GeSole 隐私政策
1. 数据控制者与联系方式
1.1 数据控制者：GenSpring Technology Limited（暂定名，以最终注册名称为准）。
1.2 联系邮箱：genflow@126.com（数据主体请求 30 天内响应）。
2. 我们收集哪些数据
2.1 账户数据（注册与登录时）：电子邮箱、密码（仅以 PBKDF2 哈希存储，明文不落库）、界面语言、首次登录所在国家或地区。
2.2 设备与许可数据（登录与授权续期时）：设备指纹（操作系统机器标识的 SHA256 哈希，不可逆）、计算机名、登录与令牌签发时间。
2.3 防滥用数据：IP 地址仅以加盐哈希形式用于限流计数（短期留存、按日滚动）；登录发码环节使用 Cloudflare Turnstile 人机校验。
2.4 交易数据：订单编号与订阅状态。支付由 Dodo Payments 处理，银行卡号等支付信息不进入我方系统。
2.5 可选产品数据（默认关闭，需您主动开启或逐次确认）：
a) 匿名使用统计：功能使用计数与系统版本信息（不含工程内容）；
b) 反馈内容：您填写的文本，及您主动勾选附带的视口截图（截图可能包含视口中的三维画面）与诊断信息（版本/系统/显卡，崩溃 traceback 可能含本地文件路径）。
2.6 网站联系表单：您自愿填写的描述与可选联系方式。
3. 病患与工程数据：本地处理
3.1 足模扫描、足压数据、测量值、工程文件（.spf）、客户档案与导出的生产文件，全部存储于您的本地设备。
3.2 软件不存在任何自动上传上述数据的通道；仅当您在反馈中主动勾选「附截图」时，视口画面才会随该次反馈发送。
4. 处理的法律依据（如适用 GDPR）
4.1 合同履行：账户、订阅与授权管理所必需。
4.2 合法利益：防滥用与产品安全改进。
4.3 同意：可选统计、反馈与诊断信息的发送（可随时撤回）。
5. 留存
5.1 账户数据于存续期内留存，注销后删除；依法须留存的交易与安全流水以匿名化或最小化形式保留。
5.2 限流计数按日滚动生成：KV 侧 24 小时自动过期；D1 计数行由每日清理例程删除，保留不超过 7 日。
6. 国际传输
6.1 服务部署于 Cloudflare 全球网络，运营团队位于中国内地。
6.2 对欧盟与英国用户，我们依托标准合同条款（SCC）等适当保障措施进行跨境传输。
7. 您的权利
7.1 您有权访问、更正、删除、携带、限制处理您的个人数据，并可随时申请注销账号。
7.2 行使渠道：genflow@126.com；如不满意，您可向所在地数据保护监管机构投诉。
8. 子处理者
Cloudflare（托管、CDN、人机校验、反馈文本的自动翻译）、Dodo Payments（支付处理）、Resend（邮件投递）。
9. 政策变更
重大变更将按《用户协议》第 10 条通知并要求重新确认。
GeSole Privacy Policy
1. Controller and Contact
1.1 Data controller: GenSpring Technology Limited (name provisional, subject to the final registered name).
1.2 Contact email: genflow@126.com (data subject requests are answered within 30 days).
2. Data We Collect
2.1 Account data (on registration and sign-in): email address, password (stored only as a PBKDF2 hash, never in plain text), interface language, and the country or region of first sign-in.
2.2 Device and licensing data (on sign-in and license renewal): a device fingerprint (a SHA256 hash of the operating system machine identifier — irreversible), computer name, and sign-in/token issuance times.
2.3 Anti-abuse data: IP addresses are used for rate limiting only, in salted-hash form (short-term retention, rolling daily); sign-in code delivery uses Cloudflare Turnstile human verification.
2.4 Transaction data: order numbers and subscription status. Payments are processed by Dodo Payments; card numbers and other payment credentials never enter our systems.
2.5 Optional product data (off by default; enabled only by you, either as a persistent setting or confirmed per submission):
a) Anonymous usage statistics: feature use counts and system version information (no project content);
b) Feedback content: text you write and, only if you opt in, an attached viewport screenshot (which may contain 3D content visible in the viewport) and diagnostic information (version/OS/GPU; crash tracebacks may contain local file paths).
2.6 Website contact form: the description and optional contact details you volunteer.
3. Patient and Project Data: Processed Locally
3.1 Foot scans, pressure data, measurements, project files (.spf), customer records, and exported production files are all stored on your local devices.
3.2 The software has no channel that automatically uploads such data; viewport images leave your device only if you explicitly attach a screenshot to a feedback submission.
4. Legal Bases for Processing (where GDPR applies)
4.1 Contract performance: necessary for account, subscription, and license management.
4.2 Legitimate interests: abuse prevention and product security improvement.
4.3 Consent: sending optional statistics, feedback, and diagnostics (withdrawable at any time).
5. Retention
5.1 Account data is retained for the life of the account and deleted upon account deletion; transaction and security logs that must be retained by law are kept in anonymized or minimized form.
5.2 Rate-limit counters roll daily: the KV side expires automatically after 24 hours; D1 counter rows are deleted by a daily cleanup routine and retained for no more than 7 days.
6. International Transfers
6.1 The Services run on Cloudflare's global network; our operations team is located in mainland China.
6.2 For users in the EU and the UK, cross-border transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs).
7. Your Rights
7.1 You may access, rectify, erase, port, and restrict the processing of your personal data, and may request account deletion at any time.
7.2 To exercise these rights, contact genflow@126.com; if you are unsatisfied, you may complain to your local data protection authority.
8. Sub-processors
Cloudflare (hosting, CDN, bot protection, automatic translation of feedback text), Dodo Payments (payment processing), Resend (email delivery).
9. Changes to This Policy
Material changes will be notified and require reconfirmation as described in Section 10 of the Terms of Service.