隐私政策 / Privacy Policy

1. 我们是谁

AI Agents(下称“本服务”)是由 apipielabs.com 运营的 AI 助手自动化工具:用户用文字描述想要的任务,AI 生成一个可以按排程自动运行、也可以手动对话的“助手”,并可以连接公司真实使用的工具(例如 Gmail、Slack、Notion)来替用户完成操作。本政策说明我们收集哪些资料、如何使用,以及你可以如何联系我们。

2. 我们收集的资料

账号资料:你注册或登录时提供的电子邮件、姓名、头像。如果你选择用 Google 登录,我们只从 Google 取得基本资料(姓名、电子邮件、头像),不会读取你的 Gmail、云端硬盘、通讯录或其他 Google 数据。

公司与成员资料:你创建或加入的公司名称、成员名单及角色。

助手配置与对话:你给 AI 的任务描述、生成的助手设定(角色、指示、目标、排程)、你与助手的聊天记录。

运行记录:每次助手运行的触发方式、使用的模型、是否成功、AI 的最终回答,以及调用了哪些工具(例如“发了一封邮件”),但一般不包含该工具调用的完整原始内容。

已连接工具的授权状态:哪些第三方应用(如 Gmail、Slack)已经连接、由谁连接、连接是否有效。实际的登录凭证由 Composio(见下)代为保管,不经过我们的数据库。

使用记录:额度的使用情况。

技术资料:为运行和保护服务,主机服务可能记录访问时间、IP 地址和错误日志。

3. 我们如何使用资料

用于提供服务:让你登录、区分不同公司的数据、生成和保存助手、执行助手(包括需要时调用已连接的工具)、保存运行与聊天记录、计算和扣减使用额度,以及保护服务安全、排查故障。

我们不会出售你的个人资料,也不会把它用于投放广告。

4. 第三方服务,以及连接真实工具的特别说明

我们使用以下第三方,你的部分资料会由它们处理:Clerk(账号登录与公司成员管理)、Railway(网站主机与数据库)、OpenRouter(AI 模型服务,助手的任务描述、指示、聊天内容以及工具返回的结果会发送给你所选的模型用来生成回复)、Composio(负责连接和调用 Gmail、Slack、Notion 等第三方工具;你连接这些工具时,登录授权流程在 Composio 或该工具自己的官方网站上进行,我们不会看到或保存你的密码)、Revenue Monster(购买额度时的收款)、Google(仅当你选择用 Google 登录时)。它们各自有自己的隐私政策。

重要:当你让助手连接 Gmail、Slack 等真实账号后,助手在运行时可以读取、搜索,并且——如果你这样设置——发送邮件或消息、在日历建立事件等。这意味着该工具里的部分资料(例如邮件内容)会被传送给 AI 模型服务商用于生成回复,也会被摘要记录进运行记录里。请只连接你愿意让 AI 使用的账号,并仔细检查助手的指示内容。

本服务从 Google 取得的信息,仅用于创建和识别你的账号,并遵守 Google API 服务用户数据政策及其有限使用要求。

5. 公司内部的可见范围

本服务按“公司”使用。同一家公司里的成员,可以看到该公司的所有助手、聊天记录和运行记录,已连接的工具也由全公司共用。不同公司之间的数据互相隔离。请不要连接你不希望同事使用的账号,也不要在任务描述里放入你不希望同事看到的内容。

6. 请勿输入敏感资料;请谨慎授权高风险操作

你输入的内容会被发送给第三方 AI 服务处理。请不要在任务描述或指示中放入密码、密钥、身份证件号码或他人的个人资料。

AI 可能会误解指示或出错。对于会发送邮件、发布消息等有实际后果的操作,建议先用聊天方式测试助手的行为,并在指示中要求它在执行有风险的操作前先征求确认。

7. 保存、删除与断开连接

只要你的账号或公司仍在使用,我们就会保存相关资料。公司管理员可以在应用里删除助手(连同其聊天与运行记录)、随时断开已连接的工具。如需删除账号或整家公司的资料,请通过下方邮箱联系我们。

8. 安全

我们采取合理措施保护资料,例如通过加密连接传输、限制后台访问,工具的登录凭证由 Composio 保管而非我们自己存储。但没有任何网络服务能保证绝对安全。

9. 政策变更与联系我们

我们可能更新本政策,更新后会修改页面顶部的日期。

如有疑问、想查询或删除你的资料,请联系:celestwong0920@gmail.com

1. Who we are

AI Agents (the “Service”) is an AI agent automation tool operated by apipielabs.com: users describe a task in words, AI builds an agent that can run on a schedule or be chatted with on demand, and can connect to your company's real tools (e.g. Gmail, Slack, Notion) to act on your behalf. This policy explains what we collect, how we use it, and how to contact us.

2. Information we collect

Account information: the email, name and profile picture you provide when you sign up or sign in. If you choose Google sign-in, we receive only your basic profile (name, email, picture); we do not access your Gmail, Drive, contacts or other Google data through that sign-in.

Company and member information: the names of companies you create or join, and their member lists and roles.

Agent configuration and chat: the task description you give the AI, the generated agent configuration (role, instructions, objective, schedule), and your chat history with each agent.

Run records: how each run was triggered, which model was used, whether it succeeded, the AI's final answer, and which tools were called (e.g. "sent an email") — generally not the full raw content of that tool call.

Connected-tool authorization status: which third-party apps (e.g. Gmail, Slack) are connected, who connected them, and whether the connection is working. The actual sign-in credentials are held by Composio (below), not in our own database.

Usage records: how credits are used.

Technical information: our hosting provider may log access times, IP addresses and error logs to run and protect the Service.

3. How we use it

To provide the Service: sign you in, keep each company's data separate, build and save agents, run agents (including calling connected tools when needed), save chat and run history, count and deduct usage credits, and keep the Service secure and working.

We do not sell your personal information and do not use it for advertising.

4. Third-party services, and a specific note on connecting real tools

We rely on: Clerk (sign-in and company membership), Railway (hosting and database), OpenRouter (the AI model service — an agent's task description, instructions, chat content and what a connected tool returns are sent to the model you picked to generate a reply), Composio (connects and calls third-party tools such as Gmail, Slack and Notion; the sign-in/authorization flow for those happens on Composio's or that tool's own official site, and we never see or store your password), Revenue Monster (payment when buying credits), and Google (only if you use Google sign-in). Each has its own privacy policy.

Important: once you connect a real account such as Gmail or Slack, a running agent can read, search, and — if you set it up that way — send email or messages, create calendar events, and similar actions. That means some of that tool's data (e.g. email content) is sent to the AI model provider to generate a reply, and a summary is kept in the run record. Only connect accounts you are willing to have the AI use, and review an agent's instructions carefully.

Information received from Google is used only to create and identify your account, and adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. Visibility inside a company

The Service is used per company. Members of the same company can see all of that company's agents, chats and run history, and connected tools are shared by the whole company. Data is isolated between different companies. Do not connect an account you do not want colleagues to use through an agent, and do not put anything in a task description that you do not want colleagues to see.

6. Do not enter sensitive information; be careful what you authorize

What you type is sent to third-party AI services. Do not put passwords, API keys, identity numbers or other people's personal data in a task description or instructions.

AI can misunderstand instructions or make mistakes. For actions with real consequences (sending email, posting messages), test the agent's behaviour by chatting with it first, and tell it in its instructions to ask for confirmation before anything risky.

7. Retention, deletion and disconnecting

We keep your information while your account or company is active. A company administrator can delete an agent (with its chat and run history) and disconnect a connected tool at any time in the app. To have an account or an entire company's data deleted, contact us at the address below.

8. Security

We take reasonable measures to protect data, such as encrypted connections and restricted back-end access; connected-tool credentials are held by Composio rather than stored by us. No online service can be guaranteed to be completely secure.

9. Changes and contact

We may update this policy; the date at the top will change when we do.

Questions, or requests to access or delete your data: celestwong0920@gmail.com