Privacy Policy 隐私协议
Last updated / 最后更新：July 10, 2026
本协议说明 Dolphy 收集哪些个人数据、如何使用与保护，以及您的选择。我们仅收集运营本服务所必需的数据， 且绝不出售您的个人数据。
1. Who we are
Dolphy (operated from Ontario, Canada) provides AI-generated equity research for educational purposes. This policy covers the Dolphy website and application. Contact: hello@dolphy.ai.
2. Information we collect
- Account data: your email address (used for passwordless sign-in codes) and, optionally, a display name.
- Usage data: the tickers you research, reports and revisions you generate, chat prompts, plan/credit activity, and basic technical logs (IP address, device/browser type, timestamps) for security and reliability.
- Uploaded materials: files you upload to inform a report (e.g. PDFs), which are processed to generate research.
- Payment data: if you purchase, billing is handled by Stripe. We receive limited details (e.g. plan, amount, status); we do not store your full card number.
3. How we use your information
- To provide, operate, and improve the Service and generate your research;
- To authenticate you and secure your account;
- To process payments, credits, and invoices;
- To send service and account emails (e.g. sign-in codes, invites, receipts);
- To monitor for abuse, enforce our Terms, and comply with law.
4. How your data is shared
We share data only with service providers ("processors") who help us run the Service, under contract and only as needed, including: Stripe (payments), Resend (transactional email), AI model providers (Anthropic and DeepSeek, to generate research from your prompts and materials), and hosting/infrastructure providers. We do not sell your personal data. We may disclose data if required by law or to protect our rights and users.
5. AI processing
Your prompts and uploaded materials are sent to third-party AI model providers to generate output. Do not upload sensitive personal information or material you are not permitted to share.
6. Data retention
We keep account and report data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, tax, and security obligations. You may request deletion (see "Your rights").
7. Security
We use reasonable technical and organizational measures (including encryption in transit and hashed sign-in codes) to protect your data. No method of transmission or storage is 100% secure.
8. Cookies
We use strictly necessary cookies for sign-in sessions and language preference. We do not use advertising cookies.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to withdraw consent. To exercise these, email hello@dolphy.ai.
10. International transfers
Our providers may process data in countries other than yours (including the United States). Where required, we rely on appropriate safeguards for such transfers.
11. Children
The Service is not directed to children under the age of majority, and we do not knowingly collect their data.
12. Changes
We may update this policy; material changes will be posted here with a new "Last updated" date.
一、我们是谁
Dolphy（运营地为加拿大安大略省）提供用于教育目的的 AI 生成股票研究。本协议适用于 Dolphy 网站及应用程序。 联系方式：hello@dolphy.ai。
二、我们收集的信息
- 账户数据：您的电子邮箱（用于无密码登录验证码），以及可选的显示名称。
- 使用数据：您研究的股票代码、生成的报告与修订、聊天提问、计划/积分活动， 以及用于安全与可靠性的基础技术日志（IP 地址、设备/浏览器类型、时间戳）。
- 上传材料：您为生成报告而上传的文件（如 PDF），将被处理用于生成研究。
- 支付数据：如您付费，账单由 Stripe 处理。我们仅接收有限信息（如计划、金额、状态）， 不会存储您的完整银行卡号。
三、我们如何使用信息
- 提供、运营和改进本服务并为您生成研究；
- 对您进行身份验证并保障账户安全；
- 处理付款、积分与发票；
- 发送服务与账户邮件（如登录验证码、邀请、收据）；
- 监测滥用、执行我们的《用户协议》并遵守法律。
四、数据的共享
我们仅在必要范围内、依合同与协助运营本服务的服务提供方（"处理方"）共享数据，包括： Stripe（支付）、Resend（事务性邮件）、 AI 模型提供方（Anthropic 与 DeepSeek，用于根据您的提问与材料生成研究）， 以及托管/基础设施提供方。我们不出售您的个人数据。 在法律要求或为保护我们及用户权利时，我们可能披露数据。
五、AI 处理
您的提问与上传材料会被发送至第三方 AI 模型提供方以生成结果。请勿上传敏感个人信息或您无权分享的材料。
六、数据留存
在您账户有效期间及为提供服务所需，我们会保留账户与报告数据；其后为满足法律、税务与安全义务， 会在合理期限内保留。您可申请删除（见"您的权利"）。
七、安全
我们采取合理的技术与组织措施（包括传输加密及登录验证码哈希处理）保护您的数据。 任何传输或存储方式都无法保证 100% 安全。
八、Cookie
我们仅使用登录会话与语言偏好所必需的 Cookie，不使用广告类 Cookie。
九、您的权利
视您所在地区，您可能享有访问、更正、删除或导出个人数据以及撤回同意的权利。 如需行使，请发送邮件至 hello@dolphy.ai。
十、跨境传输
我们的提供方可能在您所在国家/地区以外（包括美国）处理数据。在法律要求时，我们会为此类传输采取适当保障措施。
十一、未成年人
本服务不面向未达成年年龄的未成年人，我们也不会在知情的情况下收集其数据。
十二、变更
我们可能更新本协议；重大变更将在此更新并标注新的"最后更新"日期。
See also our Terms of Use. / 另见我们的《用户协议》。