隐私权政策
更新日期：2026年11月1日
北京睿伽科技有限公司（“我们”）尊重并保护您的个人信息。本政策说明您访问 roign.com、登录账号或访问项目文档时，我们如何处理相关信息。使用相关功能前，请阅读本政策。
一、我们处理的信息及用途
- 网站访问：为提供网页和维护服务安全，网站托管、网络及安全服务提供商可能处理请求时间、IP 地址、浏览器或设备信息等连接数据。我们不会仅为广告目的建立用户画像。
- 账号登录：访问受限项目文档时，我们处理您提交的用户名和密码以验证身份。账号信息及密码的加盐哈希值由登录服务存储；密码不会以明文形式保存。
- 登录安全：为限制连续的失败登录，系统会使用 IP 地址与用户名生成摘要标识，并记录失败次数。该标识用于安全控制，不是原始 IP 地址，但仍可能与个人相关联。
- 会话与文档权限：登录成功后，网站使用必要的会话 Cookie 维持登录状态，并依据账号权限决定是否允许访问相应项目文档。
二、Cookie
登录功能使用名为 prj_session 的必要 Cookie。该 Cookie 设置为 Secure、HttpOnly 和 SameSite=Lax，最长有效期为 8 小时，用于验证登录会话；退出登录或到期后失效。当前网站不使用广告追踪 Cookie。
三、MyRoign 与 Google 用户数据
本节说明北京睿伽科技有限公司运营的 MyRoign 如何访问、使用、共享、存储和删除 Google 用户数据。MyRoign 遵守 Google API Services User Data Policy，包括其 Limited Use 要求。您可以在 Google 授权页面查看并确认实际请求的权限。
访问的数据
选择 Google 登录时，MyRoign 请求 openid、email 和 profile，以验证 Google 账号身份并获取识别账号所需的电子邮件地址及基本个人资料。这些资料保存在 MyRoign 账号记录中。文件管理功能还请求 Google 云端硬盘所有文件的访问权限（https://www.googleapis.com/auth/drive），涉及文件内容及文件名等相关信息，并允许 MyRoign 按您启用的功能查看、修改、新建、删除和共享文件。
数据用途及触发方式
Google 账号资料仅用于身份验证和账号识别。Google 云端硬盘数据仅用于 MyRoign 界面中向您提供的文件管理和同步功能。配置存储目的地并启用同步后，文件可能按您的配置自动同步；您也可以使用应用提供的文件操作功能。MyRoign 不将 Google 用户数据用于广告、出售或本节所述用户功能以外的用途。
共享及接收方
同步文件只会发送到您明确配置的本地服务器、本地存储或其他云存储服务。配置的目标及其服务提供商会接收处理该功能所需的文件数据，并可能按其自身条款存储或处理数据；MyRoign 不会将数据发送到您未配置的第三方服务商，也不会出售或为广告目的转让 Google 用户数据。除您启用的文件功能外，我们仅会在安全调查或遵守法律所必需的范围内处理或披露数据。
Roign 人员不会常规查看文件内容。只有在您明确同意查看特定文件，或为调查安全问题、滥用行为及遵守法律确有必要时，获授权人员才可能访问相关数据。
存储、安全及保留
MyRoign 的 OAuth access token 和 refresh token 加密后保存在服务器端数据库，并通过访问权限控制加以保护。授权撤销或账号关闭后，相关 tokens 将在 12 小时内删除；账号关闭或经核验的账号删除请求后，账号记录中的 Google 邮箱和基本资料将在 24 小时内删除。
为向您提供文件管理和同步功能，MyRoign 可能复制并长期保留文件。文件传输在目标服务支持时使用 HTTPS。副本存储于您配置的本地服务器、本地存储或云存储；静态加密、访问控制及其他存储安全措施取决于您选择的目标服务和具体配置。请在配置目标时启用可用的加密和访问控制，并确保目标服务适合存储相关文件。
撤销 Google 授权会阻止 MyRoign 继续通过该授权访问 Google 云端硬盘，但不会自动删除已同步或复制的文件。您可以发邮件至 info@roign.com 申请删除 MyRoign 管理的副本；对于 MyRoign 无法直接管理的本地或第三方存储，请同时在相应存储位置删除。我们会在核验请求后处理删除，但依法必须保留的数据除外。
Limited Use
MyRoign 对 Google 用户数据的访问、使用和传输仅限于本节明确说明的、在应用界面中可见的用户功能，以及必要的安全和法律目的。任何数据共享均限于提供您启用的功能所必需的范围；不允许其他用途或转让。
四、信息的存储与提供
账号及访问授权信息存储在网站使用的数据库服务中；项目文档映射存储在私有对象存储中。为托管网站、提供数据库、存储和网络安全服务，Cloudflare 等服务提供商可能按照其服务条款处理必要的数据，处理或存储地点可能因服务基础设施而异。我们不会出售您的个人信息；除提供服务所必需、取得您的同意或法律法规要求外，不会向其他方提供个人信息。
我们仅在实现本政策所述目的所需期间或法律法规要求的期限内保留信息。失败登录记录的实际保留时间可能受安全配置及清理机制影响；如需了解或申请处理相关信息，请通过本政策末尾的联系方式联系我们。
五、信息安全
我们采取与业务相适应的措施保护信息，例如通过 HTTPS 传输登录信息、以哈希形式存储密码，并限制项目文档访问权限。互联网传输和信息存储无法保证绝对安全；如发生可能影响您权益的安全事件，我们将依法采取相应措施。
六、您的选择与权利
您可以停止使用网站并清除浏览器 Cookie。对于账号或与您有关的个人信息，您可以请求查询、更正或删除；我们可能需要先核验您的身份，并在法律法规要求保留的范围内继续保存必要信息。请通过下方邮箱提交请求。
七、未成年人
本网站并非专为未成年人提供。若您是未成年人，请在监护人指导下使用网站；如监护人认为我们处理了未成年人的个人信息，请联系我们。
八、政策更新
当信息处理方式或适用要求发生变化时，我们会更新本政策并在本页面公布。若 MyRoign 对 Google 用户数据的访问或使用方式发生变化，我们会通过适当方式通知您，并在将数据用于本政策未说明的新方式或新目的之前，向您说明变化并征求同意。
九、联系我们
个人信息保护相关问题或请求，请联系：info@roign.com。
北京睿伽科技有限公司
北京市顺义区信中北街16号院6号楼6层614室
Privacy Policy
Last updated: November 1, 2026
Beijing Roign Technology Co., Ltd. (“we”) respects your privacy. This policy explains how we handle information when you visit roign.com, sign in, or access project documents. Please read it before using these features.
1. Information We Handle and Why
- Website access: Website hosting, network, and security providers may process connection data such as request time, IP address, and browser or device information to deliver the site and protect its security. We do not create user profiles solely for advertising.
- Account sign-in: When you access restricted project documents, we process the username and password you submit to verify your identity. Account information and a salted password hash are stored by the sign-in service; passwords are not stored in plain text.
- Sign-in security: To limit repeated failed sign-in attempts, the system records failures using a derived identifier based on the IP address and username. It is not the raw IP address, but may still be associated with an individual.
- Sessions and document permissions: After sign-in, a necessary session cookie maintains your session, and account permissions determine whether you may access a project document.
2. Cookies
The sign-in feature uses a necessary cookie named prj_session. It is set as Secure, HttpOnly, and SameSite=Lax, expires after up to 8 hours, and is used to validate your session. It expires when you sign out or its validity period ends. The website does not currently use advertising-tracking cookies.
3. MyRoign and Google User Data
This section explains how MyRoign, operated by Beijing Roign Technology Co., Ltd., accesses, uses, shares, stores, and deletes Google user data. MyRoign follows the Google API Services User Data Policy, including its Limited Use requirements. Review the permissions actually requested on Google's authorization screen.
Data We Access
For Google sign-in, MyRoign requests openid, email, and profile to verify your Google account and obtain the email address and basic profile information needed to identify your account. This information is stored in your MyRoign account record. File-management features also request access to all Google Drive files (https://www.googleapis.com/auth/drive). This includes file contents and related information such as file names, and permits MyRoign to view, modify, create, delete, and share files as supported by the features you enable.
How We Use Data and What Triggers It
Google account information is used only for authentication and account identification. Google Drive data is used only for file-management and synchronization features presented in the MyRoign interface. After you configure a storage destination and enable synchronization, files may sync automatically according to your configuration; you may also use the file operations provided by the application. MyRoign does not use Google user data for advertising, sale, or purposes outside the user-facing features described in this section.
Sharing and Recipients
Synchronized files are sent only to a local server, local storage, or other cloud storage that you explicitly configure. Your configured destination and its provider receive the file data needed for this feature and may store or process it under their own terms. MyRoign does not send data to providers you have not configured, sell Google user data, or transfer it for advertising. Outside features you enable, we process or disclose data only as necessary for security investigations or compliance with law.
Roign personnel do not routinely review file contents. Authorized personnel may access relevant data only if you affirmatively agree to review a specific file, or when necessary to investigate security issues or abuse or to comply with law.
Storage, Security, and Retention
MyRoign's OAuth access and refresh tokens are encrypted in a server-side database and protected by access controls. Tokens are deleted within 12 hours after authorization is revoked or the account is closed. Google email and basic profile information in the account record are deleted within 24 hours after account closure or a verified account-deletion request.
MyRoign may copy and retain files for an extended period to provide file-management and synchronization features. File transfers use HTTPS when supported by the destination. Copies are stored in the local server, local storage, or cloud storage you configure. At-rest encryption, access controls, and other storage protections depend on your selected destination and its configuration. Enable available encryption and access controls, and ensure the destination is appropriate for your files.
Revoking Google authorization prevents MyRoign from continuing to access Google Drive through that authorization, but does not automatically delete files already synchronized or copied. Email info@roign.com to request deletion of copies managed by MyRoign. For local or third-party storage that MyRoign cannot directly manage, also delete the files at that destination. We will process deletion requests after verifying them, except for data we are legally required to retain.
Limited Use
MyRoign accesses, uses, and transfers Google user data only for the user-facing features disclosed in this section and for necessary security and legal purposes. Sharing is limited to what is needed to provide features you enable; other uses or transfers are not permitted.
4. Storage and Disclosure
Account and access-permission information is stored in the database service used by the website; project document mappings are stored in private object storage. Providers such as Cloudflare may process necessary data to host the site and provide database, storage, and network-security services under their terms. Processing or storage locations may vary with their infrastructure. We do not sell personal information. We do not provide it to others except as necessary to provide the service, with your consent, or as required by law.
We retain information only for as long as needed for the purposes described here or as required by law. The actual retention period for failed sign-in records may depend on security settings and cleanup mechanisms. Contact us below if you have questions or a request about your information.
5. Information Security
We use measures appropriate to the service, such as HTTPS for sign-in data, hashed password storage, and access controls for project documents. No internet transmission or storage method can be guaranteed completely secure. If a security incident may affect your rights, we will take appropriate steps as required by law.
6. Your Choices and Rights
You may stop using the site and clear its cookies in your browser. You may request access to, correction of, or deletion of personal information associated with you. We may need to verify your identity and may retain information where required by law. Please send requests to the email address below.
7. Children
This website is not specifically directed to children. If you are a minor, please use the website with guidance from a parent or guardian. A parent or guardian who believes we have handled a minor’s personal information may contact us.
8. Changes to This Policy
We will update this policy when our information practices or applicable requirements change and post the revised version here. If MyRoign changes how it accesses or uses Google user data, we will notify you through appropriate means and explain the change and obtain your consent before using the data in a new way or for a new purpose not described in this policy.
9. Contact Us
For privacy questions or requests, contact info@roign.com.
Beijing Roign Technology Co., Ltd.
Room 614, 6th Floor, Building 6, Courtyard No. 16, Xinzhong North Street, Shunyi District, Beijing, China