Carlson MindCraft AI inc (hereinafter referred to as “we”) is fully aware of the importance of user personal information and privacy, and promises to clearly explain how we collect, use, store, share and protect your personal information through this policy. By accessing or using this website (carlsonmindcraft.win), you agree to the entire content of this policy. If you do not agree, please stop using this service immediately.

1. How we collect your information
2. Actively provided information

Registration/Login: When you register an account, subscribe to a service or apply for a trial, you need to provide necessary information such as name, mobile phone number, email address, company name (corporate user).

Business consultation: When you contact us through an online form, phone or email, you may actively submit business-related data such as demand description, industry type, project budget, etc.

Feedback and evaluation: When participating in user surveys, submitting suggestions or evaluations, you may provide feedback content, ratings and other information.

2. Passively collected information

Device and behavior data: Automatically collect IP address, browser type, visited pages, length of stay, operation path and other data through technologies such as cookies and log files (not directly identifying your personal identity).

2. How we use your information
   Core purposes
   Service provision: identity verification, processing business needs, and providing AI solution trial/deployment support.
   Communication response: Reply to your inquiries, feedback, or notify service updates via email, SMS, or in-site mail.
   Product optimization: Analyze user behavior data (such as access frequency, function preferences) to improve website experience and product functions.
   Security assurance: Monitor abnormal logins, prevent network attacks, and ensure service stability.
   Special scenario description
   Marketing push: Only send industry information, product updates, and event invitations via email/SMS when you actively subscribe (you can unsubscribe at any time through the link).
   Legal compliance: In response to regulatory requirements (such as tax audits, judicial investigations) or to protect legitimate rights and interests (such as handling infringement complaints), we may disclose information in accordance with the law.
3. How we share, transfer, or disclose your information
4. Sharing scenarios
   Service partners: In order to provide AI large model training, cloud computing storage and other services, we may share necessary business data with partners (all signed confidentiality agreements and required technical isolation).
5. Transfer and Disclosure Restrictions
   Only in the following circumstances:
   Capital operations such as mergers, acquisitions, and reorganizations lead to changes in the subject;
   Legal requirements or mandatory requirements by administrative and judicial authorities;
   Users explicitly authorize or agree (such as desensitization before public case sharing).

IV. How we protect your information

1. Technical measures
   Data encryption: SSL/TLS protocol is used to transmit data, and sensitive information (such as passwords) is stored using AES-256 encryption.
   Access control: The RBAC permission model is used to limit the scope of employee access, and key system logs are retained for ≥180 days.
   Security audit: Regular penetration testing and vulnerability scanning are carried out, and risks are monitored in cooperation with security agencies such as Qi’anxin and Green Alliance Technology.
2. Management measures
   Staff training: Privacy protection and data security training are carried out every year, and violators are held legally responsible.
   Emergency response: Establish a 7×24-hour security incident response mechanism, and report major accidents to regulatory authorities within 48 hours.

V. Your Rights and Choices

1. User Rights
   Access and Correction: After logging into your account, you can modify contact information, company information and other information at any time.
   Deletion and Cancellation: Apply for account deletion through [email protected], and we will complete it within 15 working days (except for legal requirements).
   Data Migration: According to the Personal Information Protection Law, you can apply to export business data (such as AI model training records) in a structured format.
2. Protection of Minors
   This website does not provide services to minors under the age of 14. If we find that they have registered without authorization, we will immediately delete the information and terminate the service.

VI. Policy Updates and Notifications
Change Rules: When the policy needs to be modified due to business adjustments, technical upgrades or regulatory updates, we will notify you 7 days in advance through official website announcements and internal letters.