LegrolCAD服务条款 / Terms隐私政策 / Privacy中文English

LegrolCAD 隐私政策

版本 2.0 ｜ 生效日期：2026 年 10 月 4 日

本政策另附英文版本。如中英文版本有任何出入，以英文版本为准，中文版本仅供参考。

本政策说明 LEGROL SDN BHD（一家依马来西亚法律注册成立的有限公司，下称「我们」）在你使用 LegrolCAD（下称「本应用」）时如何处理你的资料。

一句话版本：我们只记录你的账号信息（邮箱、登录时间、使用期限等），用来统计用户与管理你的使用期限。你的图纸和设置只存在你的设备和你自己的 Google Drive，我们不上传、不保存、不查看。

1. 我们收集什么

2. 我们不收集什么

• 你的图纸内容：DXF / DWG 文件、底图、导出的图片与 PDF，全部不上传给我们；
• 你 Google Drive 里的文件清单：我们使用的 drive.file 权限只能访问本应用自己创建的文件，以及你在系统选择器里主动选中的文件；
• 位置、通讯录、照片库、通话与短信记录、设备唯一标识（IMEI / 广告 ID）；
• 任何用于广告投放或跨应用追踪的数据。我们不投放广告，不出售、不出租你的资料。

崩溃日志保存在你设备本地供排错使用，不会自动上传；你可以自行删除或在你愿意时手动发送给我们。

3. 我们为什么处理这些资料

1. 让你登录、识别你的账号、恢复你的设置备份；
2. 统计有多少人在使用本应用（我们只看汇总数字与名单，不分析个人行为）；
3. 判断你的账号能否使用本应用：试用期、使用期限、续期申请的处理；
4. 防止滥用、批量注册与攻击，保障服务安全；
5. 履行适用法律要求的义务。

处理的法律依据：你的同意（点击「同意并登录」）以及为履行《服务条款》所必需。

4. 资料存放在哪里、由谁处理

我们使用 Google Firebase（Firebase Authentication 与 Cloud Firestore）存放上述账号资料，数据库区域为 asia-southeast1（新加坡）。Google 在此扮演我们的资料处理者，并可能在其全球数据中心之间传输与备份资料，受 Google Cloud 的资料处理条款约束。

除以下情形外，我们不向任何第三方披露你的资料：

• 你明确同意；
• 服务商为提供服务所必需（如上述 Google）；
• 法律、法院命令或主管机关要求；
• 为保护我们或他人的合法权益，防止欺诈或安全事件。

5. Google 用户资料的有限使用（Limited Use）

本应用使用 Google 账号登录，并在你启用云端功能时请求 https://www.googleapis.com/auth/drive.file 权限。我们对从 Google API 获得的资料遵守 Google API 服务用户资料政策（含 Limited Use 要求），具体是：

• 这些资料只用于向你提供本应用内你主动要求的功能（打开你选中的图纸、把图纸或设置备份存到你自己的 Drive）；
• 不用于广告，不出售，不转让给第三方（除上述第 4 节情形）；
• 不由人工读取，除非：你明确同意、为安全调查或遵守法律所必需、或资料已充分匿名汇总；
• 我们只申请完成功能所需的最小权限范围。你可以随时在 myaccount.google.com/permissions 撤销授权。

6. 设置备份与图纸（存在你自己的 Drive）

• 你开启云端备份后，通用设置会以 settings.json 存入你自己 Google Drive 的 LegrolCAD 文件夹，你自己可见、可删、可拷走；
• 转换服务器地址、访问令牌与 GitHub 令牌不进备份；
• 你上传的图纸同样存放在你自己的 Drive；
• 这些内容都在你的 Google 账号下，我们没有副本，也无法列出或读取。

7. DXF ↔ DWG 转换服务

本应用的 DWG 转换需要一个服务端组件，其地址与访问令牌由你在设置中自行填写（不内置、不预设）。你使用该功能时：

• 待转换的图纸会通过 HTTPS 上传到你所填写的服务端；
• 源文件在转换完成后即删除；DWG→DXF 的结果会缓存在该服务端，用于加速下次相同文件的转换。缓存仅以文件内容的 SHA-256 哈希值为键，不关联任何用户账号、设备或其他身份信息；只有已经持有内容完全相同的文件的人才能算出该哈希值并取回缓存结果，因此缓存不会把图纸提供给未持有原件的任何人；缓存空间达到上限时按最久未使用自动清除；
• 该服务端开启使用期限核验时，应用会同时发送你的登录令牌，服务端仅用它确认你的账号身份与使用期限，不予保存；
• 仅当该服务端由 LEGROL SDN BHD 运营并在应用内明确标示时，我们才会接触到你的图纸，且仅用于完成转换并按上述方式保留去身份化的缓存结果，不作其他用途；若由你、你的组织或任何第三方部署，我们不会接触你的图纸，相应责任由部署方承担。

不使用 DWG 转换功能时，不会有任何图纸离开你的设备与你的 Drive。

8. 我们保留多久

• 账号资料与使用期限：账号存续期间持续保存；
• 续期申请：管理员处理后删除；你删除记录时一并删除；
• 管理员备注：账号存续期间保存；你删除记录后可来信要求一并删除；
• 你在应用内使用「删除我的记录」后：账号记录与 Firebase 账号会被删除，我们的活跃数据库在 30 天内不再保留，例行备份中最长 90 天内被覆盖；
• 法律要求保留的记录（如必要的交易或合规记录）按法定期限保留。

9. 你的权利

你可以：

• 查看我们保存的关于你的资料 —— 应用内「设置 → 账号」显示账号字段，首页显示使用期限；管理员备注可来信索取；
• 更正不正确的资料（邮箱、显示名以第三方账号为准的，请在该账号处修改）；
• 删除 —— 应用内「设置 → 账号 → 删除我的记录」一步完成，无需发邮件申请；
• 撤回同意 —— 撤回即无法继续使用需要登录的功能，等同于删除账号；
• 投诉 —— 先联系 qbcalculator@gmail.com，我们会在 30 天内回复；你也可以向马来西亚的资料保护主管机关投诉。

10. 安全措施

• 与服务器之间的通讯全程使用 HTTPS / TLS；
• Firestore 安全规则限制为只有你本人和我们指定的管理员能读取你的记录，其他用户无法读取或列举；使用期限字段只有管理员能修改，你本人只读；管理员备注只有管理员能读取；
• 密码由 Firebase Authentication 保管，我们不接触明文；
• 我们只收集提供服务所需的最少资料。

请注意：没有任何系统能保证绝对安全。若发生可能对你的合法权益造成重大实质损害的个人资料泄露或安全事件，我们将依法在合理期限内采取补救措施，并按适用法律的要求履行对你与主管机关的告知或通报程序。

11. 儿童

本应用不面向 13 岁以下人士，我们不会有意收集其资料。若你认为儿童向我们提供了资料，请联系 qbcalculator@gmail.com，我们会尽快删除。

12. 本政策的变更

我们可以修订本政策。新版本会在 隐私政策页 公布并标注版本号与生效日期。若变更涉及新增收集的资料类别或改变使用目的，我们会在应用内重新请求你的同意。

13. 联系我们

LEGROL SDN BHD ｜ qbcalculator@gmail.com

马来西亚个人资料保护法（PDPA 2010）

我们作为资料使用者（data user）处理你的个人资料，处理依据为你的同意与履行合同所需。你有权依 PDPA 第 30、34、38 条请求访问、更正与撤回同意。本政策以英文与中文两种语言提供；如有出入，以英文版本为准。

LegrolCAD Privacy Policy

Version 2.0 | Effective date: 4 October 2026

This Policy is also provided in Chinese. In the event of any discrepancy or conflict between the English and Chinese versions, the English version shall prevail.

This Policy explains how LEGROL SDN BHD, a private limited company incorporated under the laws of Malaysia ("we", "us", "our"), handles your data when you use LegrolCAD (the "App").

In one sentence: we record only your account information (e-mail address, sign-in times, usage period and the like) to count users and to manage your usage period. Your drawings and settings exist only on your device and in your own Google Drive; we do not upload, store or view them.

1. What we collect

2. What we do not collect

• The content of your drawings: DXF / DWG files, underlays, exported images and PDFs are never uploaded to us;
• The list of files in your Google Drive: the drive.file scope we use can only access files created by the App itself and files you explicitly select in the system picker;
• Location, contacts, photo library, call and SMS logs, or device identifiers (IMEI / advertising ID);
• Any data for advertising or cross-app tracking. We show no advertisements and we do not sell or rent your data.

Crash logs are kept locally on your device for troubleshooting and are not uploaded automatically; you may delete them or send them to us manually if you wish.

3. Why we process this data

1. To sign you in, identify your account and restore your settings backup;
2. To count how many people use the App (we look only at aggregate numbers and the user list, not individual behaviour);
3. To determine whether your account may use the App: the trial period, your usage period, and handling of renewal requests;
4. To prevent abuse, bulk registration and attacks, and to keep the service secure;
5. To comply with obligations under applicable law.

Legal basis for processing: your consent (tapping "Agree and sign in") and the necessity of performing the Terms of Service.

4. Where the data is stored and who processes it

We use Google Firebase (Firebase Authentication and Cloud Firestore) to store the account data described above. The database region is asia-southeast1 (Singapore). Google acts as our data processor and may transfer and back up data between its data centres worldwide, subject to the Google Cloud data processing terms.

We do not disclose your data to any third party except:

• with your explicit consent;
• where necessary for a service provider to deliver the service (such as Google, above);
• where required by law, a court order or a competent authority;
• to protect our or others' legitimate rights, or to prevent fraud or a security incident.

5. Limited Use of Google user data

The App uses Google Sign-In and, when you enable cloud features, requests the https://www.googleapis.com/auth/drive.file scope. Our handling of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• such data is used only to provide the features you actively request within the App (opening a drawing you selected, saving drawings or settings backups to your own Drive);
• it is not used for advertising, not sold, and not transferred to third parties (except as set out in section 4 above);
• it is not read by humans unless you have expressly consented, it is necessary for a security investigation or to comply with the law, or the data has been sufficiently anonymised and aggregated;
• we request only the minimum scope needed for the feature. You may revoke access at any time at myaccount.google.com/permissions.

6. Settings backup and drawings (stored in your own Drive)

• When you enable cloud backup, your general settings are saved as settings.json in the LegrolCAD folder of your own Google Drive, where you can view, delete or copy them;
• The conversion server address, its access token and any GitHub token are never included in the backup;
• Drawings you upload are likewise stored in your own Drive;
• All of this lives under your Google account. We hold no copy and cannot list or read it.

7. DXF ↔ DWG Conversion Service

DWG conversion in the App requires a server-side component whose address and access token you enter yourself in the settings (nothing is bundled or pre-configured). When you use this feature:

• the drawing to be converted is uploaded over HTTPS to the server you entered;
• the source file is deleted once conversion completes; the result of a DWG→DXF conversion is cached on that server to speed up repeat conversions of the same file. The cache is keyed solely by the SHA-256 hash of the file content and is not associated with any user account, device or other identifying information; only someone who already holds a byte-for-byte identical file can compute that hash and retrieve the cached result, so the cache never makes a drawing available to anyone who does not already possess the original; entries are evicted least-recently-used automatically when the cache reaches its size limit;
• where the server verifies usage periods, the App also sends your sign-in token; the server uses it solely to confirm your account identity and usage period, and does not store it;
• only where the server is operated by LEGROL SDN BHD and clearly identified as such within the App do we come into contact with your drawing, and then solely to complete the conversion and to retain the de-identified cached result as described above, and for no other purpose. Where the server is deployed by you, your organisation or any third party, we never come into contact with your drawing, and responsibility rests with the party operating that server.

If you do not use DWG conversion, no drawing ever leaves your device or your Drive.

8. How long we keep data

• Account data and usage period: for as long as your account exists;
• Renewal requests: deleted once an administrator handles them, and deleted together with your record if you delete it;
• Administrator notes: kept for as long as your account exists; after you delete your record you may ask us by e-mail to delete them as well;
• After you use "Delete my record" in the App: the account record and the Firebase account are deleted, the data is removed from our active database within 30 days, and it is overwritten in routine backups within at most 90 days;
• Records we are legally required to keep (such as necessary transaction or compliance records) are retained for the statutory period.

9. Your rights

You may:

• Access the data we hold about you: "Settings → Account" in the App shows your account fields and the home screen shows your usage period; administrator notes are available on request by e-mail;
• Correct inaccurate data (where the e-mail address or display name comes from a third-party account, change it at that account);
• Delete: "Settings → Account → Delete my record" in the App does this in one step, with no e-mail request required;
• Withdraw consent: withdrawal means you can no longer use features that require sign-in, and is equivalent to deleting your account;
• Complain: contact qbcalculator@gmail.com first and we will reply within 30 days; you may also lodge a complaint with the Malaysian data protection authority.

10. Security measures

• All communication with servers uses HTTPS / TLS;
• Firestore security rules restrict access so that only you and administrators designated by us can read your record; other users cannot read or enumerate it; usage-period fields can be changed only by administrators and are read-only to you; administrator notes can be read only by administrators;
• Passwords are held by Firebase Authentication; we never touch the plaintext;
• We collect only the minimum data needed to provide the service.

Please note that no system can guarantee absolute security. In the event of a personal data breach or security incident that is likely to cause material harm to your legitimate interests, we will take remedial measures within a reasonable period in accordance with the law and carry out any notification to you and to the relevant authority that applicable law requires.

11. Children

The App is not intended for persons under 13, and we do not knowingly collect their data. If you believe a child has provided us with data, contact qbcalculator@gmail.com and we will delete it promptly.

12. Changes to this Policy

We may revise this Policy. The new version will be published on the Privacy Policy page with its version number and effective date. If a change involves collecting new categories of data or changing the purposes of use, we will ask for your renewed consent within the App.

13. Contact us

LEGROL SDN BHD | qbcalculator@gmail.com

Malaysian Personal Data Protection Act 2010 (PDPA)

We process your personal data as a data user, on the basis of your consent and the necessity of performing the contract. You have the right under sections 30, 34 and 38 of the PDPA to request access to and correction of your personal data and to withdraw your consent. This Policy is provided in English and in Chinese; in the event of any discrepancy, the English version shall prevail.