Feimore AI
Contents
1. Who we are
Feimore AI (the “Service”) is operated by Beijing Luofang Artificial Intelligence Technology Co., Ltd. (北京洛方人工智能科技有限公司), referred to in this policy as “we” or “us”. The Service includes the Feimore AI website, the dashboard, and the Feimore AI Publish Assistant browser extension. We are the personal information handler (个人信息处理者) for the personal information described in this policy. Our contact details are in Section 12.
2. Information we process
We list information by how you use the Service. If you don’t provide information marked “required”, the feature that needs it won’t work. Everything else is optional.
2.1 Visiting the website
Our servers keep access logs, including your IP address, the time of each visit, the pages you visit, and your browser type and version. We use these logs to keep our network secure and to troubleshoot problems. We do not currently use any third-party analytics or advertising tools on the website or in the dashboard. If we add any, we will update this policy.
2.2 Signing up and signing in
| Information | Purpose |
|---|---|
| Mobile number (required) | Verifying your identity when you sign up, sign in, reset your password, change your mobile number, or delete your account; serving as your account’s unique identifier; preventing trial credits from being claimed more than once |
| SMS verification codes | Confirming that you are the holder of the mobile number. Codes are not stored in plain text, are valid for a short time, and become invalid once used |
| Password (if you set one) | Signing in with a password. We store only a salted hash and cannot see the password itself |
| Display name | Shown in the dashboard. It defaults to “用户” (Chinese for “User”) followed by the last 4 digits of your mobile number, and you can change it |
| CAPTCHA data | Running a slider CAPTCHA before we send an SMS, to stop SMS messages from being requested maliciously in bulk. This is handled by Tencent Cloud CAPTCHA and involves your IP address and device environment information |
| SMS logs | Mobile number, IP address, time sent, and result, used to limit how often messages can be sent and to troubleshoot SMS problems |
| Failed sign-in attempts | Requiring a slider CAPTCHA, or temporarily locking the account, after several wrong passwords in a row |
| Sign-in tokens and sign-in times | Keeping you signed in, and recording your most recent sign-in time, for account security |
2.3 Using the dashboard
| Information | Purpose |
|---|---|
| Project materials | Product name, target market and language, target platforms, brand materials, and uploaded documents, used for building the positioning profile, Market Insights, and content generation |
| Uploaded media | Images, video, and audio, used to produce videos. People’s images and voices in these files are used only to produce videos, not to identify a specific individual or to verify anyone’s identity |
| Your replies and decisions | Feedback, revision requests, and approval decisions you give during a workflow, used to adjust the content and kept as learnings for that project |
| Generated content | Reports, strategies, scripts, voiceovers, videos, covers, and copy, delivered to you |
| Publishing records | Links to published posts, plus views, engagement, and other data that you log or fill in later, used for reviews and to improve that project’s future content |
| Run logs | Agent call records, error logs, and when and by whom each action was taken, used to troubleshoot problems, account for costs, and keep the Service secure |
| Space and member information | The spaces you belong to, your member role, when you joined, and invitation records, used to control who can access which projects |
Most of this is business information. If it includes other people’s personal information (for example, images and voices of people in your media, or customer information in your materials), you must first obtain their consent or have another lawful basis. We process that information only according to how you use the Service.
We may use the materials described above, your replies, and generated content to improve the Service, for example to refine our agents’ prompts, workflows, and review criteria and the models we use. We do so only after this information has been de-identified and only where no specific individual can be re-identified from it. If you don’t want your content used this way, contact us as described in Section 12 to opt out.
2.4 Using the Publish Assistant
The Publish Assistant runs in your own browser and needs three browser permissions: to manage tabs, to run scripts on supported platform pages, and to store settings locally.
| Information | Purpose |
|---|---|
| Platform sign-in status and account names | Showing in the dashboard whether you are signed in to each platform and with which account, so you can confirm where a post will go. Currently used only within your browser and not saved to our servers |
| Content to be published | Taking the video, title, body text, and tags from the dashboard and filling them in on the platform publishing page you have opened |
| Post links | After you click publish, finding the post on the platform’s content management page, reading its link, and sending the link back to the dashboard to log as a publishing record for the project |
To tell whether you are signed in, the Publish Assistant checks platform pages for sign-in markers locally and calls the platform’s account information API using your browser’s signed-in session. The Publish Assistant does not send us your platform passwords, cookies, or other sign-in credentials.
Third-party platforms and web pages that you open through the Service (including publishing pages opened by the Publish Assistant and web pages cited in market insights reports) are governed by their own privacy policies. We have neither the ability nor a direct obligation to protect personal information that you submit on third-party platforms.
2.5 Credits and activation
| Information | Purpose |
|---|---|
| Credit transactions | Every credit grant, hold, deduction, return, and expiry, with the project, workflow, and person involved, used for billing, reconciliation, and handling disputes |
| Activation requests | Your mobile number, your space, and any message you leave, used to contact you about activation or renewal |
| Questions and feedback | When you click Contact us on our website or in the dashboard: the topic you choose (pricing, product help, billing or other), the name, contact details, company, team size and message you enter, the plan you ask about, and any screenshots or screen recordings you attach while signed in, used to answer and resolve your request. Your network address at submission is kept only as an irreversible digest, to stop abusive bulk submissions. If you are signed in, the message is linked to your account. We also record the interface language and the page you sent it from. You don't need an account to submit, but you must sign in to attach screenshots or recordings |
| Pricing region | When you open the pricing page or send us a message through Contact us, we use your account (whether it has a mainland China phone number), the network address you connect from, or your browser's time zone to decide whether to show prices in RMB or USD. The address is only compared with public address ranges on our own servers; it is not sent to anyone else or kept for this purpose |
| Online purchases and orders | When you subscribe or buy credit packs online: the order number, the plan or amount you bought, the space the credits go to, the payment time and the WeChat Pay transaction id, used to issue credits, reconcile accounts, process refunds and issue invoices. The payment itself is handled by WeChat Pay; we do not collect your bank card or WeChat account details |
| Contract, offline payment, and invoicing information | Company name, contact person, contact details, invoicing details, and records of offline payments, obtained when a contract is signed offline, when you pay offline, or when you email us for an invoice, and used to enter into and perform the contract, confirm payment, and issue invoices |
2.6 Contacting us
When you email us, we process the content of your email and the contact details in it to answer your questions and handle complaints.
2.7 When we don’t need your consent
Under the Personal Information Protection Law of the People’s Republic of China (PIPL), we do not need your consent to process personal information in the cases below, and this processing may continue even after you withdraw your consent:
- where necessary to enter into or perform a contract to which you are a party, for example to provide the Service to you, process credits, and issue invoices;
- where necessary to fulfill statutory duties or statutory obligations;
- where necessary to respond to a public health emergency, or to protect the life, health, and property of natural persons in an emergency;
- where we process personal information within a reasonable scope for news reporting, media oversight, or similar activities in the public interest;
- where we process, within a reasonable scope, personal information that you have made public yourself or that has otherwise been lawfully made public, such as public web pages and social media discussions searched by Market Insights;
- in other cases provided for by laws and administrative regulations.
3. Local browser storage
We use local storage to keep you signed in and to remember your interface settings.
- We store your sign-in token, recently opened projects, unsubmitted form drafts, and interface preferences such as language and light or dark theme in your browser’s local storage (localStorage).
- When you request an SMS verification code, the page loads the Tencent Cloud CAPTCHA component. It may collect device and network environment information to detect automated behavior, and it is governed by Tencent Cloud’s privacy policy.
- You can clear local storage in your browser settings. You will then need to sign in again.
4. Entrusted processing and sharing
We use service providers to help us provide the Service and give them only the information they need for the task. We don’t sell your personal information.
These providers supply cloud servers and databases, SMS delivery and CAPTCHA, large language models and image generation, web search, speech synthesis, and similar services. They may be located inside or outside mainland China, and are subject to change as our business needs require. Through agreements or terms of service, we set out the purposes and methods of their processing and the safeguards they must apply, and we require them not to use the information for any purpose beyond what was agreed.
When you subscribe or buy credit packs online, the payment is processed by WeChat Pay (Tenpay Payment Technology Co., Ltd.) under its own privacy policy. We receive only the order number, the transaction id, the amount and the payment time from WeChat Pay, never your bank card or WeChat account details. To process a refund we send WeChat Pay the order number, the refund amount and the reason.
Requests we send to model and speech services do not include your mobile number, password, or other account information. However, any personal information you put in your materials, media, and replies is sent along with that content.
Our operations staff can view the account and project information they need when setting up spaces, granting credits, handling appeals, and troubleshooting. Their access is permission-controlled, and they are bound by confidentiality obligations.
Apart from the cases above, we do not provide your personal information to any other organization or individual unless:
- we have your separate consent;
- laws or regulations, litigation, or competent government authorities acting in accordance with law require it;
- it is necessary in an emergency to protect the life, health, and property of you or others; or
- personal information needs to be transferred because of a merger, division, dissolution, declaration of bankruptcy, or similar event. In that case, we will tell you the recipient’s name and contact details, and the recipient must continue to meet the obligations in this policy. If the recipient changes the purposes or methods of processing, it must obtain your consent again.
If we stop operating the Service, we will stop collecting personal information, notify you by public announcement or other means, and delete or anonymize the personal information we hold, unless laws or regulations provide otherwise.
5. Cross-border transfers
To generate content for you, we use servers and model services located outside mainland China. We transfer the information below outside mainland China only after you give your separate consent, and the transfer is encrypted.
- Storage: your account information, space and credit records, project materials, and generated content are stored on servers located in Singapore.
- Processing: when content is generated, project materials, your replies and instructions, and voiceover scripts are sent to model and speech services located outside mainland China.
Our current overseas recipients are all in the United States. Vercel, Google, Anthropic, OpenAI, and Perplexity receive the content above through their APIs to generate text and images and to search the web. We use Microsoft to turn voiceover scripts into speech. Each recipient’s contact details are in its privacy policy (click its name to view it). If our recipients change, we will promptly update this list, and where your consent must be obtained again, we will ask you again. If you want to exercise rights such as access, correction, or deletion against the overseas recipients, let us know using the contact details in Section 12, and we will help you do so.
We encrypt data in transit and take other necessary safeguards to keep your data secure, and we complete the procedures that laws and regulations require for cross-border transfers of personal information.
Whether to consent is up to you, and you can withdraw your consent at any time after giving it. Please note that the Service currently relies on servers and models outside mainland China, so if you do not consent or you withdraw your consent, we will be unable to continue providing the Service to you, so withdrawing your consent also deletes your account. Account deletion is irreversible: you can no longer sign in to the account or recover its content, and your personal information is deleted or anonymized within the periods set out in Section 6. Paid credits left unused in your personal space can be refunded under Section 7.1 of the Paid Services Terms. You can withdraw your consent in Account settings after verifying by SMS, or by contacting us using the details in Section 12. If you want to use the Service again later, you will need to sign up again.
6. How long we keep information
We keep information only for the shortest time needed for its purpose, then delete or anonymize it.
| Information | How long we keep it |
|---|---|
| Account information | For as long as your account exists. When you delete your account, we immediately erase your mobile number, password, and username, and change your display name to “已注销用户” (Chinese for “Deleted user”) |
| Trial credit claim records | Kept as an irreversible hash of your mobile number, including after you delete your account, to prevent trial credits from being claimed more than once |
| SMS verification codes and SMS logs | As long as needed to prevent abuse and to troubleshoot problems |
| Access logs and network logs | At least 6 months, in accordance with the Cybersecurity Law of the People’s Republic of China |
| Project content in personal spaces | For as long as your account exists. After you delete your account, we delete or anonymize the personal information in it as required by law |
| Project content in team spaces | For as long as the team space exists, or as set out in our contract with that business |
| Questions and feedback | As long as needed to answer and resolve your request and follow up. When you delete your account, the name, contact details and message in requests sent while signed in are erased, and their screenshots or recordings are deleted |
| Credit transactions; orders and payment records; contract, offline payment, and invoicing information | For the periods required by accounting and tax laws and regulations |
If a retention period required by laws or regulations has not yet ended, or if deletion is technically difficult to achieve, we will stop all processing other than storing the information and taking necessary security measures.
7. Security
- We use encryption in transit.
- Passwords and SMS verification codes are not stored in plain text.
- Access is controlled by space and project.
- We limit how often SMS messages can be sent, use CAPTCHA, and lock accounts after failed sign-in attempts.
- Internal staff are given access only as needed and are bound by confidentiality obligations.
You should also keep your account, password, and SMS verification codes safe and not share them with anyone. If you notice anything unusual with your account, contact us immediately.
No internet environment is completely secure, and the devices and networks you use to access the Service may also run into problems for reasons beyond our control. If personal information is, or may be, leaked, tampered with, or lost, we will take remedial action immediately, and will notify you and report to the competent authorities as required by law.
8. Your rights
You can do most of this yourself in the dashboard. For anything else, contact us and we’ll reply within 15 business days.
- Access and copying: You can view your account information in Account settings, and view and download project content in the dashboard. If you need a copy, contact us.
- Correction and completion: You can change your display name, mobile number, and password in Account settings.
- Deletion: You can delete uploaded documents in the dashboard. To delete a whole project or other information, contact us. You can ask us to delete your information in the circumstances set out by law, such as when the purpose of processing has been achieved, when you withdraw your consent, or when we stop providing the Service.
- Withdrawing consent: You can withdraw consent you have given at any time. Once you do, the features or services that depend on it can no longer be provided. Processing we performed based on your consent before you withdrew it, and the processing listed in Section 2.7 that does not require consent, are not affected.
- Deleting your account: You can delete your account in Account settings after verifying by SMS. Account deletion is irreversible. Once your account is deleted, you can no longer sign in to it or recover its content. For other consequences, see Section 3.6 of the Terms of Service.
- Portability: Where the conditions set by the Cyberspace Administration of China are met, you can ask us to transfer your personal information to a personal information handler you designate.
- Explanation: You can ask us to explain this policy and our rules for processing personal information.
When you contact us to exercise your rights, we will first verify your identity, and we will reply within 15 business days. We may refuse requests that are repeated without good reason, require excessive technical effort, put the lawful rights and interests of others at risk, or are clearly impractical, and we will explain why.
If a user dies, their close relatives may, for their own lawful and legitimate interests, exercise the rights above, such as access, copying, correction, and deletion, with respect to the deceased user’s personal information.
9. Automated decision-making
The Service uses artificial intelligence to generate marketing content and to score that content. This processing concerns the content itself. It does not make decisions about you personally that significantly affect your rights and interests. If we send you commercial messages by SMS, email, or other means, we will give you a way to opt out of receiving them.
10. Minors
The Service is intended for businesses and business operators, not for minors under the age of 18. We do not actively collect personal information from children under the age of 14. If we find that we have collected such information by mistake, we will delete it as soon as possible. A guardian who becomes aware of such a case can contact us.
11. Changes to this policy
When we update this policy, we will post the new version and its update date on this page. If there is a material change to the purposes or methods of processing, the types of information processed, or the overseas recipients, we will notify you by prominent means, such as an in-app notice, before the change takes effect. Where your consent must be obtained again, we will ask for it again.
12. Contact us
- Personal information handler: Beijing Luofang Artificial Intelligence Technology Co., Ltd. (北京洛方人工智能科技有限公司)
- Personal information protection contact email: luofanglabs@gmail.com
We will reply within 15 business days of receiving your request. If you are not satisfied with our reply, you can file a complaint or report with the competent authorities, such as the cyberspace administration and market regulation authorities, or bring a lawsuit in a people’s court with jurisdiction.