數據管理資訊同同意規則

客戶操作程式： 喺為佢自己嘅網域創建嘅合作夥伴計劃入面，用戶定義咗合作夥伴同收購客戶嘅數據管理嘅目的、法律基礎、資訊、報酬同付款。喺功能嘅技術提供期間， AIOS Business 可能會喺文件化指令嘅框架之內擔任數據處理者。

AIOS 聯盟計劃： AIOS Business 嘅營運商作為獨立嘅數據控制者處理申請、獨特推薦識別、佣金結算、付款、稅務、聯絡同防止欺詐所需嘅數據。

數據節省濫用預防： IP 位址、裝置同工作階段識別碼唔係自己決定排除。透過一齊評估幾個訊號，個系統可以阻止明顯嘅重複或者要求手動檢查。 AIOS Business 唔會收集唔必要嘅完整瀏覽記錄。

付款資料： 整個銀行戶口號碼、 IBAN 或者 PayPal ID 可以加密儲存，之後只可以喺授權嘅用戶介面上面以蒙版形式顯示。大量付款匯出只可以為授權嘅營運商進行，只限於必要嘅數據。

強制確認： 註冊人宣布佢已經睇咗呢啲資料，並要求建立帳戶。呢個所需嘅資料管理嘅主要法律基礎係簽訂同履行合約，而唔係一般嘅無限同意。

自願行銷貢獻： 「要求 AIOS 商業新聞、優惠同廣告材料」可以透過勾選一個預設為空嘅選框嚟輸入。拒絕咁做唔係登記嘅障礙，亦唔會喺使用服務嗰陣造成弊端。

撤銷： 喺 同意可以隨時撤銷，而唔需要任何理由或者收費，方法係用傳送咗嘅訊息入面嘅取消訂閱連結、帳戶設定或者 support@aios-business.com 。撤銷唔會影響之前嘅數據管理嘅合法性。

用戶嘅責任： 用戶通常係佢自己嘅收件人名單、廣告系列目標同訊息嘅資料控制者。佢有義務妥善通知收件人，驗證法律基礎，如果有需要，同意，處理資料主體嘅要求，同埋立即驗證選擇退出同異議。

AIOS 業務嘅作用： 根據用戶嘅文件化指示處理建立、處理、安排、發送同評估廣告活動結果所需嘅數據。 AIOS Business 唔會用收件人名單嚟做自己嘅廣告、個人檔案、銷售或者獨立商業目的。

運輸同測量服務供應商： 實際發送嗰陣，發送者、收件人、內容、附件同交付元數據可能會發送畀由用戶連接嘅服務供應商。只有當使用者已經提供咗電子通訊規則嘅法律基礎同條件，先可以啟動開啟或點擊測量。喺啟動連線之前，系統會顯示服務供應商嘅名稱、目的地國家同條件。

When Gmail newsletter sending is connected, AIOS Business requests only OpenID and email identity plus the gmail.send permission needed to send messages initiated by the user. The verified email address identifies the sender, and Gmail tokens are used solely to send messages approved by the user in AIOS. AIOS does not request access to read, download, modify or delete messages, drafts, contacts or Drive files.

OAuth tokens are encrypted, isolated by organization and user, cannot be displayed again, and may be used only by the server-side Gmail sending process. Only the sender, recipients, subject, content and attachments needed for the requested send are transferred to Google. AIOS does not sell Google user data or use it for advertising, profiling, credit decisions or AI-model training. The connection can be removed in AIOS, access can be revoked in the Google Account, and stored credentials are deleted when the connection or account is deleted.

Google API Services User Data Policy · Limited Use

AIOS uses two isolated Microsoft flows. Microsoft sign-in or registration for an AIOS account uses OAuth 2.0 Authorization Code with PKCE and OIDC and only openid, profile, email and User.Read; it does not create a Microsoft 365 data connection and no access or refresh token is retained. The separate Microsoft 365 Connector uses openid, profile, email, offline_access and User.Read, with individually selected Files.Read, Mail.Read, Calendars.Read and Contacts.Read permissions and, for work or school accounts, Chat.Read and Sites.Read.All. Files.ReadWrite, Mail.Send and Calendars.ReadWrite are optional. Selecting them never performs an action. The technical Microsoft scope of Files.ReadWrite and Calendars.ReadWrite can be broader than the actions AIOS exposes, but AIOS provides no delete operation. AIOS never asks for or stores a Microsoft password.

AIOS binds accounts using the Microsoft tenant and object identifiers; an existing AIOS account is never linked solely because its email matches a Microsoft email. Search terms and the necessary access token are sent to Microsoft Graph and permitted results are shown in the current task. Ordinary Connector search terms and result contents are not retained; this does not apply to separately selected Company Knowledge sources. Company Knowledge synchronizes only OneDrive or SharePoint files, or direct folder contents, explicitly selected by the user. Supported text, metadata and provenance links are stored in the AIOS knowledge store; unsupported or oversized Office formats are catalogued as metadata only. Sending mail, creating a calendar event and saving a OneDrive draft each require a complete preview, a short-lived one-use approval bound to the browser and session, AIOS password confirmation and a separate execution command. On successful or failed execution, AIOS immediately replaces the complete preview with a content-free marker. The digest, status, limited result or error code and security events may be retained for no more than 30 days; an unexecuted preview may also remain for no more than 30 days. A bounded hourly maintenance job deletes the record and its events at the 30-day boundary, with an additional deletion check on the next action; deletion is retried after a transient storage failure. Account or Connector deletion starts immediate removal. AIOS does not sell this data or use it for advertising, credit decisions or AI-model training.

Connector access and refresh tokens are encrypted, isolated by organization and user, cannot be displayed again and are used only server-side. ID tokens are never stored persistently. Security events may contain fixed identifiers, event type, outcome, error code and timestamp, but never tokens. A selected Company Knowledge source can be removed separately; its stored AIOS document and index are deleted only when no other active selection references them. Disconnecting the Connector deletes its credential and associated Microsoft knowledge sources; consent can also be revoked in the Microsoft account. Deleting the AIOS account removes Microsoft identity bindings, connection data, knowledge sources and logs.

Microsoft Privacy Statement · Work or school account permissions · Personal account permissions