Privacy Policy for WonderPen

We value your works and personal information. This Policy explains how WonderPen’s local features, cloud services, licensing, and feedback process data.

WonderPen does not provide AI services. We will not use your documents, attachments, or other user data to train AI models, or provide that data to third parties for that purpose.

1. Operator and scope

1.1WonderPen is developed and operated by Hangzhou Tongming Technology Co., Ltd. (“we” or “us”) and includes desktop, mobile, and web versions. Send personal information questions and rights requests to support@tominlab.com.

1.2This Policy applies to features provided by WonderPen itself. TominLab accounts, website purchases, and support are also governed by the website Privacy Policy. This Policy takes precedence for matters it expressly addresses concerning WonderPen documents and in-app processing.

1.3This Policy is available in Chinese and English. In the event of any inconsistency or difference in interpretation, the Chinese version prevails, except where mandatory provisions of applicable law require otherwise.

Website Privacy Policy and infrastructure providers

2. Information processing by feature

2.1The following list describes the information involved in each WonderPen feature, why it is processed, and how. The scope of processing depends on the features you actually use.

• Accounts and security: registration email, username, account identifiers, password verification information, sign-in credentials, device or client identifiers, sign-in IP addresses, times, and security records are processed for sign-in, account management, device recognition, abuse prevention, and legal obligations.
• Licensing, trials, and updates: depending on the feature, software version, platform, operating system and architecture, language, machine name, hashed machine identifier or a client-generated replacement identifier are processed. Trials and licensing may also process system version, memory, processor model, and store-build indicators to verify licenses, manage trials, match updates, and measure product operation.
• Local Libraries: documents, whiteboards, cards, notes, attachments, and other content are stored on your device and are not automatically uploaded as cloud documents merely because you use a local Library. Actions you initiate, such as moving to the cloud, submitting attachments, or authorizing external tools, follow the relevant feature rules.
• Cloud Libraries: documents, whiteboards, cards, notes, attachments, folder structure, and necessary metadata you choose to store, together with associated historical snapshots, writing-process records, and backups, are processed for cross-device synchronization, version recovery, backups, and selected cloud features.
• Preferences and writing statistics: when signed in, applicable account preferences, word or character counts, writing duration, time periods, and client identifiers are processed and synchronized to provide cross-device settings and personal statistics. This is separate from whether local document text is uploaded and does not mean that writing content is uploaded.
• Clipboard and file access: when you paste, import, export, or select attachments, content needed for the action is read or written. We do not separately collect clipboard content for analytics. Content pasted into a cloud document synchronizes under cloud document rules.
• Feedback and troubleshooting: feedback text, contact email, product version, platform information, and attachments or diagnostic logs you choose to submit are processed only to handle issues and respond.
• Web usage statistics: the web version uses our statistics service to process necessary visited-page, browser or device type, and access-time information to understand operation and usage. It does not collect document text for this purpose or use it for advertising profiles.

2.2Machine identifiers are hashed before use to avoid directly transmitting the original machine identifier. A client-generated replacement may be used if the identifier cannot be obtained. Hashing alone does not guarantee that the identifier can no longer be linked to a device or account. We therefore continue to protect it as information that may relate to a device or account. Machine names are a separate field and are not automatically hashed because the machine identifier is hashed.

2.3Refusing information necessary for a particular feature may affect that feature, without affecting local or other features that do not need it. General descriptions in this Policy do not authorize unrestricted collection.

2.4We process information on applicable legal grounds such as consent, necessity to perform a contract to which you are a party, or legal obligations. Consent is obtained where required for optional processing. Withdrawing or refusing unnecessary processing should not affect basic features that do not require it.

3. Works and diagnostic logs

3.1We do not automatically read and upload local Library text for analysis or training. When you choose to use cloud Libraries, cloud content is processed only as necessary for storage, synchronization, backup, security maintenance, and support you request.

3.2Diagnostic logs generated and uploaded by the application do not contain your writing content and are used only for troubleshooting. They may include account or Library identifiers, device and version information, file paths, and error records. Work excerpts that you choose to put in feedback text or attachments are separately submitted feedback materials, not automatically collected diagnostic logs.

3.3Feedback logs are not published or provided for third parties’ independent purposes. Infrastructure providers may store and transmit them within their entrusted scope. Only authorized personnel necessary to handle the issue may access them. Legally required provision follows the law; ordinary business cooperation is not grounds for providing logs.

3.4You can decide whether to include logs in the feedback interface and review the relevant notice before submission. Not submitting logs does not affect normal writing, but may make some problems harder to diagnose.

4. Storage locations, retention, and deletion

4.1Principal WonderPen service data, including accounts, cloud documents, preferences, and writing statistics, is stored on servers in China. Some auxiliary email services and international purchase channels involve processing outside China, as described in Section 5 and the website Privacy Policy. Domestic primary storage does not mean that no data ever leaves China.

4.2You control the storage location of local Libraries. If you place a local directory in a cloud drive or backup service of your choice, that provider’s rules govern its processing.

4.3Account information is retained as needed to maintain the account and service. We do not delete cloud Libraries solely because membership expires, you stop renewing, or you remain inactive for a long time. Features and allowances are downgraded according to the membership plan. Future retention changes, service discontinuation, unlawful content, and user-initiated deletion are addressed in the WonderPen Terms of Service.

4.4Current document content is managed separately from historical snapshots, writing-process records, and rolling backups. Historical records and backups follow the periods, allowances, and applicable transition arrangements described in the membership plan and may be removed when those periods expire. This does not mean deleting the current cloud Library.

4.5Uploaded feedback attachments enter scheduled cleanup after 30 days from upload. Feedback text and handling records are retained as needed for issue handling and related disputes. Account security, access, and licensing records follow the shortest necessary periods determined by their purposes and legal obligations.

4.6After account deletion, fulfillment of processing purposes, or other statutory deletion conditions, we delete or anonymize information according to law. Information that must be retained by law or cannot temporarily be deleted from backups is limited to storage and necessary security protection until the obligation ends or deletion becomes possible, without use for other purposes.

WonderPen Terms of Service and retention rules

5. Entrusted processing, third parties, and international services

5.1We do not sell personal information, works, or diagnostic logs or provide them to third parties for advertising or AI training. Infrastructure providers may only store and transmit the relevant data on our behalf to provide cloud services and support, and may not use it for independent purposes.

• Alibaba Cloud: entrusted cloud storage, backups, and related infrastructure, processing hosted cloud documents, attachments, backups, and necessary technical information. Its email service processes recipient addresses and content for email functions.
• Tencent Cloud: entrusted storage and transmission of uploaded feedback attachments and diagnostic logs, with file identifiers and technical information needed for that processing.
• Resend: entrusted delivery of transactional emails such as password recovery and fallback delivery, processing email addresses, subjects, content, and delivery information. Its published storage location is the United States. Sending email does not give it access to cloud Library text. Feedback notification emails may contain feedback text you submitted and attachment links.
• Apple, Alipay, WeChat Pay, Paddle, and other purchase channels you choose: order, license, and transaction information is processed only as needed for purchases, benefit verification, and support. A purchase does not give them access to your Libraries or diagnostic logs.
• Our web statistics service: web usage measurement without document text as analytics content.

Provider entities, official policies, and contact channels are listed in the website Privacy Policy. You may also request information relevant to your features at support@tominlab.com.

5.2As required by law, we enter into agreements with providers that process data on our behalf, specifying processing purposes, scope, and security and confidentiality obligations. We also carry out necessary oversight. Providing information to organizations that independently determine the purposes and methods of processing, or disclosing it publicly, is subject to legal notice and consent requirements; “business cooperation” or ordinary complaints do not justify unrestricted disclosure.

5.3International email or payment processing follows applicable transfer requirements, with information about recipients, purposes, categories, and rights channels. Where separate consent is required, acceptance of an entire agreement or continued use does not replace it. You can exercise rights through support or the relevant provider’s official privacy channels.

5.4For a merger, division, or business transfer involving a successor receiving personal information, we give legally required notice of the recipient and contact details and require continued protection. Changed processing purposes or methods require renewed consent where legally required.

6. Third-party websites, open interfaces, and cookies

6.1If you choose to visit external websites, sign in to third-party services in web panels, or authorize external tools to access data, the third party processes the information it receives under its own rules. General web panels, open interfaces, and external services you connect do not constitute AI services provided by WonderPen.

6.2These general capabilities do not cause us to automatically send your works to third parties. Control external-tool access as needed. Third parties may use their own cookies, caches, and sign-in information.

6.3On our website or web version, cookies and local storage support sign-in, security verification, preferences, and related functions. Sign-in sessions may be linked to accounts and are not inherently anonymous. Browser settings allow management or removal, which may affect sign-in and related features.

7. Security and incident response

7.1We use reasonable transmission encryption, access controls, backups, and permission management, allowing necessary authorized personnel access only for service and troubleshooting purposes. We do not promise that any system is entirely immune to security incidents.

7.2We take legally required remedial, reporting, and notification measures following an incident, explaining potential impact, response, and recommended steps. Keep devices, credentials, and independent backups secure.

8. Your rights and account deletion

8.1You may exercise applicable rights to access, copy, correct, supplement, or delete personal information; withdraw consent-based authorization; request explanations; and, where statutory conditions are met, restrict processing or request transfer. Use app or website account settings or contact support@tominlab.com.

8.2Account deletion is available in WonderPen’s settings under account settings, or through website account settings; labels may vary by platform. Export works, consider linked account benefits, and separately cancel auto-renewal with Apple or another platform before deletion.

8.3After deletion, the relevant account service stops. Online data, backups, and statutory records are handled separately under Section 4. Account deletion does not mean all storage media are erased simultaneously.

8.4We request information only as needed to verify identity and protect the account and ordinarily give an initial response within 3 to 5 working days. For complex requests, we explain why more time is needed and provide an estimated timeline; statutory deadlines prevail. If a request cannot be fulfilled, we explain why and available remedies.

9. Policy changes and contact

9.1Revised policies and update dates will be published. Major changes will be prominently notified before taking effect. Changes to consent-based processing purposes, methods, or categories require renewed consent where legally required; continued use is not automatically treated as acceptance.

9.2Send privacy questions, complaints, and rights requests to support@tominlab.com.