本政策说明：本扩展会「处理」用户数据（收集、传输、使用或共享）。因此我们在此完整披露：我们收集哪些信息、如何使用、与哪些相关方共享、存储在哪里、保留多久，以及您如何访问和删除这些信息。
无论数据处理发生在您的本地设备上，还是传输到我们的服务器，本政策均予披露。请在使用本扩展前完整阅读本政策。安装并使用本扩展，即表示您已知悉本政策所述的数据处理方式。
本政策适用于「自动薯 AutoShu」Chrome 扩展程序及其配套的账号服务（域名 shinewaycargo.com）。
本政策不适用于小红书平台本身（xiaohongshu.com / rednote.com）或任何第三方 AI 服务商自身的隐私实践。这些服务有各自独立的隐私权政策，请另行查阅。
| 数据类别 | 具体内容 | 收集时机 |
|---|---|---|
| 账号与联系方式 | 手机号码；用于登录我们的账号服务 | 您在扩展内注册或登录时由您输入 |
| 小红书账号标识 | 您登录的小红书账号的 ID（用于区分同一设备上的多个小红书账号，以及防止授权被共享） | 您登录小红书后由本扩展读取 |
| 运营配置 | 关键词列表、自定义评论内容与评论库、私信自动回复规则、点赞/收藏概率、浏览停留时长、运行时段、定时任务计划、AI 服务商选择及您在扩展内填写的 API Key | 您在侧边栏或设置页配置时 |
| 第三方推送配置 | 您自行填写的飞书（Feishu）机器人 Webhook 地址（仅在您主动填写时存在） | 您主动填写时 |
只有您主动开启“意向客户识别”后，浏览任务才会在本机整理已加载评论，并在任务结束后向自动薯服务器上传评论作者 UID、昵称、评论 ID、正文、回复关系、笔记标识及必要的笔记与关键词上下文、业务目标，用于识别意向、客户去重和任务续跑。不为此增加网页翻页、滚动或抓取。
识别结果、联系状态和每日额度保存在服务器。您准备发送的私信正文仅保存在本机，不随识别或任务请求上传。开启识别不会自动发送私信，仍需您在“智能私信”中主动启动。本次服务使用服务端规则，不将识别素材发送给外部模型。
关闭开关会停止新的识别上传和任务派发；不会自动删除此前的服务端记录。相关记录用于去重和继续任务，当前没有自动删除期限。您可按第 12 节联系支持，在核实身份后申请删除。卸载扩展仅清除本机数据。
本扩展申请以下权限，用途如下：
| 权限 | 用途 |
|---|---|
storage、unlimitedStorage | 在您本机保存上述配置与运行记录 |
scripting | 当扩展安装或更新后，已打开的小红书旧页面尚未加载内容脚本时，仅在授权或连接检查过程中，于当前小红书页面的主框架执行扩展包内置的账号识别函数，读取“我的主页”链接中的小红书账号 ID。该权限不加载远程代码、不在其他网站运行，也不用于插入广告或修改页面内容 |
tabs、activeTab、windows、sidePanel | 打开与切换小红书标签页、在侧边栏显示操作面板、按您的设置创建任务窗口 |
alarms | 按您设定的时间执行定时任务与保活 |
downloads | 仅在您主动点击「导出」时，把运行记录或采集数据保存为您本机的 JSON / CSV 文件 |
offscreen | 在后台文档中运行完全本地的语义判断模型，用于评论截流场景中的相关性与意图辅助判断。该模型在您的设备上运行，输入文本不会离开您的设备。 |
management | 读取您已安装的其他扩展程序的名称与描述，用于检测与自动化类扩展的功能冲突并提示您；同时监听扩展的安装／卸载以便刷新检测结果。该信息仅在本机比对，不会上传到我们的服务器。 |
本扩展申请的站点访问权限及其用途：
| 域名 | 用途 |
|---|---|
*.xiaohongshu.com、*.rednote.com | 在您打开的小红书页面上执行您设定的运营任务 |
shinewaycargo.com/xhs-auto/* | 账号登录、授权校验、心跳、AI 调用额度校验，以及 AI 选题／标题／发布时间建议接口 |
api.baichuan-ai.com、api.siliconflow.cn、api.deepseek.com、open.bigmodel.cn、api.moonshot.cn、dashscope.aliyuncs.com、ark.cn-beijing.volces.com、api.openai.com、api.anthropic.com、generativelanguage.googleapis.com、api.mistral.ai、openrouter.ai | 您在扩展内可选的 AI 服务商接口域名（共 12 家，服务商名称清单见第 4.2 节）。仅当您启用 AI 评论、AI 私信回复、评论情感分析或 AI 选题／标题／发布时间建议时，才会向相关 AI 服务发起请求；部分语言检测或审核分支直接请求百川，网站辅助 AI 使用服务端配置；不承诺所有分支只访问一个服务商 |
open.feishu.cn | 仅当您自行填写飞书机器人 Webhook 并主动点击「推送」时，向该地址发送数据 |
| 用途 | 涉及的数据 |
|---|---|
| 提供核心功能：按您的配置在小红书执行浏览、点赞、收藏、评论、关注、私信回复、关键词采集与截流防护 | 运营配置、小红书账号标识、页面读取内容、运行记录 |
| 保存您的个性化设置，使下次打开时保持原样 | 运营配置、第三方推送配置 |
| 账号登录与授权校验、校验您的 AI 调用额度、防止授权被多人共享 | 手机号码、授权令牌、小红书账号标识 |
| AI 生成能力：生成评论、生成私信回复、分析评论情感倾向、给出选题／标题／发布时间建议 | 相关笔记的标题与正文、评论原文、私信会话文本（详见第 4 节） |
| 防止重复操作：记住已互动过的笔记 | 已互动笔记 ID |
| 在本机生成统计与导出文件，供您复盘运营效果 | 运行记录、采集记录 |
| 服务可用性维护：心跳保活、错误排查、服务工作者健康检查 | 扩展版本、运行状态统计、错误日志 |
我们不会将上述信息用于：向您发送与产品无关的营销邮件；构建您的兴趣画像；向广告平台出售、出租或以其他方式提供您的数据。
我们不出售您的用户数据。仅在下列情形下，信息会离开您的设备或被提供给相关方：
域名：shinewaycargo.com。接收内容：手机号码、授权令牌、小红书账号标识、扩展版本与运行状态统计。
安全保护接口使用现有授权令牌、账号标识及扩展版本获取经过签名的页面定位配置和默认角色／语气说明，并计算原有互动及语义判定规则。计算请求仅包含必要的标题／正文字符数、点赞／评论／收藏计数、概率设置、语义相似度分数、严格度和提示标记；互动执行校验还包含固定操作类型及随机请求标识，不包含新增个人身份信息。保护服务不可用时相关互动暂停，浏览、采集和导出保留原流程。这些摘要仍属于数据处理。该接口不接收笔记正文、评论原文、私信、采集记录、用户关键词、向量、API Key 或飞书地址。应用不持久保存这些计算摘要；频率控制在服务器内存中短暂保存令牌的哈希及请求次数。新增安全保护接口不生成访问日志，不记录授权头或请求／响应正文。
这是本扩展最主要的对外数据传输。当您启用 AI 评论、AI 私信回复、评论情感分析或 AI 选题／标题建议时，相关小红书内容的文本会被发送给您所选择的 AI 服务商，用于生成结果。发送的内容可能包括：笔记标题、笔记正文、评论原文（含其他用户写的评论）、私信会话文本及对方昵称。
通过 AI 服务商处理的数据不会用于广告投放，我方也不会将其用于训练模型。各 AI 服务商对其收到的数据的处理方式，受该服务商自身隐私政策约束。
可选 AI 服务商清单（由您在扩展设置中选择，默认使用百川智能）：
| 服务商 | 接口域名 |
|---|---|
| 百川智能（默认） | api.baichuan-ai.com |
| 硅基流动 | api.siliconflow.cn |
| 深度求索 DeepSeek | api.deepseek.com |
| 智谱 AI | open.bigmodel.cn |
| 月之暗面 Moonshot | api.moonshot.cn |
| 阿里云百炼（通义千问） | dashscope.aliyuncs.com |
| 火山方舟（豆包） | ark.cn-beijing.volces.com |
| OpenAI | api.openai.com |
| Anthropic | api.anthropic.com |
| Google Gemini | generativelanguage.googleapis.com |
| Mistral AI | api.mistral.ai |
| OpenRouter | openrouter.ai |
如果您在扩展内填写了自己的 API Key，该 Key 仅保存在您的浏览器本地，用于向相关服务商发起上述请求；部分语言检测与审核分支直接请求百川，不能理解为所有 AI 分支只请求一个域名。请不要在扩展中填写您不希望用于此目的的任何密钥。
飞书（Feishu）：open.feishu.cn。仅当您自行填写飞书机器人 Webhook 地址、并主动点击「推送飞书」时，本扩展才会把采集记录（关键词、笔记标题、作者昵称与 ID、点赞数、发布时间、笔记类型、封面图 URL、笔记 URL、采集时间）发送到您指定的那个 Webhook。是否推送、推送到哪里，完全由您决定。
本扩展运行在您的小红书页面上，为完成您设定的任务会与该页面交互（例如填入关键词、点击筛选按钮）。除执行您设定的任务所必需的交互外，本扩展不会向小红书传输额外数据。
在收到有效法律程序要求、为遵守适用法律、或为调查滥用与保障服务安全所必需时，我们可能披露相关信息。在出售、合并或资产转让的情形下，数据可能随之转移，届时我们会以显著方式通知您。
除上述情形外，我们不会将您的用户数据转让、出售或披露给任何其他相关方。
| 数据类型 | 存储位置 | 保留期限 |
|---|---|---|
| 运营配置、运行记录、采集记录、已互动笔记 ID、本地语义模型 | 您本机的浏览器扩展存储区 | 直至您在扩展内清除、或卸载本扩展 |
| 账号信息与授权令牌、手机号码、小红书账号标识 | 您本机 + 我们的服务器 | 账号存续期间保留；可联系客服申请删除，实际删除周期需经运营方确认 |
| 运行状态统计 | 我们的服务器 | 心跳数据会被接口处理并可能进入服务日志；代码未实现可核实的统一保留上限 |
| 服务器常规访问日志 | 我们的服务器 | 受实际服务器日志配置影响；本轮未核实线上保留期限 |
| AI 请求内容（笔记正文、评论、私信文本） | 扩展直接调用的内容由第三方处理；网站配套 AI 路由可接收文本，部分路由记录请求与结果到服务日志 | 第三方期限依其政策；服务日志实际期限未核实，不能承诺零留存 |
本扩展对用户数据的使用遵循 Chrome 应用商店用户数据政策中的「有限使用」要求：
我们的服务器，以及您选择的大模型服务商，可能位于不同的司法辖区（包括中华人民共和国境内及其他地区）。使用本扩展即表示您理解相关数据可能在这些辖区被处理。跨境传输同样通过 HTTPS / TLS 加密进行。如果您不希望数据发生跨境传输，请在扩展设置中选择位于境内的服务商，或关闭 AI 相关功能。
本扩展面向成年运营者与企业用户，不面向 13 周岁以下儿童。我们不会有意收集儿童的个人信息。若您是监护人并发现儿童向我们提供了个人信息，请联系我们，我们将予以删除。
我们可能不时更新本政策。更新后的版本将在本页面发布，并注明新的「最后更新」日期，自发布之日起生效。若变更涉及数据处理方式的实质性调整，我们会同时在扩展内以显著方式提示您。
如您对本政策有任何疑问，或希望行使上述任何权利，请通过以下方式联系我们：
配套官网首页加载 Microsoft Clarity 与 Google AdSense。第三方脚本可能处理 IP、浏览器与设备信息、页面访问、点击、Cookie 或其他标识，依其配置与政策执行；本轮没有取得其线上采集基线或验证所有会话回放字段。请参阅 Microsoft 隐私声明及 Google 隐私政策。扩展没有第三方分析 SDK，不等于网站没有第三方分析或广告脚本。
网站新增统一事件仅允许固定事件名与枚举值（入口、状态、风格），在当前页面内存中保留最近 100 条；若首页 Clarity 已加载，向其发送事件名。不会由本轮事件层附加手机号、token、Cookie、笔记正文、评论正文、私信正文、URL 查询参数或用户标识。第三方脚本独立于该事件层，仍按前述披露处理网站访问数据。
扩展漏斗与评价状态保存于本机 chrome.storage.local：首次使用时间、侧栏打开次数、成功操作次数、试用事件、最近提示时间与不再提示选项；事件队列最多 200 条，不包含内容或账号属性，当前没有远程 collector，不上传这些事件。可卸载扩展清除本地状态。首次使用时间是本轮可观察时间的保守起点，不推测历史安装时间。
免费评论工具当前 AI 开关关闭：标题与正文仅在当前页面校验，不发送、不持久保存。若以后开放匿名 AI，会先补充实际后端与第三方处理披露。
服务器可收到请求 IP 与浏览器 User-Agent 等网络信息；本轮未检查实际访问日志配置。网站配套 operations/content AI 路由可接收用户提交的关键词、标题、文本或上下文并发送给服务端配置的模型；部分内容路由会记录请求与结果到日志。因此不能对整个产品声称“内容永不经过服务器”或“我方零留存”。
The website homepage loads Microsoft Clarity and Google AdSense. These services may process IP, browser/device details, visits, clicks, cookies and identifiers under their configurations and privacy policies. Their live baseline and complete replay fields have not been verified. The Extension SDK statement does not describe the whole website.
The new website event layer allows only fixed names and enumerated properties, retains up to 100 events in page memory, and sends event names to Clarity when loaded. It adds no phone, token, cookie, note/comment/message content, query strings or user identifiers. The independent third-party scripts remain subject to the disclosure above.
Extension funnel/review state remains in chrome.storage.local: first observed use, panel opens, successful action counts, trial events, last prompt and opt-out. The queue is capped at 200 events. No remote collector is implemented. Uninstall clears local state; historical installation age is not inferred.
The free comment tool is disabled. Input is validated only in page memory, with no submission or persistent storage. Companion server AI routes can process submitted text and forward it to configured providers; some content routes log input and results. Server IP/User-Agent handling and deployed retention are unverified.
This policy explains: what information the Extension collects, how we use it, with whom we share it, where it is stored, how long we keep it, and how you can access and delete it. The Extension handles user data (collection, transmission, use, and sharing), so we disclose all of the above here — including data that is processed or stored only locally on your device.
This policy applies to the "AutoShu" Chrome extension and its companion account service at shinewaycargo.com. It does not apply to the Xiaohongshu platform (xiaohongshu.com / rednote.com) or to any third-party AI provider, each of which has its own privacy practices.
Only after you enable lead recognition, the Extension keeps already-loaded comments locally and uploads a batch when the browsing task ends. The batch includes author UID and nickname, comment ID and text, reply relationships, note identifiers and necessary note/keyword context, and your business target. These support recognition, deduplication and task resumption. This feature adds no extra scrolling, pagination or crawling.
Recognition results, contact status and daily quota records are stored on our server. Your prepared outgoing message stays on your device and is not uploaded with recognition or task requests. Enabling recognition does not send messages; you must separately start the task in Smart Messages. This deployment uses server rules and does not send recognition material to an external model.
Turning the switch off stops new uploads and dispatches; it does not delete existing server records. Those records support deduplication and resumption; no automatic deletion period is currently implemented. Contact support under Section 12 to request deletion after identity verification. Uninstalling clears local data only.
| Permission | Purpose |
|---|---|
storage, unlimitedStorage | Store the settings and records above on your device |
scripting | When a Xiaohongshu tab that was already open before the Extension was installed or updated has not loaded the content script, run a bundled account-identification function in the main frame of the current Xiaohongshu page during an authorization or connection check. The function reads the Xiaohongshu account ID from the “My profile” link. This permission does not load remote code, run on other websites, insert advertising, or modify page content |
tabs, activeTab, windows, sidePanel | Open and switch Xiaohongshu tabs, show the side panel, create task windows per your settings |
alarms | Run scheduled tasks and keep-alive at the times you set |
downloads | Only when you click Export, save your records or collected data as JSON/CSV files on your device |
offscreen | Run a fully local semantic model to assist relevance and intent checks in comment interception. This model runs on your device; its input text never leaves it. |
management | Read the names and descriptions of your other installed extensions to detect functional conflicts with automation tools and warn you. This is compared locally and is never uploaded to our servers. |
| Host | Purpose |
|---|---|
*.xiaohongshu.com, *.rednote.com | Perform the operations you configured on Xiaohongshu pages you have open |
shinewaycargo.com/xhs-auto/* | Sign-in, license verification, heartbeat, AI quota checks, and AI topic/title/timing suggestion endpoints |
api.baichuan-ai.com, api.siliconflow.cn, api.deepseek.com, open.bigmodel.cn, api.moonshot.cn, dashscope.aliyuncs.com, ark.cn-beijing.volces.com, api.openai.com, api.anthropic.com, generativelanguage.googleapis.com, api.mistral.ai, openrouter.ai | Optional AI provider endpoints you may choose (12 providers; the named list is in section 4.2). Generation uses the configured provider; companion website suggestions may use the server-configured provider, when the corresponding AI feature is used. Some language detection or review branches call Baichuan directly; not every AI branch is routed exclusively to the provider selector |
open.feishu.cn | Send data only when you enter a Feishu webhook URL and click Push yourself |
We do not use this information to send you unrelated marketing email, to build interest profiles about you, or to sell or rent your data to advertising platforms.
We do not sell your user data. Information leaves your device or is provided to others only in the following cases.
Domain shinewaycargo.com receives: your phone number, license token, Xiaohongshu account identifier, Extension version and runtime statistics.
The protection endpoints use your existing license token, account identifier and Extension version to retrieve signed page selectors and default role/tone descriptions, and calculate existing interaction and semantic decision rules. Calculation requests contain only necessary title/body character counts, like/comment/save counts, probability settings, semantic similarity scores, strictness and hint flags. Interaction authorization also includes a fixed operation type and a random request identifier, without additional personal identifiers. Related interactions pause when the protection service is unavailable; browsing, collection and export retain their existing paths. These summaries are still data processing. These endpoints do not receive note bodies, comment texts, direct messages, collected records, user keywords, vectors, API keys or Feishu addresses. The application does not persist calculation summaries; rate control temporarily keeps a token hash and request counts in server memory. The new protection endpoints do not generate access logs or record authorization headers or request/response bodies.
This is the Extension's primary outbound data transfer. When you enable AI comments, AI direct-message replies, sentiment analysis, or AI topic/title suggestions, the relevant Xiaohongshu content text is sent to the AI provider you selected to generate a result. This may include note titles, note bodies, comment texts (including comments written by other users), and direct-message conversation text with the counterparty's nickname.
Data processed through AI providers is not used for advertising, and we do not use it to train models. How each provider handles the data it receives is governed by that provider's own privacy policy.
Available providers (chosen by you in settings; Baichuan is the default): Baichuan (api.baichuan-ai.com), SiliconFlow (api.siliconflow.cn), DeepSeek (api.deepseek.com), Zhipu AI (open.bigmodel.cn), Moonshot (api.moonshot.cn), Alibaba DashScope (dashscope.aliyuncs.com), Volcano Ark (ark.cn-beijing.volces.com), OpenAI (api.openai.com), Anthropic (api.anthropic.com), Google Gemini (generativelanguage.googleapis.com), Mistral (api.mistral.ai), OpenRouter (openrouter.ai).
Any API key you enter is stored only in your browser and used only for those requests. Please do not enter a key you do not wish to be used this way.
Feishu (open.feishu.cn): only when you enter a Feishu webhook URL and you click "Push to Feishu" does the Extension send the collected records (keyword, note title, author nickname and ID, like count, publish time, note type, cover image URL, note URL, collection time) to the webhook you specified. Whether and where to push is entirely your choice.
The Extension runs on your Xiaohongshu pages and interacts with them to perform your configured tasks (for example, typing a keyword or clicking a filter). Beyond the interaction necessary to perform your tasks, the Extension transmits no additional data to Xiaohongshu.
We may disclose information in response to valid legal process, to comply with applicable law, or as necessary to investigate abuse and secure the service. In the event of a merger, acquisition or sale of assets, data may be transferred, and we will notify you prominently.
We do not transfer, sell or disclose your user data to any other party.
| Data | Location | Retention |
|---|---|---|
| Operation settings, activity records, collection records, acted-upon note IDs, local semantic model | Your browser's extension storage on your device | Until you clear it in the Extension or uninstall |
| Account info, license token, phone number, Xiaohongshu account identifier | Your device + our server | While your account exists; contact support to request deletion. The actual deletion timeline requires operator confirmation |
| Runtime statistics | Our server | Heartbeat data is processed and may appear in service logs; no verified retention cap is implemented in the reviewed code |
| Standard server access logs | Our server | Depends on deployed log configuration; live retention has not been verified |
| AI request content (note bodies, comments, messages) | Direct Extension requests are handled by the selected provider. Companion website AI routes can receive text; some log request text and results | Provider policy applies; server log retention is unverified, so zero retention is not claimed |
The Extension's use of user data complies with the Limited Use requirements of the Chrome Web Store User Data Policy:
Our servers, and the large-language-model provider you select, may be located in different jurisdictions (including the People's Republic of China and other regions). By using the Extension you understand that your data may be processed in those jurisdictions. Cross-border transfers are likewise encrypted over HTTPS/TLS. If you prefer to avoid cross-border transfers, choose a provider located in your region in the Extension settings, or disable the AI features.
The Extension is intended for adult operators and business users and is not directed to children under 13. We do not knowingly collect personal information from children. If you are a guardian and believe a child has provided us with personal information, please contact us and we will delete it.
We may update this policy from time to time. Updated versions will be posted on this page with a new "Last updated" date and take effect on posting. If a change materially alters how we handle data, we will also notify you prominently inside the Extension.