Privacy Policy · 隐私政策

Service: AIGC BAR SaaS — https://saas.aigc.bar
Operator: AIGCBAR LLC
Version: SaaS v1.0 · Updated: September 10, 2026
Effective: Upon publication on the SaaS website, subject to any notice or consent required by applicable law.

中文要点

AIGCBAR LLC 运营 https://saas.aigc.bar， 联系邮箱为 saas-service@aigc.bar 下文英文正文完整说明本政策；这些中文要点帮助您了解与 SaaS 使用直接相关的事项。

• 本平台会保存服务内容。 为支持历史会话、项目、继续执行及文件交付，我们会处理和保存您的聊天输入与 AI 回复、上传文件与代码、工作区文件、生成的图片和其他交付文件、工具调用及执行结果、MCP 与 Skills 配置、定时任务、用量与必要日志。请勿将本服务理解为“不存储会话内容”的 API 直连服务。
• 我们还处理账号及登录信息、订阅与订单、优惠券资格及使用记录、邀请返利、加油包记录、客服沟通、IP 地址及设备信息。支付服务商处理支付认证；平台保留核对支付所需的订单和交易信息。
• 您的请求可能包含会话历史、项目材料和工具结果，并会按所选模型及服务路由发送给相关模型供应商或服务渠道。启用 MCP、网页访问、代码执行或其他集成，可能使相关内容发送到您配置或使用的外部服务。运行环境位于服务器上。
• 您选择分享会话、文件或预览链接时，获准访问的人可以查看所分享内容；收到内容的人仍可能保存副本。请在分享前检查敏感信息。
• 当前集群运行基础设施位于美国和荷兰、新加坡及香港；托管存储、备份、模型服务和其他服务商也可能在其他司法辖区处理数据。本政策不承诺仅在某一个国家存储全部数据，也不作“零保留”的承诺。
• 保留期限取决于提供功能、账号状态、删除请求、计费核对、安全调查以及法律义务。删除界面中的内容不等于同时删除所有备份或依法保留的记录。您可通过可用的自助功能或联系邮箱申请访问、更正、导出、删除或行使其他适用的隐私权利。
• 我们不会出售个人信息，也不会将个人信息用于跨情境行为广告的“共享”；未经另行明确说明及取得必要授权，不使用您的私有会话或代码训练我们自己的模型。模型供应商如何处理发送给它们的数据，适用相应服务条款和隐私规则。

1. Scope and our role

AIGCBAR LLC, a limited liability company organized under the laws of Wyoming, United States ("AIGCBAR", "we", or "us"), operates AIGC BAR SaaS at https://saas.aigc.bar. This Policy describes personal information processed through our website, accounts, hosted AI workspaces, chat, file delivery, integrations, billing, and support.

We generally determine the purposes and means of processing account, service, security, and billing information. Where we process an organization's personal data solely on its instructions under a separately agreed data processing agreement, that agreement governs the relevant processing. This Policy does not represent that a data processing agreement has already been signed with every customer or provider.

2. Information we process

The SaaS service stores conversation and workspace content to provide these features. Logs and tool results can also contain content or file paths needed to diagnose an issue. Avoid putting passwords, unnecessary sensitive personal information, or third-party confidential information into prompts, files, or support messages. If you submit personal data about others, you must have a lawful basis and authority to do so.

Payment providers collect the payment details needed for their own checkout and authentication processes. We receive order, transaction, payment-status, and related reconciliation information; the exact fields depend on the selected payment method.

For the optional existing-member beta verification at /InviteToTest, we forward the email and password you submit to chat.aigc.bar for that verification. If an eligible user needs a new SaaS account, our authentication service hashes the password to create it. The verification password is not retained in plaintext, and verification does not replace an existing SaaS account's password. We retain the eligibility outcome and entitlement/audit records needed to operate the beta and related benefits.

3. Purposes and legal bases

We use this information to provide and maintain the service, authenticate users, restore chats and workspaces, execute authorized tasks, deliver files, process payments and benefits, calculate usage, respond to support requests, prevent fraud and abuse, investigate failures, and comply with applicable law.

Where the GDPR applies, processing necessary to provide the service and fulfil orders relies on performance of a contract; legally required financial or disclosure records rely on legal obligations. Security, proportionate diagnostics, and service improvement may rely on legitimate interests, subject to applicable balancing and objection rights. Where consent is required, including for optional marketing or non-essential tracking, we obtain it separately. Withdrawing consent does not affect processing already lawfully carried out or processing supported by another lawful basis.

We do not sell personal information or share it for cross-context behavioral advertising within the meaning of applicable California privacy law. We do not use your private conversation content or source code to train our own models unless separately explained and any necessary authorization obtained. This statement does not replace the terms governing an upstream model provider's processing.

4. Cookies and local storage

We use cookies and similar browser storage for sign-in, session security, interface preferences, and service functionality. Your browser may also temporarily store interface or conversation state. Blocking essential cookies can prevent sign-in or other features from working. Where applicable law requires consent for non-essential cookies or similar tracking, that use requires the appropriate consent mechanism. You can manage stored browser data through your browser settings.

5. Recipients and integrations

Necessary information may be processed by:

• Hosting, storage, and operational providers, to run the application, databases, workspaces, file storage, backups, and diagnostics.
• Model providers and service routes, including the providers associated with the models available in the product, to process prompts, relevant history, files, images, tool results, and other inputs required for a request. A model's brand name does not itself identify every infrastructure or routing provider involved.
• Payment providers, to process and reconcile payments, refunds, and disputes; available methods are displayed at checkout.
• Communication and support providers, to deliver account or service messages and handle support.
• External services you connect or invoke, such as MCP servers, websites, repositories, and other tools. Their operators receive information needed for the action and may apply their own privacy policies. Review a service and its permissions before connecting it.

An AI action can read workspace material or send information to a connected tool within the permissions you grant. Automated execution and scheduled tasks can perform these actions without asking for approval on every step. Disconnecting a service prevents subsequent authorized access through that connection but does not retrieve copies already sent to it.

If you enable a share or publish feature, the people who can access the resulting link or destination may receive the chosen content. Removing a link does not remove copies already obtained by recipients.

Authorized personnel may access relevant information when necessary for support, operation, security, or legal duties. We may also disclose necessary information in response to lawful demands, to protect legal rights or prevent serious harm, or as part of a business transfer with applicable notice and protection obligations. We do not make customer content public merely because it was submitted to an AI model.

6. Locations and international processing

Our current cluster infrastructure operates in the United States and the Netherlands. Storage, backup, model, payment, and other providers may process information in these or other jurisdictions. A workspace's region is not a guarantee that all associated personal information stays in that region.

International transfers are subject to applicable data-protection requirements. Where transfer safeguards are legally required, the relevant processing must use a valid mechanism, such as an applicable adequacy decision or contractual safeguards with necessary supplementary measures. We do not claim that every recipient is covered by the same transfer mechanism. Contact saas-service@aigc.bar for information about the recipients and safeguards relevant to your use, including a copy or explanation of applicable safeguards where you are entitled to receive it.

7. Retention and deletion

We retain information for as long as needed for the stated purposes, considering:

• whether the account, conversation, project, integration, or task remains active;
• whether the information is needed to provide history, files, continued execution, or an entitlement you use;
• requests to delete data or close an account;
• payment reconciliation, refunds, disputes, security investigations, and prevention of repeated abuse; and
• applicable accounting, legal, and evidence-preservation duties.

Retention can differ by data category and service provider. We do not promise a single fixed retention period or immediate deletion from every system. Deleted material may remain temporarily in backups until they are replaced or removed under the applicable backup lifecycle, or be retained where legally necessary with use limited to that purpose. Upstream and user-connected services apply their own applicable retention arrangements to information already sent to them.

Use available self-service controls or email saas-service@aigc.bar to request deletion, export, or account closure. We assess the request and explain any relevant legal exceptions. Keep your own copies of important files; the SaaS workspace is not a substitute for an independent backup.

8. Security and incidents

We use safeguards suited to the service, including encrypted website connections, password hashing, authentication and access controls, workspace isolation controls, and operational audit records. No online service can guarantee absolute security. These descriptions are not a claim of a particular security certification, a completed independent audit, or protection against every possible incident.

If you suspect compromise, secure your account and affected integrations, and contact saas-service@aigc.bar without including passwords or secret keys. We assess incidents and provide notifications to affected individuals or authorities when required by applicable law.

9. Your rights

Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of your personal information, restrict or object to processing, withdraw consent, and complain to a competent data-protection authority. California residents may have applicable rights to know, access, correct, and delete information, to opt out of sale or qualifying sharing, to limit certain uses of sensitive information, and not to be unlawfully discriminated against for exercising these rights.

Send requests to saas-service@aigc.bar. We may request proportionate identity verification and will respond within applicable legal time limits. Do not send your password. Authorized agents may act for you where applicable law permits, subject to verification of authority.

Automated security and usage controls can limit or stop requests. If you believe a restriction is wrong, contact support for review. Where automated processing has a legal or similarly significant effect and the law provides additional rights, you may request human intervention, present your views, and contest the outcome.

10. Children

The service is intended for adults aged 18 or older. If you believe a child has provided personal information in connection with the service, contact us so that we can assess and address it in accordance with applicable law.

11. Changes, governing law, and contact

We publish updates on the SaaS website and provide additional notice or obtain renewed consent when required. A policy update does not, by itself, authorize unrelated processing that legally requires separate consent.

This Policy is governed by Wyoming law and applicable United States federal law, without removing mandatory data-protection or consumer rights in your jurisdiction. You may contact us first to resolve a concern; this does not limit your right to contact a regulator or use a court available under mandatory law.

• Company: AIGCBAR LLC
• Office: 30 N Gould St Ste N, Sheridan, WY 82801, USA
• Email: saas-service@aigc.bar
• Website: https://saas.aigc.bar

The English text is the full version of this Policy. The Chinese summary is provided for convenience. Mandatory language, transparency, and consumer-protection rules prevail over any inconsistent language-precedence provision.