Ant Messenger 隐私政策

Ant Messenger Privacy Policy

更新日期：2026 年 7 月

Last updated: July 2026

Ant Messenger 是一款面向企业与团队的加密办公通讯工具。我们高度重视企业与团队的工作沟通数据安全，本政策说明我们如何保护、使用和管理企业客户在使用 Ant Messenger 过程中产生的数据。

Ant Messenger is an encrypted office communication tool for enterprises and teams. We take the security of business and team data seriously. This policy explains how we protect, use, and manage data generated by enterprise customers while using Ant Messenger.

一、企业数据的所有权与控制权

1. Ownership and Control of Enterprise Data

企业通过 Ant Messenger 产生的组织架构、通讯录、工作沟通内容、文件与会议记录等数据，其所有权归属于企业自身。我们仅作为技术服务提供方，在授权范围内提供存储、加密与传输能力，不将企业数据用于任何未经授权的目的。

Org structure, directory, communications, files, and meeting records generated through Ant Messenger belong to the enterprise itself. We act purely as a technical service provider, offering storage, encryption, and transmission within the authorized scope, and never use enterprise data for unauthorized purposes.

二、加密存储与传输

2. Encrypted Storage and Transmission

我们采用端到端加密技术保护工作群消息、文件传输与音视频会议，数据以密文形式在传输与存储环节流动，即便服务端也无法读取明文。私有化部署场景下，企业可进一步自主管理密钥与数据存放位置。

We use end-to-end encryption to protect work group messages, file transfers, and audio-video meetings. Data flows as ciphertext during transmission and storage, and is unreadable even by our servers. With private deployment, enterprises can manage keys and data location themselves.

三、访问控制与最小化权限

3. Access Control and Least Privilege

我们遵循最小化权限原则，企业内部不同角色仅能访问与其职责相关的数据。管理员可通过后台精细配置部门、岗位与数据访问范围，并对敏感操作设置审批，从机制上降低数据过度暴露的风险。

Following the principle of least privilege, different roles within the enterprise can only access data relevant to their responsibilities. Admins can finely configure department, role, and data-access scopes and set approvals for sensitive operations, structurally reducing over-exposure.

四、审计日志与合规追溯

4. Audit Logs and Compliance Tracing

系统记录登录、敏感操作与文件访问等关键事件，形成可查询、可导出的审计日志。结合水印与追溯机制，企业可在合规框架内对工作沟通进行必要的审计，同时保障合法员工的隐私边界。

Key events such as logins, sensitive operations, and file access are recorded into queryable, exportable audit logs. Combined with watermarking and tracing, enterprises can audit communications within a compliance framework while protecting legitimate employees' privacy.

五、数据留存、迁移与删除

5. Data Retention, Migration, and Deletion

企业可根据内部策略设置数据留存期限。我们提供数据导出与迁移工具，方便企业随时取回自有数据；当企业终止合作时，可要求删除相关数据，我们将按约定执行清除并反馈处理结果。

Enterprises can set data retention periods per internal policy. We provide export and migration tools so you can retrieve your data anytime; upon contract termination, you may request deletion, which we execute as agreed and confirm the outcome.

六、员工账号与权限变更

6. Employee Accounts and Permission Changes

我们支持员工账号的全生命周期管理。员工入职时按需授予权限，调动时同步调整范围，离职时管理员可一键停用并自动回收全部权限，确保离职人员无法继续访问企业数据，同时保留合规所需记录。

We support the full lifecycle of employee accounts. Permissions are granted on onboarding, adjusted on role changes, and fully revoked on offboarding with one click, ensuring departing staff can no longer access enterprise data while retaining compliance records.