M2M Logo M2M

M2M 隐私政策

M2M Privacy Policy

生效日期：Effective Date: 2026-09-06 适用应用：Application: M2M (online.kbpi.m2m)

1. 引言与概述

1. Introduction & Overview

欢迎使用 M2M（以下简称“我们”或“本软件”）。M2M 是一款高性能跨平台多协议终端与远程桌面管理客户端，支持 Local、SSH、VNC、RDP、Serial、WinRM、PSRP 等协议，并内置 AI 运维助手功能。

我们高度重视您的个人隐私与数据安全。本隐私政策旨在向您说明我们在您使用 M2M 桌面应用程序（包括 macOS 与 Windows 版本）及官方网站（https://m2m.kbpi.online）时的数据处理实践。我们承诺：M2M 核心定位为本地工具，不会收集、上传或出售您的个人身份信息、服务器登录密码、私钥或终端操作日志。

Welcome to M2M ("we", "us", or "the Application"). M2M is a high-performance cross-platform multi-protocol terminal and remote desktop management client supporting Local, SSH, VNC, RDP, Serial, WinRM, PSRP protocols, and integrated AI assistant capabilities.

We deeply respect and protect your privacy and data security. This Privacy Policy details our data handling practices when you use the M2M desktop application (macOS and Windows) and our official website (https://m2m.kbpi.online). Our commitment: M2M operates primarily as a local application and does not collect, upload, or sell your personal identity information, server credentials, private keys, or session logs.

2. 数据收集与处理说明

2. Data Collection and Usage

结合 App Store 审核准则（5.1.1）及通用隐私法规要求，本软件对涉及的数据类型处理如下：

2.1 服务器配置与登录凭据 100% 本地存储

当您在 M2M 中添加远程服务器节点（如 SSH 主机地址、端口、用户名、密码、SSH 私钥、RDP/VNC 访问密码等）时，所有凭据数据均经过加密后直接保存在您的本地设备中（借助系统 Keychain 或强化的本地加密存储）。任何凭据信息均不会传输至开发者或第三方服务器。

2.2 终端会话与历史日志 100% 本地存储

您的命令行输入输出内容、会话历史、快捷指令及本地文件传输路径均仅在本地设备内存与临时目录中处理，用于向您展示终端画面与提供补全检索功能。我们绝不监控、记录或上传您的任何终端内容。

2.3 AI 助手对话数据

当您主动使用 AI 侧边栏助手功能时：

  • 您可以自主配置 AI 服务提供商（如 OpenAI、DeepSeek、Google Gemini、OpenRouter 或自定义 Ollama 本地模型）及其 API Key。
  • API Key 仅加密保存在您的本地设备中。
  • 仅在您点击发送消息时，您输入的 Prompt 及选中的上下文才会通过 HTTPS 直接发送给您所选择的 AI 服务商 Endpoint，不经过开发者中转服务器。

2.4 软件自动更新检查

本软件内置自动更新功能。为向您提供最新的版本更新与安全补丁，应用程序会定期向我们的更新服务器（releases.m2m.kbpi.online）发起 HTTPS 请求。该请求仅包含必要的无特征技术参数：操作系统类型（如 darwin-aarch64 或 windows-x86_64）与当前软件版本号。不包含任何个人识别符。

2.5 官网下载匿名统计

在官方网站下载页面，当用户点击下载按钮时，服务端会记录匿名的下载计数统计（例如 macOS 或 Windows 版本的下载总次数），用于评估软件分发情况。我们不使用追踪 Cookie，也不进行跨站行为分析。

In accordance with App Store Review Guidelines (5.1.1) and applicable privacy regulations, our data handling for each data category is as follows:

2.1 Server Credentials & Configurations 100% Local Storage

When you add remote server nodes (SSH hosts, ports, usernames, passwords, SSH private keys, RDP/VNC credentials) in M2M, all sensitive data is encrypted and stored strictly on your local device (using OS Keychain or secure local storage). No credentials are ever transmitted to the developer or any third party.

2.2 Terminal Sessions & Logs 100% Local Storage

Your command input/output buffers, session histories, quick scripts, and file transfer paths are processed solely in your device memory and local disk to render terminal UIs and auto-completions. We never monitor, record, or upload your terminal content.

2.3 AI Assistant Interaction Data

When you explicitly use the AI sidebar assistant:

  • You configure your own chosen AI provider (e.g. OpenAI, DeepSeek, Google Gemini, OpenRouter, or local Ollama) and your API keys.
  • API keys are stored encrypted on your device.
  • Prompts and selected context are transmitted directly over HTTPS to your specified AI API endpoint only when you trigger a chat request.

2.4 Automatic Software Update Checks

M2M features an automatic software update module. To notify you of updates and security fixes, the app sends periodic HTTPS queries to releases.m2m.kbpi.online. These queries contain only anonymous non-identifiable parameters: OS architecture (e.g., darwin-aarch64 or windows-x86_64) and current app version.

2.5 Anonymous Website Download Statistics

When users download binaries from our website, our backend logs aggregate anonymous download counts (e.g., total macOS or Windows downloads). We do not use tracking cookies or cross-site tracking tags.

3. 系统权限申请与使用说明

3. System Permissions & Usage

为实现远程连接与文件管理等核心功能，M2M 可能会申请以下系统权限：

权限名称 使用场景与目的 数据处理方式
网络访问 (Network) 建立 SSH / RDP / VNC / WinRM 远程会话；与用户指定的 AI API 交互；检查软件更新。 由用户主动触发，数据直接与目标服务器通信。
剪贴板访问 (Clipboard) 支持终端与本地系统之间的复制/粘贴，以及 RDP/VNC 剪贴板同步。 仅在用户执行复制粘贴操作时读取或写入，不进行背景收集。
本地文件系统 (File System) 用于 SFTP 文件上传下载、保存本地配置与导出快捷指令。 仅访问用户明确选定的文件或目录。

To enable core features such as remote connection and file synchronization, M2M may request the following system permissions:

Permission Purpose & Scenario Data Handling
Network Access Establish SSH/RDP/VNC/WinRM sessions; communicate with user-configured AI APIs; check software updates. Directly communicates with user-specified target servers upon user actions.
Clipboard Access Allow copy & paste between local system and remote terminals/desktops. Read/written solely during user copy-paste actions; no background scraping.
Local File System SFTP file upload/download, saving local preferences, and key/session exports. Accesses only files and folders explicitly chosen by the user.

4. 数据存储与安全保护机制

4. Data Storage and Security

我们采取行业标准的加密防范手段来保障您的数据在本地安全：

  • 本地高强度加密：主机明文密码与私钥采用 AES-GCM-256 加密算法存储，加密密钥由操作系统安全密钥库（macOS Keychain / Windows Credential Manager）守护。
  • 通信传输安全：所有网络连接（包括软件更新、AI API 通信、RDP/VNC/SSH 传输）均强制使用 TLS/SSL 加密或 SSH 协议安全加密通道。

We implement industry-standard cryptographic measures to safeguard your local data:

  • High-Standard Local Encryption: Sensitive passwords and private keys are encrypted using AES-GCM-256 and protected by OS secure keychains (macOS Keychain / Windows Credential Manager).
  • Transmission Security: All external network traffic (including update checks, AI requests, and remote connections) strictly utilizes TLS/SSL encryption or SSH protocol secure tunneling.

5. 第三方服务与 API 声明

5. Third-Party Services & APIs

在您使用 AI 助手功能时，请求会直接发送给您所选择的第三方 AI 服务提供商。常见提供商及其隐私政策参考如下：

我们建议您在开启相应的第三方 AI 服务前，阅读并了解对应提供商的隐私政策条款。

When using the AI assistant feature, requests interact directly with third-party AI services selected by you. Please consult the privacy policies of your selected providers:

We advise reviewing the respective privacy policy of any third-party provider before configuring their API keys in M2M.

6. 数据保留与彻底删除

6. Data Retention and Deletion

由于所有数据均储存于您的本地计算机中，您对自己的数据拥有绝对的控制权：

  • 您可以在应用内随时编辑或删除已保存的主机节点、历史记录或 AI 配置。
  • 当您卸载 M2M 应用或清理应用数据文件夹（如 ~/Library/Application Support/online.kbpi.m2m 或 Windows 对应的 AppData 目录）时，所有配置与凭据将被永久删除。

Because all data resides locally on your computer, you have complete control over data retention and deletion:

  • You can modify or delete saved hosts, session histories, and API configs directly within the application at any time.
  • Uninstalling M2M or deleting the application support folder (e.g. ~/Library/Application Support/online.kbpi.m2m or Windows AppData) will permanently erase all local application data.

7. 用户隐私权利 (GDPR / CCPA / PIPL)

7. User Rights (GDPR / CCPA / PIPL)

根据《中华人民共和国个人信息保护法》(PIPL)、欧盟《通用数据保护条例》(GDPR) 以及《加州消费者隐私法案》(CCPA)，您享有知情权、查阅权、更正权及删除权。由于我们不在云端服务器存储您的个人数据，您可以直接在本地软件界面中行使对所有数据的查阅、修改与销毁权利。

Under regulations such as GDPR, CCPA, and PIPL, users possess rights to access, rectify, restrict, and delete their personal data. Because we do not store your personal data on remote servers, you can exercise these rights directly through the application's local user interface.

8. 未成年人隐私保护

8. Children's Privacy

M2M 是一款面向开发运维人员的专业工具软件。我们不会主动收集或索取 14 周岁以下未成年人的个人信息。

M2M is a professional developer utility and does not knowingly request or collect data from children under the age of 14.

9. 隐私政策的更新

9. Policy Updates

我们可能会根据软件功能更新或法规要求适时修订本隐私政策。任何修订均会在本网页发布，并在页面顶部标明最新的更新日期。建议您定期查阅本页面以获取最新信息。

We may update this Privacy Policy periodically to reflect app features or legal updates. Revised policies will be published on this page with an updated "Effective Date".

10. 联系我们

10. Contact Us

如果您对本隐私政策有任何疑问、意见或隐私相关的请求，请通过以下方式联系我们：

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us via: