Privacy Policy
Effective date: 17 June 2026 · Last updated: 12 July 2026
This is a plain-language version written to be readable. It is provided in
good faith and reflects how TuLiang actually handles data today. It is not
legal advice — before you rely on it formally, have it reviewed by a lawyer.
1. Who we are
TuLiang (“图量”, “we”, “us”) is a PDF construction
measurement (takeoff) tool operated by Banruo Studio, based in
Sydney, New South Wales, Australia. You can reach us at
banruo@tuliang.online.
2. What personal information we collect
- Account data — your email address, your display name, and your password (stored only as a one-way bcrypt hash, never in readable form).
- Login & session data — each time you log in we record your IP address, your browser’s User-Agent string, and a random device token. These are used to keep your account secure (so we can detect when someone else logs into your account from a new device). They are not a hardware fingerprint and are not used for advertising.
- Usage counts — basic numbers such as how many sessions you have and how many objects (walls, rooms, etc.) you have drawn, shown back to you in your own usage dashboard.
- Content you upload — the architectural PDF drawings you upload and the measurement data you create from them. We treat this as your data, not ours.
3. How we collect it
Directly from you when you register and when you upload drawings, and
automatically from your browser at each login (your IP address and
User-Agent). We do not buy personal information about you from anyone, and
we do not sell or trade your personal information.
4. Why we collect it and how we use it
- To create and manage your account and log you in.
- To keep your account secure with single-device session protection (catching account takeover).
- To deliver the measurement service and store your drawings and takeoff data so you can come back to them.
- To show you your own usage statistics inside the app.
- To diagnose crashes and errors (see overseas disclosure below).
5. Where your data is stored
Your account data and your uploaded drawings are stored on servers located
in Sydney, Australia (Fly.io’s Sydney “syd” region). We do
not move your primary data offshore.
6. Third parties and overseas disclosure
- AI door/window schedule scan (Google Gemini). Only when you actively click the AI schedule scan, the single drawing page image you select is sent to Google’s Gemini API (operated in the United States) to recognise the door/window schedule on that page. The result is returned as candidates only, for you to confirm; none of the rest of your project is sent. If you never use this feature, no drawing ever leaves for Google.
- Crash reporting (Sentry). When error monitoring is enabled, crash and error reports may be sent to Sentry.io, a service operated in the United States. We configure Sentry to not send default personal data, but a crash report can still contain technical identifiers such as an IP address.
- Your own AI provider, if any. If a feature ever lets you connect your own third-party AI service, the data you send through it is governed by that provider’s own terms. (As of this version, TuLiang does not store any AI provider keys — that feature was removed.)
7. Cookies
We use exactly one first-party cookie, takeoff_auth, to keep
you logged in. It is HttpOnly (not readable by JavaScript), sent only over
HTTPS, and expires after 7 days. We do not use advertising cookies,
tracking cookies, or any third-party analytics scripts. Because this cookie
is strictly necessary for the service to work, no consent banner is required.
8. How long we keep your data
We hold your account data and uploaded drawings while your account is active.
If you ask us to delete them, we will action your request within 30 days.
9. Your rights — access, correction and deletion
You can ask to see, correct, or delete your personal information at any time
by emailing banruo@tuliang.online.
Deletion is performed manually by us within 30 days of your request.
10. Security
Passwords are stored as bcrypt hashes and are never readable by us. All data
in transit is encrypted over HTTPS. Session tokens are signed and expire
after 7 days, and we apply rate limiting and brute-force protection at login.
No system is perfectly secure, but these are reasonable steps for a tool of
this size.
11. Children
TuLiang is a professional tool intended for adults (18+). We do not knowingly
collect personal information from minors.
12. Privacy complaints
If you think we have handled your personal information in a way that does not
comply with this policy, please contact us at
banruo@tuliang.online and we will
respond within 30 days. If you are not satisfied with our response, you may
complain to the Office of the Australian Information Commissioner (OAIC) at
www.oaic.gov.au.
13. Changes to this policy
We will update this policy when our data practices change, and will notify
active users by email or an in-app notice.
14. A note on Privacy Act coverage
TuLiang is a small business with annual turnover under AUD 3 million and is
currently exempt from the Privacy Act 1988 (Cth) under the small
business exemption. We publish this policy voluntarily and commit to the
standards described here, and we will update our practices as the law changes.
隐私政策
生效日期：2026 年 6 月 17 日 · 最近更新：2026 年 7 月 12 日
本页是通俗易懂的版本，以诚信原则书写，如实反映 TuLiang 当前的数据处理方式。
本文不构成法律意见 — 在正式依赖之前，建议先请律师复核。本页英文版为权威版本。
1. 我们是谁
TuLiang（“图量”、“我们”）是一款 PDF 施工算量工具，由位于
澳大利亚新南威尔士州悉尼的 Banruo Studio 运营。联系邮箱：
banruo@tuliang.online。
2. 我们收集哪些个人信息
- 账户信息 — 你的邮箱、显示名、密码（仅以单向 bcrypt 哈希存储，绝不保存可读明文）。
- 登录与会话信息 — 每次登录我们会记录你的 IP 地址、浏览器的 User-Agent，以及一个随机 设备令牌。这些仅用于账户安全（侦测他人从新设备登录你的账户），不是硬件指纹，也不用于广告。
- 使用统计 — 一些基础数字，比如你有多少会话、画了多少对象（墙、房间等），仅在你自己的用量面板里展示给你看。
- 你上传的内容 — 你上传的建筑 PDF 图纸，以及你在其上生成的算量数据。我们把这些视为 你的 数据，而非我们的。
3. 我们如何收集
在你注册和上传图纸时由你直接提供；在你每次登录时由浏览器自动提供（IP 地址和
User-Agent）。我们不向任何人购买关于你的个人信息，也不出售或交易你的个人信息。
4. 为何收集、如何使用
- 创建和管理你的账户，并为你登录。
- 用单设备会话保护账户安全（侦测账号被盗）。
- 提供算量服务，并保存你的图纸与算量数据，方便你随时回来继续。
- 在应用内向你展示你自己的使用统计。
- 诊断崩溃与错误（见下文跨境披露）。
5. 你的数据存在哪里
你的账户数据和上传的图纸存储在位于 澳大利亚悉尼 的服务器上
（Fly.io 的悉尼 “syd” 区）。我们不会把你的主要数据迁往海外。
6. 第三方与跨境披露
- AI 门窗表扫描（Google Gemini）。 仅当你主动点击 AI 扫描时，你选择的那一页图纸图像会发送给 Google 的 Gemini API（运营在 美国），用于识别该页的门窗表。结果仅作候选、由你确认；不发送项目其余内容。如果你从不使用该功能，你的图纸不会因此发往 Google。
- 崩溃上报（Sentry）。 当错误监控开启时，崩溃与错误报告可能会发送给运营在 美国 的 Sentry.io。我们已配置 Sentry 不发送默认个人数据，但崩溃报告仍可能包含 IP 地址等技术标识。
- 你自带的 AI 服务（如有）。 如果某功能允许你接入自己的第三方 AI 服务，你经其传输的数据受该服务商自身条款约束。（截至本版本，TuLiang 不存储任何 AI 服务密钥 — 该功能已移除。）
7. Cookie
我们仅使用 一个 第一方 cookie takeoff_auth，用于保持你的登录状态。
它是 HttpOnly（JavaScript 读不到）、仅经 HTTPS 传输、7 天后过期。我们 不 使用广告
cookie、追踪 cookie 或任何第三方分析脚本。由于该 cookie 是服务运行严格必需的，无需弹同意横幅。
8. 我们保留数据多久
在你的账户处于活跃状态期间，我们会保留你的账户数据和上传的图纸。如果你要求删除，
我们会在 30 天内 处理你的请求。
9. 你的权利 — 访问、更正与删除
你可随时发邮件到 banruo@tuliang.online
要求查看、更正或删除你的个人信息。删除由我们在收到请求后 30 天内人工执行。
10. 安全
密码以 bcrypt 哈希存储，我们无法读取明文。所有传输中的数据均经 HTTPS 加密。会话令牌
经签名且 7 天后过期，登录处设有限流与暴力破解防护。没有系统是绝对安全的，但对于本规模的
工具，这些是合理的措施。
11. 未成年人
TuLiang 是面向成年人（18 岁以上）的专业工具。我们不会有意收集未成年人的个人信息。
12. 隐私投诉
如果你认为我们处理你个人信息的方式不符合本政策，请发邮件至
banruo@tuliang.online，我们会在 30 天内回复。
若你对我们的回复不满意，可向澳大利亚信息专员办公室（OAIC）投诉：
www.oaic.gov.au。
13. 政策变更
当我们的数据处理方式发生变化时，我们会更新本政策，并通过邮件或应用内通知告知活跃用户。
14. 关于《隐私法》适用范围的说明
TuLiang 是年营业额低于 300 万澳元的小型企业，目前根据小型企业豁免，暂不受
《1988 年隐私法》（联邦）约束。我们自愿发布本政策并承诺遵守此处所述标准，并将随法律变化
更新做法。