- Kept apart from every other customer和别的客户完全分开Each customer has a separate set of books. No one else can see or change yours.每位客户一本独立的账，别人看不到、改不了。
- Two locks on sign-in登录有两道锁Two-step verification on top of your password; repeated wrong guesses lock the account for a while.密码之外可开两步验证；输错太多次会暂时锁住。
- Encrypted in transit全程加密传输The web app and iPhone app only talk to us over HTTPS. Receipt photos are never public.网页和 App 只走 HTTPS；收据照片不公开。
- Backed up every day每天备份Stored separately for each customer, so we can restore if something goes wrong.按客户分开存，出问题能恢复。
Your data is kept apart from other customers你的数据和别的客户分开
- Each customer is a separate set of books in Clearli: partners, cards, stores, every entry and every document waiting for review belong to that one set only.每位客户在 Clearli 里是一本独立的账：合作方、卡、门店、每一笔账、待审核的单据，都只属于这一本。
- Every request starts by working out whose books it is for, and only data from those books comes back. That rule lives in one place in the system and every feature goes through it, so no page can skip it.系统处理每个请求时，先确认「这是谁的账」，只返回属于你的数据。这条规则写在系统的同一处，所有功能共用，不会有哪个页面漏掉。
- Even with the number of one of your entries, anyone else who tries to open, change or delete it is told it does not exist. They see nothing, not even whether it is there.别人就算拿到你某一笔账的编号，去打开、修改或删除，系统都当作「不存在」处理：看不到内容，也看不出有没有这笔账。
- Your assistants see only your books. A partner sees only the part that concerns them, and partners cannot see each other's own documents or goods.你的助理只看得到你这本账；合作方只看得到和他有关的那部分；合作方之间自己的单据和货物互相看不到。
- Automated tests act out one customer trying to reach another customer's data, and run before every update to the system.我们有专门的自动测试，模拟「一位客户去拿另一位客户的数据」，每次更新系统前都会跑。
Signing in登录安全
- Passwords are stored only in hashed form (bcrypt). Nobody, including us, can read your password.密码只以加密后的形式保存（bcrypt），包括我们在内，没有人能看到你的密码原文。
- After 5 wrong passwords within 15 minutes, the account is locked for 15 minutes, so no one can keep guessing.同一个账号在 15 分钟内输错密码 5 次，会暂时锁住 15 分钟，防止别人一直试密码。
- Two-step verification: as well as your password, you enter the 6-digit code from an authenticator app such as Google Authenticator or Microsoft Authenticator. Turn it on any time under 我的 → 账号安全 (Account security). It is required for Clearli's own administrator accounts.支持两步验证：登录时除了密码，还要输手机验证器 App（如 Google Authenticator、Microsoft Authenticator）上的 6 位数。你可以在「我的 → 账号安全」随时开启；Clearli 平台管理员的账号必须开启。
- When you turn it on you get 10 one-time backup codes, so you can still sign in without your phone.开启两步验证时会给你 10 个一次性备用码，手机不在身边时也能登录。
- Changing your password signs you out on every other device.改了密码以后，其他设备上的登录会全部失效，需要重新登录。
In transit and in storage传输和存储
- Everything between the web app or iPhone app and our servers is encrypted with HTTPS.网页版和 iPhone App 与服务器之间的所有通信都通过 HTTPS 加密。
- Receipts and transfer screenshots are not public. Only someone who is signed in and allowed to see that entry gets a link to the image, and the link stops working after 24 hours.收据和转账截图不公开。只有登录、并且有权限看这笔账的人，才拿得到图片链接；链接 24 小时后自动失效。
- Everything is backed up automatically at 3 a.m. London time every day, stored separately for each customer. Database backups are kept for 30 days.每天伦敦时间凌晨 3 点自动备份一次，按客户分开存放。数据库备份保留 30 天。
Who can see your data谁看得到你的数据
- You and the people you allow: your assistants, and partners you invite and agree to connect with (only the part that concerns them).你本人和你授权的人：你的助理，以及你邀请、并且你同意连接的合作方（只看和他有关的部分）。
- Clearli's administrators, to fix problems and give support. Unless you have bought our bookkeeping service, they can look but not change anything. When an administrator views the books as a partner would, the system records who did it and when.Clearli 平台管理员：为了处理问题和提供支持，可以查看客户的账。没有购买代记账服务的客户，管理员只能看、不能改。管理员以合作方的视角查看时，系统会记录是谁、在什么时候看的。
- We do not sell your data or use it for anything other than providing the service to you.我们不会出售你的数据，也不会把它用在为你提供服务以外的地方。
The services we use我们用到的服务商
Clearli runs on the services below. Each gets only the data it needs for its one job.Clearli 用以下服务来运行，每家只拿到完成那一件事所需的数据：
| Provider服务商 | What for用途 | What it sees接触到的数据 | Where处理地点 |
|---|---|---|---|
| Railway | Servers, database and uploaded files服务器、数据库和上传的文件 | Your books and the documents in them账目和单据 | Netherlands (EU)荷兰（欧盟） |
| Cloudflare | Daily backups (Cloudflare R2)每日备份（Cloudflare R2） | Backup copies备份文件 | United States and other regions美国及其他地区 |
| Anthropic | Reading the text on receipts and screenshots识别收据和截图上的文字 | The images you upload. Under its commercial terms, content sent through its API is not used to train its models你上传的图片。按 Anthropic 的商业条款，通过接口提交的内容不会用来训练模型 | United States美国 |
| Stripe | Subscription payments订阅付款 | Payment details. Card numbers are typed into Stripe's own page and never pass through Clearli付款资料。卡号只在 Stripe 自己的付款页填写，不经过 Clearli | United Kingdom, EU and United States英国、欧盟和美国 |
| Apple | Push notifications on iPhoneiPhone 推送通知 | The text of each notification通知的文字 | United States美国 |
Your data, your call你的数据，你做主
- Export your entries, reconciliations, goods and receipt lists to Excel at any time.账目、对账表、货物和收据清单，随时可以导出成 Excel。
- Deleted an entry by mistake? Restore it from 最近删除 (Recently deleted) within 30 days.不小心删掉的账，30 天内可以在「最近删除」里恢复。
- When a subscription ends, your books stay readable and exportable. Nothing is deleted.订阅到期以后，你的账仍然可以查看和导出，不会被删除。
- To close your account and delete your data, contact us.如果你想注销账号、删除数据，联系我们处理。
Questions有问题联系我们
If you have any question about security, or think someone else is using your account, contact us straight away: privacy@12treesconsulting.com or our contact page.对数据安全有任何疑问，或者怀疑你的账号被别人使用，请马上联系我们：privacy@12treesconsulting.com，或者联系页。
This page describes how Clearli works today and is updated as the system changes. Your rights and obligations are set out in your service agreement with us; see also our privacy policy.本说明介绍 Clearli 目前的做法，随系统更新而修订；具体的权利和义务以你与我们签订的服务条款为准，另见隐私政策。