V
VOO
隐私政策 (Privacy Policy)·服务条款 (Terms of Service)

VOO.run隐私政策 / Privacy Policy

中文版

生效日期：2026年9月26日

VOO Create（以下简称“我们”）运营VOO.run，包括网站voo.run、托管网页编辑器、桌面应用、浏览器扩展与相关服务（合称“VOO”）。本政策说明我们收集哪些信息、如何使用，以及你拥有哪些选择。

1. 我们收集的信息

1.1你提供的账号信息

  • 注册时的邮箱、显示名称、密码。密码以加盐的PBKDF2-SHA256哈希保存，我们不保存明文密码。
  • 你在个人资料中填写的头像链接、简介。

1.2通过Google或GitHub登录时获得的信息

  • Google：账号唯一标识（sub）、邮箱、姓名、头像。我们只请求 openid、email、profile 权限。
  • GitHub：账号ID、已验证的主邮箱、用户名、头像。我们请求 read:user 与 user:email 权限，且只采用“主邮箱且已验证”的邮箱，用于防止未验证邮箱接管已有账号。
  • 这些信息仅用于创建或登录你的VOO账号、显示你的名称和头像。我们不会读取你的Google云端硬盘、邮件、联系人，也不会读取GitHub仓库内容。

1.3会话信息

登录后我们生成随机会话令牌（有效期30天）。令牌保存在你的设备上，用于识别登录状态。

1.4积分与订单

  • 积分余额、积分流水（充值、兑换、消耗、退款）、兑换码使用记录。
  • 购买积分的订单信息（订单号、金额、支付渠道、状态）。支付由第三方支付机构处理，我们不接触、不保存你的银行卡号或支付密码。若开通新的支付渠道，我们会更新本条。

1.5 AI服务的用量记录

当你使用VOO积分调用AI模型时，我们记录用量元数据：调用的模型、接口路径、用量单位、成本与扣费、请求状态、耗时、时间。这些记录用于计费、对账与防滥用。 我们的用量记录不包含你的提示词或生成结果的内容。

1.6错误诊断信息（可关闭）

为发现和修复问题，应用可能回传崩溃与错误诊断：错误名称与信息、应用版本与运行形态、视口与像素比、功能开关状态、最近至多20条操作标识、时间。

  • 回传前会进行脱敏，不会发送：图片内容或图片数据链接、提示词与任何你输入的文本、API密钥与凭据、本地文件绝对路径。服务器收到后还会再次脱敏。
  • 默认开关：托管网页版默认开启（可在设置中关闭）；桌面应用、浏览器扩展默认关闭（需你主动开启）。
  • 同一错误在短时间内只上报一次，单次会话最多50条。

1.7我们不收集的信息

  • 你在本地创建的项目、画布、图片、视频与工作流文件默认保存在你的设备上，不会上传到我们的服务器。目前我们不提供云同步；若日后提供，将单独说明并征得你的同意。
  • 你自行填写的第三方API密钥（如各模型服务商的Key）保存在你本机的应用设置中，不会发送到我们的服务器。
  • 协作房间：多人协作的实时同步经服务器转发，服务器只在内存中记录房间成员，不保存文档副本，房间无人时即丢弃。

2. 我们如何使用信息

  • 提供并维护账号、登录、积分与计费；
  • 保障安全、防止滥用与欺诈；
  • 诊断并修复错误、改进产品；
  • 响应你的请求，遵守法律义务。

我们不出售你的个人信息，也不将其用于投放第三方广告。

3. 第三方与共享

  • AI模型服务商：当你使用VOO积分调用模型时，你的请求内容（提示词与素材）会经我们的服务器转发给上游模型服务商（目前包括DeepSeek与302.AI）处理。请阅读它们各自的隐私政策。若你使用自己的API密钥，请求由你的设备直接发往你选择的服务商。
  • 基础设施：我们使用Vercel托管网站与接口，使用PostgreSQL数据库保存账号与积分数据。
  • 登录服务：Google、GitHub（仅当你选择用它们登录）。
  • 法律要求：在法律法规要求或为保护我们与用户合法权益所必需时，我们可能披露必要信息。

4. 保存期限

  • 账号与积分数据：在账号存续期间保存；你申请注销后，我们会在合理期限内删除或匿名化，法律要求保留的除外（例如交易记录）。
  • 会话令牌：30天后过期。
  • 错误诊断：仅在排查和修复问题所需的期间内保存，之后删除或仅保留不含个人信息的聚合统计。

5. 你的权利

你可以访问、更正你的资料，关闭错误诊断回传，退出登录，或联系我们请求导出、删除你的数据与注销账号。请发送邮件至hello@voo.run。

6. 安全

密码哈希存储、会话令牌随机且有过期时间、密钥仅存于服务端环境、传输使用HTTPS。没有任何系统绝对安全，如发现安全问题请联系hello@voo.run。

7. 未成年人

VOO面向具备完全民事行为能力的用户。未满18周岁的用户应在监护人同意下使用。

8. 数据存储地区

我们使用第三方云服务商（Vercel及托管的PostgreSQL数据库）存储和处理数据，数据可能存储或处理于你所在国家或地区之外。使用服务即表示你理解并同意这一点。

9. Google用户数据声明

VOO对从Google API收到的信息的使用与转移，将遵守Google API服务用户数据政策，包括其中的“有限使用”要求。我们仅使用Google账号信息完成登录与显示你的账号资料，不将其用于广告，不出售，也不允许人工阅读，除非获得你的同意、为安全目的或法律要求。

10. 本政策的变更

我们可能更新本政策，重大变更会在网站上公示并更新生效日期。

11. 联系我们

VOO Create — hello@voo.run

English Version

Effective date: September 26, 2026

VOO Create ("we", "us") operates VOO.run, including the voo.run website, the hosted web editor, the desktop app, the browser extension and related services (together, "VOO"). This policy explains what we collect, how we use it, and the choices you have.

1. Information we collect

1.1 Account information you provide

  • Email, display name and password at sign-up. Passwords are stored only as salted PBKDF2-SHA256 hashes; we never store your plaintext password.
  • Avatar link and bio if you add them to your profile.

1.2 Information from Google or GitHub sign-in

  • Google: account identifier (sub), email, name, avatar. We request only the openid, email and profile scopes.
  • GitHub: account ID, your primary verified email, username, avatar. We request read:user and user:email, and only accept an email that is primary and verified, to prevent unverified emails from taking over existing accounts.
  • We use this solely to create or sign you in to your VOO account and display your name and avatar. We do not access your Google Drive, mail or contacts, or any GitHub repository content.

1.3 Session data

After sign-in we issue a random session token valid for 30 days, stored on your device to keep you signed in.

1.4 Credits and orders

  • Credit balance, credit ledger (top-ups, redemptions, usage, refunds) and redeem-code usage.
  • Order details for credit purchases (order number, amount, payment channel, status). Payments are handled by third-party payment providers; we never see or store your card number or payment password. If we add new payment channels we will update this item.

1.5 AI usage records

When you use VOO credits to call AI models we record usage metadata: the model, endpoint path, usage units, cost and charge, request status, latency and time. This is used for billing, reconciliation and abuse prevention. These records do not contain the content of your prompts or generated results.

1.6 Error diagnostics (can be turned off)

To find and fix problems the app may send crash and error diagnostics: error name and message, app version and mode, viewport and pixel ratio, feature flags, up to 20 recent action identifiers, and a timestamp.

  • Reports are sanitized before sending and never include image content or image data URLs, prompts or any text you typed, API keys or credentials, or absolute local file paths. The server sanitizes again on receipt.
  • Defaults: on for the hosted web app (you can turn it off in Settings); off for the desktop app and browser extension (opt-in).
  • Duplicate errors are throttled, with at most 50 reports per session.

1.7 What we do not collect

  • Projects, canvases, images, videos and workflows you create locally stay on your device and are not uploaded to our servers. We do not offer cloud sync today; if we add it later it will be described separately and require your consent.
  • Third-party API keys you enter are stored in your local app settings and are not sent to our servers.
  • Real-time collaboration is relayed through our server; it keeps only the room's members in memory, stores no copy of the document, and forgets the room once it is empty.

2. How we use information

To provide accounts, sign-in, credits and billing; to keep VOO secure and prevent abuse and fraud; to diagnose and fix errors and improve the product; and to respond to you and meet legal obligations. We do not sell your personal information or use it for third-party advertising.

3. Sharing and third parties

  • AI model providers: when you use VOO credits, your request content (prompts and inputs) is relayed through our servers to the upstream provider (currently DeepSeek and 302.AI). Please read their privacy policies. If you use your own API key, requests go directly from your device to the provider you choose.
  • Infrastructure: we host the site and API on Vercel and store account and credit data in PostgreSQL.
  • Sign-in providers: Google and GitHub, only if you choose them.
  • Legal: we may disclose information when required by law or to protect the rights of us and our users.

4. Retention

  • Account and credit data are kept while your account exists; after you request deletion we delete or anonymize it within a reasonable period, except where the law requires retention (for example transaction records).
  • Session tokens expire after 30 days.
  • Error diagnostics are kept only as long as needed to investigate and fix problems, then deleted or kept only as aggregate statistics without personal information.

5. Your rights

You can view and correct your profile, turn off error reporting, sign out, or contact us to export or delete your data and close your account at hello@voo.run.

6. Security

Password hashing, random expiring session tokens, upstream keys held only in the server environment, and HTTPS in transit. No system is perfectly secure; report security issues to hello@voo.run.

7. Children

VOO is intended for users with full legal capacity. Users under 18 should use it with a guardian's consent.

8. Where data is stored

We use third-party cloud providers (Vercel and a hosted PostgreSQL database) to store and process data, which may be stored or processed outside your country or region. By using the service you understand and accept this.

9. Google user data

VOO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google account information only to sign you in and display your profile; we do not use it for advertising, do not sell it, and do not allow humans to read it except with your consent, for security purposes, or as required by law.

10. Changes

We may update this policy. Material changes will be posted on the site with a new effective date.

11. Contact

VOO Create — hello@voo.run