版本演变分析
由 DeepSeek 生成
第三方共享数据收集范围
本次更新主要扩展了第三方共享场景，新增支付信息和用途信息的共享，并更新了生效日期。
总体评估
本次版本演变的方向与定性
本次更新属于实质性调整，核心方向是扩大第三方数据共享的范围，从仅共享日志信息扩展为包括支付信息和用途信息。这反映了企业在业务整合中对数据共享需求的明确化，但也增加了合规风险，需确保符合《个保法》第23条关于向第三方提供个人信息的单独同意要求。此外，生效日期更新为2026年5月12日，属于形式性调整。整体来看，此次更新在数据共享透明度上有所提升，但未涉及AI合规或算法备案等前沿议题，在同业中处于跟随水平。
详细变更点
按条款逐项的变化解读
1. 第一章 总则 - 生效日期
旧版：Last updated: April 29, 2026
新版：Last updated: May 12, 2026
合规影响
此变更属于形式性调整，仅更新政策生效日期，不涉及实质性合规义务变化。但需注意，生效日期的更新可能触发用户重新同意或通知义务，若政策内容有实质变更，应依据《个保法》第14条重新取得同意。此处仅日期变更，无需重新同意。
借鉴价值
网易类似政策在更新日期时，应明确标注版本号及变更摘要，便于用户追溯。可借鉴此处的简洁日期标注方式，但建议同时增加版本号（如V2.1）以增强可追溯性。
2. 第二章 个人信息收集与使用 - 第三条 第三方共享
旧版：Third Parties. We may share your personal data, including Log Information, with third parties whose platforms or services are integrated with the Service. For example, if you log in using your existing...
新版：Third Parties. To the extent necessary to provide the Services, we may share your personal data, including Log Information, Payment Information, and Usage Information, with third parties whose platforms or services are integrated with the Service.
合规影响
此变更为实质性扩展，新增了共享数据类型（支付信息和用途信息），并增加了必要性限定（To the extent necessary）。这扩大了个人信息共享范围，触及《个保法》第23条关于向第三方提供个人信息的单独同意要求。企业需确保在共享前取得用户单独同意，并明确告知接收方类型、目的、数据范围。同时，必要性限定有助于降低合规风险，但需在实际操作中证明共享的必要性。此外，支付信息属于敏感个人信息（《个保法》第28条），共享时需取得单独同意并告知必要性及对用户权益的影响。若未履行，可能面临行政处罚或民事赔偿风险。
借鉴价值
网易类似政策（如游戏隐私政策）在描述第三方共享时，可借鉴此处的必要性限定表述（To the extent necessary），以增强合规正当性。同时，应明确列出共享的数据类型（如支付信息），并单独设置弹窗或勾选框获取用户同意。建议规避仅笼统表述为“个人信息”，而应具体化，以符合《个保法》透明度要求。
结论与启示
合规建议与对网易的借鉴价值
本次更新整体合规启示：一是数据共享范围扩展需同步更新用户同意机制，确保符合《个保法》第23条单独同意要求；二是必要性限定条款有助于降低风险，但需留存共享必要性证明文件。与监管最新口径契合度较高，体现了对敏感个人信息（支付信息）的重视。行业基准定位：在头部互联网企业中属于常见做法，但未涉及AI或算法合规，略显滞后。法务团队接下来30天内需：1）复审第三方共享场景，确认是否已取得用户单独同意；2）更新隐私政策中的共享数据清单；3）检查支付信息处理是否已进行个人信息保护影响评估（PIA）。
逐字对比
上个版本（发布日期）
2026年5月5日
当前版本（发布日期）
2026年5月13日
| 1 | Privacy Policy | 1 | Privacy Policy |
| 2 | Last updated: April 29, 2026 | 2 | Last updated: May 12, 2026 |
| 3 | Introduction | 3 | Introduction |
| 4 | Before using the Services (as defined below), please read this Qoder Privacy Policy carefully to learn how we, BRIGHT ZENITH PRIVATE LIMITED, a Singapore registered entity (“BRIGHT ZENITH”), collect, use, disclose, and protect your personal data. This Qoder Privacy Policy will also provide you with more information about the bases upon which BRIGHT ZENITH may lawfully collect, use, and/or disclose your personal data, where permitted by applicable law. | 4 | Before using the Services (as defined below), please read this Qoder Privacy Policy carefully to learn how we, BRIGHT ZENITH PRIVATE LIMITED, a Singapore registered entity (“BRIGHT ZENITH”), collect, use, disclose, and protect your personal data. This Qoder Privacy Policy will also provide you with more information about the bases upon which BRIGHT ZENITH may lawfully collect, use, and/or disclose your personal data, where permitted by applicable law. |
| ⋯ 折叠 39 行未变更内容 ⋯ | |||
| 44 | Your Organization. If you are a member of an Organization under an Enterprise or Team Plan, we may share your personal data with your Organization, Administrators of your Organization, and/or other users (if applicable) in your Organization. | 44 | Your Organization. If you are a member of an Organization under an Enterprise or Team Plan, we may share your personal data with your Organization, Administrators of your Organization, and/or other users (if applicable) in your Organization. |
| 45 | Service Providers. We may share your personal data with service providers we engage from time to time to provide various services, including cloud infrastructure to host our Services, large language models (such as Alibaba’s Qwen, MoonShoot’s Kimi) to support your coding experience and help generate Outputs, as well as codebase data storage and web search providers that help us provide and deliver the Service. All such Service Providers are contractually required to maintain data protection standards equal to or exceeding those required by applicable laws and regulations, in order to facilitate the delivery of our Services. When you enable the “Bring Your Own Key” (BYOK) feature, your information may be transmitted to third-party service providers designated by you, and such transmission constitutes your own independent action rather than a sharing practice by our Service, and the processing of such data shall be governed by the privacy policies of the respective third-party service providers. | 45 | Service Providers. We may share your personal data with service providers we engage from time to time to provide various services, including cloud infrastructure to host our Services, large language models (such as Alibaba’s Qwen, MoonShoot’s Kimi) to support your coding experience and help generate Outputs, as well as codebase data storage and web search providers that help us provide and deliver the Service. All such Service Providers are contractually required to maintain data protection standards equal to or exceeding those required by applicable laws and regulations, in order to facilitate the delivery of our Services. When you enable the “Bring Your Own Key” (BYOK) feature, your information may be transmitted to third-party service providers designated by you, and such transmission constitutes your own independent action rather than a sharing practice by our Service, and the processing of such data shall be governed by the privacy policies of the respective third-party service providers. |
| 46 | Third Parties. We may share your personal data, including Log Information, with third parties whose platforms or services are integrated with the Service. For example, if you log in using your existing account with third-party SNSs, including Google and Github, we will share certain Log Information to facilitate account registration or log in. | 46 | Third Parties. To the extent necessary to provide the Services, we may share your personal data, including Log Information, Payment Information, and Usage Information, with third parties whose platforms or services are integrated with the Service. For example, if you log in using your existing account with third-party SNSs, including Google and GitHub, we will share certain Log Information to facilitate account registration or log in. |
| 47 | Our Corporate Group. Certain entities within our corporate group ("Corporate Group") receive and process personal data to support the provision of the Services. These entities process Information Provided By You, Automatically Collected Information, and Information From Other Sources for us, as necessary to provide functions such as storage, operation and maintenance of Service, security, research and development, analytics, online payments, customer and technical support. | 47 | Our Corporate Group. Certain entities within our corporate group ("Corporate Group") receive and process personal data to support the provision of the Services. These entities process Information Provided By You, Automatically Collected Information, and Information From Other Sources for us, as necessary to provide functions such as storage, operation and maintenance of Service, security, research and development, analytics, online payments, customer and technical support. |
| 48 | Corporate Transactions. Your personal data may, to the extent permitted by applicable laws and subject to your consent when required, be disclosed to third parties: In the event that we discuss or negotiate the sale or sell any business or assets, in which case we may disclose your information to the prospective buyer of such business or assets; or in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or a portion of our business including asset sales, consolidations or in the unlikely event of bankruptcy. | 48 | Corporate Transactions. Your personal data may, to the extent permitted by applicable laws and subject to your consent when required, be disclosed to third parties: In the event that we discuss or negotiate the sale or sell any business or assets, in which case we may disclose your information to the prospective buyer of such business or assets; or in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or a portion of our business including asset sales, consolidations or in the unlikely event of bankruptcy. |
| ⋯ 折叠 97 行未变更内容 ⋯ | |||
已折叠未变更段落 · 点击右上「全文对比」查看完整两版