Privacy Policy隐私政策

How PERCO.AI collects, uses, and protects your information.PERCO.AI 如何收集、使用和保护您的信息。

Last updated: April 19, 2026最后更新：2026年4月19日

How PERCO.AI handles personal information: PERCO.AI collects account, usage, technical, and authorized AI agent workflow data to provide the service, secure the platform, support integrations, and preserve audit records. Customer data is not used to train shared AI models.PERCO.AI 如何处理个人信息：PERCO.AI 收集账户、使用、技术和经授权的 AI Agent 工作流数据，用于提供服务、保护平台、支持集成并保留审计记录。客户数据不会用于训练共享 AI 模型。

Key commitment: Your data is never used to train shared AI models. PERCO agents process your data solely to execute tasks you authorize, within the governance boundaries you define. You retain full ownership of all input data and agent-generated outputs.核心承诺：您的数据绝不会用于训练共享 AI 模型。PERCO Agent 仅在您授权的范围内、在您定义的治理边界内处理数据。所有输入数据和 Agent 生成的输出归您完全所有。

1. Information We Collect1. 我们收集的信息

Account Information账户信息

When you create an account, we collect your name, email address, company name, role, and billing information. If you sign up via SSO (Google, Microsoft, SAML), we receive basic profile data from your identity provider.当您创建账户时，我们收集您的姓名、邮箱、公司名称、职位和账单信息。如果您通过 SSO（Google、Microsoft、SAML）注册，我们会从身份提供商处获取基本资料。

Usage Data使用数据

We automatically collect platform interaction data including agent configurations, workflow execution logs, feature usage patterns, API call metadata, and performance metrics. This data helps us improve platform reliability and your experience.我们自动收集平台交互数据，包括 Agent 配置、工作流执行日志、功能使用模式、API 调用元数据和性能指标。这些数据用于提升平台可靠性和您的使用体验。

Business Data You Provide to Agents您提供给 Agent 的业务数据

When your AI agents execute tasks, they may process business data you provide — such as CRM records, financial documents, communications, and operational data. This data is processed exclusively for task execution and is governed by your configured governance rules.当您的 AI Agent 执行任务时，可能会处理您提供的业务数据 — 如 CRM 记录、财务文件、通讯内容和运营数据。这些数据仅用于任务执行，并受您配置的治理规则约束。

Technical Data技术数据

We collect device type, browser information, IP address, operating system, and connection data for security monitoring, fraud prevention, and service optimization.我们收集设备类型、浏览器信息、IP 地址、操作系统和连接数据，用于安全监控、欺诈防范和服务优化。

2. How We Use Your Information2. 我们如何使用您的信息

We use collected information for the following purposes:我们将收集的信息用于以下目的：

Providing, maintaining, and improving the PERCO.AI platform and services提供、维护和改进 PERCO.AI 平台及服务
Executing AI agent tasks and workflows you configure执行您配置的 AI Agent 任务和工作流
Processing payments and managing your subscription处理付款和管理您的订阅
Sending service notifications, security alerts, and product updates发送服务通知、安全警报和产品更新
Generating aggregated, anonymized analytics to improve platform performance生成汇总的匿名分析数据以提升平台性能
Enforcing governance rules, compliance boundaries, and audit trail generation执行治理规则、合规边界和生成审计日志
Detecting and preventing fraud, abuse, and security incidents检测和防止欺诈、滥用及安全事件
Complying with legal obligations and responding to lawful requests遵守法律义务并回应合法请求

3. AI Agent Data Processing3. AI Agent 数据处理

No shared model training: Your business data, agent inputs, outputs, and workflow data are never used to train, fine-tune, or improve shared AI models that serve other customers.不用于共享模型训练：您的业务数据、Agent 输入/输出和工作流数据绝不会用于训练、微调或改进服务其他客户的共享 AI 模型。

Agent Execution EnvironmentAgent 执行环境

Each agent team operates in an isolated execution environment. Data processed by your agents is logically separated from other customers' data. Agent Leader orchestration metadata is used solely for coordinating your configured workflows.每个 Agent 团队在隔离的执行环境中运行。您的 Agent 处理的数据与其他客户的数据逻辑隔离。Agent Leader 的调度元数据仅用于协调您配置的工作流。

MCP Integration DataMCP 集成数据

When agents connect to third-party tools via MCP (Model Context Protocol), data flows directly between your agents and the connected tools. PERCO acts as an orchestration layer — we do not store copies of data transiting through MCP connections beyond what is required for audit trails and governance logging.当 Agent 通过 MCP（模型上下文协议）连接第三方工具时，数据直接在您的 Agent 和连接的工具之间流动。PERCO 仅作为编排层 — 除审计日志和治理记录所需外，我们不会存储通过 MCP 连接传输的数据副本。

Governance & Audit Trails治理与审计日志

All agent actions, decisions, and data access events are recorded in immutable audit logs. These logs are retained according to your configured retention policies and are accessible through the Governance Dashboard. Audit data includes: agent identity, action type, timestamp, approval status, spend amount, and governance rule evaluation results.所有 Agent 的操作、决策和数据访问事件均记录在不可篡改的审计日志中。这些日志根据您配置的保留策略进行存储，可通过治理仪表盘访问。审计数据包括：Agent 身份、操作类型、时间戳、审批状态、消费金额和治理规则评估结果。

4. Data Sharing & Third Parties4. 数据共享与第三方

We do not sell, rent, or trade your personal information or business data. We may share data with:我们不会出售、出租或交换您的个人信息或业务数据。我们可能在以下情况下共享数据：

Infrastructure providers (AWS, GCP) who host the platform under strict data processing agreements基础设施提供商（AWS、GCP），在严格的数据处理协议下托管平台
AI model providers for inference execution only — subject to zero-retention and no-training agreementsAI 模型提供商仅用于推理执行 — 受零保留和禁止训练协议约束
Payment processors (Stripe) for subscription billing支付处理商（Stripe）用于订阅计费
Legal authorities when required by law, court order, or to protect our rights法律机关当法律要求、法院命令或为保护我们的权利时

5. Data Security5. 数据安全

We implement industry-standard security measures to protect your data:我们采用行业标准的安全措施来保护您的数据：

AES-256 encryption at rest, TLS 1.3 encryption in transit静态数据 AES-256 加密，传输中 TLS 1.3 加密
SOC 2 Type II compliant infrastructureSOC 2 Type II 合规基础设施
Role-based access controls (RBAC) with least-privilege enforcement基于角色的访问控制（RBAC），强制最小权限原则
Regular penetration testing and security audits by independent third parties由独立第三方定期进行渗透测试和安全审计
Real-time anomaly detection and automated incident response实时异常检测和自动化事件响应
PII detection and automatic redaction capabilities within agent workflowsAgent 工作流中的 PII 检测和自动脱敏能力

6. Data Retention6. 数据保留

Account data is retained for the duration of your active subscription plus 90 days after termination to allow for data export. Agent execution logs and audit trails are retained according to your governance configuration (default: 12 months). Business data processed by agents is purged immediately after task completion unless your governance rules specify otherwise. You may request immediate deletion of all data at any time via your account settings or by contacting us.账户数据在您的活跃订阅期间及终止后 90 天内保留，以便数据导出。Agent 执行日志和审计日志根据您的治理配置保留（默认：12 个月）。Agent 处理的业务数据在任务完成后立即清除，除非您的治理规则另有规定。您可以随时通过账户设置或联系我们请求立即删除所有数据。

7. Your Rights7. 您的权利

Depending on your jurisdiction, you may have the following rights regarding your personal data:根据您所在的司法管辖区，您可能拥有以下与个人数据相关的权利：

Access: Request a copy of your personal data访问权：请求获取您个人数据的副本
Rectification: Correct inaccurate or incomplete data更正权：更正不准确或不完整的数据
Erasure: Request deletion of your data ("right to be forgotten")删除权：请求删除您的数据（"被遗忘权"）
Portability: Export your data in a machine-readable format可携带权：以机器可读格式导出您的数据
Restriction: Limit how we process your data限制权：限制我们处理您数据的方式
Objection: Object to certain data processing activities反对权：反对某些数据处理活动
Withdrawal of consent: Revoke previously given consent at any time撤回同意：随时撤回之前给予的同意

To exercise any of these rights, contact us at privacy@perco.ai. We will respond within 30 days.如需行使上述任何权利，请联系 privacy@perco.ai。我们将在 30 天内回复。

8. International Transfers8. 跨境数据传输

PERCO.AI operates globally. Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs), adequacy decisions, and equivalent mechanisms to maintain protection consistent with this policy and applicable laws, including GDPR and CCPA.PERCO.AI 在全球运营。您的数据可能被传输到您所在国家/地区以外的国家进行处理，包括美国。我们通过标准合同条款（SCC）、充分性决定和等效机制确保适当的保障措施，以保持与本政策及适用法律（包括 GDPR 和 CCPA）一致的保护水平。

9. Cookies & Tracking9. Cookie 与追踪

We use essential cookies for platform functionality (authentication, session management) and optional analytics cookies to understand usage patterns. You can manage cookie preferences through the cookie banner displayed on your first visit. We do not use advertising cookies or sell data to advertisers.我们使用必要 Cookie 来保障平台功能（身份验证、会话管理），以及可选的分析 Cookie 来了解使用模式。您可以通过首次访问时显示的 Cookie 横幅管理偏好设置。我们不使用广告 Cookie，也不向广告商出售数据。

10. Children's Privacy10. 儿童隐私

PERCO.AI is designed for business use and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take immediate steps to delete it.PERCO.AI 面向企业用户，不面向 18 岁以下的个人。我们不会故意收集儿童的个人信息。如果我们发现已收集了儿童的数据，将立即采取措施删除。

11. Changes to This Policy11. 政策变更

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or in-platform notification at least 30 days before they take effect. Continued use of the platform after changes constitutes acceptance of the updated policy.我们可能会不时更新本隐私政策以反映实践变更或法律要求。重大变更将通过邮件或平台内通知，在生效前至少 30 天通知您。变更后继续使用平台即表示接受更新后的政策。

12. Contact Us12. 联系我们

For any questions about this Privacy Policy or our data practices, please contact us:如对本隐私政策或我们的数据处理有任何疑问，请联系：

Email: privacy@perco.ai邮箱：privacy@perco.ai
General inquiries: hello@perco.ai一般咨询：hello@perco.ai