1. 我们处理哪些信息

Atelier 在当前浏览器保存笔记、日程、待办、网站、阅读内容和设置，以提供工作台与离线使用。登录后，还会处理账号邮箱、内部用户标识、登录会话以及必要的安全和运行记录。

你允许相应 Chrome 权限后，扩展可在本机读取、展示和管理浏览器书签或历史。原始浏览历史和原生书签树不随账号同步；你主动保存进 Atelier 的网站、来源和阅读内容属于工作区内容。

2. Google 登录只用于识别账号

选择 Google 登录时，Atelier 仅请求 openid、email 和 profile 范围，用于验证身份、获取邮箱和基本账号资料，并建立 Atelier 登录会话。Google 密码由 Google 处理，Atelier 不收集你的 Google 密码。

这次登录不请求 Gmail、Google 日历或 Google Drive 的访问权限，也不会因登录就读取你的邮件、日历事件或云端文件。Google 登录资料用于账号识别、登录管理和必要的安全处理。

3. 登录后的同步与暂停

Atelier 使用 Supabase 提供账号认证、数据库和私有存储。登录后，这台设备默认同步允许的笔记、日程、待办、主动保存的网站、阅读来源、收藏和适用设置。已在本机为当前账号保存的暂停选择会继续有效；新设备没有该选择时默认开启同步。

启用同步时，自定义背景先在本机重新绘制并压缩为不超过 500,000 字节的 WebP，再进入当前账号的私有云存储，并保留设备缓存。原始图片文件和原有元数据不上传，背景图片不发送给 AI。

可在「设置 → 账号与订阅 → 同步设置」暂停这台设备的同步。暂停保留本机内容和已有云端记录，不会删除云数据，也不改变其他设备的选择。个人 DeepSeek Key、原始浏览历史、原生书签树、临时页面缓存和调试任务不进入账号同步。

不同账号使用独立工作区；切换账号不会自动合并另一个账号的内容。需要跨账号转移时，必须取得明确授权并完成账号核验。

4. AI 请求与自己的 Key

所有 AI 都需要登录。使用 AI 或配置的自动整理功能时，会向 DeepSeek 发送该功能所需的信息，例如安排描述、受限长度的笔记内容、分类标签、阅读偏好、选定的来源或文章。你可以在设置中管理 AI 连接与自动功能；云同步不等于把全部笔记发给 AI。

使用自己的 DeepSeek Key 时，Key 按账号保存在当前设备，请求从设备直接发送给 DeepSeek，费用由你的 DeepSeek 账号承担。Key 不进入云同步或数据导出；你可以在 AI 设置中移除它。本机保存不是系统钥匙串，也不代表模型在本机运行。

使用 Pro 内置 AI 时，请求通过 Atelier 服务端进行身份、权限与用量检查后发送给 DeepSeek；产品共用凭据保存在服务端。内置 AI 到期或受限不会静默切换到你的个人 Key。AI 供应商的处理也适用其服务规则，请只提交你有权处理的内容。

5. 其他服务与必要记录

邮箱登录使用事务邮件服务发送验证码。天气功能会向天气或地理编码服务发送你选择的城市或城市级位置；读取公开网站和阅读来源时，会与该网站建立连接。

如果你使用订阅功能，付款资料在 Creem 托管结账中处理。Atelier 保留核验权益与对账所需的客户、订单和订阅状态，不收集或保存完整银行卡号。

为运行服务、保护账号、防止滥用和计算容量，必要记录可能包含账号标识、操作时间、请求结果、同步版本及 AI 用量。这些信息用于提供和维护你选择的服务。

6. 导出、注销与保留

账号页提供本机与云端数据副本导出；个人 Key 和登录凭据被排除。笔记也可单独导出为 Markdown。你可以删除界面中支持删除的条目，或在账号页申请注销。

注销需要近期身份验证及确认当前邮箱；尚未取消的自动续费、待处理付款或无法确认的账单须先处理。成功后，服务会清理账号云端内容和当前设备该账号的副本。注销不代替取消订阅或申请退款。

其他离线设备的副本、你已下载的文件、供应商记录、备份和必要技术清理记录不保证立即全部消失。为运行、安全或依法保存所需的信息可能继续保留，第三方记录按其适用规则处理。如需协助导出、删除或处理隐私请求，请联系 support@atelierdesk.dev。

7. 安全与数据选择

Atelier 使用 HTTPS 传输、账号权限与按用户隔离的访问控制。目前不提供端到端加密或零知识保证；服务商可能在不同地区处理数据。

你可以管理浏览器的可选权限、暂停设备同步、关闭自动 AI 功能、移除本机 Key、导出内容或申请注销。清理浏览器数据或卸载扩展可能影响本机副本，请先保存需要的内容。

8. 本网站与联系我们

这两页网站只加载同源样式、脚本和品牌图，不包含广告或分析脚本，也不在网页中登录或收集付款信息。切换语言会在当前浏览器保存一个中英文偏好，不保存账号或结账参数。

隐私或产品问题请联系 support@atelierdesk.dev。本政策更新时，会在此页更新内容与日期。

1. Information we process

Atelier stores notes, plans, tasks, sites, reading content, and settings in your browser to provide the workspace and offline use. After sign-in, it also processes your account email, internal user identifier, login session, and necessary security and operational records.

With the corresponding optional Chrome permissions, the extension can read, display, and manage browser bookmarks or history locally. Raw browsing history and the native bookmark tree are not synced. Sites, sources, and reading content you choose to save in Atelier become workspace content.

2. Google sign-in identifies your account

When you choose Google sign-in, Atelier requests only openid, email, and profile to verify identity, obtain your email and basic account information, and establish an Atelier session. Google handles your Google password; Atelier does not collect it.

This sign-in requests no access to Gmail, Google Calendar, or Google Drive. Signing in does not let Atelier read your email, calendar events, or cloud files. Google account information is used for account identification, sign-in management, and necessary security processing.

3. Sync after sign-in and how to pause it

Atelier uses Supabase for authentication, its database, and private storage. Signing in enables supported notes, plans, tasks, saved sites, reading sources, favorites, and preferences to sync on this device by default. A saved off preference remains in effect for that account on this device; a new device without that preference defaults to sync on.

When sync is enabled, custom backgrounds are redrawn locally and compressed to WebP at no more than 500,000 bytes before entering private account cloud storage, with a device cache retained. The original image file and its original metadata are not uploaded. Background images are not sent to AI.

Pause this device in Settings → Account & subscription → Sync settings. Pausing keeps local content and existing cloud records; it does not delete cloud data or change other devices. Personal DeepSeek keys, raw browsing history, the native bookmark tree, temporary page caches, and debug tasks are not part of account sync.

Different accounts have separate workspaces. Switching accounts does not automatically merge another account’s content. Any cross-account transfer requires explicit authorization and account verification.

4. AI requests and your own key

All AI requires sign-in. When you use AI or configured automatic organization features, the information needed for that feature is sent to DeepSeek. It may include plan descriptions, bounded note content, category labels, reading preferences, or selected sources and articles. Manage AI connections and automatic features in Settings. Syncing does not send every note to AI.

With your own DeepSeek key, the key is stored for your account on this device. Requests go directly from your device to DeepSeek and are billed to your DeepSeek account. The key is excluded from cloud sync and data exports and can be removed in AI settings. Local storage is not an operating-system keychain and does not mean the model runs locally.

With Pro AI, requests go through Atelier’s server for identity, access, and usage checks before being sent to DeepSeek; shared credentials stay server-side. Expired or limited built-in AI does not silently use your personal key. The AI provider’s processing is also subject to its service rules. Submit only content you have the right to process.

5. Other services and necessary records

Email sign-in uses a transactional email service to deliver verification codes. Weather features send your chosen city or city-level location to weather or geocoding services. Reading public websites and sources also connects to those websites.

If you use subscription features, payment information is handled in Creem’s hosted checkout. Atelier keeps customer, order, and subscription information needed to verify access and reconcile billing, without collecting or storing full card numbers.

To operate the service, protect accounts, prevent abuse, and measure capacity, necessary records may include account identifiers, operation times, request outcomes, sync versions, and AI usage. This information supports and maintains the services you choose.

6. Export, account deletion, and retention

The Account page provides separate exports of local and cloud data. Personal keys and login credentials are excluded. Notes can also be exported individually as Markdown. Delete supported items in the interface or request account deletion from Account settings.

Account deletion requires recent identity verification and confirmation of your current email. Recurring billing that has not been canceled, pending payments, or unverified billing must be resolved first. On successful deletion, the service clears account cloud content and that account’s copy on the current device. Deletion does not replace subscription cancellation or a refund request.

Copies on offline devices, downloaded files, provider records, backups, and necessary technical cleanup records are not guaranteed to disappear immediately. Information needed for operations, security, or legal retention may remain; third-party records follow their applicable rules. For help with exports, deletion, or privacy requests, contact support@atelierdesk.dev.

7. Security and your choices

Atelier uses HTTPS, account permissions, and access controls that separate users. It does not currently provide end-to-end encryption or a zero-knowledge guarantee. Providers may process data in different regions.

Manage optional browser permissions, pause device sync, turn off automatic AI features, remove your local key, export content, or request account deletion. Clearing browser data or uninstalling may affect local copies; save anything you need first.

8. This website and how to contact us

These two pages load only same-origin styles, scripts, and brand images. They contain no advertising or analytics scripts and do not sign you in or collect payment information. Changing the language stores only a Chinese/English preference in this browser, without account or checkout parameters.

For privacy or product questions, contact support@atelierdesk.dev. When this policy changes, its content and update date will be revised here.