3devotion3devotion 第三方服务商名单 / Subprocessors List
生效日期 / Effective Date: 2026年10月7日 / October 7, 2026
版本 / Version: 2026.1
重要提示 / IMPORTANT NOTICE
本第三方服务商名单同时以中文和英文书写。如中文版本与英文版本之间存在任何理解分歧、含义冲突或不一致之处，应以中文版本为准。
This Subprocessors List is prepared in both Chinese and English. In the event of any discrepancy, conflict, or inconsistency between the Chinese and English versions, the Chinese version shall prevail.
中文版 (Chinese Version)
1. 概述与定义
为了向您提供高可靠、低延迟且功能丰富在线黑板服务，上海智站未来机器人有限公司（“3devotion”）委托了经过严格安全与合规审查的第三方技术服务机构（以下简称“受托人”或“子处理者 / Subprocessor”）来协助开展部分数据处理、计算基础设施托管、支付结算与广告支持业务。
我们与所有第三方服务商均受法律协议约束，要求其采取不低于行业标准的技术和组织安全措施，严格限定其数据处理范围，并禁止其将您的个人信息用于本服务之外的任何未经授权的用途（包括但不限于禁止将您的私有黑板内容用于训练其自有基础人工智能模型）。
2. 核心第三方服务商（受托处理者）清单
| 服务商全称 (Legal Entity) | 注册国家/地区 | 处理角色与业务范围 | 涉及处理的数据类型 | 数据安全与传输保障机制 |
|---|---|---|---|---|
| Cloudflare, Inc. | 美国 (USA) / 全球边缘节点 | 核心云基础设施：提供 Pages 静态托管、Workers 边缘计算、D1 关系型数据库、R2 对象存储、KV 缓存、CDN 加速、DDoS 防护及安全验证。 | IP 地址、请求日志、加密会话 Cookie、存储于 D1 的账户哈希、存储于 R2 的 3D 模型与导出的黑板媒体数据。 | SOC 2 Type II、ISO 27001 认证，欧盟标准合同条款 (SCCs)，静态/传输全面加密 (TLS 1.3)。 |
| Creem (Creem Technologies) | 英国/欧盟 (UK/EU) / 全球 | 记录商家与支付结算：处理 Pro/Max 会员的一笔付购买、订单结算、发票及跨境增值税税务合规。 | 电子邮箱、订单编号、支付金额、交易时间戳、账单国家（注：完整信用卡卡号由其托管，3devotion 不接触）。 | PCI-DSS 合规，支付级强认证 (SCA)，全面端到端加密传输。 |
| Google LLC (Google AdSense) | 美国 (USA) / 全球 | 免费版广告投放合作伙伴：在免费基础版黑板界面投放展示型商业广告，提供反作弊与展示频次控制。 | 设备标识符、广告 Cookie（如 __gads）、IP 地址（用于地理粗略定向）、广告交互数据。 |
Google 认证同意管理机制 (CMP/TCF v2.2)，欧盟/加州隐私框架合规。 |
| Anthropic, PBC（Claude） | 美国 (USA) | AI 模型服务（按可用性择一调用）：仅在用户主动触发 AI 助手、公式解析、手写识别时处理该请求所必需的内容；不用于训练其模型（以各服务商 API 条款为准）。 | 用户提交给 AI 功能的文字/图片 | 加密传输 (TLS)；跨境提供前按《个人信息保护法》取得单独同意。 |
| OpenAI, L.L.C. | 美国 (USA) | AI 模型服务（按可用性择一调用）：仅在用户主动触发 AI 助手、公式解析、手写识别时处理该请求所必需的内容；不用于训练其模型（以各服务商 API 条款为准）。 | 用户提交给 AI 功能的文字/图片 | 加密传输 (TLS)；跨境提供前按《个人信息保护法》取得单独同意。 |
| 杭州深度求索人工智能基础技术研究有限公司（DeepSeek） | 中国 (China) | AI 模型服务（按可用性择一调用）：仅在用户主动触发 AI 助手、公式解析、手写识别时处理该请求所必需的内容；不用于训练其模型（以各服务商 API 条款为准）。 | 用户提交给 AI 功能的文字/图片 | 加密传输 (TLS)；跨境提供前按《个人信息保护法》取得单独同意。 |
| 阿里云计算有限公司（通义千问 / DashScope） | 中国 (China) | AI 模型服务（按可用性择一调用）：仅在用户主动触发 AI 助手、公式解析、手写识别时处理该请求所必需的内容；不用于训练其模型（以各服务商 API 条款为准）。 | 用户提交给 AI 功能的文字/图片 | 加密传输 (TLS)；跨境提供前按《个人信息保护法》取得单独同意。 |
| 北京火山引擎科技有限公司（豆包 / 火山方舟） | 中国 (China) | AI 模型服务（按可用性择一调用）：仅在用户主动触发 AI 助手、公式解析、手写识别时处理该请求所必需的内容；不用于训练其模型（以各服务商 API 条款为准）。 | 用户提交给 AI 功能的文字/图片 | 加密传输 (TLS)；跨境提供前按《个人信息保护法》取得单独同意。 |
| Groq, Inc. | 美国 (USA) | AI 模型服务（按可用性择一调用）：仅在用户主动触发 AI 助手、公式解析、手写识别时处理该请求所必需的内容；不用于训练其模型（以各服务商 API 条款为准）。 | 用户提交给 AI 功能的文字/图片 | 加密传输 (TLS)；跨境提供前按《个人信息保护法》取得单独同意。 |
| Resend, Inc. / Cloudflare Email | 美国 (USA) | 事务性邮件分发：用于在用户使用邮箱验证码登录时发送一次性动态验证码（OTP）。 | 电子邮箱地址、一次性验证码、邮件投递状态。 | SOC 2 认证，仅用于邮件投递，验证码 10 分钟后失效并销毁。 |
3. 第三方服务商的评估与监督
我们建立了健全的供应商准入与合规审查机制：
- 资质与安全性评估：定期核查服务商的数据安全认证资质（包括但不限于 ISO 27001、SOC 2、PCI-DSS 等）；
- 最小必要原则：仅向服务商传递其执行特定技术支撑所必需的最少数据；
- 合同约束：签署包含严格保密、审计权限、数据泄露应急通知（72小时内）及安全保障义务的数据处理协议（DPA）。
4. 服务商变更与异议机制
4.1 当我们因技术架构升级或业务调整需要新增或更换第三方服务商时，我们将在本页面进行更新并公示。
4.2 若您对新增的第三方服务商存在合理的数据安全或隐私合规顾虑，您有权停止使用依赖该服务商的相关功能，或通过向 [email protected] 发送邮件提出异议。如异议无法消除，您有权终止使用本服务并注销账户。
English Version (For Reference Only)
1. Overview and Definitions
To provide secure, low-latency, and resilient digital blackboard services, Shanghai Zhizhan Future Robotics Co., Ltd. ("3devotion") engages vetted third-party vendors ("Subprocessors") for infrastructure hosting, payment clearing, ad serving, and AI inference.
All Subprocessors are bound by legal agreements requiring industry-standard technical and organizational safeguards, strictly limiting processing to designated tasks, and expressly prohibiting secondary exploitation (including prohibiting foundation model training on private customer data).
2. List of Subprocessors
| Entity Name | Location | Processing Role & Scope | Data Categories Processed | Safeguards & Compliance |
|---|---|---|---|---|
| Cloudflare, Inc. | USA / Global Edge | Core Infrastructure: Web hosting (Pages), Serverless computing (Workers), SQL database (D1), Object storage (R2), KV, CDN, DDoS mitigation. | IP address, access logs, session cookies, encrypted user hashes, 3D assets and exported blackboard files. | SOC 2 Type II, ISO 27001, Standard Contractual Clauses (SCCs), TLS 1.3 transit encryption, AES-256 rest encryption. |
| Creem | UK/EU / Global | Merchant of Record & Payments: Handles one-time checkout for Pro/Max plans, billing receipts, fraud detection, and sales tax. | Email address, order ID, amount, payment timestamp, country code (card details handled directly by Creem). | PCI-DSS Level 1 compliant, Strong Customer Authentication (SCA). |
| Google LLC (Google AdSense) | USA / Global | Advertising Partner: Delivers display ads on the free tier to sustain open access. | Device indicators, ad cookies (__gads), IP address (coarse location), ad interaction logs. |
Google certified CMP (TCF v2.2), GDPR/CCPA opt-out controls. |
| Anthropic, PBC (Claude) | USA | AI model service (one is called depending on availability): processes only what a user-triggered AI request (assistant, formula interpretation, handwriting recognition) needs; not used to train their models per each provider's API terms. | Text/images the user submits to AI features | Encrypted in transit (TLS); separate consent obtained before cross-border transfer where PIPL applies. |
| OpenAI, L.L.C. | USA | AI model service (one is called depending on availability): processes only what a user-triggered AI request (assistant, formula interpretation, handwriting recognition) needs; not used to train their models per each provider's API terms. | Text/images the user submits to AI features | Encrypted in transit (TLS); separate consent obtained before cross-border transfer where PIPL applies. |
| Hangzhou DeepSeek Artificial Intelligence Co., Ltd. | China | AI model service (one is called depending on availability): processes only what a user-triggered AI request (assistant, formula interpretation, handwriting recognition) needs; not used to train their models per each provider's API terms. | Text/images the user submits to AI features | Encrypted in transit (TLS); separate consent obtained before cross-border transfer where PIPL applies. |
| Alibaba Cloud Computing Co., Ltd. (Qwen / DashScope) | China | AI model service (one is called depending on availability): processes only what a user-triggered AI request (assistant, formula interpretation, handwriting recognition) needs; not used to train their models per each provider's API terms. | Text/images the user submits to AI features | Encrypted in transit (TLS); separate consent obtained before cross-border transfer where PIPL applies. |
| Beijing Volcano Engine Technology Co., Ltd. (Doubao / Ark) | China | AI model service (one is called depending on availability): processes only what a user-triggered AI request (assistant, formula interpretation, handwriting recognition) needs; not used to train their models per each provider's API terms. | Text/images the user submits to AI features | Encrypted in transit (TLS); separate consent obtained before cross-border transfer where PIPL applies. |
| Groq, Inc. | USA | AI model service (one is called depending on availability): processes only what a user-triggered AI request (assistant, formula interpretation, handwriting recognition) needs; not used to train their models per each provider's API terms. | Text/images the user submits to AI features | Encrypted in transit (TLS); separate consent obtained before cross-border transfer where PIPL applies. |
| Resend, Inc. / Cloudflare Email | USA | Transactional Email: Dispatching one-time login verification codes (OTP). | Recipient email address, passcodes, delivery logs. | SOC 2 compliant, transient delivery use only. |
3. Due Diligence and Governance
We select Subprocessors based on rigorous criteria, including security certifications (ISO 27001, SOC 2, PCI-DSS) and legal commitments to process data strictly under our instructions pursuant to Data Processing Addenda.
4. Updates and Right to Object
We update this list prior to onboarding new Subprocessors. Users with inquiries or objections concerning a new Subprocessor may contact [email protected].