Effective Date: October 14, 2026
This Privacy Policy applies to LLM & Agent Learning Studio, a Windows desktop learning application provided by Hangzhou Xishang Technology Co., Ltd. ("we," "us," or "our"). It explains what information may be processed when you use the application, why it is processed, where it may be stored, and the choices available to you.
1. Information We May Process
Account information
If you create or use an account, we may process information needed for authentication and account management, such as your email address, account identifier, verification status, sign-in session information, and security-related account metadata.
Learning progress and application state
The application may store lesson progress, quiz completion, course state, selected settings, preferences, and similar learning-related information so you can continue where you left off. Some of this information may be stored locally on your Windows device. Where account-based synchronization or entitlement checks are used, limited related state may also be associated with your account.
Purchase and entitlement information
If paid features are offered through Microsoft Store, we may process limited entitlement information required to determine whether the signed-in user or device is authorized to access paid features. Payment card details and other payment credentials are processed by Microsoft and are not received by us.
Support communications
If you contact us, we may process the information you provide, such as your email address, message content, screenshots, diagnostic details, and other information needed to respond to your request.
2. Authentication and Account Services
The application may use Supabase to provide account registration, email verification, sign-in, password reset, session management, and related authentication functions. Supabase may process account and technical information necessary to provide these services under its own privacy and security terms.
We do not sell account information or use account data for third-party advertising.
3. User-Provided AI API Keys and External Model Providers
LLM & Agent Learning Studio may allow users to connect their own API credentials for third-party AI providers or to use a local model. These integrations are optional.
- User-provided API keys: where supported, API credentials are intended to be used for the user's selected provider. We do not require users to route their model requests through a Xishang-operated AI gateway.
- Third-party AI providers: prompts, files, code, or other content may be transmitted directly to the provider selected by the user when the user chooses to use that provider. That provider's privacy, retention, and usage policies apply.
- Local models: when a supported local model is used, model inference can remain on the user's own device, subject to the behavior of the local software selected by the user.
You should not send confidential, regulated, or sensitive information to a third-party AI provider unless you are authorized to do so and have reviewed that provider's privacy practices.
4. Code, Files, and Local Execution
Learning activities may involve code examples, local files, Python, development tools, or other software. Files and code processed locally by the application are not automatically uploaded to us merely because they are opened or used in a lesson.
If you explicitly choose an external AI provider, cloud service, or other integration, the information you send through that integration may leave your device and be handled by that third party.
5. How We Use Information
We may use the information described above to:
- Provide account registration, authentication, and session management
- Maintain learning progress and application preferences
- Verify Microsoft Store entitlement and paid-feature access
- Provide support, troubleshoot issues, and respond to user requests
- Protect the application, user accounts, and licensing systems from abuse or fraud
- Improve reliability, usability, and educational workflows
- Comply with applicable legal and platform requirements
6. Third-Party Services
Depending on the features you use, the application may interact with third-party services including:
- Microsoft Store for application distribution, purchases, and entitlement verification
- Supabase for authentication and account-related backend services
- User-selected AI model providers when the user configures an external model API
- Local model software selected and installed by the user
Those services are governed by their own privacy policies and terms. We do not control the data-retention practices, model-training policies, billing rules, or service availability of third-party providers.
7. Data Retention
We retain personal information only for as long as reasonably necessary to provide the application, maintain account and entitlement functionality, respond to support requests, satisfy legal obligations, prevent abuse, or protect legitimate business interests.
Locally stored learning state remains on the user's device until removed by the user, the application, or the operating system. Account-related information may remain associated with the account until it is deleted or no longer required for the purposes described in this policy.
8. Data Security
We use reasonable technical and organizational measures intended to protect information against unauthorized access, misuse, alteration, or disclosure. These measures may include authenticated access, encrypted network transport where supported by the relevant service, access controls, and limited collection of data needed for application functionality.
No internet-connected service can guarantee absolute security. Users should protect their Windows account, application credentials, API keys, and devices from unauthorized access.
9. Data Sharing
We do not sell personal information. We may share information only where reasonably necessary to:
- Use service providers required to operate authentication, distribution, support, or other requested functionality
- Comply with legal obligations or valid legal process
- Investigate security incidents, fraud, abuse, or threats to users or our services
- Protect our rights, users, systems, or the public where permitted by law
10. Your Choices and Rights
Depending on applicable law and the relevant feature, you may have rights to request access to, correction of, or deletion of personal information associated with your account.
You can also choose not to connect an external AI API, can use a supported local model instead where available, and can remove locally stored application data using Windows or application controls.
For privacy or account-related requests, contact us at [email protected]. We may need to verify your identity before completing certain requests.
11. Children
LLM & Agent Learning Studio is intended as a technical and educational software product and is not designed specifically for children. If local law requires parental or guardian consent for a particular user, the user or responsible adult should ensure that such consent is obtained before account creation or use of third-party services.
12. International Processing
Some service providers may process information in countries or regions different from your own. Where applicable, such processing is subject to the provider's contractual and legal safeguards and to applicable data-protection law.
13. Changes to This Privacy Policy
We may update this Privacy Policy when application features, account services, paid features, third-party integrations, or legal requirements change. The latest version will be published at this URL and will show the current effective date.
14. Contact
Developer:
Hangzhou Xishang Technology Co., Ltd.
Product:
LLM & Agent Learning Studio
Privacy and Support Contact:
[email protected]
Related document: LLM & Agent Learning Studio Terms of Service