Gouzi Privacy Policy

For account, trial, licensing, security, and website-contact data, the controller is the Gouzi operating entity named on the distribution page, order, invoice, or enterprise agreement. For on-device-only projects, the individual or organization determines the purpose and Gouzi generally cannot access the content. If the entity, address, or privacy contact is not identified, confirm it before submitting data.

Operator / legal company name: __________. Registered address: __________. Public phone or email: __________. Privacy officer name: __________. Privacy officer contact: __________. Dedicated privacy email or phone: __________.

We may process a phone number or username, credentials, organization and contact details, role, team size, needs, consent, feedback, plus an install or device ID, tokens, trial or license status, seat and device binding, IP address, timestamps, version, basic device details, and security logs. We do not ask for your model API key.

Specific retention periods: account registration data is retained while the account exists and for __________ after closure; credentials and tokens expire when the session ends or the token expires; security logs and IP addresses are retained for __________; transaction and order data follows applicable tax, accounting, and other statutory periods.

Unless you choose cloud AI, sharing, team transfer, or backup, projects, images, text, video, audio, candidates, private intelligence, and semantic indexes are not uploaded. On-device indexing may analyze names and metadata, OCR, image content, video frames and subtitles, audio transcripts, descriptions, color, and mood. You can pause, rebuild, or delete it.

When you start a cloud task, only the required prompt, selected assets, settings, and context go to your chosen provider. The provider may process and retain data in other regions; cancelling in the interface may not instantly delete a received request. Gouzi does not send the entire project, index, or API key as task content.

The local-network gateway authenticates members and uses administrator-approved models without distributing keys. Eligible learning events and selected assets may be encrypted to the administrator's Mac for search, backup, and management. The organization generally determines this processing and is responsible for lawful basis, notice, access, retention, and member requests.

Server data supports accounts and security, trials and licenses, device and seat management, requests, sharing, updates, abuse prevention, diagnosis, contracts, and legal duties. Depending on law, the basis is consent, contract, legal obligation, or a balanced security interest. We do not train a general Gouzi model on projects without a clear, withdrawable choice and required authorization.

Necessary recipients may include infrastructure processors, your chosen model provider, your team administrator, and lawful authorities. We do not sell personal information, share it for cross-context behavioral advertising, or build advertising profiles from projects. Creative-assistance AI does not by itself make decisions with legal or similarly significant effects.

Third-party provider details: provider name: __________; service type: __________; personal-data categories involved: __________; privacy-policy URL: __________. Each provider must be listed separately when more than one is used.

Account, trial, licensing, and security services may currently enter through Hong Kong and be processed in Singapore. Model data may go to a provider's published regions. We will use required contracts, assessments, certifications, recipient details, rights channels, and separate consent. If a mandatory regional notice is not presented, do not submit the data and contact us.

Local data remains until you delete it. Server data is kept only for the shortest period needed for accounts, services, security, disputes, contracts, and law, then deleted or anonymized.

Overseas recipient details: recipient name: __________; location: __________; purpose: __________; method of processing: __________; personal-data categories: __________. For individuals in Mainland China, the recipient contact and rights procedure must also be disclosed and separate consent obtained where required.

Controls include encryption in transit, access control, rate limits, least privilege, macOS Keychain, team certificates, and encrypted recovery packages. No system is perfectly secure. Qualifying incidents will be assessed, contained, and notified as required by law. Keep an offline recovery key separate from its backup.

Depending on your location, you may request notice, access, copy or portability, correction, completion, deletion, restriction or cessation, withdrawal, account closure, objection, complaint, and overseas-recipient information. Delete local data and API keys directly; submit server requests through gouzi.me or in-app feedback. Team members should normally contact their organization first.

Server-data rights request path: __________; response period: __________. Account-closure path: __________; completion period after identity verification: __________. On-device data can still be deleted directly on the device.

Gouzi targets professionals and organizations, not children. Anyone below the local age of digital consent or legal capacity must not register independently; lawful guardian or organization authorization is required. Material changes will be highlighted and consent renewed where needed. Until the legal operator, address, and dedicated privacy contact are published, this policy alone does not establish commercial-launch legal readiness.

When this policy changes, its version and date will be updated. Material changes to purposes, methods, data categories, or rights will be highlighted through the App, website, or account flow, and consent will be renewed where applicable law requires it.