Legal
Privacy Policy
Effective date: November 1, 2026
The operator of TengTeng AI (TENGTENG) (“we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use the TengTeng website tengtengai.com, membership and subscription services, the desktop clients, and the TengTeng AI web app at app.tengtengai.com, and what rights you have. For privacy matters, contact support@tengtengai.com.
This English version applies to users outside mainland China. Users in mainland China are governed by the Chinese version. Where we publish a version of this policy for a specific region, that version applies to users in that region.
1. Information We Collect
| Context | Information | Purpose |
|---|---|---|
| Registration and sign-in | Email address, password (stored only as an irreversible hash), email verification codes; if you use another sign-in method, basic profile data returned by that platform such as email, name and avatar | Creating and verifying your account, password recovery |
| Subscriptions and payments (if offered) | Subscription status, order records, payment status and transaction IDs, credit usage logs | Membership services, billing, credit tracking, refunds and reconciliation |
| Using the web app | Workspace, workflow and digital employee configurations, conversations, files and knowledge base materials you upload, run logs | Providing the features you request |
| Connecting third-party apps | Authorization tokens, API keys you enter, granted scopes and third-party account identifiers | Accessing the app on your behalf within the permissions you grant |
| Security and operations | IP address, browser and device information, sign-in sessions, activity and security logs | Account security, fraud prevention and troubleshooting |
We do not ask you for identity documents, biometric data or other sensitive personal information. However, files, conversations or knowledge base materials you upload may contain sensitive personal information (such as ID numbers, financial accounts, health information, location history, or information about children) or other people's personal information. Before uploading, make sure you have any required authorization or consent, and remove sensitive information that is not needed.
2. How We Use Information
We use information to: provide membership services, billing and credit tracking; provide the features of the web app; send your instructions, conversations and necessary context to AI model services to generate responses or run workflows; convert knowledge base and memory content into embeddings for retrieval; keep the Services secure, prevent abuse and troubleshoot; improve the product experience based on usage statistics (which does not include using your content to train or improve models); and for other purposes required by law.
Where the law of your region requires a legal basis, we process personal information to perform our contract with you, for our legitimate interests in operating and securing the Services, to comply with legal obligations, or with your consent. We will ask for your consent before using personal information for purposes beyond those described here. We do not sell your personal information.
3. AI Models and Automated Processing
We do not use your inputs, uploaded files, or generated outputs to train or improve any AI model.
When you chat with digital employees or run workflows in the web app, the relevant inputs (including file excerpts and knowledge base search results used) are sent through APIs to AI model providers to generate outputs. By default, the web app calls models (including DeepSeek, Qwen and other models offered on the platform) and generates embeddings through the APIs of Alibaba Cloud Qwen AI Platform and Alibaba Cloud Model Studio (Bailian). Alibaba Cloud's official documentation states that inputs and outputs submitted through its APIs are not used for model training. If we enable another model provider, we will only use API services whose terms do not authorize that provider to train its models on API data, and we will update the provider list in our Privacy Policy. We do not authorize any provider to use your content to train its models. If you enter your own API key for another model provider in a workflow, that processing is governed by the terms between you and that provider.
Model providers may retain request records and metadata for a limited period under their own rules or legal requirements for billing, security and compliance.
Digital employees carry out tasks automatically according to your configuration and may search or crawl the web, call APIs, or access third-party apps you have authorized. We do not make decisions that significantly affect your rights or interests solely through automated decision-making; if we ever do, you have the right to request an explanation and to object.
4. Third Parties We Share With
We provide personal information to third parties only as necessary for the following functions, and require them to process it for the agreed purposes with appropriate security measures:
| Third party | Purpose | Information involved |
|---|---|---|
| AI model providers: Alibaba Cloud Qwen AI Platform and Alibaba Cloud Model Studio (Bailian); other model providers when enabled (such as the DeepSeek Open Platform) | Generating responses, powering digital employees, embedding knowledge base and memory content | Your instructions, conversations, and necessary file and knowledge base excerpts |
| Web search and crawling providers (when you use those features) | Web search, crawling and web actions | Search queries, target URLs and page content |
| Email delivery providers (such as Alibaba Cloud DirectMail and Alibaba Cloud Enterprise Mail) | Sending verification codes, password resets and notifications | Email address and email content |
| Payment providers (if paid services are offered, such as WeChat Pay and Alipay) | Processing payments and refunds | Order number, amount and payment status |
| Third-party sign-in or enterprise SSO services (if offered) | Signing in | Email, name and avatar you authorize |
| Third-party apps you connect | Reading or writing data on your behalf | Data within the granted scope and authorization tokens |
| Alibaba Cloud (cloud computing) | Hosting the Services and storing data | Data needed to run the Services |
Other than the above, we share, transfer or publicly disclose your personal information only with your consent, when required by law, or when lawfully requested by competent authorities.
5. Data Location and International Transfers
Your personal information is stored on Alibaba Cloud servers in the Hong Kong region (Hong Kong SAR, China). When the Services call AI models, the relevant content is transmitted to the model providers' processing locations, which may include mainland China.
If you use the Services from outside these places, your personal information will be transferred to and processed in them. Where the law of your region requires it, we will provide the required notices, obtain your consent, or rely on other lawful transfer mechanisms, and protect your information as described in this policy.
6. Retention and Deletion
We keep personal information only for as long as necessary for the purposes described, specifically:
- Account information: kept while your account exists; after you delete your account, we delete or anonymize your personal information within 15 working days, and copies in backups are cleared automatically as backups roll over, within 30 days, and are not used in the meantime;
- Files, conversations, knowledge bases and workflows you delete: removed from live systems, and copies in backups are cleared within 30 days;
- Network and security logs: kept for no more than 180 days (6 months), then deleted or anonymized;
- Order and transaction records (if paid services are offered): kept for the period required by law (for example, at least three years from completion of the transaction), then deleted;
- Information that must be kept longer by law, or to resolve disputes or cooperate with lawful investigations, is kept for the corresponding period.
7. Cookies and Similar Technologies
We use cookies to store sign-in credentials and sessions so that you stay signed in and the Services stay secure; these cookies are strictly necessary. We currently do not use third-party advertising or tracking cookies. If we start using analytics or advertising technologies, we will update this policy and obtain your consent where required. You can clear or block cookies in your browser, but you may then be unable to sign in or use some features.
8. Data Security
Passwords are stored as irreversible hashes and we never store them in plain text; sign-in credentials use HttpOnly cookies; data in transit is encrypted with HTTPS; authorization tokens and API keys for third-party apps are stored encrypted; internal access follows the principle of least privilege. If a personal information security incident occurs, we will notify you and report to the authorities as required by law.
9. Your Rights
You have the right to access, obtain a copy of, correct, supplement and delete your personal information, to request portability where applicable, to withdraw consent (for example, by disconnecting third-party apps or turning off automated workflows), to delete your account, and to ask us to explain this policy. Withdrawing consent does not affect processing carried out before the withdrawal.
Depending on your region (for example, under the GDPR or similar laws), you may also have the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority.
You can view subscriptions and usage in the member center, manage workspaces, files and connections in the web app settings, or email support@tengtengai.com to request an export, deletion of account data, or account deletion. We will respond within 15 working days after verifying your identity, or sooner where the law of your region requires.
10. Children
The Services are intended mainly for adults. Users under 18 (or the age of majority in their region) should use the Services only with the consent and guidance of a parent or guardian. We do not knowingly collect personal information from children under 14 (or the minimum age required in their region); where processing is necessary, we will obtain parental consent. If we learn that we collected such information by mistake, we will delete it promptly.
11. Changes to this Policy
We may revise this policy. We will notify you of material changes (such as changes to purposes, storage location or third-party recipients) before they take effect through a website notice, in-product message or email, and obtain your consent again where required.
12. Contact Us
If you have questions, comments or complaints about this policy or our handling of personal information, contact support@tengtengai.com. You may also complain to the competent data protection authority in your region.