中文
1. 适用范围与运营方
Maojie Member Mail 由 XTrader Insights LLC 运营，用于猫姐美股Club的会员服务邮件。本政策专门说明此邮件应用及其 Google API 数据处理，不替代会员服务协议，也不涵盖 Stripe、Discord 或 Google 自身的全部服务。普通会员收到通知不需要向本应用授权自己的 Gmail 邮箱。
2. Google 授权与访问范围
仅获授权的管理员连接公司发件邮箱 apply@xtradermaojie.com。应用申请 openid、email 和 gmail.send 权限，用于确认授权邮箱身份并代表该邮箱发送会员服务邮件。应用不申请读取收件箱、搜索邮件、访问通讯录、Google Drive 或 YouTube 的权限。OAuth 刷新令牌使应用能够在管理员不在线时继续发送通知，直至授权被撤销、令牌失效或应用停用。
3. 处理的数据与用途
应用处理授权发件邮箱的地址、邮箱验证信息及 OAuth 令牌。从会员系统获取发送通知所需的收件邮箱、Discord 用户标识、会员方案、到期时间与订阅状态，用于会员到期、续费及付款状态等服务通知。发送时将收件地址、邮件主题和正文交给 Google Gmail API。系统记录发送时间、渠道、发送状态、服务商返回的消息标识及错误代码，用于排查故障、避免重复发送和统计通知后的续费情况。该统计不等于确认会员已阅读邮件，也不代表通知必然促成续费。
4. 共享与使用限制
邮件内容通过 Google 传送至指定收件人及其邮件服务商。提供该功能所需的数据由我们的托管与数据库基础设施处理；授权管理员可查看必要的会员及通知记录。我们不出售 Google 用户数据，不将其用于广告定向、数据经纪或训练通用人工智能模型。除提供已说明的功能、维护安全、遵守适用法律等 Google 政策允许的情形外，不转移或另作他用。对通过 Google API 获得的信息的使用和转移遵守 Google API Services User Data Policy，包括其中的 Limited Use 要求。
5. 保存、安全与删除
OAuth 凭据保存在受访问限制的配置中，不放入公开网页或公开代码。系统通过 HTTPS 与 Google 通信。仅为持续提供服务、排错、安全及必要的业务或法律记录保留相关数据；当前通知记录不设置自动到期删除。可通过下方邮箱申请查询、更正或删除数据，我们会核验身份并说明需要保留的记录。备份中的数据可能随备份轮换逐步移除。删除本应用的数据不会自动删除已发送至 Google 或收件邮箱的邮件，亦不会自动取消 Stripe 订阅。任何安全措施都无法保证绝对安全。
6. 撤销授权、联系与政策更新
发件邮箱管理员可在 Google 账号的第三方连接设置中移除本应用的访问权限，停止后续通过该授权发信。会员可联系 apply@xtradermaojie.com 处理个人数据或通知偏好问题。撤销邮箱授权不影响会员订阅本身。若数据处理方式发生变化，我们会更新本页面；涉及新增 Google 数据用途或权限时，将在使用前取得相应授权。
English
1. Scope and operator
Maojie Member Mail is operated by XTrader Insights LLC to deliver service emails for Maojie Club. This policy covers this email application and its handling of Google API data. It does not replace the membership agreement or cover all services provided independently by Stripe, Discord, or Google. Members do not need to authorize access to their own Gmail accounts to receive notifications.
2. Google authorization and access
An authorized administrator connects the business sender account, apply@xtradermaojie.com. The application requests openid, email, and gmail.send to verify the authorized email identity and send membership service emails on its behalf. It does not request permission to read or search the inbox, access contacts, Google Drive, or YouTube. An OAuth refresh token enables sending while the administrator is offline, until authorization is revoked, the token becomes invalid, or the application is disabled.
3. Data processed and purposes
The application processes the authorized sender's email address, email verification information, and OAuth tokens. It obtains recipient addresses, Discord user identifiers, membership plans, expiration dates, and subscription status from the membership system for expiration, renewal, and payment-related service notices. Recipient addresses, subjects, and message bodies are submitted to the Google Gmail API for delivery. Delivery times, channels, states, provider message identifiers, and error codes support troubleshooting, duplicate prevention, and reporting on renewals following notifications. These reports do not confirm that a member read an email or that a notice caused a renewal.
4. Sharing and use limitations
Email content is delivered through Google to the designated recipients and their mail providers. Our hosting and database infrastructure processes data needed to provide this feature; authorized administrators can access necessary membership and notification records. We do not sell Google user data or use it for advertising targeting, data brokering, or training general-purpose AI models. Transfers and other uses are limited to the disclosed features, security, applicable legal requirements, and other circumstances permitted by Google's policy. Use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements.
5. Storage, security, and deletion
OAuth credentials are stored in access-restricted configuration, not public pages or public code. Communication with Google uses HTTPS. Relevant data is retained for ongoing service, troubleshooting, security, and necessary business or legal records; notification records currently have no automatic expiration-based deletion. Contact us below to request access, correction, or deletion. We will verify identity and explain any records that must be retained. Backup copies may be removed through backup rotation. Deleting application data does not automatically delete messages already sent to Google or recipient mailboxes, or cancel a Stripe subscription. No security measure guarantees absolute protection.
6. Revocation, contact, and policy updates
The sender account administrator can remove this application's access in Google Account third-party connection settings to stop future sending through that authorization. Members can contact apply@xtradermaojie.com about personal data or notification preferences. Revoking email authorization does not change a membership subscription. We will update this page if our data practices change and obtain appropriate authorization before using Google data for new purposes or requesting additional permissions.