Morlivo, a brand of Stelica Ventures LLC, a Texas limited liability company ("Morlivo", "we", "our", "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our translation and transcription platform ("Service"). References to "Morlivo" or "Morlivo.ai" refer to Stelica Ventures LLC doing business as Morlivo.ai.
重要
客户数据不用于训练人工智能模型。您的内容仅被处理以提供所请求的翻译或转录服务。
1. 我们收集的数据
1.1 账户信息
When you create an account, we collect your name, email address, and password. If you sign up via a third-party provider (e.g., Google), we receive your name and email from that provider.
1.2 客户内容
This includes text, documents, and audio files you submit for translation or transcription. Customer Content is processed solely to provide the Service and is not used for any other purpose.
1.3 使用数据
We automatically collect information about how you interact with the Service, including IP address, browser type, pages visited, features used, timestamps, and API request metadata.
1.4 支付信息
Payment processing is handled by our third-party payment processor. We do not store your full credit card number. We receive and store a truncated card number, expiration date, and billing address for record-keeping.
2. 我们如何使用您的数据
我们将收集的数据用于：
- 提供、运营和维护服务
- 处理翻译和转录
- 管理您的帐户和账单
- 发送交易电子邮件（收据、警报、通知）
- 通过聚合、匿名分析改进服务
- 响应支持请求
- 执行我们的服务条款并防止滥用
- 遵守法律义务
3. 数据存储和安全
All data is stored on Google Cloud Platform infrastructure. We implement the following security measures to protect your data:
- 使用 Google Cloud KMS 进行静态加密。客户管理的加密密钥 (CMEK) 可用于企业部署。
- 使用 TLS 1.2+ 进行传输加密
- 在所有多租户部署中强制实施租户隔离
- 对所有 API 端点应用速率限制以防止滥用
- 自动编辑系统日志中的 PII 以最大程度地减少个人数据的泄露
- 访问控制、审核日志记录和定期安全评估
Enterprise customers may configure data residency to restrict processing and storage to specific geographic regions (EU, US, or APAC).
Morlivo supports HIPAA, GDPR, and FedRAMP requirements across all deployment models — cloud, hybrid, and on-premises.
4. 分处理者
We use the following sub-processors to deliver the Service. Customer Content may be transmitted to these providers solely for processing:
| 子处理器 | 目的 | 地点 |
|---|---|---|
| 谷歌云（顶点人工智能） | AI模型推理、翻译、转录 | 可配置（美国/欧盟） |
| 谷歌云平台 | 基础设施、存储、数据库 | 可配置（美国/欧盟） |
| 微软Azure（认知服务） | 后备翻译引擎 | 美国/欧盟 |
| 条纹公司 | 订阅计费、付款处理、客户门户 | 美国 |
| Google Workspace（Gmail） | 交易电子邮件传送（收据、验证、通知） | 美国 |
We will notify you of material changes to our sub-processor list via email or through the Service. For details on data processing obligations, refer to our Data Processing Agreement (DPA).
5. 数据保留
Account information is retained for the duration of your account and for a reasonable period afterward for legal and business purposes. Customer Content and other data are retained according to the following schedule:
- 客户内容（翻译、转录、上传的文件）：最多保留 30 天，然后自动删除
- 系统日志：保留30天
- 审核日志和登录事件：保留 90 天
- Cloud Storage 对象：上传 30 天，导出 90 天
- 翻译记忆库条目：保留直至删除
After the applicable retention period, data is permanently deleted and cannot be recovered.
6. PII 密文插件
Morlivo offers an optional PII (Personally Identifiable Information) redaction service that can be enabled on a per-project basis. When activated, the service automatically detects and redacts sensitive entities before content is sent for processing.
PII 编辑服务支持以下实体类型的多语言检测：
- 姓名和地址
- 电话号码和电子邮件地址
- 信用卡号码
- 医疗信息
PII redaction can be enabled via project settings in the application or by passing the appropriate parameter in API requests.
7. 您的权利
根据您所在的司法管辖区，您可能对您的个人数据拥有以下权利：
- 访问——您可以直接在应用程序中查看我们持有的有关您的个人数据。
- 纠正——要求纠正不准确的数据。
- 删除——您可以从“设置”中永久删除您的帐户和所有相关数据。此操作是不可逆转的。
- 可移植性——您可以从“设置”中将所有数据导出为可下载的 ZIP 文件。
- 限制 - 您可以通过项目设置控制每个项目的处理首选项。
- 反对——反对基于合法利益的处理。
- 撤回同意——在处理基于同意的情况下随时撤回同意。
To exercise any of these rights, you can use the self-service options available in Settings or contact us at privacy@morlivo.ai. We will respond within 30 days (or sooner if required by applicable law).
8.GDPR
For users in the European Economic Area (EEA), United Kingdom, and Switzerland: Morlivo acts as a data processor when processing Customer Content on your behalf. We process personal data based on the contractual necessity of providing the Service, our legitimate interests in operating and improving the Service, and your consent where applicable.
Where data is transferred outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.
You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.
9. 法律协议和合规性
以下法律协议可用于支持您的合规要求：
- Business Associate Agreement (BAA) -- Available for customers subject to HIPAA. Covers the handling of protected health information (PHI) within the Service.
- Data Processing Agreement (DPA) -- Available for customers subject to GDPR. Defines data processing obligations, sub-processor disclosures, and cross-border transfer mechanisms.
Morlivo is designed to support HIPAA, GDPR, and FedRAMP requirements across all deployment models. Contact us at privacy@morlivo.ai to request the applicable agreement for your organization.
10. 儿童隐私
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information.
11. 本政策的变更
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.
12. 联系方式
如果您对本隐私政策或我们的数据实践有疑问或疑虑，请通过以下方式联系我们：
- 电子邮件：privacy@morlivo.ai
- 主题：隐私查询