红卡 - 博主工作台隐私政策

Privacy Policy for Hongka - Creator Workspace

Effective Date: July 7, 2026

Hongka - Creator Workspace (“the Extension”) is a browser extension for Xiaohongshu content creators. It helps users collect content, analyze popular notes, research competitors, generate topic ideas, write content, and manage creation projects. This Privacy Policy explains how the Extension collects, uses, stores, transfers, and protects user data.

1. Data We Collect

The Extension may process the following data when the user actively uses relevant features:

1.1 Website Content

When the user actively starts capture, analysis, or batch capture on Xiaohongshu pages, the Extension may read visible page content, including note titles, text, images, video covers, links, tags, engagement metrics, comment samples, author nicknames, avatars, profile links, account descriptions, and other publicly displayed account information.

1.2 Identifiable Account Information

To support account profiling, competitor research, and creation project management, the Extension may process creator account information, nicknames, avatars, profile links, account descriptions, content style information, project materials, and creation records that the user captures or provides.

1.3 Extension Settings and Local Data

The Extension may store user settings, capture records, analysis results, topic ideas, creation projects, asset information, task progress, login state, and temporary drafts in the browser.

1.4 Backend Session Information

If the user logs in to or connects a configured backend service, the Extension may use necessary session cookies or CSRF information to securely call backend APIs. The Extension does not collect, store, or export user passwords, payment information, financial information, or health information.

2. How We Use Data

We use data only for the Extension’s single purpose: assisting Xiaohongshu content research and content creation. This includes:

• Saving Xiaohongshu content actively captured by the user;
• Analyzing notes, comments, accounts, and competitor content with AI;
• Generating topic ideas, titles, hooks, copy, outlines, and creation suggestions;
• Managing creation projects, assets, image materials, and history;
• Synchronizing, storing, and processing data through the user’s configured or logged-in backend service;
• Providing data export, cleanup, task recovery, and workspace display features.

3. Data Storage

The Extension may store data through:

• Browser local storage, for settings, drafts, task progress, and selected business data;
• IndexedDB, for capture records, analysis results, projects, assets, and local cache;
• The user-configured or logged-in backend service, for account login, data synchronization, AI analysis, asset management, and project management.

Users can export or clear local data from the Extension settings page.

4. Data Transfer and Third-Party Services

The Extension may send user-captured or user-submitted data to the backend API, AI services, image/video generation services, or business services configured or used by the user, in order to provide content analysis, content generation, asset processing, and project management features.

We do not sell user data. We do not use or transfer user data for purposes unrelated to the Extension’s single purpose. We do not use user data for creditworthiness, lending, financial risk assessment, or advertising profiling.

If third-party AI, image, video, or cloud services are used, they act only as service providers for user-facing Extension features. We make reasonable efforts to require such services to process data under confidentiality, security, and use limitation obligations.

5. User Controls

Users can:

• Choose whether to actively capture page content;
• Export local data from the Extension settings page;
• Clear local data from the Extension settings page;
• Log out or disconnect backend services;
• Contact us to request deletion or correction of relevant data stored on the backend.

6. Security

We use reasonable technical and organizational measures to protect user data. Production backend services should transmit data through secure methods such as HTTPS. The Extension does not remotely load or execute JavaScript, WebAssembly, or other remotely hosted executable code. All core Extension code is included in the submitted extension package.

7. Data We Do Not Collect

The Extension does not actively collect:

• Health information;
• Financial or payment information;
• User passwords;
• Full browsing history;
• Personal communications unrelated to the Extension’s features;
• Precise GPS location data;
• Data used for creditworthiness or lending purposes.

8. Children’s Privacy

The Extension is not directed to children under the age of 13. If we become aware that children’s personal information has been collected by mistake, we will delete it as soon as reasonably possible.

9. Changes to This Privacy Policy

We may update this Privacy Policy due to product changes, legal requirements, or platform policy changes. Updated versions will be posted on this page with the effective date shown above.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, or if you want to request access, correction, export, or deletion of your data, please contact us at: