更新日期 / Updated: 2026-10-29

隐私政策

Privacy policy

1. 运营主体与适用范围 / Operator and scope

MangoAgent 由Cueyes Co., Limited（香港）运营。本政策说明我们通过上述应用为企业提供客服服务时，如何处理工作区用户、企业授权账号及与企业联系的客户的信息。企业自行管理工作区、社交账号和客服内容；客户也可向其联系的企业提出数据请求。

MangoAgent is operated by Cueyes Co., Limited, a company registered in Hong Kong. This policy covers workspace users and customer-support data processed for businesses through the app identified above. Each business controls its workspace, connected accounts and support content.

2. 处理的信息与用途 / Data and purposes

根据使用的功能，我们处理工作区成员的账号及联系信息；社交账号、公共主页和客户的标识、名称及头像；消息、附件、时间、投递状态和回调事件；授权令牌；知识库及 AI 输入输出；订阅、用量和付款状态，以及用于登录、故障排查和安全防护的技术信息。

这些信息用于建立和维护授权渠道、把消息送入正确的企业工作区、支持客服回复与人工接管、执行企业启用的 AI 功能、计量服务用量，以及保障服务运行。平台使用维持登录和工作区会话所需的浏览器存储。

Depending on the enabled features, we process account and contact details, social account and customer identifiers, names and profile images, messages and attachments, timestamps and delivery events, authorization tokens, knowledge bases and AI inputs/outputs, subscription and usage records, payment status, and technical information for authentication, troubleshooting and security.

3. 数据流、云服务与跨境处理 / Data flow, cloud services and cross-border processing

社交平台消息先到达云端消息网关。网关校验平台签名、暂存待投递事件，并转发企业授权的社交 API 请求和支持的媒体。核心服务保存工作区、联系人、会话、附件、知识库、渠道凭据及用于可靠投递的事件接收记录。事件接收记录可能包含原始回调中的消息内容。当前云基础设施服务商为阿里云。

提供服务时，数据可能在不同国家或地区之间传输、存储和处理，相关位置可能与企业或客户所在地不同。云服务商按实际部署承载消息网关及核心服务；获授权的平台人员可能通过远程访问处理相关数据。跨境处理和远程访问均受下述访问控制与保护措施约束。

Social-platform messages first reach a cloud message gateway. The gateway verifies platform signatures, temporarily queues delivery events, and relays authorized social API requests and supported media. The core service stores workspaces, contacts, conversations, attachments, knowledge bases, channel credentials and delivery receipts. Delivery receipts may contain message content from the original callback. Our current cloud infrastructure provider is Alibaba Cloud.

Providing the service may involve transferring, storing and processing data across countries or regions, including locations different from those of the business or customer. The cloud provider hosts the gateway and core services according to the actual deployment, and authorized platform personnel may process relevant data through remote access. Cross-border processing and remote access are subject to the access controls and safeguards described below.

企业授权的 Meta 按其政策处理社交账号和消息。企业启用可用的 AI 功能时，相关会话内容和知识库上下文可能发送给工作区实际配置的模型服务。AI 功能是否可用及所使用的模型服务，以实际配置为准。使用 AI 前，企业应确认其选择的模型服务的数据处理条款。

Meta processes authorized social accounts and messages under its own policies. When a business enables an available AI feature, relevant messages and knowledge-base context may be sent to the model provider configured for that workspace. AI availability and the provider used depend on the actual configuration. Businesses should check the selected provider's data-processing terms before enabling AI.

4. 访问与保护 / Access and safeguards

公网连接使用 HTTPS，网关与核心之间的请求经过签名校验。待投递事件使用 AES-256-GCM 加密；核心服务的渠道授权令牌启用了字段加密。工作区按成员及角色控制访问，运行凭据限制在获授权的平台管理员范围内。获授权的平台人员远程访问数据时，同样遵循成员及角色权限。

We use HTTPS, signed core/gateway requests, AES-256-GCM encryption for pending gateway events, encrypted channel-token fields, and workspace membership and role controls. Runtime credentials are restricted to authorized platform administrators. Remote access by authorized platform personnel is also subject to membership and role permissions. These safeguards do not eliminate every security risk.

5. 保存与删除 / Retention and deletion

网关在核心服务成功接收后删除已投递的活动队列条目；未投递事件保留并重试。核心服务中的工作区记录及事件接收记录保留至管理员删除或经核实的数据请求被处理。解除社交授权不会自动删除既有记录。

目前没有覆盖所有业务记录、运行日志及历史备份的统一自动到期周期。处理删除请求时，会核对主记录、附件、关联事件记录和相关备份的范围；如需单独保留特定记录，会告知请求人适用原因和处理安排。完成核对后通过受理邮箱回复处理结果。

The gateway removes delivered entries from the active queue after the core accepts them, and retries undelivered events. Core records and event receipts remain until administrator deletion or an authenticated request is processed. Revoking authorization does not delete historical records. There is currently no single automatic expiry covering all business records, logs and historical backups. Requests are assessed for the relevant records, attachments, event receipts and backup copies, with the outcome communicated by email.

6. 数据请求与联系 / Requests and contact

工作区管理员或相关客户可通过cueyes.com@gmail.com请求访问、更正、导出或删除其数据。请提供工作区或企业账号、涉及的平台、联系时间与请求范围。我们会核实请求人身份及管理权限，并在涉及企业客服记录时与对应企业核对。普通邮件中不要发送密码、令牌或完整身份证明。

Contact cueyes.com@gmail.com to request access, correction, export or deletion. Include the workspace or business account, platform, approximate contact time and request scope. We verify identity and authority and coordinate with the relevant business where necessary. Do not email passwords, tokens or full identity documents.

7. 政策更新 / Updates

服务的数据流或功能发生变化时，本页面会更新并注明日期。联系邮箱：cueyes.com@gmail.com。