隐私政策
生效日期: 2026-11-07 *(中英文如有不一致,以英文版为准)*
1. 我们是谁
妥妥签(Tuovaly)由 Judy Ma(加拿大安大略省渥太华)运营。隐私负责人:Judy Ma,邮箱 hello@tuovaly.com。我们不是政府机构、律师事务所、签证中心或使领馆。
2. 我们收集什么,为什么
| 在哪里 | 收集什么 | 用途 |
|---|---|---|
| 免费自查(/check、/us-check、/schengen-check) | 不收集。 你的回答由固定规则在你的浏览器里计算,不会发给我们,也不会保存。 | 给你显示材料清单和准备时要注意的地方 |
| 网站统计 | 匿名的访问次数(Cloudflare Web Analytics)。不用 Cookie,不跨网站追踪,不做广告画像。 | 了解哪些页面有用 |
| 等候名单 | 称呼、微信号、邮箱、居住国家、想办的签证,以及(可选)出行月份、城市和你最担心的问题。另外记录访问来自哪个国家(Cloudflare 提供)和登记日期。 | 在你选择的服务上线时联系你,了解需求 |
| 测试版(申根) | 你上传和告诉我们的内容:护照和身份文件、在职或在读证明、银行流水、预订、保险、行程、以前的签证或拒签记录、你对问题的回答,以及我们之间的沟通。如果你愿意,也包括申请结果。 | 为你生成准备包(填表指引、材料清单、说明信模板和检查结果),并用匿名统计改进工具 |
我们只收集这些用途需要的信息。我们不出售个人信息,不用于广告,除了第 4 条的服务商,不与任何人共享。
3. 测试版材料怎么处理
- 你通过我们发给你的专用上传表单(Google 表单;需要登录你的 Google 账号,只能上传,看不到其他内容)提交材料。请不要通过微信或邮件发送护照、银行流水。
- 我们把材料下载到创始人电脑上的加密保险库;处理时只在内存中解密,不以未加密形式写入硬盘。
- 材料由自动化工具处理:AI 模型读取材料并生成填表指引,另一个独立的 AI 模型审核,固定规则执行检查。测试期间,创始人还会核对有没有错漏。
- 只有创始人能接触你的案子。
4. 我们使用的服务商
| 服务商 | 做什么 | 所在地 |
|---|---|---|
| Cloudflare | 网站、等候名单数据库和访问统计 | 全球网络,数据可能存储在加拿大以外 |
| OpenRouter(只转给 Google Cloud Vertex AI、Amazon Bedrock、Microsoft Azure) | 为测试版运行 AI 模型,零数据保留:处理后不保存你的内容,也不用于训练模型 | 美国 |
| Google(Google 表单和 Google 云端硬盘) | 测试版材料上传表单(需要登录 Google 账号);导入后从云端硬盘删除 | 美国 |
| Cloudflare 邮件转发和 Gmail(Google) | 和你通过邮件联系 | 美国 |
| 微信(腾讯),仅当你在微信上联系我们 | 你选择在微信上发给我们的消息 | 中国及其他地区 |
我们从不把测试版材料发给位于中国大陆的服务。
5. 在加拿大境外处理
部分服务商在美国和其他国家处理信息,当地法院、执法和国家安全机构可能依法获取这些信息。加入等候名单或测试版,即表示你同意这一点。我们选择安全性高的服务商;AI 处理设置为零数据保留。
6. 保存多久
| 信息 | 保存到 |
|---|---|
| 等候名单信息 | 你退订或要求删除时,或登记满 24 个月时,以先到者为准 |
| 测试版上传的原始文件 | 我们发出最终准备包后删除 |
| 测试版准备包、回答和沟通记录 | 案子结束(你告诉我们结果,或递交后 60 天)后 30 天内删除 |
| 匿名统计(例如国家、领馆、结果、哪些检查有用) | 保留;不能识别你本人 |
你可以随时要求我们提前删除。
7. 你的权利
你可以:要求查看我们保存的你的信息并获得副本;更正信息;撤回同意(我们会停止处理并删除你的测试版文件,但之后就无法继续帮你准备);退出等候名单。请发邮件到 hello@tuovaly.com,我们会在 30 天内回复。如果不满意,你可以向加拿大隐私专员办公室投诉(priv.gc.ca)。
8. 安全
测试版材料加密保存,上传链接只能上传,我们的账号开启双重验证,只有创始人有访问权限。没有绝对安全的系统;如果发生可能对你造成重大伤害的数据泄露,我们会依法通知你和隐私专员。
9. 谁可以使用
等候名单和测试版只面向成年人(18 岁以上)。测试期间只接受魁北克以外的加拿大居民,不接受中国大陆居民。除非你有权代表对方,请不要上传他人的材料。
10. 修改
修改本政策时我们会更新上面的日期;如有重大修改,会提前通过邮件通知等候名单和测试版用户。
Privacy Policy (English, governing)
Effective: 2026-11-07
1. Who we are
Tuovaly (妥妥签) is operated by Judy Ma, Ottawa, Ontario, Canada ("we", "us"). Our privacy officer is Judy Ma, reachable at hello@tuovaly.com. We are not a government agency, law firm, visa centre or consulate.
2. What we collect and why
| Where | What | Why |
|---|---|---|
| Free self-checks (/check, /us-check, /schengen-check) | Nothing. Your answers are processed in your browser by fixed rules and are not sent to us or stored. | To show you a checklist and things to prepare |
| Website analytics | Anonymous page-view counts (Cloudflare Web Analytics). No cookies, no tracking across sites, no advertising profiles. | To see which pages are useful |
| Waitlist | Name, WeChat ID, email, country of residence, visas you're interested in, and optionally travel month, city and your main concern. Also the country your visit came from (from Cloudflare) and the date you signed up. | To contact you when a service you chose is available, and to understand demand |
| Beta (Schengen) | What you upload and tell us: passport and status documents, employment or school letters, bank statements, bookings, insurance, itinerary, previous visas or refusals, your answers to our questions, and our messages with you. Your case outcome, if you choose to share it. | To prepare your packet (form guide, checklist, cover-letter template and checks), and to improve the tool using anonymous statistics |
We only collect what we need for these purposes. We don't sell personal information, use it for advertising, or share it with anyone except the service providers in section 4.
3. How beta documents are handled
- You upload documents through a private upload form we send you (Google Forms; you sign in with your Google account and can only upload, not see anything else). Please don't send passports or bank statements over WeChat or email.
- We download them into an encrypted vault on a founder's computer. They are decrypted only in memory while being processed, and are not written unencrypted to disk.
- Documents are processed by automated tools:
- AI models read the documents and draft the form guide;
- a second, independent AI model reviews the draft;
- fixed rules run the checks.
- During the beta, a founder also checks the result for errors.
- Only the founders can access your case.
4. Service providers we use
| Provider | What it does | Location |
|---|---|---|
| Cloudflare | Hosts the website, waitlist database and analytics | Global network; data may be stored outside Canada |
| OpenRouter, routing only to Google Cloud Vertex AI, Amazon Bedrock and Microsoft Azure | Runs the AI models for beta cases, with zero data retention: providers don't store your content after processing, or use it to train models | United States |
| Google (Google Forms and Google Drive) | Upload form for beta documents (requires signing in with a Google account); files are deleted from Drive once imported | United States |
| Cloudflare Email Routing and Gmail (Google) | Email with you | United States |
| WeChat (Tencent), only if you contact us there | Messages you choose to send us on WeChat | China and other locations |
We never send beta documents to services located in mainland China.
5. Processing outside Canada
Some providers process information in the United States and other countries. There, it may be accessible to courts, law enforcement and national security authorities under local law. By joining the waitlist or the beta you consent to this. We choose providers with strong security and, for AI processing, zero data retention.
6. How long we keep it
| Information | Kept until |
|---|---|
| Waitlist details | You unsubscribe or ask us to delete them, or 24 months after you signed up, whichever is first |
| Beta original uploads | Deleted once we send your final packet |
| Beta packet, answers and messages | Deleted within 30 days after your case closes (you tell us the outcome, or 60 days after you submit your application) |
| Anonymous statistics (e.g., country, consulate, outcome, which checks helped) | Kept; they don't identify you |
You can ask us to delete your information earlier at any time.
7. Your choices and rights
You can:
- ask what information we hold about you and get a copy;
- correct it;
- withdraw your consent (we'll stop processing and delete your beta files, though we can then no longer help with your case);
- unsubscribe from the waitlist.
Email hello@tuovaly.com. We'll reply within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
8. Security
We use encryption at rest for beta documents, upload-only links, two-factor sign-in on our accounts and access limited to the founders. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as the law requires.
9. Who can use the service
The waitlist and beta are for adults (18+). During the beta we accept Canadian residents outside Quebec, and we don't accept residents of mainland China. Don't upload another person's documents unless you are authorized to act for them.
10. Changes
If we change this policy, we'll update the date above. For material changes, we'll notify waitlist and beta participants by email before they take effect.