Privacy / 隐私说明
English
TradeLingo runs entirely in your browser and collects no analytics. Your messages never pass through a TradeLingo server: text is sent straight from your browser to the provider you chose. TradeLingo's own server (tradelingo.cn, in Frankfurt, Germany) only serves the website, downloads and the version file, and keeps no access logs.
What is sent, and where
| Data | Sent to | When |
|---|---|---|
| Text of messages being translated (incoming messages, your drafts, quick phrases, back-translations) | The translation provider you configured: DeepL (api.deepl.com / api-free.deepl.com), Alibaba Cloud Model Studio (dashscope.aliyuncs.com / dashscope-intl.aliyuncs.com) or DeepSeek (api.deepseek.com) | Only when a message is translated |
| Up to 8 recent messages of the open chat, as context | DeepSeek only, and only when "use recent chat as context" is enabled | When DeepSeek translates your reply |
| Up to the last 80 visible messages of the open chat, with time and sender ("us"/"customer"); phone numbers masked | DeepSeek only | Only when you click Generate / Update on the deal battle card |
| Your API key | The provider that issued it | With each request to that provider |
| Deal-card fields (customer name/company/country, heat, stage, estimated value, next step, promises, quotes, needs, terms, blockers, missing info, summary, reply status, last-message times); never chat text or phone numbers | Notion (api.notion.com), with your Notion connection token, into the database you chose | Only if you connect Notion: a few seconds after a deal card changes, or when you click Sync. The api.notion.com permission is requested only when you connect |
Nothing (a plain download of the public update.json file; no data from you is included) | TradeLingo's website (tradelingo.cn), which keeps no access logs. Versions before 0.10.3 used GitHub instead | At most about once a day, to check for a new version. Can be turned off in settings |
Each provider handles the text under its own privacy policy. Check it before translating sensitive content.
What is stored locally (chrome.storage.local, on your computer only): API keys, settings, glossary, quick phrases, a translation cache, per-chat language records, deal battle cards, monthly character counts per engine, and (if you connect Notion) your Notion token and which Notion page belongs to which customer. Per-chat records store only a hash of the chat ID, never phone numbers or names.
Follow-up reminders are computed locally from your saved battle cards and shown with your system's notifications; nothing is sent anywhere.
Backup files are saved where you choose. If you include API keys, keep the file private.
Language detection for per-chat language memory uses Chrome's built-in chrome.i18n.detectLanguage, which runs on your device.
Diagnostics (Alt+Shift+D) copy only page structure and counts to your clipboard. Message text and phone numbers are removed. Nothing is sent anywhere unless you paste it yourself.
To remove all data, remove the extension in chrome://extensions.
TradeLingo Desktop (Windows beta) follows the same rules. It watches mouse selections (positions and clicks only, never keystrokes) so it can show its toolbar. Only if you turn on "Press ; twice to open quick phrases" (off by default) does it also listen to the keyboard, and then it acts only on the semicolon key pressed twice within half a second; no other key is looked at, recorded or stored; the selected text stays on your computer until you click a toolbar button, and then goes only to the provider you chose. It can reach only api.deepl.com, api-free.deepl.com, dashscope.aliyuncs.com, dashscope-intl.aliyuncs.com and api.deepseek.com (enforced in its configuration); it does not use any TradeLingo server and does not check for updates yet. "Explain" sends the selected text to DeepSeek. "Reply" sends the selected messages plus the few messages you recently clicked a toolbar button on in the same chat (kept in memory only, shown in the popup with checkboxes; unticked ones are never sent; phone numbers masked), your "My company" details and your quick phrases to DeepSeek to draft a reply, only when you click it. Password fields are never read. When replacing text it briefly uses the clipboard and then restores your previous contents, marked so they don't enter Windows clipboard history. "Fill in with AI" (My company) sends the description you type or paste, and "Generate with AI" (Glossary) sends your industry and company details, to DeepSeek, only when you click those buttons; phone numbers are masked. Your industry line, if set, is included in translation requests to the engine you chose. "Add to follow-up" sends the messages you tick (phone numbers masked) and, when updating, that customer's current deal card to DeepSeek to build the card, only when you click "Create / Update deal card". To recognise the same customer later, emails found in those messages are saved on the card and phone numbers only as a one-way hash; deal cards stay on your computer (separate from the extension's) and are never synced anywhere. Follow-up reminders are worked out locally and shown as Windows notifications. "Check DeepL quota and DeepSeek balance" (Settings → Translation engines) sends only your API key to DeepL / DeepSeek, only when you click it. "Start with Windows" (on by default) adds TradeLingo to your account’s Windows startup list; uninstalling removes it. Settings live in %APPDATA%\cn.tradelingo.desktop; API keys are encrypted with Windows DPAPI for your Windows account. To remove all data, uninstall the app and delete that folder.
简体中文
TradeLingo 完全在你的浏览器中运行，不收集任何统计数据。你的消息从不经过 TradeLingo 的服务器：要翻译的文字从你的浏览器直接发给你选的服务商。TradeLingo 自己的服务器（tradelingo.cn，位于德国法兰克福）只提供官网、下载和版本号文件，不记录访问日志。
会发送什么、发给谁
| 数据 | 发送给 | 何时发送 |
|---|---|---|
| 需要翻译的文字（收到的消息、你写的回复、快捷话术、回译内容） | 你所选的翻译服务商：DeepL、阿里云百炼或 DeepSeek | 只在翻译时发送 |
| 当前聊天最近 8 条消息（作为上下文） | 仅 DeepSeek，且只在勾选“参考最近聊天”时发送 | DeepSeek 翻译你的回复时 |
| 当前聊天最近最多 80 条可见消息（含时间、发送方“我方/客户”），电话号码已打码 | 仅 DeepSeek | 只在你点击作战卡的“生成”或“更新”时 |
| 你的 API Key | 签发该 Key 的服务商 | 每次向该服务商发起请求时 |
| 作战卡字段（客户名/公司/国家、热度、阶段、预估金额、下一步、承诺、报价、需求、条款、卡点、缺失信息、摘要、往来状态和最后消息时间）；不含聊天原文和电话号码 | Notion（api.notion.com），使用你的 Notion 连接密钥，写入你选择的数据库 | 只在你连接了 Notion 时：作战卡变化后几秒内，或你点“同步”时。访问 api.notion.com 的权限只在连接 Notion 时申请 |
不发送任何数据（只是下载公开的 update.json 文件读取最新版本号） | TradeLingo 官网（tradelingo.cn），不记录访问日志。0.10.3 以前的版本从 GitHub 读取 | 大约每天一次，检查有没有新版本；可在设置里关闭 |
各服务商按照其自身的隐私政策处理这些文字，翻译敏感内容前请先了解相关政策。
本地保存的内容（chrome.storage.local，只在你的电脑上）：API Key、设置、术语表、快捷话术、翻译缓存、客户语言记录、商机作战卡、各引擎本月用量（字符数），以及（连接 Notion 时）Notion 密钥和客户对应的 Notion 页面。客户语言记录只保存聊天编号的哈希值，不保存电话号码或姓名。
跟进提醒根据本地保存的作战卡计算，通过系统通知显示，不会发送到任何地方。
备份文件保存在你选择的位置；如果包含了 API Key，请妥善保管，不要发给别人。
识别客户语言使用 Chrome 自带的 chrome.i18n.detectLanguage，在你的电脑上本地完成。
诊断信息（Alt+Shift+D）只把页面结构和统计数字复制到剪贴板，已去除消息内容和电话号码。除非你自己粘贴发出，否则不会发送到任何地方。
如需删除全部数据，在 chrome://extensions 中移除插件即可。
TradeLingo 桌面版（Windows 测试版） 遵守同样的规则。为了弹出划词工具栏，它会监听鼠标的划选动作（只看位置和点击，从不记录键盘输入）。只有你在设置里打开“连按两下分号打开快捷话术”（默认关闭）时，它才监听键盘，而且只认“分号键在半秒内被连按两次”，其他按键一律不看、不记、不存；选中的文字只留在你的电脑上，点了工具栏按钮才发给你选的翻译服务。它只能连 api.deepl.com、api-free.deepl.com、dashscope.aliyuncs.com、dashscope-intl.aliyuncs.com、api.deepseek.com（写死在程序配置里），不经过 TradeLingo 的服务器，目前也不检查更新。“解释”会把选中的文字发给 DeepSeek。“帮我回”会把选中的消息，以及同一个聊天里你最近点过工具栏按钮的几条消息（只记在内存里，浮窗里可以勾选，没勾的绝不发送；电话号码已打码）、你填写的“我的公司资料”和快捷话术发给 DeepSeek 起草回复，只在你点它时发送。密码框里的文字一律不读。替换文字时会临时使用剪贴板，用完恢复你原来的内容，并标记为不进入 Windows 剪贴板历史。“我的公司”里的“AI 帮我填”会把你写或粘贴的介绍、术语表的“AI 帮我生成”会把你的行业和公司资料发给 DeepSeek，只在你点这两个按钮时发送，电话号码已打码；填写的“行业和主营产品”会随翻译请求一起发给你选的翻译服务。“加入跟进”会把你勾选的消息（电话号码已打码），更新时连同这位客户当前的作战卡，发给 DeepSeek 生成作战卡，只在你点“生成 / 更新作战卡”时发送。为了以后认出同一位客户，消息里的邮箱会记在作战卡上，电话号码只保存不可还原的哈希；作战卡只保存在你的电脑上（和插件的分开），不同步到任何地方。跟进提醒在本地计算，用 Windows 系统通知弹出。设置 → 翻译引擎里的“查询 DeepL 额度和 DeepSeek 余额”只把你的 API Key 发给 DeepL / DeepSeek 查额度，只在你点它时发送。“开机自动启动”（默认打开）会把 TradeLingo 加进你这个 Windows 账户的启动应用，卸载时一起删掉。设置保存在 %APPDATA%\cn.tradelingo.desktop，API Key 用 Windows 自带的 DPAPI 按你的 Windows 账户加密。如需删除全部数据，卸载程序并删除这个文件夹即可。