激活含 AI 权益的码前会说明自动开启及发送范围；可在设置中随时关闭，普通权益刷新不会覆盖你的选择。Before activating an AI entitlement code, the product explains automatic enabling and the data scope. You can disable it in settings; ordinary entitlement refreshes preserve your choice.
需要时让 AI 帮忙，不需要时照常好用。Use AI when it helps. Keep working without it.
基础整理、搜索和任务管理优先在本地完成。AI 首次安装时关闭；成功激活含 AI 权益的激活码后开启，随时可手动关闭。Core organization, search, and task management run locally first. AI is off on first install, turns on after successful activation of an AI entitlement code, and can be manually disabled at any time.
候选排序和工作区规划使用脱敏页面与任务字段；只有一句话筛选会发送用户输入的筛选描述，并为每个纳入请求的去重页面发送去除查询参数与哈希后的完整 URL pathname。Candidate ranking and workspace planning use redacted page and task fields. Only the one-sentence filter sends the user-entered filter description and, for each deduplicated page included in the request, the complete URL pathname after query and fragment removal.
在 AI 已启用且权益有效时，用户筛选或已启用的自动整理经香港网关请求 Neco Api；自动整理不要求每次另点分析。With AI enabled and valid entitlement, user filtering or enabled automatic organization contacts Neco Api through the Hong Kong gateway. Automatic organization does not require a separate click for each analysis.
建议可以查看、调整或撤销，不会擅自动真实页签。Suggestions can be reviewed, adjusted, or undone and never take over real tabs.
SEND / DO NOT SEND
会发送什么，不会发送什么。What may be sent—and what never is.
可能发送May be sent
AI 请求会发送完成对应操作所需的产品指令；如果用户在 AI 设置中修改并启用了候选排序或工作区规划的系统提示词，该提示词也会随对应请求发送。候选排序可能发送页面 ID、脱敏标题、注册域、路径类型、有界聚合证据与风险代码，以及候选任务的 ID、名称、领域和最多 5 个脱敏核心页面标题。工作区规划可能发送相同的页面字段，以及任务 ID、名称、领域、来源（手动或 AI）、是否允许改名、是否允许接收关系和最多 5 个脱敏核心页面标题。只有用户主动使用“一句话筛选全部页签”时，才会发送筛选框中的自由文本描述。该流程先合并重复页面并排除已识别的敏感站点；对每个纳入请求的去重页面，会发送页面 ID、脱敏标题、注册域、去除查询参数与哈希后的 URL（协议、主机名、可选端口和完整 pathname）、路径标签/类型、激活状态，以及保护级别和保护代码。pathname 可能含文件名、项目名、用户名或对象 ID。AI requests send the product instructions required for the corresponding operation. If the user edits and enables the candidate-ranking or workspace-planning system prompt in AI settings, that prompt is also sent with the corresponding request. Candidate ranking may send page IDs, redacted titles, registered domains, path types, bounded aggregate evidence and risk codes, plus each candidate task’s ID, name, domain, and up to five redacted core-page titles. Workspace planning may send the same page fields, plus each task’s ID, name, domain, source (manual or AI), whether it may be renamed, whether it may receive relations, and up to five redacted core-page titles. Only when the user explicitly uses Filter all tabs with one sentence is the free-text description entered in the filter sent. That flow first merges duplicate pages and excludes recognized sensitive sites. For each deduplicated page included in the request, TabToTask sends a page ID, redacted title, registered domain, a URL with query and fragment removed (protocol, hostname, optional port, and the complete pathname), path label/type, active state, and the protection level and protection codes. A pathname may contain a file name, project name, user name, or object ID.
不会发送Never sent
本次更新额外排除重置密码等已识别敏感路径，并在发往上游的 pathname 副本中替换编码邮箱、明显令牌和长秘密标识；本机原网址不变。因此上文的 pathname 是经规则检查的路径，不是承诺发送未经处理的原路径。规则可能漏识别名称或对象 ID，不能保证匿名。This update additionally excludes recognized password-reset paths and replaces encoded emails, obvious tokens, and long secret identifiers in the outbound pathname copy, leaving the original local URL unchanged. The pathname described above is checked by these rules, not necessarily the unchanged original path. Rules may miss names or object IDs and do not guarantee anonymity.
查询参数与哈希Query parameters and URL fragments页面正文与表单输入Page bodies and form inputCookie、令牌与密码Cookies, tokens, and passwords截图、书签与完整浏览历史Screenshots, bookmarks, and complete browsing history浏览器页签/窗口 ID 与原始行为事件流Browser tab/window IDs and raw behavior-event streams
保留手动开关A manual on/off control
关闭后不再发起新的 AI 分析；主动连接测试是独立检查，不改变开关。断网、超时或上游错误不阻止本地任务操作。Disabling AI stops new AI analyses. A user-initiated connection test is separate and does not change the switch. Offline, timeout, or upstream errors do not block local task operations.
路由标签不是驻留承诺Route labels are not residency promises
CN 对应 fast.sbbbbbbbbb.xyz，GLOBAL 对应 api.sbbbbbbbbb.xyz；两者只是产品路由标签。香港网关也不代表上游处理地区。CN maps to fast.sbbbbbbbbb.xyz and GLOBAL maps to api.sbbbbbbbbb.xyz; these are product routing labels only. The Hong Kong gateway does not establish the upstream processing region.
真实页签不可越界Real tabs are out of bounds
AI 不移动、关闭、固定、分组或重排真实页签，也不覆盖用户手动锁定。AI never moves, closes, pins, groups, or reorders real tabs and never overrides manual locks.
行为轨迹 30 天30-day behavior window
原始行为事件在本机滚动保留 30 天，可单独清除；任务关系保留到用户删除。Raw behavior events roll off locally after 30 days and can be cleared separately; task relationships remain until deleted.
上游服务与处理说明Upstream service and processing
据产品所有者转述的客服确认，Neco Api 是由青岛砚隅集科技有限公司运营的 API 聚合与转售服务，所提供发票销售方名称一致；它可能把请求继续转发给实际模型提供商，这不是独立 API 运营关系核验。截至 2026-09-26，签绪尚未取得可核实的统一上游隐私政策、实际处理地区、留存/删除及训练用途规则，因此不作零留存、不用于训练或特定地区处理的保证；CN/GLOBAL、公司注册地和香港网关均不能证明数据驻留地。According to the product owner's report of support confirmation, Neco Api is an API aggregation and resale service operated by 青岛砚隅集科技有限公司, matching the seller name on the supplied invoice. It may forward requests to the actual model provider, and this is not independent verification of API operation. As of September 26, 2026, TabToTask has not obtained verifiable unified upstream privacy, processing-region, retention/deletion, or training-use terms, so it does not promise zero retention, no training use, or processing in a particular region. Routing labels, registered location, and the Hong Kong gateway do not establish data residency.
请勿向 AI 提交敏感或机密内容。关闭 AI 不影响本地基础整理、搜索和任务管理；签绪自身不将这些内容用于广告、画像或模型训练。Do not submit sensitive or confidential content to AI. Disabling it does not affect local core organization, search, or task management. TabToTask itself does not use this content for advertising, profiling, or model training.
阅读完整隐私政策Read the full privacy policy