SERVICE INFORMATION
隐私政策
Privacy policy
01 · 适用范围 / Scope
本说明适用于 SFW Video Assistant 为指定客户及其获授权学生提供的视频工作台与 Facebook 主页 Messenger 接入。Facebook 自身的账号和消息处理由 Meta 的相关政策另行规定。
This notice covers the SFW Video Assistant workspace and Facebook Page Messenger integration for the designated customer and authorized students. Meta’s own policies separately govern Facebook accounts and messaging.
02 · 收集的资料 / Information collected
我们处理学生账号标识、与主页聊天的 Facebook PSID、消息事件标识与时间、上传的视频、图片和文件信息、分析结果及字幕草稿。为提供服务和排查故障，还记录登录、归档、访问及账号管理等必要操作信息。我们不会要求学生提供 Facebook 密码、Cookie 或访问令牌。
We process student account identifiers, Facebook Page-scoped IDs, message event identifiers and timestamps, uploaded videos, images and file details, analysis results, and draft subtitles. Necessary login, archive, access and account-management records support service operation and troubleshooting. Students are not asked for Facebook passwords, cookies or access tokens.
03 · 分析与用途 / Processing and purpose
资料用于接收视频、识别所属学生、生成视频重点、剪辑方案、转写与字幕草稿及管理层摘要，并提供预览和归档。点击确认归档之前，分析所需资料已经进入处理流程。本服务从视频中抽样提取画面，并在服务运行环境内进行语音转写。抽样画面与转写文本发送到已配置的模型接口（newapi.haixing.pro）生成报告；此流程不把原音频文件发送给该模型接口。图片会经尺寸限制、方向校正并移除元数据后发送至同一模型接口，生成摘要、重点和可读文字草稿；原图保存在服务端。选择 AI 相关内容搜索时，搜索词会发送至同一接口生成相关表达，再在你有权查看的摘要和文字中匹配；不会为该搜索将整座资料库发送给模型。搜索词及扩展词在服务内存中短时缓存（最长 5 分钟有效），不会写入资料库或操作日志。该接口可能涉及转发服务，我们不将请求中的不保存选项解释为上游绝不记录或保留数据。
Information is used to receive videos, identify their student owner, produce highlights, editing suggestions, transcript and subtitle drafts, and a management summary, and provide preview and archiving. Analysis takes place before the student confirms archiving. The service samples frames and transcribes audio within its processing environment. Sampled frames and transcript text are sent to the configured model API (newapi.haixing.pro) to produce a report; original audio files are not sent to this API in this workflow. Images are resized, orientation-corrected and stripped of metadata before being sent to the same API for summaries, key points and draft readable text; originals stay in service storage. AI related-content search sends the query to the same API for related phrases, then matches authorized reports locally; it does not send the entire library. Queries and expanded phrases have a short-lived in-memory cache (valid for at most five minutes), not database or audit-log storage. The API may involve an intermediary. A no-store request option is not a guarantee that upstream providers keep no logs or records.
04 · 谁能查看 / Who can access
学生只能查看自己的资料。学生确认具体分析版本归档后，客户获授权的管理层及系统管理员可以查看和下载原片、报告和字幕。运营维护人员可能因处理服务故障或删除申请而访问必要资料。已由接收者下载的副本需要接收者配合删除。
Students can access only their own submissions. After a student confirms archiving of a particular result version, the customer’s authorized managers and administrators can view and download the original, report and subtitles. Operations personnel may access necessary information for support or deletion requests. Copies already downloaded by recipients require those recipients’ cooperation to delete.
05 · 保存期限 / Retention
当前服务配置：未归档视频、图片及分析结果按提交时间保留 7 天；已归档视频、图片及结果按归档时间保留 30 天。到期由服务定期清理，停机期间顺延到服务恢复后的清理任务。未绑定的 Messenger 身份记录保留最多 7 天；登录会话有效期为 8 小时。操作记录和去重摘要可能保留用于安全与故障处理，删除申请会进一步清理可关联的记录。备份、Meta 消息和模型服务商持有的资料不受本地清理任务直接控制。
The current configuration retains unarchived videos, images and results for 7 days from submission, and archived videos, images and results for 30 days from archiving. Scheduled cleanup runs while the service is online and resumes after downtime. Unlinked Messenger identities are retained for up to 7 days; login sessions last 8 hours. Operational records and deduplication digests may be retained for security and troubleshooting; a deletion request also clears related identifiable records. Local cleanup does not directly control backups, Meta messages or data held by model providers.
06 · 安全与 Cookie / Security and cookies
公网访问使用 HTTPS；视频、图片和结果需要登录与权限校验。工作台使用必要的会话 Cookie，不使用广告追踪 Cookie。当前版本通过私有目录和访问控制保护服务端文件，未额外实现数据库或文件的应用层静态加密。请按个人账号使用访问码。网络服务、设备和第三方平台可能存在中断或安全风险。
Public access uses HTTPS, and videos, images and results require authenticated authorization. The workspace uses an essential session cookie and no advertising-tracking cookie. The current version protects server files with private directories and access controls; it does not add application-level encryption at rest for the database or files. Access codes should be used only by their assigned account holder. Networks, devices and third-party services can experience interruptions or security incidents.
07 · 联系与资料请求 / Contact and requests
如需查询、更正、停止处理或删除资料，请联系 syzz10@foxmail.com。删除申请步骤见数据删除说明。客户应在组织学生上传前说明用途，并按适用要求取得上传者及视频中相关人员的必要授权。服务用途、接收方或处理方式发生重大变化时，我们会更新本页并通知相关客户。
Contact syzz10@foxmail.com to request access, correction, cessation of processing or deletion. See the deletion instructions. The customer should explain the intended use and obtain necessary authorization from uploaders and people depicted before organizing submissions. Material changes to purpose, recipients or processing will be reflected here and communicated to the customer.