Office AI 隐私说明 / Office AI Privacy Guide

结论 / Conclusion

社区账号、公开主题、反馈附件、运行日志和用户主动调用的 AI 功能属于不同数据边界。用户应只提交完成当前请求所需的内容，并在上传截图、日志、dump 或文档前脱敏；详细处理范围、保存期限和用户权利以当前隐私说明为准。

Community accounts, public topics, feedback attachments, runtime logs, and user-initiated AI features are separate data boundaries. Submit only what is needed for the current request and redact screenshots, logs, dumps, and documents before uploading. The current privacy explanation is authoritative for processing scope, retention, and user rights.

公开事实 / Public facts

社区昵称可能公开展示；手机号、邮箱和账号标识默认脱敏展示 / Community display names may be public; phone numbers, email addresses, and account identifiers are masked by default.
用户发布的主题、回复、标签以及公开统计可能展示在社区页面 / User topics, replies, tags, and public statistics may appear on community pages.
反馈和崩溃材料可能包含系统、Office/Windows 版本、插件版本、文件路径和错误上下文 / Feedback and crash materials may contain system information, Office/Windows versions, add-in version, file paths, and error context.
用户主动调用翻译、总结、自定义 AI、AIGEN 等能力时，选定内容、提示词和必要上下文可能被处理 / When users actively invoke translation, summarization, custom AI, or AIGEN, selected content, prompts, and necessary context may be processed.
客户端诊断记录通常保存 7-15 天；公开页面访问和 GEO 监测事件默认保存 90 天 / Client diagnostic records are normally kept for 7–15 days; public page access and GEO monitoring events are kept for 90 days by default.

提交前清单 / Before submitting data

删除 token、密钥、密码、身份证件、客户信息和真实业务文件 / Remove tokens, keys, passwords, identity documents, customer information, and real business files.
裁剪并脱敏截图、日志、路径和账号标识 / Crop and redact screenshots, logs, paths, and account identifiers.
只保留复现问题所需的最小样本 / Keep the smallest sample needed to reproduce the issue.
通过公开隐私说明中的联系入口提出查询、更正、删除或注销请求 / Use the contact path in the public privacy explanation for access, correction, deletion, or account closure requests.

官方入口 / Official paths:

完整隐私说明 / Full privacy explanation: /privacy
安全说明 / Security: /docs/security.md
反馈入口 / Feedback: /feedback
社区规范 / Community guidelines: /community/guidelines