数据管理信息和同意规则

客户运营的程序： 在为其自己的领域创建的合作伙伴计划中，用户定义合作伙伴和收购客户的数据管理的目的、法律依据、信息、报酬和支付。在功能的技术提供过程中，AIOS Business 可以在文档说明的框架内充当数据处理器。

AIOS 附属计划： AIOS Business 运营方作为独立的数据控制者，处理申请、唯一推荐人识别、佣金结算、付款、税务、联系及防欺诈所需的数据。

防止数据保存滥用： IP地址、设备和会话标识符本身并不确定排除。通过一起评估多个信号，系统可以阻止明显的重复或请求手动检查。 AIOS Business 不会收集不必要的完整浏览历史记录。

付款详情： 整个银行帐号、IBAN 或 PayPal ID 可以加密存储，并且只能稍后以屏蔽形式显示在授权用户界面上。批量支付导出只能针对授权运营商进行，仅限于必要的数据。

强制确认： 注册者声明他已阅读此信息并请求创建帐户。为此所需的数据管理的主要法律依据是合同的签订和履行，而不是普遍的、无限的同意。

自愿营销贡献： 可通过勾选单独且默认未选中的“我希望接收 AIOS Business 新闻、优惠和营销材料”复选框表示同意。拒绝同意不会妨碍注册，也不得对服务使用造成不利影响。

撤回同意： 可以随时通过使用已发送消息、帐户设置或帐户中的取消订阅链接来撤销同意，无需任何理由或费用。 support@aios-business.com 。撤销并不影响此前数据管理的合法性。

用户的责任： 用户通常是其自己的收件人列表、活动目标和消息的数据控制者。他有义务适当地通知接收者，核实法律依据，并在必要时核实同意，处理数据主体的请求，并立即验证选择退出和反对。

AIOS Business 的角色： 根据用户的记录说明处理创建、处理、安排、发送和衡量活动结果所需的数据。 AIOS Business 不会将收件人列表用于其自身的广告、分析、销售或独立商业目的。

运输和测量服务提供商： 实际发送时，发送者、接收者、内容、附件和传递元数据可以被发送到用户连接的服务提供商。只有在用户提供了法律依据和电子通信规则规定的条件的情况下，打开或点击测量才能被激活。连接激活前会显示服务提供商的名称、目的地国家和条件。

连接 Gmail 群发邮件功能时，AIOS Business 仅请求 OpenID 和电子邮件身份信息，以及发送由用户发起的邮件所必需的 gmail.send 权限。已验证的电子邮件地址用于识别发件人，Gmail 令牌仅用于发送用户在 AIOS 中批准的邮件。AIOS 不会请求读取、下载、修改或删除邮件、草稿、联系人或云端硬盘文件的权限。

OAuth 令牌会加密存储，并按组织和用户隔离；令牌不能再次显示，且只能由服务器端 Gmail 发送流程使用。仅会向 Google 传输完成所请求发送所必需的发件人、收件人、主题、正文和附件。AIOS 不会出售 Google 用户数据，也不会将其用于广告、用户画像、信贷决策或 AI 模型训练。用户可在 AIOS 中移除连接、在 Google 账号中撤销访问权限；删除连接或账号时，已存储的凭据也会被删除。

Google API Services User Data Policy · Limited Use

AIOS uses two isolated Microsoft flows. Microsoft sign-in or registration for an AIOS account uses OAuth 2.0 Authorization Code with PKCE and OIDC and only openid, profile, email and User.Read; it does not create a Microsoft 365 data connection and no access or refresh token is retained. The separate Microsoft 365 Connector uses openid, profile, email, offline_access and User.Read, with individually selected Files.Read, Mail.Read, Calendars.Read and Contacts.Read permissions and, for work or school accounts, Chat.Read and Sites.Read.All. Files.ReadWrite, Mail.Send and Calendars.ReadWrite are optional. Selecting them never performs an action. The technical Microsoft scope of Files.ReadWrite and Calendars.ReadWrite can be broader than the actions AIOS exposes, but AIOS provides no delete operation. AIOS never asks for or stores a Microsoft password.

AIOS binds accounts using the Microsoft tenant and object identifiers; an existing AIOS account is never linked solely because its email matches a Microsoft email. Search terms and the necessary access token are sent to Microsoft Graph and permitted results are shown in the current task. Ordinary Connector search terms and result contents are not retained; this does not apply to separately selected Company Knowledge sources. Company Knowledge synchronizes only OneDrive or SharePoint files, or direct folder contents, explicitly selected by the user. Supported text, metadata and provenance links are stored in the AIOS knowledge store; unsupported or oversized Office formats are catalogued as metadata only. Sending mail, creating a calendar event and saving a OneDrive draft each require a complete preview, a short-lived one-use approval bound to the browser and session, AIOS password confirmation and a separate execution command. On successful or failed execution, AIOS immediately replaces the complete preview with a content-free marker. The digest, status, limited result or error code and security events may be retained for no more than 30 days; an unexecuted preview may also remain for no more than 30 days. A bounded hourly maintenance job deletes the record and its events at the 30-day boundary, with an additional deletion check on the next action; deletion is retried after a transient storage failure. Account or Connector deletion starts immediate removal. AIOS does not sell this data or use it for advertising, credit decisions or AI-model training.

Connector access and refresh tokens are encrypted, isolated by organization and user, cannot be displayed again and are used only server-side. ID tokens are never stored persistently. Security events may contain fixed identifiers, event type, outcome, error code and timestamp, but never tokens. A selected Company Knowledge source can be removed separately; its stored AIOS document and index are deleted only when no other active selection references them. Disconnecting the Connector deletes its credential and associated Microsoft knowledge sources; consent can also be revoked in the Microsoft account. Deleting the AIOS account removes Microsoft identity bindings, connection data, knowledge sources and logs.

Microsoft Privacy Statement · Work or school account permissions · Personal account permissions