隐私政策 / Privacy Policy

保存中英文隐私政策全文 / Save the full Chinese and English privacy policy

中文

1. 我们是谁

JMECHO 由西安市高新区卷毛回声文艺创作部（个体工商户，经营者：李嘉彬）运营。我们是本政策所述 JMECHO 业务信息的个人信息处理者。官网：https://www.jmechoaudio.com/ 隐私与支持：lijiabin124@outlook.com，或官网“问题反馈”。

本政策涵盖网站下载、反馈、可选邮件订阅、自愿赞赏、购买及售后，以及 LiVocal 插件和授权服务。相应处理仅在功能开放且你使用时发生。LiLevel 仍为免费、安装即可使用的独立产品，官网安装包下载需注册并登录；安装后的 LiLevel 不需要账号、邮箱或插件授权验证，可离线使用。

2. 信息与用途

网站访问：连接 IP、访问时间、请求地址、浏览器或用户代理、来源页面及必要错误信息，用于提供网页和下载、安全防护及故障排查。浏览器本地存储记住语言；管理员登录另使用会话 cookie。你可在浏览器中清除这些数据，这可能重置语言或登录状态。

反馈与客服：你提供的邮箱、问题、产品、语言，以及可选称呼、使用环境和直接来信中的附件；另有工单、回复及处理状态。我们用其回复、排查和提供售后。请勿发送密码、设备私钥、无关身份证件或他人的无关个人信息。

账号与下载：注册时验证邮箱，保存邮箱、加盐密码摘要、验证状态与登录会话；不保存明文密码。下载请求使用会话 cookie 确认登录。注册时产品邮件选项默认勾选，可取消；取消不影响注册、下载、购买或必要服务通知。具体说明见 /account/privacy。

可选订阅：邮箱、语言、同意和退订时间及相关领取记录，用于你选择接收的产品更新。下载、试用、付款或收到服务邮件，不表示同意营销；你可以随时退订。

交易与交付：邮箱验证记录、商品、订单和支付交易号、金额、币种、付款与交付状态、条款及数字交付确认，以及必要的退款、发票和争议资料。赠送及优惠另涉及赠送参考号、权益、优惠券摘要、邮箱匹配值、使用或撤销记录和折扣审计，用于正确交付、防滥用、对账及售后。自愿赞赏保存必要订单、金额、来源和付款状态，不改变 LiLevel 的免费使用条件。

LiVocal 授权：本机生成的设备公钥、产品专用设备标识、你提供的设备名称和平台、试用及许可时间和状态、受保护的激活码记录、设备槽位、激活、停用、迁移和必要审计。用于试用、验证许可、防重放、换机和恢复。当前授权协议不上传音频、录音、工程内容、硬件序列号或通用硬件指纹；试用不要求先注册账户或提供姓名。设备私钥不随授权请求发送，请勿交给客服。

应用会对限流所需的 IP、邮箱或设备标识作带密钥的用途隔离哈希。相关限流表不保存明文 IP，但服务器、代理及服务商仍能看到连接 IP，并可能另行记录。公钥、产品专用标识和哈希可关联请求，不是真正匿名信息。我们不出售个人信息，也不将授权信息用于营销画像。

3. 联网与处理依据

试用在首次成功签发后连续计算七日，需要在启动、每个新的 DAW 进程启动及短许可刷新时联网；短许可最长 24 小时，且不超过试用结束时间。试用不会自动购买或扣款。没有有效许可且无法完成必要核验时，插件会提示激活并不能输出音频。付费离线使用以有效权益和购买条款为准。

授权辅助程序需要自身获准联网，不绕过系统防火墙。拒绝必要信息处理可能使相应验证、付款、交付或支持无法完成，但不影响阅读公开资料、行使隐私权利或使用不依赖该信息的功能。

我们依照适用法律，为订立、履行你请求的交易或服务、履行法定义务，或者基于你的同意处理信息。营销订阅以自愿同意为基础；依法需要单独同意的，在相应处理前单独取得。阅读本政策不是对所有处理的概括同意，撤回营销同意不影响购买、许可或客服。

4. 服务商与处理地区

腾讯云：网站业务数据库和 LiVocal 授权服务托管于中国香港地域，涉及提供上述服务所必要的业务及连接信息。我们管理业务数据与访问权限，腾讯云提供基础设施。业务数据请求可先联系 JMECHO；腾讯云公开隐私联系为 cloudlegalnotices@tencent.com，服务主体及其处理规则见腾讯云隐私政策。

Resend（Plus Five Five, Inc.）：处理实际收件邮箱、主题、正文和必要投递数据，代发验证码、付费或赠送激活码、客服回复及另行订阅的更新。正文可包含验证码、激活码、订单或赠送参考号、金额和回复内容。客户邮件数据在美国存储，不随发送地域选择而改变。我们当前使用 Free 套餐；按其公开规则，常规邮件及日志保留 30 日，供应商备份另有 7 日周期，账户、安全及依法保存资料按对应类别处理。如邮件设置生成打开或链接点击事件，这些也属于可关联收件人的邮件数据，适用其相应政策；你可向我们询问及提出处理请求。联系：support@resend.com；2261 Market Street #5039, San Francisco, CA 94114, USA。

微信支付（财付通支付科技有限公司）：处理收款所需商品、金额、币种、商户订单和交易关联信息，并向我们返回交易号及付款状态。Native 扫码下单不向其发送订单邮箱或设备公钥；如你使用另行开放的 H5 或微信内支付，相关渠道还需处理客户端 IP 或 OpenID。支付机构另按自身政策处理支付账户、身份和交易信息。我们不要求你向 JMECHO 提供支付密码、银行验证码或完整银行卡资料。隐私联系：Tenpay_dataprivacy@tencent.com；客服 95017。

Outlook（Microsoft）：发往上述支持邮箱的邮件由其处理地址、正文、附件和邮件元数据。Microsoft 的公开政策允许在美国及其或服务商设施所在的其他地区处理，并按服务、法律及安全需要保存；不应将这些邮件视为仅存在香港网站数据库中。你可通过 JMECHO 或 Microsoft 隐私声明中的请求入口行权。

香港托管、美国邮件及上述客服链路涉及中国内地用户信息的境外处理。我们按本节所述接收方、目的和信息范围提供必要信息，并履行适用的告知、同意及其他保护义务。依法无需同意的必要处理，仍不免除相应告知和保护责任。你可先联系 JMECHO，经必要身份核验后由我们协助向相应服务商查询、复制、更正或删除，或使用其公开渠道。

除提供服务所必要的受托处理、你授权的处理或法律要求外，我们不向无关第三方提供信息。支付机构等独立服务的处理适用其自身政策；如发生业务转让等事项，我们依法告知接收方和后续安排。

5. 保存与删除

我们按数据类别适用以下规则，不把所有信息保存到同一个期限：

试用防重复记录：仅保留必要的产品专用身份和相关试用记录，从最后一次成功签发或续验试用许可起保存 24 个月，到期后按定期清理批次删除或不可逆匿名化。到期删除后可能再次获得试用资格；普通后台维护不延长该期限。

一般安全审计：自事件发生起保存 6 个月；依法必须更久保存或处理尚未解决事件所必需的部分另行受限保存。普通网站访问日志按已配置的日轮转保留 14 份归档，不等于所有系统日志都在第 14 天删除，也不替代适用安全记录的保存义务。

普通客服与反馈：结案后保存 3 年。已进入退款、投诉或争议程序的必要证据，按相应事项及法定要求另行处理，不因此无限延长全部来信的保存。

付费或赠送许可：权益及必要恢复记录在许可有效和恢复确有必要期间保存。终止、退款或删除请求后，区分可以删除的设备及恢复材料与依法仍须保留的交易证据。

交易和会计资料：按适用法定类别及其起算、保管要求保存，不把整库的邮箱、设备和试用记录都当作会计档案。不存在法定留存要求且履约、对账或争议目的已完成的普通副本，在不再必要时删除或匿名化。

订阅：撤回后停止营销发送；退订不等于立即删除邮箱，仅保留执行退订和证明相应选择所必要的信息，并在不再必要时删除或匿名化。

临时验证记录：验证码、挑战、限流等具有各自有效期和短期清理条件；到期的临时数据在相应清理中分批删除。购买验证码有效 10 分钟，其校验记录在验证码到期且创建满 24 小时后符合清理条件；授权限流记录创建超过 48 小时后符合清理条件。有效期不等于精确删除时刻，这些临时规则也不适用于持久权益或订单。

备份与供应商副本：本地数据库日备份是受访问权限限制的压缩副本，压缩本身不等于加密。符合安全检查且文件龄超过 30 个整日的副本，在后续备份任务中淘汰；活动数据删除不会立即清除已有备份。恢复后应重新落实适用的删除或限制处理要求。供应商副本依其相应类别规则处理，不能将我们的客服期限或邮件供应商期限等同于所有副本同时消失。

期限届满或目的不再必要时，我们删除或匿名化；依法仍须保留或暂时难以删除的部分，限制为必要存储和安全保护，不继续用于营销。你可以询问与你有关的具体类别、起算时间及依法保留理由。

6. 权利、安全与更新

你可以通过第 1 节渠道请求了解和解释规则、查阅、复制、更正、补充、依法删除、限制或拒绝处理，或撤回基于同意的处理；符合适用条件时可请求转移。我们只进行与请求相称的身份核验，在适用期限内处理；不能满足时说明理由和可用救济。你也可向有管辖权的个人信息保护监管部门投诉或依法寻求司法救济。

营销邮件可通过其中的退订入口或联系 JMECHO 退订。撤回不影响此前依法进行的处理。删除设备绑定或恢复资料可能影响后续验证、换机或找回，我们会事先说明，不据此不合理拒绝法定权利。普通卸载不保证删除本机身份或服务器记录。

我们采取 HTTPS、访问控制、最小权限、受保护的授权记录及备份等安全措施，但不保证绝对安全；发生信息安全事件时依法补救、告知和报告。本产品不主要面向不满 14 周岁的未成年人，相关处理需依法取得监护人同意并采取专门保护。

重大政策变更会在网站清楚告知并更新版本；需要新同意的处理不会仅凭政策更新追溯取得同意。

English

1. Who we are

JMECHO is operated by 西安市高新区卷毛回声文艺创作部, an individual business operated by 李嘉彬. We are the controller of JMECHO business information described here. Website: https://www.jmechoaudio.com/ Privacy and support: lijiabin124@outlook.com or the website feedback form.

This policy covers downloads, feedback, optional subscriptions, voluntary support payments, purchases and after-sales service, and LiVocal licensing. A feature's processing applies when it is available and you use it. LiLevel remains a separate free product, usable after installation; website installer downloads require a registered account and sign-in. Once installed, LiLevel needs no account, email or plug-in licence verification and works offline.

2. Information and purposes

Website connections involve IP addresses, times, requested addresses, browser/user-agent details, referring pages and necessary errors for delivery, security and troubleshooting. Browser local storage remembers language; administrator login uses a session cookie. Clearing these may reset language or login state.

Support involves your email, issue, product and language, optional name/environment and emailed attachments, plus tickets, replies and status. These support responses, troubleshooting and after-sales service. Do not send passwords, device private keys, unnecessary identity documents or unrelated information about others.

Accounts and downloads: registration verifies your email. We store email, salted password hash, verification status and revocable login sessions, not plaintext passwords. Downloads use the session cookie to verify sign-in. Product emails are preselected at registration and may be unchecked without affecting registration, downloads, purchases or necessary service messages. See /account/privacy.

Optional subscriptions involve email, language, consent/unsubscribe times and related claim records for updates you choose. Downloads, trials, payments and service emails are not marketing consent. You may unsubscribe at any time.

Commerce involves email verification, product, order/payment references, amount, currency, payment/delivery status, terms and digital-delivery confirmations, and relevant refund, invoice or dispute records. Grants and coupons also involve references, entitlements, coupon digests, email-match values, use/revocation and discount audits for delivery, abuse prevention, reconciliation and support. Voluntary support payments retain necessary order, amount, source and status records without changing LiLevel's free-use conditions.

LiVocal licensing involves a locally generated device public key, product-scoped identifier, supplied label/platform, trial and licence times/status, protected activation-code records, device slots, activation/deactivation/migration and necessary audits. These enable trials, verification, replay prevention, migration and recovery. The current protocol does not upload audio, recordings, projects, hardware serial numbers or a general hardware fingerprint. Trials need no registered account or name. Device private keys are not sent with licensing requests; do not send them to support.

Application rate controls use purpose-separated keyed hashes of IPs, emails or device identifiers. Relevant rate-limit tables exclude raw IPs, but servers, proxies and providers can see and separately record them. Public keys, identifiers and hashes remain linkable, not anonymous. We do not sell personal information or use licensing data for marketing profiling.

3. Connectivity and grounds for processing

The seven-day trial runs continuously from first successful issuance and needs Internet access at start, each new DAW-process launch and short-lease refresh. A lease lasts at most 24 hours and never beyond trial expiry. Trials never automatically purchase or charge. Without a valid entitlement and required verification, the plug-in prompts for activation and cannot output audio. Paid offline use follows valid entitlements and purchase terms.

The separate helper needs permitted Internet access and does not bypass system firewalls. Declining required processing may prevent the corresponding verification, payment, delivery or support, not public information, privacy requests or independent features.

Under applicable law, we process information to enter into or fulfil requested transactions/services, meet legal duties, or with your consent. Marketing requires voluntary consent. Where separate consent is required, it is obtained before that processing. Reading this policy is not blanket consent. Marketing withdrawal does not affect purchases, licences or support.

4. Providers and locations

Tencent Cloud hosts our business database and LiVocal licensing in Hong Kong, China, involving necessary business and connection information. We manage data and access; Tencent Cloud provides infrastructure. Contact JMECHO about our data or cloudlegalnotices@tencent.com for Tencent Cloud privacy matters. Its policies identify service entities and their practices.

Resend (Plus Five Five, Inc.) processes actual recipient addresses, subjects, contents and delivery data for verification/activation codes, service replies and opted-in updates. Contents may include codes, order/grant references, amounts or replies. Customer email data is stored in the United States regardless of sending region. Our account uses the Free plan: published rules provide 30-day ordinary email/log retention and a separate 7-day provider-backup cycle; account, security and legally retained information follow their categories. If mail settings generate open or link-click events, these are also recipient-linkable mail data governed by the relevant provider policy; you may ask us about them or make a privacy request. Contact: support@resend.com; 2261 Market Street #5039, San Francisco, CA 94114, USA.

Weixin Pay (Tenpay Payment Technology Co., Ltd.) receives necessary product, amount, currency, merchant-order and transaction-linking information and returns transaction references/status. Native QR order requests do not send order emails or device public keys. If you use separately available H5 or in-Weixin payments, those channels additionally process client IP or OpenID. Tenpay separately processes payment-account, identity and transaction information under its policy. JMECHO does not request payment passwords, bank verification codes or full card details. Privacy: Tenpay_dataprivacy@tencent.com; service line: 95017.

Outlook (Microsoft) processes addresses, contents, attachments and mail metadata sent to our support mailbox. Microsoft's policy permits processing in the United States and other locations with its or its providers' facilities, with service-, legal- and security-related retention. These messages are not held solely in our Hong Kong website database. Contact JMECHO or Microsoft's privacy-request channel.

Hong Kong hosting, US email and the support-mailbox chain involve international processing for mainland China users. We provide necessary information for the recipients, purposes and scope described here and fulfil applicable notice, consent and protection duties. A lawful non-consent basis does not remove applicable notice or protection duties. You can contact JMECHO first; following proportionate verification, we can assist with provider access, copying, correction or deletion, or you may use their public channels.

We do not disclose data to unrelated parties except necessary service processing, your authorisation or legal requirements. Independent services such as payment institutions follow their own policies. We provide legally required recipient and continuity notices for business transfers.

5. Retention and deletion

Different categories follow different rules:

Trial anti-repeat records: minimum product-scoped identity and relevant trial history are retained for 24 months from the last successful issuance or renewal of that trial, then deleted or irreversibly anonymised in scheduled cleanup passes. Deletion can permit another trial; ordinary maintenance does not extend this period.

General security audits: 6 months from the event, with necessary restricted exceptions for longer legal duties or unresolved incidents. Ordinary website access logs use daily rotation with 14 archives; this neither means all logs disappear on day 14 nor replaces applicable security-record duties.

Ordinary support and feedback: 3 years after closure. Necessary refund, complaint or dispute evidence follows the relevant matter and legal rules, not an indefinite extension for every message.

Paid or complimentary licences: entitlement and necessary recovery records remain while the licence is valid and recovery genuinely requires them. After termination, refund or deletion requests, deletable device/recovery material is separated from legally required transaction evidence.

Transaction and accounting records: applicable legal categories determine periods and their starting points. The whole email/device/trial database is not an accounting archive. Ordinary copies without legal-retention duties are deleted or anonymised once fulfilment, reconciliation and dispute purposes no longer require them.

Subscriptions: marketing stops after withdrawal. Unsubscribing does not instantly erase an email; only information necessary to honour and evidence the choice is retained, then deleted or anonymised when no longer necessary.

Temporary verification: codes, challenges and rate controls have distinct validity and short-term cleanup conditions. Eligible records are deleted in bounded passes. Purchase codes last 10 minutes; verification rows qualify after expiry and 24 hours from creation. Licence rate events qualify after more than 48 hours from creation. Validity is not an exact erasure deadline, and temporary rules do not cover durable entitlements or orders.

Backups and provider copies: daily local database backups are access-restricted compressed copies; compression itself is not encryption. Copies passing safety checks and older than 30 full days are retired by later backup jobs. Live deletion does not immediately remove existing backups. Restores should reapply relevant deletion or processing restrictions. Provider copies follow their category-specific rules; neither our support period nor one email-provider period means all copies disappear together.

At expiry or when no longer necessary, we delete or anonymise. Information legally retained or temporarily impracticable to erase is restricted to necessary storage and security, not continued marketing. You may ask about the category, starting point and legal-retention reason relevant to your information.

6. Rights, security and changes

Use section 1's channels to request explanations, access, copies, correction, supplementation, lawful deletion, restriction/objection, consent withdrawal or portability where applicable. We verify identity proportionately and respond within applicable deadlines, explaining refusals and remedies. You may complain to the competent data-protection authority or seek judicial remedies.

Unsubscribe using a marketing message's option or contact JMECHO. Withdrawal does not invalidate prior lawful processing. Removing device bindings or recovery material may affect verification, migration or recovery; we explain this beforehand and do not unreasonably deny legal rights. Ordinary uninstall does not guarantee deletion of local identity or server records.

HTTPS, access controls, least privilege, protected licensing records and backups reduce risk but cannot guarantee absolute security. We take legally required remedial, notification and reporting action for incidents. The product is not primarily directed to children under 14; their information requires applicable guardian consent and special protection.

Material changes are clearly notified on the website with an updated version. A policy update does not retrospectively obtain new consent.

供应商政策与行权渠道 / Provider policies and rights channels

腾讯云 / Tencent Cloud: https://cloud.tencent.com/document/api/301/11470 腾讯云国际服务 / Tencent Cloud international services: https://intl.cloud.tencent.com/zh/document/product/301/17345?lang=zh Resend 隐私与联系 / privacy and contact: https://resend.com/legal/privacy-policy Resend 数据及保留 / data and retention: https://resend.com/security/gdpr Resend 邮件跟踪 / email tracking: https://resend.com/docs/dashboard/domains/tracking 财付通 / Tenpay: https://www.tenpay.com/v3/helpcenter/low/privacy.shtml Microsoft: https://www.microsoft.com/en-us/privacy/privacystatement

返回首页 / Back to home