Wefluens · Platform Hub
Privacy Policy隐私政策
Effective date: June 15, 2026生效日期：2026 年 6 月 15 日
1. Who we are & what this policy covers1. 我们是谁 · 本政策的适用范围
Wefluens (“Wefluens,” “we,” “us,” or “our”) operates the Wefluens Platform Hub (the “Hub”) — an internal portal through which authorized Wefluens and Rarifly team members sign in and launch the company’s internal tools (proposal generation, talent discovery, deal tracking, training, recruitment, and related apps) and submit product feedback. This Privacy Policy explains what the Hub collects, how we use and protect it, and the choices you have. It is specific to the Hub and supplements the general Wefluens Privacy Policy at wefluens.com/privacy-policy; where this document is silent, the general policy applies.Wefluens（以下称“Wefluens”“我们”）运营 Wefluens 平台中心（以下称“Hub”）——一个供获授权的 Wefluens 与 Rarifly 团队成员登录、进入公司内部工具（提案生成、达人发现、合作追踪、培训、招聘及相关应用）并提交产品反馈的内部门户。本隐私政策说明 Hub 收集哪些信息、如何使用与保护，以及你享有的选择权。本政策仅针对 Hub，是 wefluens.com/privacy-policy 上 Wefluens 通用隐私政策的补充；本文件未涵盖之处，以通用政策为准。
The Hub is an internal, invitation-based tool: registration is restricted to @wefluens.com and @rarifly.us email addresses. It is not a consumer product and is not directed to the general public.Hub 是面向内部、基于邀请的工具：注册仅限 @wefluens.com 与 @rarifly.us 域名邮箱。它并非面向公众的消费级产品。
2. Information we collect2. 我们收集的信息
We collect only what is needed to run an internal staff portal. We do not ask for, and you should not enter, sensitive personal information (e.g., government IDs, health, or payment-card data).我们只收集运营内部员工门户所需的信息。我们不会索取、你也不应填入敏感个人信息（如身份证件、健康或银行卡信息）。
| Category类别 | What it includes具体内容 |
|---|---|
| Account & profile账号与资料 | Username, work email (@wefluens.com / @rarifly.us), display name, and your password (stored only as a salted PBKDF2-SHA-256 hash — we never store or see your plaintext password). We also record account-created and last-login timestamps.用户名、公司邮箱（@wefluens.com / @rarifly.us）、显示名称，以及你的密码（仅以加盐的 PBKDF2-SHA-256 哈希存储——我们绝不存储或查看你的明文密码）。我们还记录账号创建时间与最后登录时间。 |
| Session & security会话与安全 | A strictly-necessary hub_session cookie (HttpOnly, SameSite=Strict) holding a session reference; on our servers we store only a hash of the session token and its expiry. Password-reset requests generate a one-time, hashed, time-limited reset token.一个严格必要的 hub_session Cookie（HttpOnly、SameSite=Strict），承载会话引用；服务端仅存储会话令牌的哈希值及其有效期。密码重置请求会生成一次性、经哈希、有时限的重置令牌。 |
| Feedback you submit你提交的反馈 | When you use the in-Hub Feedback Center: the feedback type, subject, details, the panel/section it relates to, language, your username (attached automatically), and any image attachments you upload (PNG/JPEG/GIF/WebP, validated by file signature). Resolve/reopen/delete actions are logged with the acting user’s name.当你使用 Hub 内的反馈中心时：反馈类型、主题、详情、所涉面板/板块、语言、你的用户名（自动附加），以及你上传的图片附件（PNG/JPEG/GIF/WebP，按文件签名校验）。标记完成/重开/删除等操作会连同操作者姓名一并记录。 |
| Platform-status changes平台状态变更 | When a signed-in user changes a platform card’s status badge, we record the card, the new status, the timestamp, and the username that made the change.当登录用户更改某张平台卡片的状态徽标时，我们记录该卡片、新状态、时间戳，以及作出更改的用户名。 |
| Technical & anti-abuse技术与反滥用 | Standard request metadata that any website receives — including IP address (used for sign-in / registration / reset rate-limiting), browser/user-agent, and access time — processed by our hosting provider. Your language and theme preferences live only in your browser’s local storage (hub-lang, hub-theme) and never reach our servers.任何网站都会收到的标准请求元数据——包括 IP 地址（用于登录/注册/重置的限速）、浏览器/User-Agent、访问时间——由我们的托管服务商处理。你的语言与主题偏好仅保存在浏览器本地存储（hub-lang、hub-theme）中，不会上传到我们的服务器。 |
3. How we use your information3. 我们如何使用这些信息
- To authenticate you, create and maintain your sign-in session, and keep your account secure;对你进行身份验证、创建并维持登录会话，并保障你的账号安全；
- To send a password-reset link when you request one;在你请求时发送密码重置链接；
- To operate the Hub and route you to the internal tools you are entitled to use;运营 Hub 并将你导向你有权使用的内部工具；
- To receive, triage, and act on product feedback and bug reports you submit;接收、分类并处理你提交的产品反馈与缺陷报告；
- To secure the service and prevent fraud and abuse (including rate-limiting and validating uploads);保护服务并防范欺诈与滥用（包括限速与校验上传内容）；
- To comply with legal obligations and enforce our agreements.遵守法律义务并执行我们的协议。
4. Legal bases for processing4. 处理的法律依据
Where the GDPR or similar laws apply, we rely on: performance of a contract (or your employment / engagement relationship) to give you access to the Hub; our legitimate interests in operating, securing, and improving an internal tool and preventing abuse; your consent where applicable; and compliance with legal obligations.在适用 GDPR 等法律时，我们的处理依据包括：为向你提供 Hub 访问权限而履行合同（或你的雇佣/合作关系）；我们运营、保护与改进内部工具并防范滥用的合法利益；在适用情形下你的同意；以及遵守法律义务。
5. How we share information5. 我们如何共享信息
We do not sell your personal information. We share it only with:我们不出售你的个人信息。仅在以下情形共享：
- Service providers who process data on our behalf under contract, limited to providing their service to us — namely Cloudflare (Pages hosting, Workers, the D1 database holding accounts/sessions, KV rate-limiting, and bot/network protection), Supabase (the database and object storage that hold Feedback Center entries and image attachments), and Resend (delivery of password-reset emails to your work address).受我们委托并受合同约束的服务商，仅限为向我们提供服务而处理数据——即 Cloudflare（Pages 托管、Workers、存放账号/会话的 D1 数据库、KV 限速，以及机器人/网络防护）、Supabase（存放反馈中心条目与图片附件的数据库与对象存储）、以及 Resend（向你的公司邮箱投递密码重置邮件）。
- Legal & safety — when required by law, to respond to lawful requests, or to protect the rights, property, or safety of Wefluens, our users, or the public.法律与安全——在法律要求时、为回应合法请求，或为保护 Wefluens、我们的用户或公众的权利、财产或安全。
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.业务转让——在合并、收购或资产出售情形下，受本政策约束。
6. Data retention6. 数据留存
We keep your account for as long as you remain an authorized team member. Sessions expire automatically (7 days) and reset tokens within one hour or on use. Feedback entries and their attachments are kept while they remain useful for product and operational purposes; when you delete a feedback entry, its stored image attachments are removed as well. When data is no longer needed, we delete or anonymize it. You may ask us to delete your data sooner (see Section 9).只要你仍是获授权的团队成员，我们就会保留你的账号。会话会自动过期（7 天），重置令牌在 1 小时内或被使用后失效。反馈条目及其附件在仍对产品与运营有用期间予以保留；当你删除某条反馈时，其存储的图片附件也会一并删除。当数据不再需要时，我们将其删除或匿名化。你可要求我们提前删除你的数据（见第 9 节）。
7. How we protect your information7. 我们如何保护你的信息
We apply technical and organizational safeguards appropriate to the data, including: encryption in transit (HTTPS/TLS); passwords stored only as salted PBKDF2-SHA-256 hashes (100,000 iterations); session tokens stored only as hashes in HttpOnly, SameSite=Strict cookies; domain-restricted registration; rate-limiting on sign-in, registration, reset, and uploads; and validation of uploaded images by their file signature (not the declared type). Access is limited to staff who need it. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security; we work to protect your information and to address incidents promptly.我们采取与数据相称的技术与组织保护措施，包括：传输加密（HTTPS/TLS）；密码仅以加盐的 PBKDF2-SHA-256 哈希存储（10 万次迭代）；会话令牌仅以哈希形式存于 HttpOnly、SameSite=Strict 的 Cookie 中；注册限定域名；对登录、注册、重置与上传进行限速；并按文件签名（而非声明的类型）校验上传图片。数据访问限定于确有需要的员工。任何传输或存储方式都无法做到 100% 安全，故我们无法保证绝对安全；我们会尽力保护你的信息并及时处理安全事件。
8. International transfers8. 跨境传输
Wefluens is based in the United States, and our providers (Cloudflare, Supabase, Resend) may process data in the U.S. and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers. By using the Hub you understand your information may be processed outside your country of residence.Wefluens 位于美国，我们的服务商（Cloudflare、Supabase、Resend）可能在美国及其他国家处理数据。在法律要求时，我们会就跨境传输采取适当保障措施（如标准合同条款）。使用 Hub 即表示你理解你的信息可能在你居住国以外处理。
9. Your rights & choices9. 你的权利与选择
Subject to your local law, you may request to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; and withdraw consent at any time (without affecting processing already carried out). Because the Hub is an internal staff tool, some requests may be coordinated with your employer / HR. To exercise these rights, email privacy@wefluens.com. We will respond as required by applicable law.在你所在地法律允许的范围内，你可请求访问、更正、删除或获取你个人信息的副本；反对或限制某些处理；并随时撤回同意（不影响撤回前已进行的处理）。由于 Hub 是内部员工工具，部分请求可能需与你的雇主/人力资源部门协同处理。如需行使上述权利，请发送邮件至 privacy@wefluens.com。我们将按适用法律的要求予以回应。
10. Cookies & local storage10. Cookie 与本地存储
The Hub does not use advertising or analytics cookies. We use one strictly-necessary cookie, hub_session, to keep you signed in. We use your browser’s local storage to remember your language (hub-lang) and theme (hub-theme) preferences. Cloudflare may set cookies strictly necessary for network and bot-protection. You can clear these in your browser at any time, though clearing the session cookie will sign you out.Hub 不使用广告或分析类 Cookie。我们仅使用一个严格必要的 Cookie（hub_session）来保持登录状态。我们使用浏览器本地存储记住你的语言（hub-lang）与主题（hub-theme）偏好。Cloudflare 可能设置仅为网络与机器人防护所必需的 Cookie。你可随时在浏览器中清除这些数据，但清除会话 Cookie 会使你退出登录。
11. Children’s privacy11. 未成年人隐私
The Hub is an internal business tool for adult team members. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.Hub 是面向成年团队成员的内部商业工具，并非面向未成年人；我们不会在知情情况下收集 16 岁以下人士的个人信息。若你认为有未成年人向我们提供了信息，请与我们联系，我们将予以删除。
12. Changes to this policy12. 本政策的变更
We may update this policy from time to time. Material changes will be reflected by updating the “Effective date” above. Your continued use of the Hub after an update means you accept the revised policy.我们可能不时更新本政策。重大变更将通过更新上方“生效日期”体现。更新后你继续使用 Hub 即表示接受修订后的政策。
13. Contact us13. 联系我们
Questions or requests about privacy: privacy@wefluens.com
Wefluens, 742 S Hill St, Suite 903, Los Angeles, CA 90014, USA隐私相关问题或请求：privacy@wefluens.com
Wefluens，742 S Hill St, Suite 903, Los Angeles, CA 90014, USA