01. Who we are & scope负责主体与适用范围
AGILITHOR PILATES LLC, a Missouri, United States limited liability company, is responsible for the company-controlled processing described in this policy. “We”, “us” and “our” refer to that company.本政策所述由公司决定的信息处理活动，由在美国密苏里州设立的 AGILITHOR PILATES LLC 负责。文中的“我们”均指该公司。
This policy covers the AGILITHOR company information website, AGILITHOR Social Operations and related support correspondence. The workspace is for our own accounts and authorized internal team; it is not a public social network or a consumer subscription service.本政策适用于 AGILITHOR 公司介绍网站、AGILITHOR Social Operations 工作台及相关支持邮件。工作台供自有账号及获授权的内部团队使用，不是公众社交网络或面向消费者的订阅服务。
Our Shopify store, shopping transactions and any separate mobile app are outside this policy. Consult the notice provided by each service. A shared brand, domain or contact email does not combine their data or permissions with this workspace.Shopify 商店、购物交易和其他独立移动 App 不属于本政策的适用范围，请查看相应服务提供的隐私说明。使用相同品牌、域名或联系邮箱，不代表这些服务与本工作台的数据或权限自动互通。
Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net
02. Information & sources信息类型与来源
We receive information from you, authorized colleagues, files they upload or import, the sign-in service, and service operation. The current application handles these categories:信息来源包括你本人、获授权的同事、其上传或导入的文件、登录服务以及服务运行过程。当前应用处理以下类别：
- Identity and membership: display name, email address, sign-in user identifier, workspace role and membership creation time. These support sign-in, access management and collaboration.身份与成员信息：显示名称、邮箱、登录用户标识、工作台角色和成员创建时间，用于登录、访问管理及协作。
- Account directory: social account name, handle, platform, profile URL, market, time zone, brand group, assigned owner and notes, entered by the team.账号档案：团队录入的社媒账号名称、标识、平台、主页链接、市场、时区、品牌分组、负责人和备注。
- Content and media: captions, drafts, tags, review notes, assignments, publishing plans and links; uploaded images or videos and their filenames, type, size, category and rights/source notes. Media or free-text fields may contain people’s images or other personal information supplied by the uploader.内容与媒体：文案、草稿、标签、审核意见、负责人、发布计划及链接；上传的图片或视频及文件名、类型、大小、分类和授权来源说明。上传的媒体或自由文本可能包含人物影像或上传者提供的其他个人信息。
- Reporting: account and date, view, like, comment, share and click counts, follower snapshots, and source descriptions from manual entry or CSV imports. These are account-level figures; the application does not fetch individual viewers or comment text.报表：人工录入或 CSV 导入的账号、日期、播放、点赞、评论、分享和点击数量、粉丝快照及来源说明。这些是账号级统计；应用不会抓取具体观看者或评论正文。
- Activity and support: the actor’s display name, action, record description and timestamp; email address, message content, attachments and replies when you contact us.操作与支持：操作者显示名称、操作、记录描述和时间；你联系我们时使用的邮箱、邮件正文、附件及往来回复。
- Service delivery: hosting and security providers may process IP addresses, browser/device information, request times, authentication information and diagnostic logs to deliver and protect the service. These are distinct from the workspace’s content-performance reports.服务运行：托管和安全服务商可能为提供及保护服务，处理 IP 地址、浏览器或设备信息、请求时间、身份验证信息和诊断日志。这与工作台中的内容表现报表不同。
The company website has no message form or payment checkout. The workspace does not ask for social-platform passwords, payment-card details, government IDs or sensitive health information. Do not put these in notes, media or support messages. Providing business data is voluntary, but the relevant workflow cannot run without the information it needs.公司网站不设留言表单或付款结账。工作台不要求提供社媒平台密码、银行卡资料、身份证件或敏感健康信息，请勿将其放入备注、媒体或支持邮件。业务资料由你主动提供，但缺少必要信息时，相应工作流程将无法完成。
03. Why we use information用途与处理依据
- Operate the website and workspace; identify authorized members and apply permissions.运行网站和工作台，识别获授权成员并执行权限管理。
- Organize company accounts, prepare and review content, manage authorized media and coordinate manual publishing.整理公司账号，准备和审核内容，管理获授权素材及协调人工发布。
- Summarize imported or entered performance figures and maintain traceable business records.汇总人工录入或导入的表现数据，保留可追溯的业务记录。
- Respond to support and privacy requests, investigate errors or misuse, and meet applicable legal obligations.回复支持及隐私请求，调查错误或滥用，并履行适用法律义务。
Where a law requires a legal basis, we rely, as appropriate, on legitimate interests in administering our internal operations and securing the service, performance of a contract with you where necessary, compliance with legal obligations, or consent where required. Our interests do not override rights that applicable law protects. You may object to processing based on legitimate interests, or withdraw consent for processing that depends on it.在法律要求明确处理依据的情况下，我们按实际用途适用以下依据：管理内部运营及维护服务安全的合法利益、为履行与你的合同所必需、履行法定义务，或在需要时取得同意。我们的利益不能凌驾于适用法律保护的权利之上。你可以反对基于合法利益的处理，或撤回作为相关处理依据的同意。
We do not sell workspace personal information or disclose it for cross-context behavioral advertising. The company has added no advertising pixels or third-party marketing analytics to this website. The current workspace does not run AI content processing, facial recognition or automated decisions producing legal or similarly significant effects.我们不出售工作台个人信息，也不为跨场景行为广告提供这些信息。公司未在本网站添加广告像素或第三方营销分析。当前工作台不运行 AI 内容处理、人脸识别，或对个人产生法律或类似重大影响的自动化决策。
04. Access & service providers访问范围与服务商
Authorized workspace members can view shared business records, media, member names and email addresses, and activity records. Roles restrict editing and administrative actions; they do not create a private folder for each member. Upload only information that may appropriately be shared with the authorized team.获授权的工作台成员可以查看共享业务记录、媒体、成员姓名和邮箱，以及操作记录。角色限制编辑和管理操作，并不为每位成员建立独立私密文件夹。请只上传适合向获授权团队共享的信息。
The service uses OpenAI Sites/ChatGPT for hosting-related access and sign-in, and Cloudflare infrastructure for application execution, database records and media storage. Email delivery providers process messages sent to the support address. Such providers process information needed to supply their services; their own account, security and diagnostic processing is also governed by their terms and privacy notices.服务使用 OpenAI Sites／ChatGPT 提供托管相关访问及登录，并使用 Cloudflare 基础设施运行应用、保存数据库记录与媒体。邮件服务商处理发往支持邮箱的邮件。这些服务商处理提供其服务所需的信息；其自身的账号、安全和诊断处理也受各自条款及隐私说明约束。
Provider information:服务商说明： OpenAI · Cloudflare
We may disclose the minimum information reasonably needed to comply with a valid legal requirement, obtain professional advice, or investigate security incidents and protect legal rights. A team member’s authorized export creates a separate copy that the company must also handle under this policy.为遵守有效法律要求、取得专业意见、调查安全事件或保护合法权利，我们可能披露合理所需的最少信息。成员在授权范围内导出会生成独立副本，公司也应按本政策处理这些副本。
The company is based in the United States. Our team and infrastructure providers may access or process data in other countries. This service does not offer a country-specific storage guarantee. Contact us for information about processing locations and applicable transfer arrangements; any legally required transfer safeguards must be in place for the relevant processing.公司设立于美国；团队与基础设施服务商可能在其他国家访问或处理数据。本服务不提供特定国家存储保证。你可联系我们了解处理地点及适用的数据传输安排；相关处理必须具备法律要求的跨境传输保障措施。
05. Retention & removal保存与清理
We retain information for the purpose for which it is needed, taking account of the ongoing working relationship, content dependencies, reporting needs, security investigations, unresolved requests and applicable legal duties. The current application has no automatic expiry or scheduled purge: records remain stored until an authorized removal action. Retention is managed through the following criteria:我们按信息的实际用途判断保存必要性，并考虑持续的工作关系、内容关联、报表需要、安全调查、未解决的请求及适用法律义务。当前应用没有自动到期或定时清理机制，记录会保留至执行获授权的清理操作。保存期限按以下原则管理：
- Membership and identity: needed while access is authorized. When access ends, the owner or administrator should revoke access and assess which identifying details can be removed; historical business and activity records are reviewed separately.成员与身份：在访问获授权期间按需保存。访问结束后，所有者或管理员应撤销权限并评估可删除的身份资料；历史业务和操作记录另行核实。
- Drafts, assets, account records and metrics: retained while needed for active work, reporting or a documented business or legal purpose. When that need ends, remove unneeded records and media, or anonymize personal details where appropriate.草稿、素材、账号记录与指标：在用于当前工作、报表或有记录的业务及法律目的期间保存。用途结束后，清理不再需要的记录和媒体，或在适当情况下将个人信息匿名化。
- Activity and support records: retained as needed to investigate issues, document request handling, establish accountability or meet legal duties. Showing only recent activity in the interface does not erase older stored logs.操作与支持记录：为调查问题、记录请求处理、明确责任或履行法定义务而按需保存。界面只显示近期操作，并不意味着较早日志已被删除。
- Exports and provider recovery copies: an in-app deletion does not automatically erase a downloaded file, email attachment or provider backup. Relevant copies must be included in a request review; provider-controlled copies follow the provider’s applicable retention arrangements.导出与服务商恢复副本：应用内删除不会自动擦除下载文件、邮件附件或服务商备份。处理请求时应核查相关副本；由服务商控制的副本适用其相应保留安排。
Some linked records and records of published content cannot be deleted in the normal interface. This technical restriction is not a rejection of a privacy request: an administrator must assess an appropriate correction, removal, anonymization or lawful retention response. We explain material exceptions and unresolved steps rather than representing a partial removal as complete.部分关联记录和已发布内容记录不能通过普通界面直接删除。这一技术限制不表示拒绝隐私请求；管理员需要评估适当的更正、删除、匿名化或有依据的保留处理。对于重要例外及未完成步骤，应说明情况，不将部分删除表述为全部完成。
How to request deletion查看数据删除指引 ↗06. Your choices & requests你的选择与请求
Depending on the law that applies to you and the processing, you may have rights to know about and access your personal information, correct it, request deletion, restrict or object to processing, receive a portable copy, withdraw consent, or appeal a decision. You may also complain to the relevant data-protection authority. These rights are subject to applicable conditions and exceptions; we do not require you to waive them to use this service.根据对你及相关处理适用的法律，你可能享有了解及访问个人信息、更正、请求删除、限制或反对处理、获取可携带副本、撤回同意或就处理决定申诉的权利。你也可以向有关数据保护监管机构投诉。这些权利适用相应条件和例外；使用本服务不要求你放弃这些权利。
Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net
Describe the request and the relevant workspace/account or record. We may verify the request using your known email or existing workspace relationship, and seek only information proportionate to the request. Do not send a password, government ID or access token. Where permitted, an authorized representative may act with suitable proof of authority.请说明请求内容及相关工作台、账号或记录。我们可能通过已知邮箱或现有工作台关系核实请求，仅索取与请求相称的必要信息。请勿发送密码、身份证件或访问令牌。在法律允许时，获授权代表可提供适当授权证明后代为申请。
We handle requests manually and respond within the time required by applicable law, including explaining any permitted extension, refusal or retention exception. You may reply to the same address to ask for a review. Withdrawing consent does not affect earlier lawful processing. A workspace export may include other people’s information, so a personal-data access request is reviewed before a copy is released.请求由人工处理，并按适用法律要求的期限回复，包括说明法律允许的延期、拒绝或保留例外。你可以回复同一邮箱要求复核。撤回同意不影响此前合法进行的处理。工作台导出可能包含他人信息，因此个人信息访问请求需经核实后再提供副本。
07. Cookies & browser storageCookie 与浏览器存储
The company website stores your selected language as “agilithor-language” in your browser’s local storage. It contains the English or Chinese preference, stays on that browser until changed or cleared, and is not transmitted by our language-switching code. You can remove it using your browser’s site-data settings; the page will return to the default language.公司网站将所选语言以“agilithor-language”保存在浏览器本地存储中。其内容为英文或中文偏好，会保留至你更改或清除；我们的语言切换代码不会将它发送出去。你可以在浏览器网站数据设置中清除它，页面会恢复默认语言。
Our page code does not set advertising or analytics cookies. The hosting/sign-in service may use its own essential cookies or storage for authentication, delivery and security. Its controls and privacy notice apply to those functions. Blocking necessary storage may prevent sign-in. Email and external links open a separate service subject to its own practices.我们的页面代码不设置广告或分析 Cookie。托管及登录服务可能为身份验证、网页传输和安全使用必要的 Cookie 或存储，此类功能适用服务商的控制选项及隐私说明。阻止必要存储可能导致无法登录。邮件和外部链接会打开其他服务，其信息处理规则另行适用。
08. Security & minors安全与未成年人
The current workspace uses hosting access restrictions, authenticated membership, server-side role checks and restricted media access. These measures reduce unauthorized access but do not guarantee absolute security. Keep your sign-in account secure, share only authorized exports and report suspected exposure to the contact below.当前工作台使用托管访问限制、成员身份验证、服务端角色检查及受限媒体访问。这些措施用于减少未经授权的访问，但不保证绝对安全。请保护登录账号，仅共享获授权的导出资料，并通过下方联系方式报告疑似泄露。
The internal workspace is intended for authorized adults aged 18 or over, and is not directed to children. We do not knowingly seek children’s personal information for this service. If you believe such information has been provided, contact us so we can assess and remove it where appropriate. This statement does not describe any separate fitness or mobile application.内部工作台面向年满 18 岁的获授权成年人，不面向儿童。我们不会明知而为本服务主动收集儿童个人信息。如你认为有人提供了此类信息，请联系我们核实并在适当情况下清理。本说明不适用于其他独立健身或移动应用。
Privacy and service contact:隐私与服务联系邮箱： support@agilithor.net
09. Social platform connections社媒平台连接
No TikTok, Instagram, Facebook or YouTube API connection is active in the current workspace. It does not hold their OAuth access/refresh tokens or automatically fetch data, publish posts, read private messages or scrape social profiles. Account names, links and reports are currently supplied by the team.当前工作台未启用 TikTok、Instagram、Facebook 或 YouTube 的 API 连接，不保存这些平台的 OAuth 访问或刷新令牌，也不会自动拉取数据、发布内容、读取私信或抓取社媒主页。账号名称、链接和报表目前由团队提供。
A future authorized integration requires platform approval, implementation and a policy update describing the actual permissions, data fields, token handling, retention and revocation controls before that collection begins. Listing a planned integration is not account authorization. Disconnecting a future integration and deleting historical data are separate actions and must be described when available.未来接入需要平台批准、实际功能实现，并在开始收集前更新政策，说明真实权限、数据字段、令牌处理、保留及撤销控制。列出接入计划不等于取得账号授权。未来的断开连接和历史数据删除是不同操作，应在功能可用时分别说明。
10. Updates & contact更新与联系
The date above identifies this policy version. We will post changes here and give additional notice or obtain consent where required before a material new use of personal information. This notice does not replace permissions required by a platform or applicable law.页首日期标识本版政策。发生变更时，我们会在此更新；对于个人信息的重大新用途，会在法律要求时提前另行通知或取得同意。本说明不能代替平台或适用法律要求的授权。
AGILITHOR PILATES LLC
Missouri, United States美国密苏里州
support@agilithor.net