隐私政策

适用范围

本政策适用于我们通过本网站及相关通信处理的个人信息。本政策不适用于我们可能链接或引用的第三方网站、服务或政府资源，这些均受其各自隐私惯例的约束。

我们收集的信息

我们通过以下方式收集信息：

• 您提供的信息。 当您提交咨询或登记表单、申请简报或以其他方式与我们联系时，我们会收集您的姓名、工作邮箱、所属机构、职务、电话号码以及您的留言内容。
• 自动收集的信息。 出于安全、性能和分析目的，我们的服务器及基础设施提供商可能记录技术数据，例如 IP 地址、浏览器类型、设备信息、来源页面和时间戳。
• Cookie 及类似技术。 我们可能使用严格必要的 Cookie 和分析类 Cookie 来运营和改进本网站。您可以通过浏览器设置管理 Cookie。

我们不会有意收集敏感个人信息，并请您不要通过本网站提交此类信息。

我们如何使用信息

• 回应您的咨询并提供您所要求的信息。
• 评估潜在的合作、业务委托与资本关系。
• 运营、保护、维护和改进本网站。
• 遵守法律义务并执行我们的条款。

我们如何共享信息

我们不会出售您的个人信息。我们可能在以下情形下共享：

• 在保密义务约束下，与托管我们基础设施、提供邮件投递或分析服务的服务提供商共享。
• 在与您的咨询相关时，与关联机构共享，包括 Center for Economics & Foreign Affairs。
• 在法律要求、为保护权利或回应合法请求时，与法律与安全相关的接收方共享。
• 在合并、融资或资产转让中，与继受方共享，并受本政策约束。

Platform Activity Monitoring (Applied America OS)

The Applied America OS is a secure, invitation-based operating platform for economic-development work. To protect the platform, its confidential project and capital information, and the organizations that use it, we record business and security activity generated by authenticated accounts. This is operational oversight for security, compliance, auditability, and support — not personal surveillance.

Within the platform we may record:

• Session & environment data — a locally generated session identifier, the start of a session in a browser tab, and the device type, browser, operating system, and screen size your browser reports. We do not record sign-out, session duration, IP address, approximate location derived from IP, or network provider in this platform activity record. An earlier version of this policy listed those as recorded, which overstated what is implemented. Public-site page requests are recorded separately on our servers, including the location derived from your IP address and the network provider it belongs to, as described in our Security & Data-Retention policy; when you are signed in, that record is linked to your account.
• In-app activity — pages and modules opened, projects and capital rooms viewed, documents viewed or downloaded, and searches run. Form submissions are not recorded in this stream; an access request and the decision on it are stored with the request itself, not here.
• Security signals — the browser-local activity record carries a result field and a coarse in-app risk weighting, but no permission-denied or error outcome is written to it today. We do not yet detect failed sign-ins, unusual download volume, or new-device and new-location logins; a failed sign-in writes no record today. An earlier version of this policy described those as monitored.

Where we do derive location from an IP address — for public-site page requests, not for in-platform activity — it is approximate and is not treated as a verified physical address. We use this information only to operate and secure the platform, maintain an audit trail, meet legal and contractual obligations, and improve the product. Access to activity records is restricted to authorized administrators by role. Administrative decisions, an administrator assuming another persona, and the creation, amendment or removal of a project record are recorded in an append-only audit table; administrative reads are not yet recorded, as our Security & Data-Retention policy states. We do not sell platform-activity data. There is no hidden tracking beyond what is described in this policy, the Cookie Notice, the Terms of Use, and our Security & Data-Retention policy.

数据保留

我们在实现本政策所述目的、遵守法律与记录保存义务以及解决争议所需的期间内保留个人信息，其后予以删除或去标识化。平台的安全与审计日志按照我们的安全与数据保留政策所列期限保留；保留期限由法务审查。

安全

我们采取旨在保护个人信息的管理、技术和组织措施。任何传输或存储方式都不是绝对安全的，我们无法保证绝对的安全性。

您的权利与选择

根据您所在法域，您可能有权访问、更正、删除或限制处理您的个人信息，反对处理，并享有数据可携权。美国部分州（如加利福尼亚州）的居民可能享有额外权利，包括知情权以及拒绝特定共享的权利。如需行使任何权利，请通过下方联系方式与我们联系。我们不会因您行使权利而对您区别对待。

国际访问者

我们位于美国，我们处理的信息可能在美国存储和处理。使用本网站即表示您理解您的信息可能被传输至美国并在美国处理。

儿童隐私

本网站面向专业与机构受众，并非面向 18 岁以下儿童。我们不会在知情的情况下收集儿童信息。

本政策的变更

我们可能不时更新本政策。上方的“最后更新”日期反映最近一次修订。重大变更将在本页面体现。

联系我们

如有隐私相关问题或需行使您的权利，请联系 applied@thecefa.org。