Gecho Chrome Extension 隐私政策
生效日期：2026 年 7 月 18 日
最近更新：2026 年 7 月 18 日
本隐私政策适用于 Gecho Chrome Extension（以下简称“Gecho 插件”或“本插件”）。
Gecho 插件由 Gecho 产品及服务的运营者（以下简称“我们”）提供，用于在用户主动选择的支持网站上进行电商与营销信息采集、市场洞察、内容整理以及 AI 视频生成等功能。
请在使用本插件前阅读本政策。使用需要处理个人信息或网站内容的功能前，我们会通过插件界面或相关功能说明告知处理目的。您可以选择不使用相关功能，或通过卸载插件停止后续处理。
我们的数据保护承诺
- 按需处理：仅为用户主动使用的功能及必要的安全、运行和可靠性目的处理数据。
- 用户可控：用户可以选择不使用相关功能、退出登录、清理本地数据或卸载插件。
- 不出售数据：不向数据经纪商出售或提供用户数据，不将其用于个性化广告或信用评估。
- 限制人工访问：除取得明确同意、处理安全事件、履行法律义务或处理匿名汇总数据外，不允许人员读取用户私有内容。
1. 我们处理的信息
我们仅在提供本插件已披露功能所必要的范围内处理下列信息：
| 信息类别 |
可能包含的内容 |
处理目的 |
| 账号与身份验证信息 |
Gecho 用户标识、登录来源、身份验证令牌，以及通过您选择的登录服务返回的必要账号资料。我们不会读取或保存您的第三方账号密码。 |
登录、维持会话、识别账号、提供订阅权益并防止未经授权的访问。 |
| 订阅与交易状态 |
产品方案、额度、订阅状态、订单或支付会话标识和支付结果。支付卡号等完整支付凭证由支付服务提供方处理，本插件不保存完整银行卡或信用卡信息。 |
展示套餐、创建结算流程、确认支付状态和提供已购买服务。 |
| 用户主动提供的内容 |
搜索关键词、达人账号、产品或视频链接、提示词、用户选择上传的图片或视频，以及收藏、脚本、生成任务和反馈内容。 |
执行用户请求的采集、分析、内容生成、上传、收藏和导出功能。 |
| 支持网站的内容与浏览信息 |
用户在 TikTok、TikTok Shop、X/Twitter、Amazon 等支持网站上主动发起任务时涉及的页面 URL、公开帖子、视频、评论、作者或店铺名称、头像、互动统计、商品、价格、评分和评论等页面或接口返回内容。 |
完成用户明确发起的页面采集、营销洞察、排行、评论分析和结果整理。本插件不会以广告画像为目的持续监控与功能无关的浏览活动。 |
| 设备、偏好与诊断信息 |
插件版本、语言、时区、浏览器 User-Agent、相关页面 URL、任务时间、功能运行状态、错误信息和本地诊断日志。 |
保存偏好、排查错误、恢复任务、维护安全并改进稳定性。 |
| 本地 Bridge 任务信息（如启用） |
任务标识、任务参数、采集模式、目标数量、执行状态和采集结果。 |
通过用户设备上的本地 Bridge 程序接收自动化任务并回传结果。本地通信仅面向回环地址，不用于跨设备公开传输。 |
2. 信息的收集方式
- 您登录、输入关键词或链接、上传文件、选择工具、收藏内容或发起生成任务时，由您直接提供；
- 您在支持网站上主动启动采集或分析后，由插件内容脚本从当前任务相关页面、DOM 或网页接口响应中读取；
- 插件运行过程中，由 Chrome 扩展 API、本地存储和诊断模块生成；
- 如您启用了本地 Bridge，由设备上的 Bridge 向插件发送任务，并接收相应结果。
3. 信息的使用
我们将信息用于以下目的：
- 提供账号登录、订阅校验和客户支持；
- 执行用户主动请求的网页采集、市场洞察、评论分析、收藏、下载和 AI 内容生成；
- 上传、处理和交付用户选择的图片、视频及生成结果；
- 记录任务状态，防止重复执行，并排查插件错误；
- 保障服务、账号和基础设施的安全，防止欺诈、滥用和非法活动；
- 履行适用法律法规要求。
我们不会出售用户数据，不会将用户数据提供给数据经纪商，也不会将其用于个性化广告、信用评估或与本插件单一目的无关的用途。
4. 本地存储与服务器处理
- 账号登录状态、语言偏好和部分诊断信息可能保存在
chrome.storage 中；
- 临时任务状态和分页采集缓存可能保存在会话级存储中，并在会话结束或任务完成后清理；
- 用户选择保存的采集记录、收藏、生成任务和订阅信息可能由 Gecho 服务端保存；
- 用户主动上传的图片、视频或任务所需媒体可能存储在云对象存储中，并可能通过用于任务处理或结果交付的可访问链接提供。请勿上传无权处理或不希望交由云端处理的敏感内容。
5. 信息共享与第三方服务
我们仅在提供功能所必需的范围内，与以下接收方或服务提供方处理或共享信息：
- Gecho / CreatePlux 服务端：用于账号、额度、采集记录、市场洞察、AI 内容生成、收藏、诊断和客户支持；
- Logto 及您选择的身份提供方：用于登录和身份验证；
- 火山引擎 TOS 等云存储服务：用于存储用户主动上传或任务处理所需的图片、视频和生成结果；
- 支付服务提供方：用于创建结算会话并返回订阅或支付状态；
- TikTok、X/Twitter、Amazon 等支持网站：当您访问或使用相应网站时，这些网站会依据其自身隐私政策处理您的请求、Cookie 和账号活动；
- 用户设备上的本地 Bridge（如启用）：用于在本机传递自动化任务和结果。
除上述情况外，我们仅会在取得您的明确同意、为保护用户和服务安全、履行法律义务，或在合并、收购、重组等交易中依法采取保护措施的情况下披露必要信息。
6. AI 处理与产品改进
为完成您主动发起的分析或生成任务，我们可能将完成任务所必需的输入、页面内容、图片、视频或任务参数发送给 Gecho 服务端以及受托的 AI、云计算和内容处理服务提供方。我们会尽量减少发送的数据，并要求服务提供方仅按照约定目的处理。
- 未经您的明确同意，我们不会使用可识别到您或您企业的私有内容训练面向公众的通用 AI 模型；
- 我们可能使用去标识化或汇总后的任务成功率、错误类型和功能使用数据改进产品质量、安全性与稳定性；
- 如排查问题确需人员查看具体私有内容，我们会在法律要求的情况下取得明确同意并限制访问范围；安全调查和法律义务除外；
- AI 输出可能不准确或不完整，用户应在发布、投放或用于经营决策前进行必要核验。
7. Google API 与 Chrome Web Store Limited Use
我们对从 Google API 获取的信息的使用将遵守 Chrome Web Store User Data Policy，包括 Limited Use 要求。
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
8. 数据保留
我们仅在实现本政策所述目的、维持用户账号和服务、解决争议、保障安全及履行法律义务所需的期限内保留信息。
本地数据通常保留至用户退出登录、使用清除功能、清除浏览器扩展数据或卸载插件；会话级缓存通常在任务结束或浏览器会话结束后删除。
服务端的收藏、采集记录和生成内容通常保留至用户删除相关内容、注销账号或提出有效删除请求，但法律要求保留或为处理安全事件所必需的情况除外。
9. 数据安全
我们采取与风险相适应的技术和组织措施保护信息，包括访问控制、身份验证、最小权限和对外部网络传输使用加密连接。
本地 Bridge 通信仅绑定用户设备的回环地址。互联网传输和电子存储无法保证绝对安全，如发现安全问题，请及时通过本政策列明的方式联系我们。
10. 跨境处理
Gecho 可能通过位于用户所在国家或地区之外的服务设施和服务提供方处理信息。不同地区的数据保护规则可能存在差异。我们会依据适用法律采取必要保护措施，包括限制处理目的和访问范围、使用数据处理协议以及采取适当的技术安全措施。
11. 您的选择与权利
根据适用法律，您可以：
- 选择不登录或不使用需要上传、采集或云端处理的功能；
- 退出登录、删除收藏或记录，并通过 Chrome 管理页面清除插件本地数据；
- 卸载插件，以停止插件后续访问和处理；
- 请求访问、更正、删除或导出与您有关的信息；
- 撤回此前作出的同意，但撤回不影响撤回前处理行为的合法性。
提出请求时，我们可能需要验证您的身份。部分信息可能因法律义务、安全或争议处理需要而无法立即删除。
12. 未成年人
本插件面向能够依法使用相关电商、营销与内容平台的用户，并非专门面向儿童设计。
如您所在地区要求未成年人取得监护人同意，请在监护人同意和指导下使用。
13. 政策变更
我们可能根据功能、服务提供方或法律要求更新本政策，并在本页面标明更新日期。
如变更会实质影响用户数据处理方式，我们会依法通过插件界面、官方网站或其他显著方式通知，并在需要时重新取得同意。
14. 联系我们
如您对本政策、个人信息处理或数据删除有疑问或请求，请通过 Gecho 插件内的“联系客服”入口，访问
Gecho 官方网站，或发送邮件至
official@gecho.ai。请在请求中注明“隐私请求”以及与账号关联的用户标识，以便我们核实并处理。
本政策仅说明 Gecho 插件的数据处理活动。第三方网站和服务适用其各自的隐私政策。
Gecho Chrome Extension Privacy Policy
Effective date: July 18, 2026
Last updated: July 18, 2026
This Privacy Policy applies to the Gecho Chrome Extension (the “Gecho Extension” or the “Extension”). The Extension is provided by the operator of Gecho products and services (“Gecho,” “we,” “us,” or “our”) to help users collect and organize e-commerce and marketing information, generate market insights, and create AI-assisted video content on supported websites selected by the user.
Please read this Policy before using the Extension. Before a feature processes personal information or website content, we provide information about the relevant purpose through the Extension interface or feature description. You may choose not to use that feature or uninstall the Extension to stop future processing.
Our data protection commitments
- Purpose-limited processing: We process data only for features the user actively requests and for necessary security, operation, and reliability purposes.
- User control: Users may decline a feature, sign out, clear local data, or uninstall the Extension.
- No sale of data: We do not sell user data or provide it to data brokers, and we do not use it for personalized advertising or credit assessment.
- Restricted human access: We do not allow personnel to read private user content except with explicit consent, to address security incidents, to comply with law, or when working with aggregated and anonymized data.
1. Information we process
We process the following information only to the extent necessary to provide the disclosed functions of the Extension:
| Category |
Examples |
Purpose |
| Account and authentication information |
Gecho user identifier, sign-in source, authentication tokens, and account information returned as necessary by the sign-in service you select. We do not read or store passwords for your third-party accounts. |
Sign-in, session maintenance, account recognition, subscription access, and prevention of unauthorized access. |
| Subscription and transaction status |
Product plan, credits, subscription status, order or checkout-session identifiers, and payment status. Full payment-card credentials are processed by payment providers and are not stored by the Extension. |
Displaying plans, creating checkout flows, confirming payment status, and providing purchased services. |
| Content you provide |
Search terms, creator handles, product or video links, prompts, images or videos you choose to upload, favorites, scripts, generation jobs, and feedback. |
Performing the collection, analysis, generation, upload, favorite, and export operations you request. |
| Supported website content and browsing information |
When you actively start a task on TikTok, TikTok Shop, X/Twitter, Amazon, or another supported site: relevant page URLs, public posts, videos, comments, creator or shop names, avatars, engagement statistics, products, prices, ratings, reviews, and related page or API response content. |
Completing user-requested collection, marketing insights, ranking, comment analysis, and result organization. We do not continuously monitor unrelated browsing activity for advertising profiles. |
| Device, preference, and diagnostic information |
Extension version, language, time zone, browser user agent, relevant page URL, timestamps, workflow status, errors, and local diagnostic logs. |
Saving preferences, diagnosing errors, recovering workflows, maintaining security, and improving reliability. |
| Local Bridge task information, if enabled |
Task identifier, parameters, collection mode, target count, execution status, and results. |
Receiving local automation tasks from, and returning results to, the Bridge application on the user’s device. Local communication is limited to the loopback address and is not a public cross-device transport. |
2. How information is collected
- Directly from you when you sign in, enter a search term or URL, upload a file, select a tool, save an item, or start a generation job;
- From the relevant page, DOM, or web response after you actively start a collection or analysis task on a supported website;
- From Chrome extension APIs, local storage, and diagnostic components while the Extension operates;
- From the local Bridge on your device if you enable Bridge-based automation.
3. How we use information
We use information to:
- Provide account sign-in, subscription verification, and customer support;
- Perform user-requested website collection, market insights, comment analysis, favorites, downloads, and AI-assisted content generation;
- Upload, process, and deliver images, videos, and generated results selected by the user;
- Record workflow status, prevent duplicate execution, and diagnose errors;
- Protect the service, accounts, and infrastructure against fraud, abuse, unauthorized access, and unlawful activity;
- Comply with applicable legal obligations.
We do not sell user data, provide it to data brokers, or use it for personalized advertising, creditworthiness decisions, lending, or purposes unrelated to the Extension’s disclosed single purpose.
4. Local storage and server processing
- Account sign-in state, language preferences, and some diagnostic information may be stored in
chrome.storage;
- Temporary workflow state and paginated collection caches may be stored in session-level storage and cleared when the session or task ends;
- Collection records, favorites, generation jobs, and subscription information that you choose to save may be stored by Gecho services;
- Images, videos, and media required for a task may be stored in cloud object storage and may be delivered through an accessible link used for task processing or result delivery. Do not upload sensitive content that you are not authorized to process or do not want processed in the cloud.
5. Sharing and third-party services
We process or share information only as necessary with the following recipients and service providers:
- Gecho / CreatePlux services: account management, credits, collection records, market insights, AI generation, favorites, diagnostics, and customer support;
- Logto and your selected identity provider: sign-in and authentication;
- Volcengine TOS and other cloud storage providers: storage of user-selected uploads, task media, and generated results;
- Payment providers: creation of checkout sessions and return of subscription or payment status;
- TikTok, X/Twitter, Amazon, and other supported websites: these services process browser requests, cookies, and account activity under their own privacy policies when you visit or use them;
- The local Bridge on your device, if enabled: local transfer of automation tasks and results.
We may also disclose necessary information with your explicit consent, to protect users and the service, to comply with law, or as part of a merger, acquisition, financing, or restructuring subject to appropriate safeguards.
6. AI processing and product improvement
To complete an analysis or generation job you initiate, we may send the minimum necessary inputs, website content, images, videos, or task parameters to Gecho services and contracted AI, cloud-computing, or content-processing providers. We require providers to process the information only for the agreed purpose.
- Without your explicit consent, we do not use private content that identifies you or your business to train general-purpose AI models offered to the public;
- We may use de-identified or aggregated workflow success rates, error categories, and feature-usage information to improve quality, security, and reliability;
- If troubleshooting requires personnel to review specific private content, we obtain consent where required and restrict access, except for security investigations or legal obligations;
- AI output may be inaccurate or incomplete and should be reviewed before publication, advertising, or business decisions.
7. Google APIs and Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Information obtained through the Extension is used only to provide or improve the Extension’s disclosed user-facing functions and for necessary security, operation, and reliability purposes.
8. Data retention
We retain information only for as long as necessary for the purposes described in this Policy, to maintain user accounts and services, resolve disputes, protect security, and comply with law. Local data is generally retained until you sign out, use an available clearing function, clear browser extension data, or uninstall the Extension. Session-level caches are generally deleted when the task or browser session ends. Server-side favorites, collection records, and generated content are generally retained until you delete them, close your account, or submit a valid deletion request, unless retention is required by law or necessary for a security matter.
9. Data security
We use technical and organizational safeguards appropriate to the risk, including access controls, authentication, least-privilege practices, and encrypted external network transport. Local Bridge communication is limited to the loopback address on the user’s device. No internet transmission or electronic storage method can be guaranteed to be completely secure. Please contact us if you identify a security concern.
10. International processing
Gecho may process information using facilities and providers located outside your country or region. Data-protection rules may differ across jurisdictions. Where required, we use appropriate safeguards such as purpose and access restrictions, data-processing agreements, and suitable technical security measures.
11. Your choices and rights
Subject to applicable law, you may:
- Decline to sign in or use features that require upload, collection, or cloud processing;
- Sign out, delete available favorites or records, and clear local Extension data through Chrome;
- Uninstall the Extension to stop future access and processing by the Extension;
- Request access to, correction, deletion, or export of information associated with you;
- Withdraw consent, without affecting processing that occurred before withdrawal.
We may need to verify your identity before fulfilling a request. Some information may be retained where required for legal, security, or dispute-resolution purposes.
12. Children
The Extension is intended for users who may lawfully use the relevant e-commerce, marketing, and content platforms and is not designed specifically for children. Where local law requires parental consent for a minor, the Extension should be used only with the consent and guidance of a parent or guardian.
13. Changes to this Policy
We may update this Policy to reflect changes in features, service providers, or legal requirements, and we will update the date at the top of this page. If a change materially affects how user data is processed, we will provide notice through the Extension, our website, or another prominent channel and obtain consent again where required.
14. Contact us
For questions about this Policy, our processing of personal information, or a data-deletion request, use the customer-support entry in the Gecho Extension, visit the
Gecho website, or email
official@gecho.ai. Please identify the request as a “Privacy Request” and include the user identifier associated with your account so that we can verify and process it.
This Policy describes the data practices of the Gecho Extension. Third-party websites and services are governed by their own privacy policies.