Important information
Our commitment
We aim to collect personal data lawfully and fairly, use it for stated or directly related purposes, keep it accurate, protect it with practicable safeguards, and provide clear information and rights channels.
Collection and use
The PICS identifies the purposes, data recipients, required fields, and consequences of not providing required data. Workspace content is not sold or used to train public or shared AI models. External model requests are designed to use de-identified content where supported by the product pipeline.
Security and data flow
Controls include authentication, tenant/workspace scoping, access controls, logging, HTTPS/TLS, and configured encryption. The original-to-placeholder mapping is kept locally for permitted presentation and is not sent to the model. Original high-risk document previews are masked until authorized re-authentication.
Location and retention
The production application, database and retrieval indexes are in Hong Kong. Query rewriting, embeddings and answers use a Hong Kong Model Studio workspace with Hong Kong inference scope. When hosted reranking is enabled, queries and necessary candidate passages are sent to a Beijing workspace in mainland China. Automated de-identification does not guarantee anonymity. Local placeholder mappings are not sent to models and complete lead records are not reranking inputs. China-site Model Studio invocation and security records follow its agreement and legal requirements; no Beijing Zero Data Retention, uniform fixed maximum retention or synchronous upstream deletion is promised. Google sign-in and Paddle billing separately process necessary platform identity or transaction data under their own terms.
Accounts, documents and ordinary conversations are retained while the account exists. Expiry pauses paid features while account management, export, deletion and account closure remain available. Incomplete lead state expires after 48 hours. Widget leads and conversations use their own first-save date and configured 30–365-day expiry. Application/error records are retained for 30 days, operation audit records for 90 days and closed data-rights cases for 90 days. Minimal trial-eligibility digests are separately retained while necessary to enforce the one-trial rule, as described in the Privacy Policy; account closure does not automatically delete them. Backups follow the deployed rotation.
Necessary data may be retained under restricted access, without ordinary service use, for an open data-rights request, documented dispute or legal requirement. We review the continuing need. When it ends, the original expiry rule applies; already expired data is removed in the next normal cleanup, without restarting the retention period.
Operator and rights contact
Youcheng Zhang operates WoowMind as an individual from GuangZhou,China. Contact Youcheng Zhang at privacy@woowmind.com for access, correction, or privacy complaint requests. To protect your data, we may ask you to confirm your identity. If the law prevents us from providing some information, we will explain why. If we charge a fee for a data access request, it will be permitted by law, not excessive, and disclosed in advance. You may also contact the Hong Kong Privacy Commissioner for Personal Data at pcpd.org.hk.