1. Scope
This policy covers the AiPlus public website and API, model-access, and support services enabled under an enterprise order. An applicable order or DPA prevails if it differs from this draft.
2. Public website
This static site has no public registration or contact form and includes no analytics, advertising, or marketing cookies. Its script uses browser localStorage only for language preference. Copying discussion notes stays on the device and submits nothing. Basic hosting request data may be processed to deliver pages; the host and logging rules require pre-launch confirmation.
3. Contracted enterprise-service data
Depending on orders and configuration, data may include enterprise contacts and authorized users; contract, order, and billing records; device, network, authentication, call, and operations logs; prompts, files, or other inputs; model outputs; and support communications. Exact fields, roles, locations, and storage of inputs or outputs are governed by the order, DPA, technical settings, and relevant model-supplier terms.
4. Purposes and basis
Possible purposes include assessing and enabling service, authentication, routing requests, delivering outputs, capacity and security management, troubleshooting, metering, billing, support, and contractual or legal compliance. Applicable legal bases and customer instructions must be confirmed in the order or DPA. This draft does not state that customer inputs or outputs are used for model training.
6. Retention and security
AiPlus intends to use risk-appropriate access controls, transport protection, isolation, monitoring, and audit measures. Security schedules, incident procedures, deletion, and retention periods must be specified in applicable orders, DPAs, and technical settings; this draft promises neither an unapproved fixed period nor absolute security.
7. International transfers and individual rights
The model supply chain may involve international processing. Locations, transfer mechanisms, and contractual safeguards depend on customer configuration, supplier terms, and applicable law. Individuals may exercise applicable access, correction, deletion, restriction, or objection rights. Enterprise users normally begin with their organization. Verification and an official privacy channel remain pre-launch configuration items.
8. Children
AiPlus is intended for enterprises and authorized personnel, not children. Customers must ensure their use cases and inputs meet applicable age and authorization requirements.
9. Changes and contact
This policy may change with services, suppliers, or law; notice procedures require legal approval. For now, enterprise customers may raise privacy questions through their designated account manager. The formal entity, privacy contact, and effective date must be configured before publication.