Effective date：September 15, 2026
This Privacy Policy explains how 澄理科技有限公司 (a limited company registered in Taiwan; unified business number 62046662), providing the service under the brand 「澄理 TCMLens」 ("we", "us"), collects, uses, and protects your personal data.
Account data: email (LINE accounts may have none), display name, avatar, and sign-in method, obtained via OAuth/email. Usage content: your query text, conversation history, and selected classics scope. Usage and audit data: query counts/token usage, IP address, user agent, and timestamps (for abuse prevention, billing, and security auditing). Payment data: collected and processed by Paddle — we do not store your full card number. Marketing attribution: when you arrive on our landing page we record how you got there — the campaign tags in the link, an advertising click identifier if the ad platform added one, the referring website's domain name (never the full address, and never anything you searched for elsewhere), your coarse country, and a random visitor identifier. This is never linked to your queries or conversations.
To provide and improve the search service, maintain your account, prevent abuse and fraud, bill you, and comply with legal obligations. To improve the service, we use de-identified aggregate statistics (no identity, no raw query text) to understand common question types and gaps in coverage, and we collect the 👍/👎 feedback and suggestions you choose to give us. We do not use your conversations to train AI models: OpenAI, whose API we use to generate answers, does not train on API data by default per its policy; we do not train or fine-tune our own models either. Human review is opt-in only: we will not manually review your conversations without consent, and even if you opt in, review is limited to a de-identified sample of failure cases. We also use marketing-attribution data to understand which campaigns and channels bring people to TCMLens. It is kept separate from your query data by design and is never used to profile you or to target advertising at you.
Supabase (database/auth), OpenAI (processes your query text to generate answers), PostHog (product analytics — receives pseudonymous usage events, never your query, answer or citation text), Cloudflare (edge protection), Vercel (frontend hosting), Google Cloud (backend hosting), Upstash (caching), and Paddle (payments/tax).
The services above may process data outside your country (e.g., in the United States).
Conversation history is kept for 90 days on the Free plan and for 365 days on paid plans (Basic/Plus/Pro), counted from the last activity in each conversation — returning to an older conversation starts its retention period again. Once that period has passed, a conversation and its messages may be deleted. Which period applies is decided by your plan at that time: if you upgrade, the conversations you still have move to the longer period, and if your subscription ends, the shorter period applies again. History that has already been deleted is not restored by a later upgrade. Audit logs are retained as needed for security/compliance. Contact support@tcmlens.com to request deletion of your account and associated data.
Depending on applicable law (Taiwan's Personal Data Protection Act, GDPR, etc.), you may have rights to access, correct, delete, or restrict processing of your data. Contact support@tcmlens.com.
Essential cookies keep you signed in and remember your language. We also set two first-party marketing-attribution cookies on our public landing page only: `tcml_aid`, a random identifier that lets us tell how you first found TCMLens, kept for 90 days from your last visit, and `tcml_vid`, which marks a single 30-minute visit. Neither is set, read, or extended on your workspace, your account page, or anywhere you are using the product, and neither is shared with any advertising network. We also store one short-lived marker in your browser's session storage (`tcml_vcap`) so a single visit is not reported twice. We do not use device fingerprinting.
support@tcmlens.com.
This page is a general summary and not legal advice. Consult your own counsel if you have questions.