01 / 适用范围
01 / Scope
本政策适用于 Softmap 网站、前台工作台及相关账号服务。使用 Gmail 或 QQ 邮箱授权码连接发件邮箱是可选操作；不连接也可以使用无需发件授权的功能。服务由 Softmap 团队提供，如需确认运营主体或提出隐私请求，请使用本页末尾的联系地址。
This policy applies to the Softmap website, workspace and account services. Connecting a Gmail or QQ Mail sender with an app password or authorization code is optional. Features that do not require sending authorization remain available without it. Contact the Softmap team at the address below for operator details or privacy requests.
02 / 我们处理的数据
02 / Data we process
- 账号与安全：邮箱、认证标识、会话及必要的安全日志，用于登录、维护账号和防止滥用。
- 工作台内容：你输入的问题、AI 对话、工作流任务、保存的联系人快照、触达模板和草稿，用于提供你请求的功能和恢复记录。
- 公开商家信息：搜索结果可能包含商家名称、地址、公开联系方式等。公开可见不等于该商家同意接收营销邮件。
- 使用信息：必要的请求时间、错误信息及用量记录，用于排障、安全和服务计费；不应将密钥或完整令牌写入普通日志。
- Account and security: email, authentication identifiers, sessions and necessary security logs for sign-in and abuse prevention.
- Workspace content: prompts, AI conversations, workflow tasks, saved business-contact snapshots, message templates and drafts to provide requested features and restore records.
- Public business data: search results can include business names, addresses and publicly listed contact details. Public availability is not marketing consent.
- Service records: request times, errors and usage records needed for support, security and billing; credentials and complete tokens should not appear in ordinary logs.
AI 功能可能将完成任务所需的输入发送给配置的模型或数据服务提供方。请勿在提示词或草稿中提交不必要的敏感个人信息；AI 生成内容应由用户审核。
AI features may send the inputs needed for a requested task to configured model or data providers. Avoid including unnecessary sensitive personal data in prompts or drafts, and review AI-generated content before use.
03 / Gmail 与 QQ 邮箱授权码
03 / Gmail and QQ Mail sender credentials
我们访问哪些数据
Data we access
只有你选择绑定邮箱并提交凭据时，我们才收到你填写的 Gmail 或 QQ 邮箱地址，以及对应的 Google 应用专用密码或 QQ 邮箱 SMTP 授权码。绑定前服务端只向所选邮箱服务商的固定 TLS SMTP 端点验证身份：Gmail 使用 smtp.gmail.com:465，QQ 邮箱使用 smtp.qq.com:465。我们不要求你提供邮箱的日常登录密码，不请求 Google OAuth/API 权限。邮箱绑定有效期间，服务器会定时使用同一授权码连接固定 IMAP 端点（Gmail：imap.gmail.com:993，QQ：imap.qq.com:993）同步联系人业务往来；在线通常每分钟检查、离线每 15 分钟检查，失败时降低重试频率。首次分批读取最近 90 天邮件头，之后按文件夹 UID 增量检查，每批每文件夹最多 100 封、每封原始消息最多 2 MB。服务端先用完整邮箱地址和回复线程筛选，只有能唯一归到本账号联系人的邮件正文才保存，无关个人邮件正文不导入。匹配邮件的发件人、收件人、主题、时间、线程标识及文本正文保存在账号隔离记录中；附件不保存，HTML 仅提取文本，不执行脚本。站内未读与通知用于红点和在线推送，打开具体邮件才标站内已读，不改变 QQ/Gmail 本身的已读标记。
Only when you submit a sender connection do we receive the Gmail or QQ Mail address you enter and its Google app password or QQ Mail SMTP authorization code. The server verifies credentials against only the selected provider's fixed TLS SMTP endpoint: smtp.gmail.com:465 for Gmail or smtp.qq.com:465 for QQ Mail. We do not ask for your ordinary sign-in password or request Google OAuth/API permissions. While the mailbox remains connected, the server periodically uses that credential with fixed IMAP endpoints (imap.gmail.com:993 or imap.qq.com:993) to sync business correspondence: typically every minute online and every 15 minutes offline, with slower retries after failures. Initial sync reads the last 90 days of headers in batches; later syncs use folder UID cursors, up to 100 messages per folder per batch and 2 MB per raw message. Exact addresses and reply threads are checked first; readable bodies are retained only when they uniquely match this account's contacts. Unrelated personal message bodies and attachments are not imported; HTML is converted to text and scripts are never executed. Matching addresses, subject, date, thread identifiers and text bodies are stored in account-isolated records. In-app unread state and durable notifications support badges and live updates; opening a message marks it read in Softmap without changing QQ/Gmail read flags.
用途与共享
Use and sharing
连接邮箱地址用于显示绑定状态。仅当你主动点击“发送测试邮件”时，服务端才使用已绑定的授权码通过对应邮箱服务商的 SMTP 服务向你的 Softmap 账号邮箱发送固定测试内容；不会自动向商家联系人发信。账号已保存且有有效邮箱的联系人可进入发送预览，无需 Softmap 额外测试授权；用户核对人数、逐人文案和排除原因后再次确认，再通过绑定邮箱投递；发信受套餐单次人数及每日额度限制，免费默认每批 2 人、UTC 每日 10 封；触达、回复和测试信共用额度，失败或不确定的尝试也计入。联系人邮箱不会触发自动发件，用户仍须主动确认，明确禁止联系者会排除。准备批次会存储冻结的收件人及文案、发件连接引用和有效期；发送后的邮件结果与正文按账号及联系人隔离保存到触达记录。你在已同步的来信中明确填写并提交回复时，服务端会从当前绑定邮箱向原来信匹配的联系人地址发送回复，并记录发送结果；收件人不能在回复表单中修改。该操作会把发件与收件地址和邮件内容提供给相应邮箱服务商以完成发送。我们不向广告商、数据经纪商、其他用户或 AI 模型提供授权码，也不出售发件邮箱数据或用于训练通用 AI 模型。
The connected address identifies the sender in settings. When you click “Send test email”, the server uses its stored credential to send a fixed test message to your Softmap account email. It never automatically emails business contacts. Saved contacts with valid addresses can enter the sending preview without an additional Softmap test-authorization step. You review recipient counts, individual content and exclusions and confirm before sending through the connected mailbox, controlled by plan recipient and daily limits. The free plan defaults to 2 recipients per batch and 10 messages per account per UTC day, shared by outreach, replies and test messages; failed or uncertain attempts also count. Saved addresses do not trigger automatic sending; user confirmation is required and contacts marked do-not-contact are excluded. Prepared batches store frozen recipients/content, sender credential references and an expiry; sent content and outcomes are stored in account/contact-isolated outreach records. If you explicitly submit a reply to a synced incoming message, the server sends it from the current connected mailbox to the contact address in that message and stores the outcome; the reply form cannot change the recipient. The sending provider receives the sender and recipient addresses and message content to deliver your request. We do not share authorization codes with advertisers, data brokers, other users or AI models, sell sender data, or use it to train generalized AI models.
保护、保留与删除
Security, retention and deletion
连接邮箱、服务商类型、连接状态和邮件往来快照按账号与联系人隔离保存在业务数据库；授权码仅在服务端验证通过后写入受限的 SecretStore，不通过状态接口返回浏览器，不写入普通日志。站点请求使用 HTTPS，SMTP 连接使用 TLS。连接有效期间保留授权码；你可在“设置 → 触达设置”断开，服务端先禁用该连接，再删除对应凭据。如果删除失败，连接仍不可用于发件或自动同步。断开不会删除已经保存的邮件往来快照，这些记录按本政策的一般保留与删除条款处理；可通过联系邮箱申请删除。你也可在 Google 或 QQ 邮箱账号设置中撤销该授权码，或从注册邮箱向 hello@softmap.ai 请求处理数据。
The sender address, provider, connection status and correspondence snapshots are stored in a database isolated by account and contact. The authorization code is written to restricted server-side SecretStore only after verification; it is not returned by the status API or recorded in ordinary logs. Website requests use HTTPS, and SMTP uses TLS. Credentials are retained while connected. Disconnecting in Settings → Outreach settings disables the connection before deleting the credential; if deletion fails, sending and automatic sync remain blocked. Disconnecting does not delete correspondence snapshots already stored; those follow the retention/deletion terms below and can be included in your deletion request. You may also revoke the authorization code in your Google or QQ Mail account or request assistance from your registered address at hello@softmap.ai.
发件凭据仅用于用户主动请求的功能，不会出售、用于广告定向、训练通用 AI 模型或生成未经同意的私密影像（AI NCII）。
Sender credentials are used only for user-requested functions; they are not sold or used for ad targeting, generalized AI training or non-consensual intimate imagery (AI NCII).
05 / 你的选择与权利
05 / Your choices and rights
你可以选择不绑定发件邮箱、在工作台管理草稿、断开发件账号或在 Gmail/QQ 邮箱设置中撤销相应的应用专用密码或授权码。若需账号数据副本、删除账号或提出隐私问题，请从注册邮箱发送请求；我们可能需要核验你的身份再处理。法律规定的访问、更正、删除或限制处理权利，按适用地区的要求执行。
You may choose not to connect a sender, manage drafts in the workspace, disconnect the sender, or revoke its app password or authorization code in Gmail/QQ Mail settings. For account data, deletion or privacy questions, write from your registered email; we may verify your identity before acting. Rights to access, correct, delete or restrict processing apply as required by your jurisdiction.
06 / 联系与政策更新
06 / Contact and policy updates
隐私问题、数据请求与发件邮箱绑定相关疑问可发送至 hello@softmap.ai。如果服务或处理方式发生重大变化，我们会更新本页日期，并在适当情况下通过产品或邮件通知。
Send privacy requests and questions about sender connections to hello@softmap.ai. If the service or processing changes materially, we will update this page and provide an in-product or email notice where appropriate.