collection, refund handling |
第三方 AI 模型提供商
OpenAI / Anthropic / Google |
您提交的 AI 功能输入内容AI feature inputs you submit |
提供 AI 服务功能Providing AI service features |
云服务提供商
Cloud Service Providers |
账户数据、使用日志Account data, usage logs |
服务器托管、数据存储Server hosting, data storage |
法律要求
Legal Requirements |
依法需披露的信息Information required by law |
遵守法律法规、法院命令、监管要求Compliance with laws, court orders, regulatory requirements |
关于 Waffo Pancake：若订单由 Waffo Pancake 作为 Merchant of Record 处理，支付与账单相关个人数据还将按其隐私政策处理。当您通过 Waffo Pancake 结账时，支付卡号等敏感支付数据由支付处理方收集与处理，不会存储在我们的服务器上。Waffo Pancake 及其支付合作方可处理交易、税务、风控与退款相关数据。
About Waffo Pancake: If an order is processed by Waffo Pancake as Merchant of Record, payment and billing-related personal data will also be processed under its privacy policy. When you check out through Waffo Pancake, sensitive payment data such as card numbers is collected and processed by the payment processor and is not stored on our servers. Waffo Pancake and its payment partners may process transaction, tax, risk control, and refund-related data.
5. 支付处理Payment Processing
More Token 使用 Waffo Pancake 作为我们的 Merchant of Record 和支付处理方。
More Token uses Waffo Pancake as our Merchant of Record and payment processor.
-
Waffo Pancake 作为 Merchant of Record 处理所有交易，负责税务代收代缴、合规、发票开具和消费者沟通。
Waffo Pancake acts as the Merchant of Record for every transaction, handling tax collection, compliance, invoicing, and consumer communications.
-
您的支付卡数据由 Waffo Pancake 独家处理（符合 PCI-DSS 标准），不存储于 More Token 的服务器上。
Your payment card data is processed exclusively by Waffo Pancake (PCI-DSS certified) and is not stored on More Token's servers.
-
我们仅接收交易结果信息（如支付状态、交易ID），不接收完整卡号。
We only receive transaction result information (such as payment status and transaction ID), not full card numbers.
6. 数据保留Data Retention
我们根据以下原则保留您的个人信息：
We retain your personal information according to the following principles:
| 数据类型Data Type |
保留期限Retention Period |
| 账户信息Account Info |
账户注销后 90 天30 days after account deletion |
| 交易记录Transaction Records |
1 年（适用法律要求的税务/会计保存期限）1 years (as required by applicable tax/accounting law) |
| 使用日志Usage Logs |
最后活动后 30 天30 days after last activity |
| 沟通记录Communications |
最后沟通后 30 天30 days after last communication |
保留期限届满后，我们将删除或匿名化您的个人信息，除非适用法律要求我们继续保留。
After the retention period expires, we will delete or anonymize your personal information unless applicable law requires us to retain it longer.
7. 您的权利Your Rights
7.1 通用权利General Rights
无论您位于何处，您均享有以下权利：
Regardless of your location, you have the following rights:
-
知情权：了解我们如何收集和使用您的个人信息。
Right to Know: Understanding how we collect and use your personal information.
-
查阅权：请求查阅我们持有的您的个人信息。
Right to Access: Requesting access to the personal information we hold about you.
-
更正权：请求更正不准确或不完整的信息。
Right to Correct: Requesting correction of inaccurate or incomplete information.
-
删除权：请求删除您的个人信息（受法律保留要求限制）。
Right to Delete: Requesting deletion of your personal information (subject to legal retention requirements).
-
撤回同意权：如处理基于同意，您可随时撤回同意。
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
-
数据可携权：以结构化、通用、机器可读的格式获取您的数据。
Right to Data Portability: Obtaining your data in a structured, commonly used, machine-readable format.
7.2 GDPR 下的额外权利（EU/EEA 用户）Additional Rights Under GDPR (EU/EEA Users)
-
限制处理权：在特定情况下要求限制对您个人信息的处理。
Right to Restrict Processing: Requesting restriction of processing in certain circumstances.
-
反对处理权：反对基于合法利益或直接营销的处理。
Right to Object: Objecting to processing based on legitimate interests or direct marketing.
-
投诉权：向您所在国的数据保护监管机构投诉。
Right to Lodge a Complaint: Filing a complaint with your local data protection supervisory authority.
7.3 CCPA/CPRA 下的权利（California 用户）Rights Under CCPA/CPRA (California Users)
-
知情权：了解我们收集、使用、披露或出售的个人信息类别和具体内容。
Right to Know: Understanding the categories and specific pieces of personal information we collect, use, disclose, or sell.
-
删除权：请求删除我们收集的您的个人信息。
Right to Delete: Requesting deletion of personal information we have collected from you.
-
拒绝出售/共享权：拒绝出售或共享您的个人信息。我们不出售您的个人信息。
Right to Opt-Out: Opting out of the sale or sharing of personal information. We do not sell your personal information.
-
不受歧视权：行使隐私权不会导致服务或价格上的歧视。
Right to Non-Discrimination: Exercising your privacy rights will not result in discriminatory treatment regarding services or pricing.
7.4 PIPL 下的权利（中国用户）Rights Under PIPL (Chinese Users)
根据《中华人民共和国个人信息保护法》，您享有知情权、决定权、查阅权、复制权、更正权、补充权、删除权，以及要求解释说明的权利。您还有权拒绝仅通过自动化决策方式作出的决定。
Under the Personal Information Protection Law of the People's Republic of China, you have the right to know, decide, access, copy, correct, supplement, and delete your personal information, as well as the right to request explanations. You also have the right to refuse decisions made solely through automated decision-making.
7.5 如何行使您的权利How to Exercise Your Rights
请发送邮件至 [email protected] 行使上述权利。我们将在 30 天内回复您的请求（GDPR 要求，其他地区可能不同）。
Please email [email protected] to exercise the above rights. We will respond to your request within 30 days (GDPR requirement; other regions may differ).
8. Cookie 与类似技术Cookies and Similar Technologies
8.1 我们使用的 CookieCookies We Use
| 类型Type |
用途Purpose |
必要性Necessity |
| 必要 CookieEssential Cookies |
维持登录状态、保障安全Maintaining login state, ensuring security |
必需Required |
| 功能 CookieFunctional Cookies |
记住语言偏好、界面设置Remembering language preferences, interface settings |
可选Optional |
| 分析 CookieAnalytics Cookies |
了解使用模式、改进服务Understanding usage patterns, improving the service |
可选Optional |
8.2 Cookie 管理Cookie Management
-
您可通过浏览器设置管理或拒绝 Cookie。
You can manage or reject cookies through your browser settings.
-
中国用户特别说明：根据 PIPL，我们在您的设备上放置任何非必要 Cookie 前，将获取您的明确单独同意。您可通过 Cookie 横幅或设置页面管理偏好。
Special Note for Chinese Users: Under PIPL, we will obtain your explicit separate consent before placing any non-essential cookies on your device. You can manage preferences via the cookie banner or settings page.
9. 跨境数据传输Cross-Border Data Transfer
9.1 数据传输情况Data Transfer Practices
由于本服务面向全球用户，您的个人信息可能被传输至您所在国家/地区以外的服务器进行处理。我们的服务器和第三方服务提供商可能位于以下国家/地区：
As the Service is available to users worldwide, your personal information may be transferred to servers outside your country/region for processing. Our servers and third-party service providers may be located in the following countries/regions:
-
中国大陆（运营者所在地）
Mainland China (operator location)
-
美国（AI 模型提供商服务器）
United States (AI model provider servers)
-
其他地区（云服务提供商数据中心）
Other regions (cloud service provider data centers)
9.2 保障措施Safeguards
我们采取以下措施保障跨境数据传输的合规性：
We implement the following safeguards for cross-border data transfers:
-
标准合同条款（SCC）：与境外接收方签订符合适用法律的标准合同条款。
Standard Contractual Clauses (SCCs): Entering into SCCs with overseas recipients that comply with applicable law.
-
充分性认定：将数据传输至被认定为提供充分保护水平的国家/地区。
Adequacy Decisions: Transferring data to countries/regions recognized as providing an adequate level of protection.
-
PIPL 合规：如涉及从中国大陆向境外提供个人信息，我们将依据 PIPL 要求完成个人信息保护影响评估，并采取必要措施确保境外接收方的处理活动符合 PIPL 规定的保护标准。
PIPL Compliance: Where personal information is transferred from mainland China to overseas, we will complete a Personal Information Protection Impact Assessment as required by PIPL and take necessary measures to ensure the overseas recipient's processing activities meet the protection standards required by PIPL.
您有权通过联系
[email protected] 获取我们跨境传输保障措施的副本。
You have the right to obtain a copy of the safeguards we have in place for international transfers by contacting
[email protected].
10. 数据安全Data Security
我们采取以下技术和组织措施保护您的个人信息：
We implement the following technical and organizational measures to protect your personal information:
-
加密传输：使用 TLS/SSL 加密保护数据传输。
Encryption in Transit: Using TLS/SSL encryption to protect data transmission.
-
密码加密存储：用户密码使用行业标准加密算法存储。
Password Encryption: User passwords are stored using industry-standard encryption algorithms.
-
访问控制：限制对个人信息的内部访问权限。
Access Control: Restricting internal access to personal information.
-
安全审计：定期审查安全措施和数据处理活动。
Security Audits: Periodically reviewing security measures and data processing activities.
10.1 数据泄露通知Data Breach Notification
如发生个人信息泄露事件，我们将在发现后 72 小时内向受影响用户发送通知，并依据适用法律向相关监管机构报告。通知将包含泄露信息的类别、可能的影响、我们已采取的补救措施以及您可采取的自我保护措施。
In the event of a personal data breach, we will notify affected users within 72 hours of discovery and report to relevant supervisory authorities in accordance with applicable law. The notification will include the categories of information breached, potential impact, remedial measures taken, and self-protection measures you can take.
11. 未成年人隐私Children's Privacy
本服务不面向 18 周岁以下的未成年人。我们不会故意收集未成年人的个人信息。如我们发现在未获得可验证的监护人同意的情况下收集了未成年人的个人信息，我们将尽快删除该信息。
The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child without verifiable parental consent, we will delete such information as soon as possible.
-
中国用户：根据 PIPL，处理不满十四周岁未成年人个人信息时，我们将取得其父母或其他监护人的同意，并制定专门的个人信息处理规则。
Chinese Users: Under PIPL, when processing personal information of children under fourteen years of age, we will obtain consent from their parents or other guardians and develop specific personal information processing rules.
-
EU/EEA 用户：根据 GDPR，在向信息社会服务提供同意的情况下，最低同意年龄为 16 周岁（成员国可下调至不低于 13 周岁）。
EU/EEA Users: Under GDPR, the minimum age for consent in the context of information society services is 16 years (member states may lower this to no less than 13 years).
12. 营销通讯与退订Marketing Communications and Opt-Out
12.1 服务必要通知Essential Service Notices
我们可能会向您发送与服务相关的必要通知（如安全更新、账单收据、服务条款变更）。这些通知不包含营销内容，您无法退订。
We may send you essential service-related notices (such as security updates, billing receipts, changes to the Terms of Service). These notices do not contain marketing content and cannot be opted out of.
12.2 营销通讯Marketing Communications
如您同意接收营销通讯，您可随时通过以下方式退订：
If you consent to receive marketing communications, you may opt out at any time via:
-
每封营销邮件底部的退订链接
Unsubscribe link at the bottom of each marketing email
-
账户设置中的通知偏好开关
Notification preference toggle in account settings
-
发送邮件至 [email protected]
Emailing [email protected]
13. 第三方服务Third-Party Services
本服务集成或使用以下第三方服务。各第三方服务有自己的隐私政策，我们建议您查阅：
The Service integrates or uses the following third-party services. Each has its own privacy policy, which we recommend you review:
14. 本政策的变更Changes to This Policy
我们可能不时更新本政策。如发生重大变更，我们将通过邮件或站内通知在生效日前至少 14 天告知您。建议您定期查阅本政策以了解最新版本。
We may update this Policy periodically. For material changes, we will notify you via email or in-product notice at least 14 days before the effective date. We encourage you to review this Policy periodically for the latest version.
15. 联系我们Contact Us
如对本政策有任何问题、疑虑或投诉，或需行使您的个人信息权利，请联系：
If you have any questions, concerns, or complaints about this Policy, or wish to exercise your personal information rights, please contact:
运营者：More Token（个人运营者）
Operator: More Token (Individual Operator)
16. 监管机构Supervisory Authority
如您对我们的个人信息处理活动有投诉，您有权向您所在国家/地区的数据保护监管机构投诉：
If you have a complaint about our personal information processing activities, you have the right to lodge a complaint with the data protection supervisory authority in your country/region:
-
中国：国家互联网信息办公室（www.cac.gov.cn）
China: Cyberspace Administration of China (www.cac.gov.cn)
-
EU/EEA：您所在成员国的数据保护监管机构
EU/EEA: The data protection supervisory authority in your member state
-
California：California Privacy Protection Agency（cppa.ca.gov）
California: California Privacy Protection Agency (cppa.ca.gov)