Hong Kong infrastructure — Alibaba Cloud
Purpose: application hosting, database, storage and retrieval indexes. Data: accounts, documents, conversations, Widget leads and necessary technical records. Service location: Hong Kong. Local retention, deletion and backups follow the Privacy Policy and operating arrangements.
Alibaba Cloud China-site Model Studio — Hong Kong rewriting, embeddings and answers
Contracting entity: 通义云启(杭州)信息技术有限公司. Purpose: query rewriting, embeddings and answer generation. Data: questions, necessary dialogue context, document retrieval views, retrieved evidence and generated content. Workspace and inference scope: Hong Kong (cn-hongkong). This arrangement promises neither Zero Data Retention nor a uniform fixed retention period; retention follows the applicable China-site agreement and law.
Alibaba Cloud China-site Model Studio — Beijing hosted reranking
Contracting entity: 通义云启(杭州)信息技术有限公司. Purpose: relevance ranking of candidate passages. Data: queries and necessary candidates, potentially containing personal data not detected automatically; candidates may exceed final results. Complete lead records, local placeholder mappings and payment-card data are not reranking inputs. Workspace and model-processing location: Beijing in mainland China (cn-beijing). No Zero Data Retention, fixed maximum retention or synchronous upstream deletion is promised. The Model Studio service agreement and data-processing provisions apply.
Google LLC (when Google sign-in is enabled)
Purpose: authentication. Data: Google identifier, verified email and basic profile. Recipients and locations follow Google’s applicable terms.
Paddle (when billing is enabled)
Purpose: platform subscriptions, payments and tax. Data: account/subscription identifiers, transaction status and necessary billing details. Paddle handles full card data. The applicable Paddle legal entity depends on the account agreement, transaction region and receipt, and may include Paddle.com Market Limited or another applicable affiliate. Paddle acts as Merchant of Record and a controller for its own transaction purposes under its terms. See its privacy policy for locations and retention: https://www.paddle.com/legal/privacy .