隐私政策

本政策说明「模型视角 Model Insight」（www.modelinsight.chat）如何收集、使用、存储和保护你的个人信息。运营者为上海模视教育科技有限公司。请在注册前读一遍，尤其是第三节（你的内容会发给谁）和第四节（数据存在哪）。

一、我们收集什么

1. 你主动提供的

• 注册信息：邮箱、密码、昵称、邀请码。密码以 bcrypt 单向哈希存储，我们没有也无法还原你的明文密码。
• 资料信息（可选）：头像、个人简介、个人网站、社交账号链接。
• 购书激活信息（可选）：你通过邮件发来的购书平台、订单号、付款截图。这些通过邮件收取，不进入本站数据库。

2. 你使用服务时产生的

• 建模对话：你与 AI 建模搭档的完整对话历史、阶段简报与生成的报告。
• 协作内容：协作项目、章节文档、任务、公告、项目内消息、投票。
• 社区内容：帖子、评论、点赞、收藏、上传的附件。
• 学习记录：游戏答题记录与存档、模型自测结果、个人模型库、生成的练习题。
• 用量记录：调用了哪家 AI、输入输出 token 数、时间。用于计费与配额，不含对话正文。

3. 自动收集的

• 本地存储：登录令牌、界面语言、草稿与工具的临时状态，存在你自己浏览器里。清除浏览器数据即可清空。本站不使用广告或第三方追踪 Cookie。
• 访问日志：服务器会记录请求时间、IP 与接口路径，用于排障与限流。

二、我们用这些信息做什么

• 创建和维护你的账号，验证身份，找回密码
• 提供你正在使用的功能（对话、协作、社区、工具）并保存你的进度
• 核算会员权益与免费额度
• 防范批量注册、刷量与攻击
• 在必要时就服务变更、权益到期联系你

我们不会把你的个人信息出售给第三方，也不会用于与上述目的无关的商业推广。

三、你的内容会发给谁（请重点看）

使用 AI 建模搭档、AI 出题、论文点评等功能时，你输入的内容会被发送给第三方大模型服务商处理。不使用这些功能，就不会发生这种传输。

我们目前可能使用的服务商：

• DeepSeek（深度求索）——中国大陆
• 阿里云百炼 / DashScope——中国大陆
• Anthropic Claude——美国

具体由哪一家处理，取决于当时的路由配置。这些服务商按各自的条款处理数据。如果你的内容涉及不宜外传的信息（个人隐私、未公开的研究数据、有保密要求的赛题），请不要输入到 AI 功能里。

其它必要的第三方：

• Supabase——数据库与文件存储（账号、对话、协作内容、上传的附件都存在这里）
• Resend——发送密码重置等事务性邮件
• Vercel——网站前端托管

四、数据存在哪

本站的数据库与文件存储由 Supabase 提供，前端由 Vercel 托管，其服务器可能位于中华人民共和国境外。使用本站即表示你了解并同意这一存储与传输安排。

五、保存多久

• 账号与内容：账号存续期间一直保留，方便你随时回看历史对话与协作记录。
• 密码重置令牌：1 小时后失效。
• 访问日志与用量记录：保留 6 个月，到期自动删除，用于排障、对账与安全分析。《网络安全法》要求网络日志留存不少于六个月，我们按这个下限保存，不额外延长。
• 注销后：我们会删除或匿名化你的个人信息；法律法规要求留存的部分（如交易记录）按规定期限保存。

六、你的权利

依据《个人信息保护法》，你可以：

• 查阅与复制我们持有的你的个人信息
• 更正不准确的信息——昵称、简介、社交链接可在「个人资料」页自行修改
• 删除某项内容，或注销整个账号
• 撤回同意——例如不再使用 AI 功能，你的内容就不会再被发往模型服务商
• 要求解释我们的个人信息处理规则

行使以上权利，请发邮件到 wanghaihua@modelinsight.cn，说明你的注册邮箱与具体诉求。我们会在收到后15 个工作日内回复。注销账号会删除你的对话与协作内容，这个操作不可撤销，请先自行导出需要保留的内容。

七、未成年人

本站内容覆盖中学乃至小学阶段的建模竞赛。未满 14 周岁的用户，须由监护人阅读本政策并同意后方可使用；我们会按《未成年人个人信息网络保护规定》处理这部分信息。

监护人如需查阅、更正或删除未成年人的个人信息，可通过上述邮箱联系我们。如果我们发现在未获监护人同意的情况下收集了不满 14 周岁儿童的信息，会尽快删除。

八、我们怎么保护这些数据

• 全站 HTTPS 传输；密码以 bcrypt 哈希存储，不保存明文
• 登录态使用有期限的令牌；密码重置链接 1 小时失效且不写入日志
• 数据库按行级权限隔离，接口按用户身份限流
• 后台管理入口单独鉴权

但请理解：没有任何系统能保证绝对安全。请使用强密码，不要在多个网站复用同一个密码。若发生可能危及你权益的数据安全事件，我们会按法律要求通知你并向监管部门报告。

九、本政策的变更

本政策可能更新。重大变更（例如新增一类数据收集、更换 AI 服务商）我们会在本页顶部标注生效日期，并通过邮件通知已注册用户。

十、联系我们

对本政策或你的个人信息有任何疑问、投诉，请联系：

邮箱 wanghaihua@modelinsight.cn　·　微信 modelinsight1

上海模视教育科技有限公司

如果你认为我们没有妥善处理你的诉求，你有权向网信、市场监管等主管部门投诉举报。

This policy explains how Model Insight (www.modelinsight.chat), operated by Shanghai Moshi Education Technology Co., Ltd., collects, uses, stores and protects your personal information. Please read it before registering — particularly section 3 (who your content is sent to) and section 4 (where data is stored).

1. What we collect

1.1 What you give us

• Registration: email, password, display name, invite code. Passwords are stored as one-way bcrypt hashes — we do not have, and cannot recover, your plaintext password.
• Profile (optional): avatar, bio, personal website, social links.
• Book activation (optional): the bookstore, order number and payment screenshot you email us. These arrive by email and are not stored in the Site's database.

1.2 What using the service creates

• Modeling conversations: your full history with the AI modeling partner, stage summaries and generated reports.
• Collaboration: projects, section documents, tasks, announcements, in-project messages, polls.
• Community: posts, comments, likes, bookmarks, uploaded attachments.
• Learning records: game answers and saves, self-assessment results, your personal model library, generated practice problems.
• Usage records: which AI provider was called, input and output token counts, timestamps. Used for quota and billing; these do not contain the text of your conversations.

1.3 Collected automatically

• Browser storage: login token, interface language, drafts and tool state — held in your own browser. Clearing site data clears it. The Site uses no advertising or third-party tracking cookies.
• Server logs: request time, IP address and endpoint, for troubleshooting and rate limiting.

2. What we use it for

• Creating and maintaining your account, verifying you, resetting passwords
• Running the features you are using and saving your progress
• Tracking membership entitlements and free quota
• Preventing bulk registration, quota abuse and attacks
• Contacting you when necessary about service changes or expiring benefits

We do not sell your personal information, and do not use it for marketing unrelated to the purposes above.

3. Who your content is sent to (please read)

When you use the AI modeling partner, AI problem generation or paper review, what you type is sent to a third-party large-model provider for processing. If you do not use those features, no such transfer happens.

Providers we may currently use:

• DeepSeek — mainland China
• Alibaba Cloud Bailian / DashScope — mainland China
• Anthropic Claude — United States

Which one handles a given request depends on the routing configuration at the time. Each provider processes data under its own terms. If your content contains anything that should not leave your hands — personal details, unpublished research data, a contest problem under embargo — do not put it into the AI features.

Other necessary third parties:

• Supabase — database and file storage (accounts, conversations, collaboration content and uploaded attachments live here)
• Resend — transactional email such as password resets
• Vercel — front-end hosting

4. Where data is stored

The Site's database and file storage are provided by Supabase and the front end is hosted by Vercel; their servers may be located outside the People's Republic of China. By using the Site you understand and accept this storage and transfer arrangement.

[To confirm: the actual regions of the Supabase project and the Vercel deployment, and whether a cross-border transfer filing under Article 38 of the PIPL is required. This clause should be settled with legal counsel before publication.]

5. How long we keep it

• Account and content: kept for as long as the account exists, so you can go back to old conversations and project records.
• Password reset tokens: expire after 1 hour.
• Server logs and usage records: kept for 6 months and then deleted automatically, for troubleshooting, reconciliation and security analysis. China’s Cybersecurity Law requires network logs to be retained for at least six months; we keep them for exactly that minimum and no longer.
• After deletion: we delete or anonymise your personal information, except records the law requires us to retain for a set period.

6. Your rights

Under the Personal Information Protection Law you may:

• Access and copy the personal information we hold about you
• Correct anything inaccurate — display name, bio and social links are editable on your profile page
• Delete specific content, or close your account entirely
• Withdraw consent — stop using the AI features and nothing further is sent to model providers
• Ask us to explain how we handle personal information

To exercise any of these, email wanghaihua@modelinsight.cn from or naming your registered address, saying what you want. We reply within 15 working days. Closing an account deletes your conversations and collaboration content and cannot be undone — export anything you want to keep first.

7. Minors

The Site covers contests reaching into secondary and primary education. Users under 14 may use it only after a guardian has read this policy and consented; we handle that information under China's rules on the online protection of minors' personal information.

Guardians who need to access, correct or delete a minor's personal information can reach us at the address above. If we find we have collected information from a child under 14 without guardian consent, we will delete it promptly.

8. How we protect it

• HTTPS throughout; passwords stored as bcrypt hashes, never in plaintext
• Time-limited session tokens; password reset links expire in 1 hour and are never written to logs
• Row-level isolation in the database; per-user rate limiting on the API
• Separate authentication for the admin console

That said: no system can promise absolute security. Use a strong password and do not reuse it across sites. If a security incident occurs that could affect you, we will notify you and report it to the regulator as the law requires.

9. Changes to this policy

This policy may be updated. For material changes — a new category of data, or a different AI provider — we will mark the effective date at the top of this page and email registered users.

10. Contact

For any question or complaint about this policy or your personal information:

Email wanghaihua@modelinsight.cn　·　WeChat modelinsight1

Shanghai Moshi Education Technology Co., Ltd.

If you believe we have not handled your request properly, you may complain to the competent Chinese regulatory authorities.