1. Who we are and what this Policy covers

Caelbert Chae, referred to as “Caelbert,” “we,” “us,” or “our,” operates CaelbertChae.com and NaviMind and is the controller of personal data described in this Policy unless a service-specific notice states otherwise.

This Policy applies to the homepage, NaviMind, account and contact features, shared or public spaces, communications with us, and future services that display a link to this Policy. A future service may provide an additional notice when it processes data differently; that notice will supplement this Policy.

2. Personal data we collect

Information you provide

• Account and identity data: username, email address, password hash, member or user identifiers, verification status, and account status.
• Profile data: display or real name, avatar, company, phone number, birthday, gender, biography, addresses, language, time zone, social links, and other optional profile fields you choose to add.
• Contacts: names, email addresses, phone numbers, company and other details that you choose to save about your contacts.
• Your content: bookmarks, URLs, titles, descriptions, categories, tags, notes, preferences, Spaces, shared resources, comments, invitations, notifications, reminders, and public-library items.
• Communications: messages, requests, feedback, and information you send to us for support, privacy, or legal enquiries.
• Optional integrations: configuration and credentials you provide for connected services or AI providers, together with the content needed to perform the feature you request.

Information collected when you use the services

• Device and connection data: IP address, user agent, browser, operating system, device name or identifier, approximate city or region derived from IP where available, and sign-in timestamps.
• Security and activity data: sessions, verification and recovery events, failed or successful sign-ins, account changes, audit events, synchronization revisions, and abuse-prevention signals.
• Browser storage: strictly necessary session or security state and, when enabled, language, remembered-account, display, offline, synchronization, and preference data. See Cookie Settings.

We do not intentionally collect payment-card data, government identifiers, precise GPS location, health data, or biometric templates through the current services.

3. How we use personal data

• Provide accounts, sign-in, synchronization, contacts, bookmarks, Spaces, sharing, public-library and other requested functions.
• Authenticate users, maintain sessions, verify changes, recover accounts, protect data, detect abuse, investigate incidents, and keep security records.
• Remember settings, present the service in your language, maintain compatibility across devices, and respond to support or legal requests.
• Operate, troubleshoot, measure reliability, and improve the services without using personal data for third-party behavioural advertising.
• Comply with law, enforce our Terms, and protect users, the public, our rights, and the integrity of the services.

Depending on where you live, our legal bases may include performing a contract with you, our legitimate interests in operating and securing the services, your consent, and compliance with legal obligations. Where consent is required, you may withdraw it at any time without affecting earlier lawful processing.

4. Contacts and information about other people

NaviMind lets you store information about other people. You are responsible for having a lawful basis or appropriate permission to add, use, sync, share, or publish that information. Do not upload sensitive or confidential information about another person unless you are authorized to do so. We process contact data only to provide the functions you choose and do not use it to build advertising profiles.

5. Sharing and disclosure

We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising. We may disclose data only as follows:

• At your direction: to people, Spaces, family groups, public-library audiences, or integrations you choose.
• Service providers: hosting, database, email-delivery, security, and other infrastructure providers acting for us under appropriate safeguards. NaviMind currently requests font files from a third-party font service, which may receive connection data such as IP address and user agent.
• Legal and safety: when reasonably necessary to comply with law or valid legal process, protect rights or safety, prevent fraud or abuse, or defend legal claims.
• Organizational change: if a service is reorganized or transferred, subject to confidentiality and applicable notice requirements.

Third-party websites and services you choose to open or connect operate under their own privacy policies. This Policy does not control their independent practices.

6. Public and shared content

Content you publish to a public library or share with other users may be visible to the audience you select and may be copied or reshared by them. Review your content and permissions before publishing. Removing content from your account may not remove copies already made by another person outside our control.

7. Retention and account deletion

We retain data for only as long as needed for the purposes described in this Policy, including providing an active account, meeting security needs, resolving disputes, and complying with law.

• Normal sessions are configured for up to 30 days. If you choose “remember me,” the sign-in lifetime may extend up to 90 days.
• Verification, recovery, and security records are kept for the period required to complete the process and protect the account.
• When you request account deletion, NaviMind currently provides an 18-day recovery period. If you do not cancel during that period, the account and associated server-side data are scheduled for permanent deletion, subject to data we must retain by law or narrowly limited security records that cannot lawfully or safely be deleted immediately.
• Local browser data remains on your device until you clear it, sign out where applicable, or use available in-product controls.

8. Security

We use administrative, technical, and organizational measures designed to protect personal data, including hashed passwords, token-based sessions, access controls, audit logging, and verification for sensitive account actions. No online service can guarantee absolute security. Protect your credentials, use a unique password, and notify us if you suspect unauthorized access.

9. International data transfers

Your data may be processed in countries other than the country where you live, including where our hosting, email, security, or optional integration providers operate. Where applicable law requires it, we use appropriate transfer safeguards and limit processing to the purposes described here.

10. Your privacy rights

Depending on applicable law, you may have rights to know or access your data, obtain a copy, correct it, delete it, restrict or object to processing, withdraw consent, and request portability. You may also have the right to appeal a decision or complain to a privacy authority.

To exercise a right, email privacy@caelbertchae.com. We may verify your identity and authority before acting. We will not discriminate against you for exercising a privacy right.

California and other U.S. state rights

Where applicable, U.S. state residents may request access, correction, deletion, or portability and may opt out of sale, targeted advertising, or qualifying profiling. We do not currently sell personal data or use it for targeted advertising, so there is no sale or advertising opt-out required for the current services.

EEA, United Kingdom, Switzerland, Hong Kong, and other regions

Where applicable, you may also request restriction, object to processing based on legitimate interests, withdraw consent, and contact your local supervisory authority. Rights and exceptions vary by jurisdiction.

11. Children

The services are not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided personal data without valid parental or guardian authorization, contact us so we can investigate and take appropriate action.

12. Changes to this Policy

We may update this Policy as the services or law changes. We will post the revised date and, when required, provide additional notice or request consent. Material changes do not apply retroactively where prohibited by law.

13. Contact

Controller and operator: Caelbert Chae
Email: privacy@caelbertchae.com
Website: www.caelbertchae.com

1. 我们是谁以及本政策的适用范围

蔡凯（以下称“我们”）运营 CaelbertChae.com 与 NaviMind。除非具体服务另有说明，我们是本政策所述个人信息的处理者或控制者。

本政策适用于网站首页、NaviMind、账号与联系人功能、共享或公开空间、你与我们的沟通，以及今后显示本政策链接的服务。如果新服务采用不同的数据处理方式，我们可能提供补充说明，该说明与本政策共同适用。

2. 我们收集的个人信息

你主动提供的信息

• 账号与身份信息：用户名、电子邮箱、密码哈希、会员或用户标识、验证状态和账号状态。
• 个人资料：显示名称或真实姓名、头像、公司、电话号码、生日、性别、个人简介、地址、语言、时区、社交链接及你选择填写的其他资料。
• 联系人：你选择保存的联系人姓名、邮箱、电话、公司及其他信息。
• 你的内容：书签、网址、标题、描述、分类、标签、笔记、偏好、Spaces、共享资源、评论、邀请、通知、提醒以及公开资料库内容。
• 沟通信息：你在支持、隐私或法律咨询中发送给我们的消息、请求、反馈及其他信息。
• 可选集成：你为连接服务或 AI 提供商提供的配置与凭据，以及完成你所请求功能所需的内容。

使用服务时收集的信息

• 设备与连接信息：IP 地址、用户代理、浏览器、操作系统、设备名称或标识、在可用情况下根据 IP 推断的大致城市或地区，以及登录时间。
• 安全与活动信息：会话、验证与恢复事件、登录成功或失败记录、账号变更、审计事件、同步版本及防滥用信号。
• 浏览器存储：必要的会话或安全状态，以及在你启用时保存的语言、记住的账号、显示、离线、同步与偏好数据。详情见 Cookie 设置。

当前服务不会有意收集支付卡信息、政府身份证件号码、精确 GPS 位置、健康信息或生物识别模板。

3. 我们如何使用个人信息

• 提供账号、登录、同步、联系人、书签、Spaces、共享、公开资料库及你请求的其他功能。
• 验证用户身份、维持会话、确认敏感变更、恢复账号、保护数据、发现滥用、调查事件并保存安全记录。
• 记住设置、按你的语言展示服务、保持跨设备兼容，并回复支持或法律请求。
• 运营、排查故障、衡量可靠性和改进服务，但不会将个人信息用于第三方行为广告。
• 遵守法律、执行服务条款，并保护用户、公众、我们的权利及服务完整性。

根据你所在地区，处理依据可能包括履行与你的合同、运营和保护服务的合法利益、你的同意以及履行法律义务。需要同意时，你可以随时撤回，且不影响撤回前处理行为的合法性。

4. 联系人与他人信息

NaviMind 允许你保存他人的信息。你有责任确保自己具备添加、使用、同步、共享或公开这些信息的合法依据或适当授权。未经授权，请勿上传他人的敏感或保密信息。我们只会为提供你选择的功能而处理联系人数据，不会利用这些数据建立广告画像。

5. 信息共享与披露

我们不出售或出租个人信息，也不为跨场景行为广告共享个人信息。我们仅可能在以下情况下披露：

• 按照你的指示：向你选择的人员、Spaces、家庭组、公开资料库受众或集成服务提供。
• 服务提供商：向代表我们提供主机、数据库、邮件发送、安全及其他基础设施的服务商提供，并采取适当保护措施。NaviMind 当前会请求第三方字体文件，因此该服务提供商可能接收 IP 地址、用户代理等连接信息。
• 法律与安全：在合理必要的情况下遵守法律或有效法律程序、保护权利或安全、防止欺诈或滥用，或处理法律主张。
• 组织变更：如果服务发生重组或转移，将遵守保密和适用的通知要求。

你自行打开或连接的第三方网站与服务适用其自身隐私政策，本政策不控制其独立处理行为。

6. 公开与共享内容

你发布到公开资料库或与其他用户共享的内容，可能被所选受众查看、复制或再次分享。发布前请检查内容和权限。从你的账号中删除内容，并不一定能删除他人已经在我们控制范围之外制作的副本。

7. 保存期限与账号删除

我们只在实现本政策所述目的所需期间保存数据，包括维持有效账号、满足安全需要、解决争议和履行法律义务。

• 普通会话最长配置为 30 天；如果选择“记住我”，登录有效期最长可延长至 90 天。
• 验证、恢复和安全记录会在完成流程及保护账号所需期间保存。
• 当你申请删除账号时，NaviMind 当前提供 18 天恢复期。如果在该期间没有取消，账号及关联的服务器端数据将被安排永久删除；法律要求保留的数据或无法立即合法、安全删除的极少量安全记录除外。
• 本地浏览器数据会保留在你的设备上，直至你主动清除、在适用情况下退出账号，或使用产品内提供的控制功能。

8. 安全保护

我们采用旨在保护个人信息的管理、技术与组织措施，包括密码哈希、基于令牌的会话、访问控制、审计日志，以及敏感账号操作验证。但任何在线服务都无法保证绝对安全。请妥善保护凭据、使用唯一密码，并在怀疑未经授权访问时及时通知我们。

9. 跨境处理

你的数据可能在你居住国以外的国家或地区处理，包括我们的主机、邮件、安全或可选集成服务商所在地。适用法律有要求时，我们会采取适当的跨境保护措施，并将处理限制在本政策所述目的范围内。

10. 你的隐私权利

根据适用法律，你可能有权知情或访问、获取副本、更正、删除、限制或反对处理、撤回同意及请求数据可携带；你也可能有权申诉或向隐私监管机构投诉。

如需行使权利，请发送邮件至 privacy@caelbertchae.com。为保护账号，我们可能核实你的身份和授权。我们不会因你行使隐私权而给予差别待遇。

美国各州权利

在适用情况下，美国州居民可以请求访问、更正、删除或携带数据，并可以选择退出个人信息出售、定向广告或符合条件的分析。当前服务不出售个人信息，也不将其用于定向广告，因此目前不需要提供出售或广告退出选项。

欧洲经济区、英国、瑞士、香港及其他地区

在适用情况下，你还可以请求限制处理、反对基于合法利益的处理、撤回同意，以及联系当地监管机构。具体权利与例外因地区而异。

11. 儿童

服务不面向 16 岁以下儿童，我们不会在明知的情况下收集其个人信息。如果你认为儿童在没有有效父母或监护人授权的情况下提供了个人信息，请联系我们调查并采取适当措施。

12. 政策变更

我们可能因服务或法律变化更新本政策。我们会公布新的更新日期，并在法律要求时另行通知或重新取得同意。法律禁止时，重大变更不会追溯适用。

13. 联系我们

处理者及运营者：蔡凯
邮箱：privacy@caelbertchae.com
网站：www.caelbertchae.com