一、导言

1. Introduction

欢迎使用 CoCode。CoCode 是一款由 CoCode 运营团队（以下简称"我们"）开发的 AI 编程代理工具，以桌面应用程序、命令行工具（CLI）、网站及相关服务（以下统称"本服务"）的形式向你提供。CoCode 旨在帮助你更高效地完成编码、调试、重构、文档撰写等软件工程任务，支持你使用自己配置的第三方模型，也提供由我们运营的官方模型订阅服务。

Welcome to CoCode. CoCode is an AI programming agent tool developed and operated by the CoCode Team (hereinafter "we", "us", or "our"), provided to you in the form of a desktop application, command-line interface (CLI), website, and related services (collectively, the "Service"). CoCode is designed to help you complete software engineering tasks such as coding, debugging, refactoring, and documentation more efficiently. It supports third-party models configured with your own credentials, as well as an official model subscription service operated by us.

本用户协议（以下简称"本协议"）是你与我们之间就注册、登录、使用本服务所订立的协议，与你勾选确认的《隐私政策》《跨境数据传输协议》共同构成完整的约定。请你在使用本服务前认真阅读并充分理解本协议，特别是以加粗形式提示的免除或减轻我们责任、限制你权利的条款。你勾选"我已阅读并同意用户协议"即表示你已完整阅读并理解本协议。

These Terms of Service (the "Agreement") constitute an agreement between you and us regarding your registration, login, and use of the Service, and together with the Privacy Policy and the Cross-Border Data Transfer Agreement that you confirm by checking the corresponding boxes, they form a complete set of agreements. Please read this Agreement carefully before using the Service, especially the clauses highlighted in bold that exempt or reduce our liability or limit your rights. By checking "I have read and agree to the Terms of Service", you represent that you have fully read and understood this Agreement.

二、定义

2. Definitions

为便于理解，本协议中的下列术语含义如下：

For ease of understanding, the following terms in this Agreement have the meanings set out below:

• "本服务"：指 CoCode 桌面应用、命令行工具（CLI）、官方网站、官方模型服务及我们提供的其他相关功能与服务；
• "Service": refers to the CoCode desktop application, command-line interface (CLI), official website, official model service, and other related features and services provided by us;
• "你"：指注册、登录或使用本服务的个人或实体；
• "You": refers to the individual or entity who registers, logs in to, or uses the Service;
• "官方模型"：指由我们统一运营、通过积分计费的内置模型服务，你无需自行配置模型服务提供商的凭证即可使用；
• "Official models": refer to built-in model services uniformly operated by us and billed by credits, which you can use without configuring credentials of model service providers yourself;
• "自带模型（BYOK）"：指你使用自己的模型服务凭证接入第三方模型服务的使用方式；
• "Bring Your Own Key (BYOK)": refers to the mode in which you connect third-party model services using your own model service credentials;
• "积分"：指用于计量官方模型调用量的虚拟凭证，不可兑换法定货币，不可转让；
• "Credits": refer to virtual units used to measure the usage of official models; they cannot be exchanged for legal tender and are non-transferable;
• "输入"与"输出"："输入"指你提交给本服务的内容（如指令、代码、文件）；"输出"指本服务（含模型）响应你的输入而生成的内容。
• "Input" and "Output": "Input" refers to the content you submit to the Service (such as instructions, code, and files); "Output" refers to the content generated by the Service (including models) in response to your Input.

三、接受本协议

3. Acceptance of Terms

通过访问或使用本服务，你确认你具备与我们订立合同所必需的民事行为能力，并同意遵守本协议。如你代表企业或其他实体使用本服务，你声明并保证你已获得该实体的有效授权，且该实体受本协议约束；在此情形下，"你"同时指该实体。

By accessing or using the Service, you confirm that you have the legal capacity necessary to enter into a contract with us and agree to be bound by this Agreement. If you use the Service on behalf of a company or other entity, you represent and warrant that you are validly authorized to do so and that such entity is bound by this Agreement; in such case, "you" refers to both you and such entity.

本协议的部分条款可能以单独页面、弹窗、说明文档等形式呈现，除非另有说明，该等条款同样构成本协议的组成部分。本协议不同文本之间就同一事项约定不一致的，以更新日期更近者为准。

Some terms of this Agreement may be presented in separate pages, pop-ups, or documentation; unless otherwise stated, such terms also form an integral part of this Agreement. In the event of any inconsistency between different documents of this Agreement regarding the same matter, the document with a more recent "Last updated" date shall prevail.

四、协议的变更

4. Changes to Terms

我们可能根据法律法规变化、业务调整或产品演进的需要，适时修改本协议。协议变更后，我们将在本页面更新"更新日期"，并通过应用内通知、站内公告等方式提示你变更内容。对于重大变更（如收费方式变化、责任条款调整），我们将在变更生效前给予合理的提示期。

We may modify this Agreement from time to time in light of changes in laws and regulations, business adjustments, or product evolution. When we do, we will update the "Last updated" date on this page and notify you of the changes via in-app notifications and website announcements. For material changes (such as changes to billing methods or adjustments to liability clauses), we will provide reasonable advance notice before the changes take effect.

变更生效后你继续使用本服务，即视为你接受修改后的协议；如你不接受变更内容，应停止使用本服务。若变更内容导致你已购买且未消耗的服务权益受到重大不利影响，你可按第九条的约定与我们协商处理。

If you continue to use the Service after the changes take effect, you are deemed to have accepted the revised Agreement; if you do not accept the changes, you should stop using the Service. If a change materially and adversely affects your purchased and unconsumed service benefits, you may negotiate with us in accordance with Section 9.

五、账号注册与安全

5. Account Registration and Security

5.1 你可通过电子邮箱或我们支持的其他方式注册账号。你应保证注册信息（尤其是电子邮箱地址）真实、准确、合法、有效，并及时更新。因你提供虚假信息或未及时更新信息导致的相关后果，由你自行承担。

5.1 You may register an account using your email address or other methods we support. You must ensure that your registration information (especially your email address) is true, accurate, legal, and valid, and keep it up to date. Any consequences arising from false information or failure to update information shall be borne by you.

5.2 你应妥善保管账号、密码及验证码，不应将其透露给任何第三方。账号下的所有操作（包括模型调用、积分消耗、配置修改等）均视为你本人的行为。如发现账号被盗用、密码泄露或存在其他安全漏洞，应立即通知我们，我们将协助你采取冻结、重置等措施。

5.2 You are responsible for safeguarding your account, password, and verification codes, and should not disclose them to any third party. All activities under your account (including model calls, credit consumption, and configuration changes) are deemed to be your actions. If you discover unauthorized use, password leakage, or other security breaches, notify us immediately, and we will assist you in taking measures such as freezing and resetting.

5.3 为保障账号安全，我们在登录、注册等关键环节部署了人机验证与异常行为检测机制。对于存在异常登录、批量注册、撞库尝试等风险的账号，我们有权采取验证升级、临时锁定等保护性措施，并在核实后解除。

5.3 To safeguard account security, we deploy human verification and anomalous behavior detection at critical steps such as login and registration. For accounts with abnormal logins, bulk registration, or credential-stuffing attempts, we may take protective measures such as enhanced verification or temporary locking, and lift them after verification.

六、账号管理与注销

6. Account Management and Deletion

6.1 未经我们书面同意，你不得将账号赠与、借用、出租、转让或出售给他人。如我们有合理理由认为账号的实际使用者并非注册人，为保护账号及数据安全，有权暂停或终止相应服务。

6.1 Without our prior written consent, you may not gift, lend, rent, transfer, or sell your account to others. If we have reasonable grounds to believe the actual user of the account is not the registrant, we may suspend or terminate the Service to protect the account and data security.

6.2 你有权注销账号。注销账号后，我们将停止为你提供服务，并按照《隐私政策》的约定删除或匿名化处理你的个人信息（法律法规另有规定的除外）。请你知悉：注销账号将导致账号内的积分余额、订阅权益及未消费的服务权益全部清零且无法恢复，请你在注销前谨慎确认。

6.2 You have the right to delete your account. Upon account deletion, we will stop providing the Service to you and delete or anonymize your personal information in accordance with the Privacy Policy (except as otherwise provided by law). Please note that account deletion will clear your credit balance, subscription benefits, and unconsumed service benefits, which cannot be restored. Please confirm carefully before deletion.

七、服务说明

7. Service Description

7.1 本地优先架构。CoCode 采用本地优先设计：你的代码库、配置文件及对话数据默认存储在你的本地设备，模型调用的凭证（API Key）也仅保存在本地。除非你主动使用需要联网的功能（如账号登录、官方模型调用、云同步），我们的服务器不会获取你的代码与对话内容。

7.1 Local-first architecture. CoCode is designed with a local-first approach: your codebase, configuration files, and conversation data are stored on your local device by default, and your model credentials (API keys) are also kept locally. Unless you actively use features that require network access (such as account login, official model calls, or cloud sync), our servers will not obtain your code and conversation content.

7.2 服务形式。本服务可能以桌面应用、CLI、网页等多种形态提供。不同形态的功能可能存在差异，具体以产品实际呈现为准。我们可能持续迭代产品功能，对部分功能进行优化、调整或下线。

7.2 Service forms. The Service may be provided in various forms such as desktop applications, CLI, and web pages. Features may vary across forms; the actual presentation in the product shall prevail. We may continuously iterate product features, optimize, adjust, or discontinue certain features.

7.3 系统要求。你需自备接入本服务所必需的设备、操作系统与网络环境，并承担使用本服务产生的相关费用（如上网流量费）。因你的设备或网络原因导致服务无法正常使用的，我们不承担责任。

7.3 System requirements. You need to prepare the devices, operating systems, and network environments necessary for accessing the Service, and bear the related costs (such as Internet traffic fees) of using the Service. We are not liable for the Service being unavailable due to your devices or network conditions.

八、付费与积分

8. Payment and Credits

本服务提供两种模型使用方式：

The Service offers two ways to use models:

1. 自带模型（BYOK）：你可使用自己的模型服务凭证接入第三方模型。此模式下我们不收取费用，你与第三方模型服务提供商之间的费用结算及约定由你自行负责；
2. Bring Your Own Key (BYOK): You may connect third-party models using your own model service credentials. We do not charge fees in this mode; the billing and agreements between you and third-party model service providers are your own responsibility;
3. 官方模型订阅：我们提供由我们统一运营的内置官方模型，你可以按月订阅套餐获取积分，并按模型调用量消耗积分。积分按批次发放与消耗，不同批次的积分可能有不同的有效期，具体以购买页面及套餐说明为准。
4. Official model subscription: We provide built-in official models uniformly operated by us. You may purchase monthly subscription plans to obtain credits, which are consumed by model usage. Credits are granted and consumed in batches, and different batches may have different validity periods, subject to the purchase page and plan descriptions.

8.1 积分性质。积分仅用于计量官方模型的调用量，是本服务内部使用的虚拟计量单位，不具有货币属性，不可兑换现金、不可转让、不可交易，其价值以获得相应服务为限。

8.1 Nature of credits. Credits are only used to measure the usage of official models and are virtual units for internal use within the Service. They are not currency, cannot be exchanged for cash, and cannot be transferred or traded; their value is limited to obtaining the corresponding services.

8.2 计费规则。官方模型的调用按实际使用量计量扣减积分。由于上游模型服务计量方式调整、模型版本升级等原因，不同时期、不同模型的积分消耗标准可能不同，我们将在产品界面或套餐说明中公示。

8.2 Billing rules. Calls to official models are metered and deducted from credits based on actual usage. Due to adjustments in upstream model service metering, model version upgrades, and other factors, the credit consumption standards for different periods and models may vary, which we will publish in the product interface or plan descriptions.

8.3 支付方式。付费订单通过第三方支付平台（如爱发电）处理。我们不会直接收集或存储你的银行卡、支付账户等敏感支付信息，相关支付行为受该第三方平台的服务协议约束。

8.3 Payment methods. Payment orders are processed through third-party payment platforms (e.g., Afdian). We do not directly collect or store your sensitive payment information such as bank cards or payment accounts; such payment activities are governed by the service agreements of those third-party platforms.

8.4 异常订单处理。如发现利用漏洞、伪造订单、恶意退款等方式异常获取积分或服务权益的行为，我们有权冻结、扣回相关积分并视情节终止服务。

8.4 Abnormal order handling. If we discover credits or service benefits obtained abnormally through exploiting vulnerabilities, forging orders, or malicious refunds, we may freeze or claw back the relevant credits and terminate the Service depending on the severity.

九、退款与终止

9. Refunds and Termination

9.1 退款政策。因本服务通过第三方支付平台收费，退款主要通过该平台流程办理，并遵循其规则。一般而言，如你购买的套餐存在未被消耗的服务权益且符合平台退款条件的，我们将在合理范围内予以配合处理。已经实际消耗的服务部分，原则上不支持退款。

9.1 Refund policy. As we charge fees through third-party payment platforms, refunds are mainly processed through those platforms and subject to their rules. Generally, if your purchased plan contains unconsumed service benefits and meets the platform's refund conditions, we will cooperate in handling within a reasonable scope. Consumed portions of the service are, in principle, non-refundable.

9.2 服务终止后的处理。如本服务因不可抗力、政策调整或我们经营决策等原因终止，对于你已付费但未消耗的服务权益，我们将通过公告载明的方式为你办理退款或提供替代方案。

9.2 Handling upon service termination. If the Service is terminated due to force majeure, policy adjustments, or our business decisions, we will process refunds or provide alternatives for your paid but unconsumed service benefits in the manner stated in the announcement.

十、行为规范

10. Code of Conduct

你在使用本服务时，应遵守法律法规及公序良俗，不得从事以下行为：

When using the Service, you must comply with applicable laws and public morals. You may not engage in the following:

1. 反对宪法确定的基本原则，危害国家安全、泄露国家秘密、颠覆国家政权、破坏国家统一；
2. Opposing the fundamental principles established by the Constitution, endangering national security, leaking state secrets, subverting state power, or undermining national unity;
3. 宣扬恐怖主义、极端主义、民族仇恨、邪教或封建迷信；
4. Advocating terrorism, extremism, ethnic hatred, cults, or feudal superstition;
5. 散布谣言、虚假信息，扰乱经济秩序和社会秩序；
6. Spreading rumors or false information that disrupts economic or social order;
7. 散布淫秽、色情、暴力、赌博、凶杀、恐怖或教唆犯罪的内容；
8. Distributing obscene, pornographic, violent, gambling, murder, terrorist, or crime-inciting content;
9. 侮辱、诽谤、骚扰、威胁他人，侵害他人隐私、名誉权、肖像权、知识产权等合法权益；
10. Insulting, defaming, harassing, or threatening others, or infringing on others' privacy, reputation, portrait rights, intellectual property, or other lawful rights;
11. 利用本服务从事危害计算机网络安全的行为，包括非法侵入网络、窃取数据、传播恶意代码、制作或传播病毒木马等；
12. Using the Service to engage in activities that endanger computer network security, including unauthorized network access, data theft, distributing malicious code, or creating and spreading viruses and Trojans;
13. 未经授权以自动化方式（如脚本、机器人）批量调用本服务，对我们的基础设施或上游模型服务造成不合理负载；
14. Using the Service in an automated manner (e.g., scripts, bots) without authorization, placing unreasonable load on our infrastructure or upstream model services;
15. 将本服务用于军事、武器开发、关键基础设施运营等高风险活动，或用于生成与自残、欺诈、网络钓鱼相关的内容；
16. Using the Service for high-risk activities such as military affairs, weapons development, or critical infrastructure operations, or to generate content related to self-harm, fraud, or phishing;
17. 对本服务的全部或部分（包括软件、界面、代码结构）进行反向工程、反编译或试图获取源代码（法律法规明确允许的除外）；
18. Reverse engineering, decompiling, or attempting to obtain the source code of the Service, in whole or in part (including software, interfaces, and code structure), except as expressly permitted by law;
19. 删除或遮蔽本服务中的版权声明、商标或其他权利标识；
20. Removing or obscuring copyright notices, trademarks, or other rights identifiers in the Service;
21. 将本服务接入任何未经我们书面许可的转发、代理、转售体系，或变相提供多用户共享服务；
22. Connecting the Service to any forwarding, agency, or resale system without our written permission, or implicitly providing multi-user shared services;
23. 其他违反法律法规、本协议或公序良俗的行为。
24. Any other conduct that violates laws, regulations, this Agreement, or public morals.

十一、知识产权

11. Intellectual Property

11.1 本服务的知识产权。本服务（包括但不限于软件、代码、商标、界面设计、文档及相关数据）的知识产权及其他合法权利归我们或相应权利人所有。在你遵守本协议的前提下，我们授予你非独家、有限、不可转让、不可再许可、可撤销的权利，以访问和使用本服务。本协议未明确授予的权利均由我们保留。

11.1 IP of the Service. All intellectual property and other lawful rights in the Service (including but not limited to software, code, trademarks, interface design, documentation, and related data) belong to us or the respective rights holders. Subject to your compliance with this Agreement, we grant you a non-exclusive, limited, non-transferable, non-sublicensable, revocable right to access and use the Service. All rights not expressly granted are reserved by us.

11.2 模型输出。在适用法律允许的范围内，我们不对人工智能模型的输出（Output）主张任何所有权。你对自己输入（Input）及由此生成的输出享有合法权利，但应确保输入内容已获合法授权，且输出内容的使用遵守适用法律。由于人工智能技术的固有特性，相同输入可能生成相同或相似输出，我们无法保证输出的独占性。

11.2 Model output. To the extent permitted by applicable law, we do not claim any ownership of the Output generated by AI models. You retain lawful rights to your Input and the resulting Output, provided that your Input is lawfully authorized and your use of the Output complies with applicable law. Due to the inherent nature of AI technology, the same Input may generate identical or similar Output, and we cannot guarantee the exclusivity of the Output.

十二、你的内容

12. Your Content

你通过本服务输入、创建、上传的代码、文本、文件及其他信息（"输入"），以及本服务响应你输入而生成的内容（"输出"），合称为"你的内容"。你保留你的内容的全部合法权利。

Code, text, files, and other information you input, create, or upload through the Service ("Input"), and content generated by the Service in response to your Input ("Output"), are collectively referred to as "Your Content". You retain all lawful rights in Your Content.

你确认并承诺，你的输入均由你原创或已获合法授权，不会侵犯任何第三方的合法权益。你应对你的内容及使用本服务的后果独立承担责任。如你的内容引发第三方争议或投诉，你应负责处理并使我们免受损失。

You confirm and warrant that your Input is either your original work or lawfully authorized, and does not infringe upon the lawful rights of any third party. You are solely responsible for Your Content and the consequences of using the Service. If your content causes disputes or complaints from third parties, you shall handle them and hold us harmless.

CoCode 采用本地优先架构：你的代码库和对话数据默认存储在你的本地设备上，仅在你主动使用云同步等联网功能时才会上传至我们的服务器。我们不会将你的输入、输出用于模型训练。

CoCode adopts a local-first architecture: your codebase and conversation data are stored on your local device by default, and are uploaded to our servers only when you actively use networked features such as cloud sync. We will not use your Input or Output for model training.

十三、数据与隐私保护

13. Data and Privacy Protection

我们高度重视你的个人信息保护。关于我们如何收集、使用、存储和保护你的个人信息，以及你享有的相关权利，请详见《隐私政策》；关于个人信息跨境传输的安排，请详见《跨境数据传输协议》。上述文件构成本协议的组成部分。

We take the protection of your personal information seriously. For details on how we collect, use, store, and protect your personal information and your related rights, please refer to the Privacy Policy; for arrangements on cross-border transfer of personal information, please refer to the Cross-Border Data Transfer Agreement. These documents form an integral part of this Agreement.

十四、第三方服务

14. Third-Party Services

本服务可能集成或链接至第三方服务（如模型服务提供商、支付平台、代码托管平台、更新分发渠道等）。你使用第三方服务时，应遵守该第三方的服务条款和隐私政策。我们不对第三方服务的可用性、准确性或安全性承担责任；第三方服务的中断、变更或终止可能影响本服务相应功能的正常使用。

The Service may integrate with or link to third-party services (such as model service providers, payment platforms, code hosting platforms, and update distribution channels). When using third-party services, you must comply with their terms of service and privacy policies. We are not responsible for the availability, accuracy, or security of third-party services; interruptions, changes, or terminations of third-party services may affect the normal use of corresponding features of the Service.

在 BYOK 模式下，你与第三方模型服务提供商之间形成独立的法律关系，相应的内容政策、费用、限流等事项以该提供商的规则为准。我们仅作为你指定的技术通道转发请求，不对第三方模型的行为、输出内容承担责任。

In BYOK mode, you form an independent legal relationship with third-party model service providers; content policies, fees, rate limits, and other matters are subject to the rules of such providers. We only forward requests as the technical channel designated by you, and are not responsible for the behavior or output of third-party models.

十五、免责声明

15. Disclaimer

本服务按"现状"和"可用"基础提供。在法律允许的最大范围内，我们不对服务的及时性、安全性、准确性、完整性、无病毒或无错误作出任何明示或暗示的保证。

The Service is provided on an "as is" and "as available" basis. To the maximum extent permitted by law, we make no express or implied warranties regarding the timeliness, security, accuracy, completeness, virus-free nature, or error-free nature of the Service.

关于 AI 生成内容：人工智能模型生成的内容可能存在错误、偏见、过时或不完整的情况，不构成专业建议。你应自行判断并核实输出内容，在将输出用于生产环境、发布、部署或重大决策前进行充分测试与人工审查。因你直接采纳未经核实的输出而产生的损失，我们不承担责任。

Regarding AI-generated content: Content generated by AI models may contain errors, biases, outdated information, or incompleteness, and does not constitute professional advice. You should independently judge and verify the Output, and conduct sufficient testing and human review before using the Output in production environments, publishing, deployment, or critical decisions. We are not liable for losses arising from your direct adoption of unverified Output.

关于不可控因素：因不可抗力（如自然灾害、战争、罢工）、基础电信故障、上游模型服务异常、法律法规调整、政府行为等原因导致服务中断或数据丢失的，我们不承担责任，但将尽合理努力减少对你的影响并及时通知。

Regarding uncontrollable factors: We are not liable for service interruptions or data loss caused by force majeure (such as natural disasters, war, or strikes), basic telecom failures, upstream model service anomalies, changes in laws and regulations, or government actions, but we will make reasonable efforts to minimize the impact on you and notify you promptly.

十六、责任限制

16. Limitation of Liability

在法律允许的最大范围内，我们对任何间接、附带、特殊、惩罚性或后果性的损失（包括利润损失、数据丢失、业务中断、商誉损害等）不承担责任，即使我们已被告知此类损失的可能性。

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, punitive, or consequential damages (including loss of profits, data loss, business interruption, or damage to goodwill), even if we have been advised of the possibility of such damages.

在法律允许的最大范围内，我们对你的累计赔偿责任总额以你在索赔发生前十二个月内就本服务向我们实际支付的费用金额为限。法律法规另有强制性规定的，从其规定。

To the maximum extent permitted by law, our total cumulative liability to you is limited to the fees you actually paid to us for the Service in the twelve (12) months preceding the claim. Where mandatory provisions of law provide otherwise, such provisions shall prevail.

十七、违约处理

17. Breach Handling

如我们认为你违反本协议或相关法律法规，我们有权视情节轻重，不经事先通知采取以下一项或多项措施：警示提醒、限制部分功能、降低服务优先级、暂停服务、封禁账号、清退异常获取的权益，并保留追究法律责任的权利。

If we believe you have violated this Agreement or applicable laws, we may, depending on the severity and without prior notice, take one or more of the following measures: warnings, feature restrictions, service deprioritization, service suspension, account banning, and clawback of abnormally obtained benefits, and reserve the right to pursue legal remedies.

如你对处理结果有异议，可通过本协议第二十条载明的联系方式向我们申诉。我们将根据你提供的材料进行复核，并在合理期限内反馈结果。

If you object to the handling result, you may appeal to us through the contact information provided in Section 20 of this Agreement. We will review based on the materials you provide and give feedback within a reasonable period.

十八、服务的变更、中断与终止

18. Service Changes, Interruption, and Termination

我们可能因业务发展、技术升级、法规要求等原因，对本服务的部分或全部进行更新、变更、暂停或终止。对于重大变更或终止，我们将通过公告等方式提前合理期限通知你（不可抗力或法律法规要求的除外）。

We may update, modify, suspend, or terminate part or all of the Service due to business development, technical upgrades, regulatory requirements, or other reasons. For material changes or termination, we will notify you a reasonable period in advance via announcements (except in cases of force majeure or legal requirements).

你可随时停止使用本服务。我们也可能因你严重违约、法律法规要求或其他正当原因终止向你提供服务。服务终止后，本协议中关于知识产权、免责声明、责任限制、争议解决等条款继续有效。

You may stop using the Service at any time. We may also terminate providing the Service to you due to your serious breach, legal requirements, or other legitimate reasons. Upon termination, the provisions of this Agreement regarding intellectual property, disclaimers, limitation of liability, and dispute resolution shall remain in effect.

十九、未成年人使用条款

19. Use by Minors

本服务主要面向成年开发者。如你是未满十八周岁的未成年人，请在监护人的陪同和指导下阅读本协议，并在取得监护人同意后使用本服务。如你是未满十四周岁的未成年人，我们依法不向你提供账号注册服务。

The Service is primarily intended for adult developers. If you are a minor under the age of eighteen, please read this Agreement accompanied and guided by a guardian, and use the Service with the guardian's consent. If you are a minor under the age of fourteen, we will not provide account registration services to you in accordance with law.

监护人应加强对未成年人使用本服务的引导与监督，关注其上网安全与消费行为。如我们在不知情的情况下收集了未满十四周岁未成年人的个人信息，将设法尽快删除相关数据。

Guardians should strengthen the guidance and supervision of minors using the Service, and pay attention to their online safety and consumption behavior. If we have collected personal information of a minor under the age of fourteen without knowledge, we will endeavor to delete the relevant data as soon as possible.

二十、法律适用、争议解决与联系我们

20. Governing Law, Dispute Resolution, and Contact Us

20.1 法律适用与争议解决

20.1 Governing Law and Dispute Resolution

本协议的订立、生效、解释、履行及争议解决均适用中华人民共和国法律（不含港澳台地区法律）。因本协议或本服务产生的争议，双方应首先友好协商解决；协商不成的，任何一方均可向我们运营者所在地有管辖权的人民法院提起诉讼。

This Agreement is governed by the laws of the People's Republic of China (excluding the laws of Hong Kong, Macao, and Taiwan regions). Disputes arising from this Agreement or the Service shall first be resolved through friendly negotiation; if negotiation fails, either party may file a lawsuit with the competent people's court at the location of our operator.

本协议部分条款被认定无效或不可执行的，不影响其他条款的效力。

If any provision of this Agreement is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

20.2 联系我们

20.2 Contact Us

如对本协议有任何疑问、意见或建议，可通过以下方式联系我们：

If you have any questions, comments, or suggestions regarding this Agreement, you may contact us at:

邮箱：2206674900@qq.com

Email: 2206674900@qq.com

我们将在收到你的消息后十五个工作日内予以回复。

We will respond within fifteen (15) business days after receiving your message.

一、我们如何收集和使用个人信息

1. How We Collect and Use Personal Information

1.1 账号注册与登录

1.1 Account Registration and Login

当你注册或登录 CoCode 时，我们会收集你的电子邮箱地址，用于创建账号、身份验证及服务通知。如你使用第三方账号登录，经你同意后，我们会获取该第三方平台的公开信息（如昵称、头像）用于账号绑定。上述信息均为提供账号服务所必需，如你拒绝提供，将无法注册并使用我们的账号体系。

When you register or log in to CoCode, we collect your email address for account creation, identity verification, and service notifications. If you log in using a third-party account, with your consent, we obtain public information from that platform (e.g., nickname, avatar) for account binding. The above information is necessary for providing account services; if you refuse to provide it, you will not be able to register and use our account system.

1.2 服务运行与安全

1.2 Service Operation and Security

为保障服务正常运行和网络安全，我们会收集你的设备信息（操作系统类型及版本、设备型号）、IP 地址、软件版本号、网络接入方式及操作日志。这些信息是提供服务和保障安全所必需的基本信息。我们会将上述信息用于安全事件的监测与排查、异常登录的识别以及服务稳定性的统计分析，并将按照最低必要原则进行去标识化处理。

To ensure normal service operation and network security, we collect your device information (OS type and version, device model), IP address, software version, network access type, and operation logs. This information is essential for providing the Service and maintaining security. We use such information for security incident monitoring and investigation, identification of abnormal logins, and statistical analysis of service stability, and will process it on a minimum-necessary and de-identified basis.

1.3 模型调用与对话数据

1.3 Model Calls and Conversation Data

当你使用 AI 功能时，你输入的文本、代码片段、任务指令及上传的文件会被发送至你选择的模型提供商（自带 Key 模式下直接发送至对应第三方；内置官方模型模式下经由我们的服务器转发）以生成响应。

When you use AI features, the text, code snippets, task instructions, and files you upload are sent to your selected model provider (in BYOK mode, directly to the corresponding third party; in official model mode, relayed through our servers) to generate responses.

本地优先原则：你的代码库和对话内容默认存储在你的本地设备上。我们不会主动上传你的代码库文件。仅当你使用云同步、跨端同步等功能时，相关数据才会传输至我们的服务器。

Local-first principle: Your codebase and conversations are stored on your local device by default. We do not proactively upload your codebase files. Data is transmitted to our servers only when you use features such as cloud sync or cross-device sync.

内置官方模型模式下，为提供积分计费服务，我们会记录模型调用的模型名称、调用时间及消耗积分，但不存储你输入的明文内容。我们不会将你通过内置官方模型提交的输入内容及对应的输出内容用于模型训练。

In official model mode, to provide credit-based billing, we record the model name, call time, and credits consumed for each model call, but we do not store the plaintext of your input. We do not use the inputs you submit through official models, or the corresponding outputs, for model training.

1.4 付费与积分

1.4 Payment and Credits

当你购买官方模型订阅套餐时，我们会收集你的订单信息（订单号、套餐类型、购买时间、积分余额）。支付信息由第三方支付平台（如爱发电）处理，我们不存储你的银行卡号等支付敏感信息。如你需要开具凭证或处理退款，我们可能会另行收集你的联系方式以便与你确认处理结果。

When you purchase an official model subscription plan, we collect your order information (order number, plan type, purchase time, credit balance). Payment information is processed by third-party payment platforms (e.g., Afdian); we do not store sensitive payment information such as your bank card number. If you request a receipt or a refund, we may additionally collect your contact information to confirm the handling result with you.

1.5 客服与反馈

1.5 Customer Support and Feedback

当你联系客服或提交反馈时，我们会收集你的联系方式及你主动提供的问题描述，用于响应你的请求和改进服务。为便于定位和解决问题，你可能会在反馈中附上日志文件或截图，请你自行确认其中不包含不愿提供给他人的信息后再行提交。

When you contact customer support or submit feedback, we collect your contact information and the problem description you provide, in order to respond to your request and improve the Service. To help locate and resolve issues, you may attach log files or screenshots to your feedback; please make sure they do not contain information you do not wish to share before submitting.

1.6 依法豁免征得同意的情形

1.6 Circumstances Exempt from Consent under Law

根据相关法律法规，在以下情形中，我们收集、使用你的个人信息无需征得你的授权同意：（1）为订立、履行你作为一方当事人的合同所必需；（2）为履行法定职责或者法定义务所必需；（3）为应对突发公共卫生事件，或者紧急情况下为保护自然人的生命健康和财产安全所必需；（4）为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理个人信息；（5）依照法律规定在合理的范围内处理你自行公开或者其他已经合法公开的个人信息；（6）法律法规规定的其他情形。请你理解，我们对这些信息的处理将始终遵循合法、正当、必要的原则。

Under applicable laws and regulations, we do not need your authorization or consent to collect and use your personal information in the following circumstances: (1) where it is necessary for the conclusion or performance of a contract to which you are a party; (2) where it is necessary for the performance of statutory duties or obligations; (3) where it is necessary for responding to a public health emergency, or for protecting the life, health, or property of a natural person in an emergency; (4) where personal information is processed within a reasonable scope for news reporting or public opinion supervision in the public interest; (5) where personal information that you have voluntarily disclosed or that has been lawfully disclosed is processed within a reasonable scope as provided by law; and (6) other circumstances provided by laws and regulations. Please understand that our processing of such information will always follow the principles of lawfulness, legitimacy, and necessity.

二、我们如何使用 Cookie 和同类技术

2. How We Use Cookies and Similar Technologies

我们可能在网站上使用 Cookie 或类似技术，用于保持登录状态、记住偏好设置及分析网站流量。我们不会将 Cookie 用于本政策所述目的之外的任何用途。你可通过浏览器设置拒绝或管理 Cookie，但部分功能可能因此受到影响。如你清除或拒绝 Cookie，你可能需要在每次访问时重新登录，且某些依赖 Cookie 才能实现的个性化设置将无法生效。

We may use cookies or similar technologies on our website to maintain login status, remember preferences, and analyze website traffic. We do not use cookies for any purpose other than those described in this Policy. You can refuse or manage cookies through your browser settings, but some features may be affected as a result. If you clear or refuse cookies, you may need to log in again each time you visit, and certain personalized settings that rely on cookies may not take effect.

三、我们如何共享、转让、公开披露你的个人信息

3. How We Share, Transfer, and Publicly Disclose Your Personal Information

3.1 委托处理

3.1 Entrusted Processing

我们可能委托合作伙伴（如云服务提供商、邮件服务提供商）处理你的个人信息。我们会与受托方签署数据处理协议，要求其仅在授权范围内处理信息、采取必要安全措施，并在委托关系终止时按照我们的要求删除或返还其所处理的个人信息。我们会对受托方的数据处理能力进行合理评估，并对其处理活动进行监督。

We may entrust partners (e.g., cloud service providers, email service providers) to process your personal information. We sign data processing agreements with them, requiring them to process information only within the authorized scope, adopt necessary security measures, and delete or return the personal information they have processed at our request upon termination of the entrustment. We will reasonably assess the data processing capabilities of such processors and supervise their processing activities.

3.2 内置官方模型

3.2 Official Models

当你使用内置官方模型时，你的输入内容会经由我们的服务器转发至对应模型提供商以生成响应。转发过程中我们仅传输完成该次调用所必需的内容。我们不会将你的输入内容用于模型训练或其他目的。如你希望你的输入内容完全不经过我们的服务器，你可以选择自带 API Key（BYOK）模式，由你的设备直接调用对应模型提供商的接口。

When you use official models, your input is relayed through our servers to the corresponding model provider to generate responses. During relaying, we only transmit the content necessary for completing that call. We do not use your input for model training or any other purpose. If you prefer that your input never passes through our servers, you may choose the BYOK (bring your own API key) mode, where your device calls the model provider's API directly.

3.3 共享

3.3 Sharing

除下列情形外，我们不会与其他任何第三方共享你的个人信息：（1）事先获得你的明确同意；（2）为提供核心功能所必需，且仅共享完成该功能所必需的最少信息，例如为完成支付而向支付平台传输订单信息；（3）根据法律法规、强制性要求或有权机关的指示必须提供。

We do not share your personal information with any third party except in the following circumstances: (1) with your explicit prior consent; (2) where it is necessary for providing core functions and only the minimum information required for such functions is shared, for example, transmitting order information to a payment platform to complete a payment; and (3) where provision is required by laws and regulations, mandatory requirements, or the instructions of competent authorities.

3.4 转让

3.4 Transfer

我们不会将你的个人信息转让给任何公司、组织和个人，但以下情形除外：（1）事先获得你的明确同意；（2）涉及合并、分立、解散、被宣告破产等事由时，如需转让个人信息，我们会向你告知接收方的名称和联系方式，并要求接收方继续履行本政策及其他法律法规规定的义务。接收方若变更原先的处理目的、处理方式，应重新取得你的同意。

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances: (1) with your explicit prior consent; and (2) in the event of a merger, division, dissolution, or declaration of bankruptcy, if the transfer of personal information is required, we will inform you of the recipient's name and contact information and require the recipient to continue to perform its obligations under this Policy and applicable laws. If the recipient changes the original processing purpose or method, it shall obtain your consent again.

3.5 公开披露

3.5 Public Disclosure

我们仅会在以下情形且采取符合法律法规要求的保护措施后，公开披露你的个人信息：（1）经你明确授权同意；（2）依据法律法规或有权机关的强制性要求必须披露。涉及敏感个人信息的公开披露，我们将另行取得你的单独同意。

We will only publicly disclose your personal information after adopting protective measures that meet the requirements of laws and regulations in the following circumstances: (1) with your explicit authorization and consent; and (2) where disclosure is mandatory under laws and regulations or the compulsory requirements of competent authorities. Where the public disclosure involves sensitive personal information, we will obtain your separate consent.

3.6 我们不会向第三方出售你的个人信息。

3.6 We Do Not Sell Your Personal Information

我们不会向任何第三方出售你的个人信息。如我们未来拟开展超出本政策所述范围的共享、转让或公开披露活动，我们将再次征求你的同意。

We will not sell your personal information to any third party. If we intend to carry out sharing, transfer, or public disclosure beyond the scope described in this Policy in the future, we will seek your consent again.

四、我们如何存储个人信息

4. How We Store Personal Information

4.1 存储地点

4.1 Storage Location

我们依照法律法规的规定，将在境内运营过程中收集和产生的个人信息存储于中华人民共和国境内。如涉及向境外提供，我们将严格按照中国相关法律法规的要求执行，包括履行数据出境安全评估、标准合同备案或个人信息保护认证等程序（如适用），具体安排详见《跨境数据传输协议》。

In accordance with applicable laws, we store personal information collected and generated during domestic operations within the People's Republic of China. If the provision of personal information across borders is involved, we will strictly comply with the requirements of relevant Chinese laws and regulations, including carrying out cross-border data transfer security assessment, standard contract filing, or personal information protection certification (where applicable), as detailed in the Cross-Border Data Transfer Agreement.

4.2 存储期限

4.2 Retention Period

我们仅在为提供服务之目的所必需的期间内保留你的个人信息，例如：账号信息在账号存续期间保留；订单及积分记录自交易完成之日起保留不少于法律规定的期限，以便处理对账、退款及可能的争议；操作日志保留期限一般不超过十二个月。超出必要期限后，我们将删除或匿名化处理你的个人信息，法律法规另有规定的除外。当你注销账号后，我们将在合理期限内删除或匿名化你的个人信息，法律要求留存的除外。

We retain your personal information only for as long as necessary to provide the Service. For example: account information is retained for the duration of the account; order and credit records are retained for no less than the statutory period from the completion of the transaction, in order to handle reconciliation, refunds, and possible disputes; operation logs are generally retained for no more than twelve months. After the necessary period, we will delete or anonymize your personal information, unless otherwise required by law. After you cancel your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law.

五、我们如何保护个人信息安全

5. How We Protect Personal Information Security

5.1 安全措施

5.1 Security Measures

我们采取行业通行的安全措施保护你的个人信息，包括：传输加密（TLS）、存储加密、最小权限的访问控制、安全审计及数据分类分级管理。API Key 等敏感凭证在本地通过操作系统安全存储（如 macOS Keychain）加密保存，不以明文形式暴露。我们的员工均签署保密协议，并仅能在履行职责所必需的范围内访问个人信息。

We adopt industry-standard security measures to protect your personal information, including encryption in transit (TLS), encryption at rest, least-privilege access control, security audits, and data classification management. Sensitive credentials such as API keys are encrypted locally using the operating system's secure storage (e.g., macOS Keychain) and are not exposed in plaintext. Our employees have signed confidentiality agreements and can only access personal information within the scope necessary for performing their duties.

5.2 安全事件处置

5.2 Security Incident Response

尽管我们采取了合理的安全措施，但互联网环境并非百分之百安全。请你妥善保管你的账号凭据及本地设备，因你自身原因（如主动泄露密码、设备失窃未启用锁屏）导致的损失，需由你自行承担相应责任。如不幸发生个人信息安全事件，我们将立即启动应急预案，依法向有关主管部门报告，并通过应用内通知、邮件等方式及时告知你事件情况、可能的影响及你可采取的补救措施。

Although we adopt reasonable security measures, the Internet environment is not 100% secure. Please keep your account credentials and local devices safe; losses caused by your own fault (e.g., voluntarily disclosing your password, or a stolen device without screen lock enabled) shall be borne by you. In the unfortunate event of a personal information security incident, we will immediately activate our emergency response plan, report to the relevant competent authorities as required by law, and promptly inform you of the incident, its possible impact, and remedial measures you can take, via in-app notifications, email, and other means.

六、你的个人信息权利

6. Your Personal Information Rights

按照中国相关的法律、法规、标准，我们保障你对自己的个人信息行使以下权利：

In accordance with relevant Chinese laws, regulations, and standards, we safeguard your rights to exercise the following over your personal information:

• 查阅与复制：你可在应用设置中查看你的账号信息及数据；你可通过客服申请复制你的账号基本信息。
• Access and copy: You may view your account information and data in the app settings, and you may request a copy of your basic account information through customer support.
• 更正与补充：当你发现我们处理的个人信息有错误时，你有权作出更正或补充。你可以自行更正，或通过客服提出更正申请。
• Correction and supplementation: When you discover that the personal information we process is inaccurate, you have the right to correct or supplement it. You may do so yourself or submit a correction request through customer support.
• 删除：你可删除对话记录、代码库索引等数据；在符合法律法规及服务规则的前提下，你也可要求我们删除相应个人信息。
• Deletion: You may delete conversation history, codebase indexes, and other data; subject to applicable laws and service rules, you may also request that we delete the corresponding personal information.
• 撤回同意：你可撤回对某项信息收集的同意，但这不影响此前基于同意已进行的处理的效力。撤回同意可能导致相关功能无法继续使用。
• Withdrawal of consent: You may withdraw consent for specific information collection, but this does not affect the validity of processing already carried out based on your prior consent. Withdrawal of consent may render related features unavailable.
• 账号注销：你可通过客服申请注销账号。注销后，我们将停止为你提供服务，并在合理期限内删除或匿名化你的个人信息。
• Account cancellation: You may request account cancellation through customer support. Upon cancellation, we will stop providing services to you and delete or anonymize your personal information within a reasonable period.
• 要求解释与获取规则副本：你有权要求我们对个人信息处理规则进行解释说明，并获取相关规则的副本。
• Right to explanation and to obtain a copy of the rules: You have the right to request an explanation of our personal information processing rules and to obtain a copy of such rules.

我们将在收到你的请求并核实你的身份后的十五个工作日内予以响应。对于你的合理请求，我们原则上不收取费用；但对于多次重复、超出合理限度的请求，我们将视情况收取一定的成本费用。对于无端重复、需要过多技术投入、给他人合法权益带来风险或非常不切实际的请求，我们可能会予以拒绝，并向你说明理由。

We will respond to your request within fifteen working days after receiving it and verifying your identity. We generally do not charge fees for reasonable requests; however, for repeated requests beyond a reasonable limit, we may charge a reasonable cost fee depending on the circumstances. We may decline requests that are unreasonably repetitive, require disproportionate technical effort, risk the legitimate rights of others, or are highly impractical, and we will explain the reasons to you.

七、自动化决策说明

7. Automated Decision-Making

本服务的核心是辅助你完成编程与开发任务，我们不会利用你的个人信息对你作出具有法律约束力的自动化决策，也不会利用你的个人信息进行对你权益有重大影响的自动化商业营销决策。当你使用 AI 功能时，模型可能基于你当前会话的上下文自动生成内容，该生成过程仅作用于你当次任务的输出结果，不构成对你的画像评估。AI 生成内容可能存在错误或遗漏，请你自行核实后再采用，重要决策请勿完全依赖 AI 输出。

The core of the Service is to assist you in completing programming and development tasks. We will not make legally binding automated decisions about you based on your personal information, nor will we use your personal information for automated commercial marketing decisions that significantly affect your rights and interests. When you use AI features, the model may automatically generate content based on the context of your current session; such a generation process only affects the output of your current task and does not constitute profiling of you. AI-generated content may contain errors or omissions. Please verify it before use, and do not rely solely on AI output for important decisions.

八、未成年人保护

8. Protection of Minors

8.1 一般规定

8.1 General Provisions

我们非常重视未成年人的个人信息保护。本服务面向专业开发者与成年用户，我们不主动面向未成年人推广或营销。如你是未成年人，请在监护人的同意和指导下使用本服务。如监护人发现我们在未获有效同意的情况下收集了未成年人的个人信息，可通过本政策公布的联系方式联系我们，我们将尽快删除相关数据。

We attach great importance to protecting minors' personal information. The Service is intended for professional developers and adult users, and we do not actively promote or market to minors. If you are a minor, please use the Service with the consent and guidance of your guardian. If a guardian discovers that we have collected a minor's personal information without valid consent, they may contact us via the channels published in this Policy, and we will delete the relevant data as soon as possible.

8.2 未满十四周岁的儿童

8.2 Children under Fourteen

我们的产品和服务主要面向成年人。我们不会主动收集未满十四周岁儿童的个人信息。若我们发现在未事先获得可证实的监护人同意的情况下收集了儿童的个人信息，将设法尽快删除相关数据。

Our products and services are primarily intended for adults. We do not knowingly collect personal information from children under fourteen. If we become aware that we have collected a child's personal information without prior verifiable consent of a guardian, we will take steps to delete such data as soon as possible.

九、个人信息出境

9. Cross-Border Transfer of Personal Information

为向你提供服务，你的部分个人信息（如账号信息、模型调用请求）可能经由我们在境外部署的基础设施节点或境外服务提供商处理（例如基础设施云计算服务）。我们将在开展个人信息出境活动前向你履行告知义务，并按照法律法规要求采取以下一项或多项合规措施：（1）通过国家网信部门组织的数据出境安全评估；（2）按照国家网信部门的规定经专业机构进行个人信息保护认证；（3）按照国家网信部门制定的标准合同与境外接收方订立合同。关于出境数据的范围、境外接收方的名称、联系方式、处理目的、处理方式和个人信息的种类等详细信息，请查阅《跨境数据传输协议》。

To provide the Service, part of your personal information (e.g., account information, model call requests) may be processed through infrastructure nodes we deploy overseas or by overseas service providers (e.g., infrastructure cloud computing services). Before carrying out cross-border transfer of personal information, we will inform you and adopt one or more of the following compliance measures as required by laws and regulations: (1) passing the cross-border data transfer security assessment organized by the national cyberspace administration; (2) obtaining personal information protection certification from a professional institution as prescribed by the national cyberspace administration; and (3) entering into a contract with the overseas recipient based on the standard contract formulated by the national cyberspace administration. For details on the scope of transferred data and the name, contact information, processing purpose, processing method, and categories of personal information of the overseas recipient, please refer to the Cross-Border Data Transfer Agreement.

十、隐私政策的修订

10. Revisions to This Privacy Policy

我们可能适时修订本隐私政策。修订后，我们将在本页面更新"更新日期"，并通过应用内通知等方式提示你。如修订涉及以下重大变更，我们将以显著方式提示你，并在必要时另行征得你的同意：（1）个人信息处理目的、处理方式发生变更；（2）处理的个人信息类型发生变更；（3）向你提供个人信息的对象或其处理方式发生变更；（4）你参与个人信息处理方面的权利及其行使方式发生变化。我们还会将历史版本存档，供你查阅。

We may revise this Privacy Policy from time to time. When we do, we will update the "Last updated" date on this page and notify you via in-app notifications. If revisions involve the following material changes, we will notify you in a prominent manner and, where necessary, seek your separate consent: (1) changes to the purpose or method of processing personal information; (2) changes to the types of personal information processed; (3) changes to the recipients of your personal information or their processing methods; and (4) changes to your rights regarding the processing of personal information and how to exercise them. We will also archive previous versions of this Policy for your reference.

十一、适用范围与争议解决

11. Scope of Application and Dispute Resolution

本政策适用于 CoCode 桌面应用、CLI 工具及官方网站。本政策不适用于第三方服务的隐私实践（包括你通过 BYOK 模式直接调用的模型提供商、支付平台及其他第三方网站或应用），请参阅相应第三方的隐私政策。如你与本政策相关的个人信息处理活动发生争议，我们真诚希望与你友好协商解决；协商不成的，你可以向有关政府部门投诉举报，或依据《用户协议》约定的争议解决方式处理。

This Policy applies to the CoCode desktop application, CLI tool, and official website. This Policy does not apply to the privacy practices of third-party services (including model providers you call directly in BYOK mode, payment platforms, and other third-party websites or applications); please refer to the respective third-party privacy policies. In the event of any dispute arising from personal information processing activities related to this Policy, we sincerely hope to resolve it with you through friendly negotiation; if negotiation fails, you may file a complaint with the relevant government authorities or handle it in accordance with the dispute resolution method agreed in the Terms of Service.

十二、如何联系我们

12. How to Contact Us

如对本隐私政策有任何疑问、意见或建议，或需行使个人信息权利、提出投诉举报，请通过以下方式联系我们，我们将在收到你的消息后十五个工作日内回复：

If you have any questions, comments, or suggestions about this Privacy Policy, or wish to exercise your personal information rights or file a complaint, please contact us at the following. We will reply within fifteen working days after receiving your message:

邮箱：2206674900@qq.com

Email: 2206674900@qq.com

一般情况下，我们将在十五个工作日内答复。如果你对我们的回复不满意，特别是我们的行为损害了你的合法权益，你还可以向网信、电信、公安及市场监管等政府部门进行投诉、举报。

Under normal circumstances, we will reply within fifteen working days. If you are not satisfied with our reply, in particular if our conduct infringes upon your legitimate rights and interests, you may also lodge a complaint or report to government authorities such as those in charge of cyberspace administration, telecommunications, public security, and market regulation.

一、术语定义

1. Definitions

为便于理解，本协议中的下列术语含义如下：

For ease of understanding, the following terms in this Agreement have the meanings set out below:

• "本服务"：指 CoCode 桌面应用、命令行工具（CLI）、官方网站及相关配套服务；
• "Service": refers to the CoCode desktop application, command-line interface (CLI), official website, and related supporting services;
• "个人信息"：指以电子或者其他方式记录的与已识别或者可识别的自然人有关的各种信息，不包括匿名化处理后的信息；
• "Personal information": refers to various kinds of information, recorded electronically or otherwise, relating to identified or identifiable natural persons, excluding information after anonymization;
• "敏感个人信息"：指一旦泄露或者非法使用，容易导致自然人的人格尊严受到侵害或者人身、财产安全受到危害的个人信息，包括生物识别、宗教信仰、特定身份、医疗健康、金融账户、行踪轨迹等信息，以及不满十四周岁未成年人的个人信息；
• "Sensitive personal information": refers to personal information that, once leaked or illegally used, could easily cause harm to a natural person's dignity or to the safety of his or her person or property, including biometric information, religious beliefs, specific identity, medical health, financial accounts, location tracks, and any personal information of minors under the age of fourteen;
• "个人信息主体"：指个人信息所识别或者关联的自然人，即本服务的用户（"你"）；
• "Personal information subject": refers to the natural person identified by or associated with the personal information, i.e., the user of the Service ("you");
• "单独同意"：指个人信息处理者在作出处理行为的告知后，专门针对个人信息处理活动取得个人作出同意的意思表示，区别于概括同意或一揽子同意；
• "Separate consent": refers to an expression of consent specifically given by the individual for a particular processing activity after being informed of such processing, as distinguished from general or bundled consent;
• "匿名化"：指个人信息经过处理无法识别特定自然人且不能复原的过程；
• "Anonymization": refers to a process by which personal information cannot be used to identify a specific natural person and cannot be restored;
• "境内"：指中华人民共和国关境以内（不包含香港特别行政区、澳门特别行政区和台湾地区）；
• "Onshore": refers to within the customs territory of the People's Republic of China (excluding the Hong Kong Special Administrative Region, the Macao Special Administrative Region, and the Taiwan region);
• "境外"：指中华人民共和国关境以外的国家和地区。
• "Overseas": refers to countries and regions outside the customs territory of the People's Republic of China.

二、境外个人信息接收方

2. Overseas Recipients of Personal Information

为向你提供稳定、可靠的本服务，我们会将你的部分个人信息传输至以下境外接收方：

To provide you with a stable and reliable Service, we transfer some of your personal information to the following overseas recipients:

• Cloudflare, Inc.（美国）：提供服务器托管、内容分发（CDN）、域名解析与网络基础设施服务。我们的官方网站、身份验证与积分服务接口部分部署于 Cloudflare 全球网络，其数据中心分布在世界各地（包括境外节点），你的部分网络通信数据（如 IP 地址、请求时间、请求头信息）会在传输过程中经由其网络处理；
• Cloudflare, Inc. (United States): Provides server hosting, content delivery (CDN), domain name resolution, and network infrastructure services. Our official website and parts of the interfaces for identity verification and credit services are deployed on Cloudflare's global network, whose data centers are located around the world (including overseas nodes). Some of your network communication data (such as IP address, request time, and request headers) will be processed through its network during transmission;
• 你选择的第三方模型服务提供商（如适用）：当你在自带模型（BYOK）模式下选择调用境外可用的第三方模型服务时，你的请求内容将按照该提供商的服务条款直接传输至该提供商，该传输行为由你自主发起并受你与该提供商之间的协议约束。
• Third-party model service providers selected by you (if applicable): When you choose to call an overseas-available third-party model service in Bring Your Own Key (BYOK) mode, your request content will be transmitted directly to that provider in accordance with its terms of service. Such transfer is initiated by you and governed by the agreement between you and that provider.

上述接收方处理个人信息的联系方式，可通过其官方网站公布的渠道查询。除上述接收方外，未经你的允许，我们不会将你的个人信息传输至境外任何其他个人信息接收方。如未来需要新增境外接收方，我们将通过协议修订、应用内通知等方式重新取得你的同意；新增传输活动在你作出同意之前不会实施。

The contact details of the above recipients for processing personal information can be found through the channels published on their official websites. Apart from the recipients listed above, we will not transfer your personal information to any other overseas recipient without your permission. If we need to add new overseas recipients in the future, we will obtain your consent again through agreement revisions, in-app notifications, and other means; the new transfer activities will not take place before you consent.

三、个人信息跨境传输与处理的目的

3. Purposes of Cross-Border Transfer and Processing

我们进行个人信息跨境传输及处理的目的包括：

The purposes of cross-border transfer and processing of your personal information include:

1. 网站与接口服务交付：通过部署于境外网络的 CDN 与基础设施，向你提供官方网站的访问、静态资源分发及服务接口响应；
2. Website and API delivery: Providing access to the official website, distribution of static resources, and responses from service interfaces through CDN and infrastructure deployed on overseas networks;
3. 身份验证与账号安全：支持账号登录、身份验证、会话保持，防范刷号、撞库、DDoS 攻击等安全威胁，确保系统及数据安全；
4. Identity verification and account security: Supporting account login, identity verification, and session persistence, and defending against security threats such as credential stuffing, brute-force attacks, and DDoS attacks to ensure system and data security;
5. 服务运行与维护：保障服务的稳定运行、性能优化、故障排查、容灾备份及服务质量监测；
6. Service operation and maintenance: Ensuring stable service operation, performance optimization, troubleshooting, disaster recovery and backup, and service quality monitoring;
7. 积分计费管理：记录模型调用的积分消耗，维护你的积分账户余额，向你出具积分账单记录；
8. Credit billing management: Recording credit consumption for model calls, maintaining your credit account balance, and providing you with credit billing records;
9. 反欺诈与滥用防控：识别和阻断自动化脚本、恶意注册、积分套利等滥用行为，保护你和平台的合法权益；
10. Anti-fraud and abuse prevention: Identifying and blocking abuse such as automated scripts, malicious registration, and credit arbitrage, to protect your legitimate rights and interests and those of the platform;
11. 安全审计与合规：满足法律法规、监管要求及安全审计之需要。
12. Security audit and compliance: Meeting the needs of laws and regulations, regulatory requirements, and security audits.

我们不会将你的个人信息用于上述目的之外的其他目的。如需变更处理目的，我们将重新取得你的单独同意。

We will not use your personal information for purposes other than those listed above. If we need to change the processing purpose, we will obtain your separate consent again.

四、跨境传输与处理的个人信息类型

4. Types of Personal Information Transferred and Processed Cross-Border

我们跨境传输和处理的个人信息与处理目的直接相关，遵循最小必要原则，具体包括：

The personal information we transfer and process cross-border is directly related to the processing purposes and follows the principle of minimization, specifically including:

1. 账号信息：你的账号标识（用户 ID）、电子邮箱地址（加密传输）、注册时间、账号状态；
2. Account information: Your account identifier (user ID), email address (transmitted in encrypted form), registration time, and account status;
3. 身份验证信息：登录凭证（如令牌、会话标识）、验证请求记录；
4. Authentication information: Login credentials (e.g., tokens, session identifiers) and verification request records;
5. 调用记录：模型名称、调用时间、消耗积分、请求状态码（不含你输入的明文内容）；
6. Call records: Model name, call time, credits consumed, and request status codes (excluding the plaintext of your input);
7. 积分信息：积分余额、积分变动记录、订单关联信息（不含支付敏感信息）；
8. Credit information: Credit balance, credit transaction records, and order-related information (excluding sensitive payment information);
9. 设备与网络信息：操作系统类型、设备型号、软件版本号、IP 地址、请求时间（用于安全防护、异常检测与流量调度）；
10. Device and network information: OS type, device model, software version, IP address, and request time (for security protection, anomaly detection, and traffic scheduling);
11. BYOK 模式下的调用内容（如适用）：你在自带模型模式下使用境外第三方模型服务时输入的文本、代码片段、任务指令及上传的文件，此类内容由你自主选择传输至对应提供商。
12. Call content in BYOK mode (if applicable): The text, code snippets, task instructions, and uploaded files you input when using overseas third-party model services in BYOK mode. Such content is transmitted by you at your own discretion to the corresponding provider.

上述信息为跨境传输信息的全部类别。我们不会传输你的完整代码库、本地文件目录结构或与处理目的无关的其他信息，具体传输的类别以你实际使用服务的情况为准。

The above constitutes the full categories of information transferred cross-border. We will not transfer your entire codebase, local file directory structure, or other information unrelated to the processing purposes; the specific categories transferred depend on your actual use of the Service.

五、敏感个人信息专项说明

5. Special Statement on Sensitive Personal Information

我们深知敏感个人信息保护的重要性，并遵循以下原则处理可能涉及的敏感个人信息：

We are fully aware of the importance of protecting sensitive personal information and follow the principles below when handling any sensitive personal information that may be involved:

1. 不主动收集：我们不主动收集你的生物识别信息、宗教信仰、特定身份、医疗健康、行踪轨迹等敏感个人信息；
2. No active collection: We do not actively collect your biometric information, religious beliefs, specific identity, medical health, location tracks, or other sensitive personal information;
3. 避免传输：在我们自行发起的跨境传输范围内，不包含敏感个人信息；本协议第四节所列信息类型均为一般个人信息；
4. Avoidance of transfer: The cross-border transfers initiated by us do not include sensitive personal information; the types of information listed in Section 4 of this Agreement are ordinary personal information;
5. 提示你自主判断：当你在 BYOK 模式下自主向境外第三方模型服务输入内容时，请你自行判断并避免在其中包含敏感个人信息，该等信息的传输由你自主决定并由你与该第三方之间的协议约束；
6. Your own judgment: When you input content to overseas third-party model services in BYOK mode, please judge for yourself and avoid including sensitive personal information therein; the transfer of such information is decided by you and governed by the agreement between you and such third party;
7. 未成年人保护：本服务面向成年人提供。如你是不满十四周岁未成年人的监护人，请勿让该未成年人使用本服务；如我们发现在未事先获得可证实的监护人同意的情况下收集了未成年人的个人信息，我们将设法尽快删除相关数据。
8. Protection of minors: The Service is intended for adults. If you are the guardian of a minor under the age of fourteen, please do not allow such minor to use the Service. If we discover that we have collected personal information of a minor without prior verifiable consent of a guardian, we will endeavor to delete the relevant data as soon as possible.

六、跨境传输的法律依据

6. Legal Basis for Cross-Border Transfer

我们依据《中华人民共和国个人信息保护法》第三十八条第一款第（一）项的规定，通过取得你的单独同意的方式开展本次个人信息跨境传输活动，并将持续评估以下合规路径的适用性：通过国家网信部门组织的数据出境安全评估；经专业机构进行的个人信息保护认证；按照国家网信部门制定的标准合同与境外接收方订立合同。

In accordance with Article 38(1)(i) of the Personal Information Protection Law of the People's Republic of China, we carry out this cross-border transfer of personal information on the basis of your separate consent, and we will continuously assess the applicability of the following compliance pathways: the security assessment organized by the national cyberspace administration; the personal information protection certification conducted by professional institutions; or the conclusion of a contract with the overseas recipient according to the standard contract formulated by the national cyberspace administration.

在取得你的单独同意前，我们将依法履行告知义务，明确告知境外接收方的名称、联系方式、处理目的、处理方式、个人信息的种类以及你向境外接收方行使权利的方式和程序。如相关法律法规对个人信息出境提出新的要求，我们将及时调整本协议及数据传输安排，确保持续合规。

Before obtaining your separate consent, we will fulfill our obligation to inform, clearly informing you of the name of the overseas recipient, its contact details, the processing purpose and method, the types of personal information, and the manner and procedure for you to exercise your rights against the overseas recipient. If relevant laws and regulations impose new requirements on outbound transfer of personal information, we will promptly adjust this Agreement and the data transfer arrangements to ensure continued compliance.

七、个人信息存储与安全保障

7. Personal Information Storage and Security

7.1 存储地点与期限

7.1 Storage Location and Retention

你的账号与积分数据以中华人民共和国境内服务器为主要存储地。经由境外网络（如 CDN、网关节点）处理的传输中数据，仅在实现处理目的所必需的期限内保留，境外接收方不会建立你个人信息的长期存储副本，除非其服务机制要求的最短缓存周期。当个人信息超出保存期限或达到你注销账户的条件时，我们将对个人信息进行删除或匿名化处理，法律另有规定的除外。

Your account and credit data are primarily stored on servers located within the People's Republic of China. Data in transit processed through overseas networks (such as CDN or gateway nodes) is retained only for the period necessary to achieve the processing purpose. The overseas recipients will not establish long-term storage copies of your personal information, except for the shortest caching period required by their service mechanisms. When personal information exceeds the retention period or when your account is deleted, we will delete or anonymize the personal information, except as otherwise provided by law.

7.2 安全保障措施

7.2 Security Safeguards

我们采取以下技术与管理措施保障你个人信息在跨境传输中的安全性：

We adopt the following technical and organizational measures to ensure the security of your personal information during cross-border transfer:

• 传输加密：所有数据传输均采用 TLS 加密通道，防止传输过程中被窃取或篡改；
• Encryption in transit: All data transfers use TLS-encrypted channels to prevent interception or tampering during transmission;
• 密码保护：你的登录密码使用单向加盐哈希算法存储，任何人员（包括我们内部员工）均无法查看你的明文密码；
• Password protection: Your login password is stored using a one-way salted hashing algorithm; no one (including our internal staff) can view your plaintext password;
• 密钥隔离：你的自定义模型 API 密钥仅存储在你本地设备，我们的服务器不保存、不备份你的密钥明文；
• Key isolation: Your custom model API keys are stored only on your local device; our servers do not store or back up the plaintext of your keys;
• 最小必要原则：仅传输实现服务目的所必需的信息，不传输与目的无关的个人信息；
• Minimization principle: Only information necessary for the service purpose is transferred; personal information unrelated to the purpose is not transferred;
• 脱敏处理：调用记录等日志信息中不包含你输入的明文内容；
• De-identification: Log information such as call records does not contain the plaintext of your input;
• 人机验证：在登录、注册等关键环节部署人机验证机制，防范自动化攻击；
• Human verification: Human verification mechanisms are deployed at critical steps such as login and registration to defend against automated attacks;
• 供应商合规：我们要求境外接收方采取符合行业标准的安全措施（如加密、访问控制、安全审计），并仅在授权范围内处理信息，不得转委托处理；
• Vendor compliance: We require overseas recipients to adopt industry-standard security measures (such as encryption, access control, and security audits), process information only within the authorized scope, and refrain from further entrusting the processing;
• 访问控制：我们内部对可访问相关数据的范围进行严格限制，并定期开展安全审查与应急演练。
• Access control: We strictly limit the internal scope of access to relevant data and conduct regular security reviews and emergency drills.

八、境外接收方应履行的义务

8. Obligations of Overseas Recipients

我们要求境外接收方承诺履行以下义务：

We require overseas recipients to undertake the following obligations:

1. 按照本协议约定的处理目的、方式和信息类型处理个人信息，不得超出授权范围处理；
2. Process personal information in accordance with the purpose, method, and types of information agreed in this Agreement, and not process beyond the authorized scope;
3. 采取必要的技术与管理措施保障所处理个人信息的安全，达到不低于中国法律要求的保护水平；
4. Adopt necessary technical and organizational measures to safeguard the security of the personal information processed, achieving a level of protection no lower than that required by Chinese law;
5. 不得将你的输入内容用于模型训练或算法改进（如适用），除非法律法规另有要求；
6. Not use your input for model training or algorithm improvement (where applicable), unless otherwise required by law;
7. 未经我们及你的同意，不得将所处理的个人信息再转移至其他境外接收方，法律法规另有规定的除外；
8. Not further transfer the processed personal information to other overseas recipients without the consent of us and you, except as otherwise provided by law;
9. 协助我们响应你行使个人信息权利的请求；
10. Assist us in responding to your requests to exercise your personal information rights;
11. 发生个人信息安全事件时，及时向我们通报并配合处置；
12. Promptly notify us of and cooperate in handling personal information security incidents;
13. 在委托处理关系终止时，按照我们的要求删除或返还其所处理的个人信息。
14. Upon termination of the entrusted processing relationship, delete or return the personal information they have processed as required by us.

九、应急处置与安全事件通知

9. Emergency Response and Security Incident Notification

如发生或可能发生你的个人信息在跨境传输过程中泄露、篡改、丢失的安全事件，我们将采取以下措施：

If a security incident involving the leakage, tampering, or loss of your personal information occurs or may occur during cross-border transfer, we will take the following measures:

1. 立即止损：第一时间启动应急预案，采取补救措施防止事件扩大，并要求境外接收方配合处置；
2. Immediate mitigation: Immediately activate the emergency response plan, take remedial measures to prevent the incident from escalating, and require overseas recipients to cooperate in handling;
3. 法定报告：按照《中华人民共和国个人信息保护法》第五十七条等规定，将事件情况报告履行个人信息保护职责的部门；
4. Statutory reporting: Report the incident to the department responsible for personal information protection in accordance with Article 57 and other provisions of the Personal Information Protection Law of the People's Republic of China;
5. 告知用户：如事件可能对你的人身、财产安全造成危害，我们将通过应用内通知、电子邮件、站内公告等方式及时告知你事件的概况、可能的影响、已采取的补救措施以及你可以采取的减轻危害的措施；
6. User notification: If the incident may cause harm to your personal or property safety, we will promptly notify you through in-app notifications, email, website announcements, and other means of the overview of the incident, the possible impact, the remedial measures taken, and the measures you can take to mitigate the harm;
7. 事后复盘：事件处置完成后，我们将开展复盘分析，完善相关安全措施，防止同类事件再次发生。
8. Post-incident review: After the incident is handled, we will conduct a review and analysis, improve relevant security measures, and prevent similar incidents from happening again.

十、权利保证

10. Rights Assurance

我们承诺：未经你的允许，不会将你的个人信息传输至本协议所述之外的境外任何个人信息接收方。

We undertake that, without your permission, we will not transfer your personal information to any overseas personal information recipient other than those described in this Agreement.

你有权向境外接收方主张《中华人民共和国个人信息保护法》项下的各项权利，包括查阅、复制、更正、补充、删除其处理的个人信息，以及要求其说明个人信息处理规则。如你需要行使上述权利，可按照《隐私政策》中载明的路径向我们提出，我们将协调境外接收方在法律规定的期限内予以响应。

You have the right to assert against the overseas recipients all rights under the Personal Information Protection Law of the People's Republic of China, including access, copying, correction, supplementation, and deletion of the personal information they process, as well as the right to request an explanation of their personal information processing rules. To exercise these rights, you may submit your request through the channels specified in the Privacy Policy, and we will coordinate with the overseas recipients to respond within the statutory time limit.

如你认为我们的跨境传输行为侵害了你的个人信息权益，你有权通过本协议第十三条载明的联系方式向我们投诉，也有权向履行个人信息保护职责的部门投诉、举报，或依法向人民法院提起诉讼。

If you believe that our cross-border transfer infringes upon your personal information rights and interests, you have the right to file a complaint with us through the contact information set out in Section 13 of this Agreement, to lodge a complaint or report to the department responsible for personal information protection, or to bring a lawsuit before the people's court in accordance with law.

十一、撤回同意

11. Withdrawal of Consent

你亦可随时撤回对跨境传输的同意。撤回路径：应用「设置 → 隐私 → 管理我的同意」，或通过本协议第十三条载明的联系方式向我们提出书面申请。请你知悉：

You may also withdraw your consent to cross-border transfer at any time. Path: App "Settings → Privacy → Manage My Consent", or submit a written request to us via the contact information provided in Section 13 of this Agreement. Please note that:

1. 如你撤回同意，我们将停止对你的个人信息的跨境传输，但不影响你撤回同意前基于你的同意已进行的个人信息处理活动的效力；
2. If you withdraw your consent, we will stop cross-border transfer of your personal information, but this does not affect the validity of personal information processing activities already carried out based on your consent before withdrawal;
3. 撤回同意后，依赖跨境传输的官方服务功能将无法使用，但自带模型（BYOK）模式及纯本地功能不受影响；
4. After withdrawal, official service features that rely on cross-border transfer will be unavailable, but the Bring Your Own Key (BYOK) mode and purely local features will not be affected;
5. 撤回同意不影响依法应当保留的数据的处理。
6. Withdrawal of consent does not affect the processing of data that must be retained pursuant to law.

十二、协议的变更

12. Changes to This Agreement

我们可能适时修订本协议。修订后，我们将在本页面更新"更新日期"，并通过应用内通知、站内公告等方式提示你。如修订涉及新增境外接收方、新增传输信息类型或变更传输目的等重大事项，我们将重新取得你的单独同意；在你作出同意前，相关新增传输活动不会实施。

We may revise this Agreement from time to time. When we do, we will update the "Last updated" date on this page and notify you via in-app notifications, website announcements, and other means. If revisions involve material matters such as adding overseas recipients, adding types of transferred information, or changing the transfer purpose, we will obtain your separate consent again; before you consent, the relevant new transfer activities will not take place.

如你在本协议修订后继续使用涉及跨境传输的相关服务，且未在合理期限内提出异议，我们将视为你同意修订后的协议；但对于需要重新取得单独同意的事项，仍以你重新作出的同意为准。

If you continue to use the relevant services involving cross-border transfer after this Agreement is revised without raising any objection within a reasonable period, we will deem that you agree to the revised Agreement; however, for matters requiring separate consent again, your renewed consent shall prevail.

十三、联络方式

13. Contact Information

如对本跨境数据传输协议有任何疑问、意见或建议，或需行使相关权利，可通过以下方式联系我们：

If you have any questions, comments, or suggestions about this Cross-Border Data Transfer Agreement, or wish to exercise your rights, you may contact us at:

邮箱：2206674900@qq.com

Email: 2206674900@qq.com

我们将在收到你的请求后十五个工作日内予以回复。如你对我们的处理结果不满意，你也可以向履行个人信息保护职责的部门投诉、举报。

We will respond within fifteen (15) business days after receiving your request. If you are not satisfied with our handling, you may also file a complaint or report to the department responsible for personal information protection.