TMH • TGMatrix
隐私政策 Privacy Policy 服务条款 Terms of Service

TMH 全球隐私保护与数据合规政策

平台主体：TMH Global Infrastructure • TGMatrix System • 生效日期：2026年11月02日

TMH 平台（包括 Telegram Matrix Hub、TGMatrix 全球矩阵调度网络及附属云端基础设施，以下统称“本平台”、“我们”或“TMH”）高度尊重并严密保护所有用户的个人隐私与数据安全。本隐私政策依据《通用数据保护条例》（GDPR）、《加州消费者隐私法》（CCPA）以及 Google API 开发者用户数据政策标准制定，向您说明我们如何收集、使用、存储、保护及删除您的个人信息与第三方授权凭证。

1. 适用主体与业务范围

本政策适用于您通过官方网站（包括 tmhx.si、www.tmhx.si、api.tmhx.si）、客户端应用程序、自动化 API 接口及受控矩阵网关节点所访问或使用的一切 TMH / TGMatrix 服务。

2. 我们收集的信息类别与采集方式

为保障矩阵基础设施的高效调度与账户安全，我们仅在必要限度内处理以下信息：

信息类别 具体采集项 采集场景与业务目的
Google OAuth 授权数据 Google 账户邮箱地址、用户显示名称、公开头像 URL、Google User ID 仅用于通过 Google Identity Services 快速验证身份、创建登录会话及多端凭据同步，严禁用于任何画像广告。
Telegram 业务凭证 Telegram User ID、公开用户名（Handle）、Session 校验哈希 用于绑定客户账户并提供高并发矩阵分发、客服聚合收件箱及自动化消息路由。
基础设施网络日志 客户端公网 IP（脱敏脱密存储）、访问时间戳、TLS 加密套件协商、请求路由路径 抵御恶意 DDoS 攻击、防止凭据被暴力破解及确保独享网关节点链路高可用。
交易与结算记录 USDT（TRC-20）转账哈希、订单流水号、套餐到期时间 通过去中心化区块链支付网关（EPUSDT）自动化对账与权益激活，不收集或留存任何银行信用卡敏感信息。
特别声明：Google API 用户数据有限使用承诺（Limited Use Policy）

TMH 与 TGMatrix 严格遵守 Google API Services User Data Policy。我们对于通过 Google OAuth 2.0 机制所获取的任何 Google 用户数据，绝不在本平台核心登录授权功能之外传输或滥用；绝不向任何第三方广告商、数据经纪人或营销机构出售、出租或分享任何 Google 用户资料；绝不用于训练任何广义商业人工智能模型。

3. 数据安全保护机制与加密标准

本平台采用最高等级的商用信息安全体系保障您的数据资产：

  • 传输层强制加密：全网强制实施 HTTP/3 与 TLS 1.3 现代加密协议，独服网络节点完全隐藏于 Cloudflare Zero Trust 专用加密隧道后方，公网绝对隔离物理宿主端口。
  • 静态存储加密：所有核心数据库密钥、Session 凭据及会话哈希均采用 AES-256-GCM 工业级硬件加速加密封存。
  • 微服务最小特权：API 网关与集群计算节点之间采用零信任双向 mTLS 通信，实现精细化 RBAC 访问权限物理隔离。

4. 第三方服务商与数据分处理

为向您交付全球化基础设施服务，我们仅协同以下信誉卓越的合规服务商协同处理最小化必要请求：

  • 身份提供商：Google Identity Services（处理授权鉴权）、Telegram Bot API / MTProto（处理通讯流鉴权）。
  • 边缘网络与安全：Cloudflare, Inc.（提供全球 Anycast 边缘路由、Web 应用防火墙与 DDOS 防护）。
  • 支付基础设施：EPUSDT 开源去中心化区块链对账协议（仅核验公链交易 Hash）。

5. 用户的知情、控制与彻底被遗忘权（数据删除）

依据国际隐私通用规范与 GDPR 第 17 条，您拥有完全的数据自主权：

  1. 撤销第三方授权：您可以随时前往 Google 账号安全中心，一键解除对 TGMatrix / TMH 的授权。
  2. 申请数据彻底注销：您可随时向平台数据保护专员发送邮件至 [email protected]，注明“申请注销账户与清除数据”。我们在收到请求并核验身份后，将在 48 小时内自生产数据库、备份快照及边缘缓存中物理粉碎并抹除属于您的所有账户数据与日志。

6. 政策更新与联系方式

我们可能会根据合规法规或业务迭代不定期修订本政策。最新版本将始终在 https://www.tmhx.si/privacy 实时发布。如对本政策有任何疑问、建议或投诉，请联络我们的技术合规团队：

© 2026 TMH • TGMatrix Global Network. All Rights Reserved.

TMH Global Privacy Policy & Data Protection Declaration

Operating Entities: TMH Global Infrastructure • TGMatrix System • Effective Date: November 02, 2026

TMH Platform (encompassing Telegram Matrix Hub, TGMatrix Global Infrastructure, and associated cloud-native service suites, hereinafter referred to as "TMH", "the Platform", "we", "us", or "our") is deeply committed to upholding user privacy, digital rights, and rigorous data protection standards. This Privacy Policy is formulated in strict accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Google API Services User Data Policy, detailing how we collect, process, safeguard, and delete your personal information and third-party authentication credentials.

1. Scope and Applicability

This Policy applies universally to all interactions with TMH and TGMatrix platforms via our official domains (including tmhx.si, www.tmhx.si, api.tmhx.si), client-facing console interfaces, programmatic API endpoints, and isolated matrix gateway nodes.

2. Data Collection and Usage Practices

To ensure high availability, load routing, and account security across our matrix infrastructure, we process only the minimum necessary data points:

Data Category Collected Elements Purpose & Operational Justification
Google OAuth Credentials Google account email, public display name, avatar URL, unique Google user ID Processed strictly via Google Identity Services for instant identity verification, profile initialization, and secure multi-device session restoration. Never used for tracking or profiling.
Telegram Operational Credentials Telegram User ID, public handle (@username), session verification token Used to associate your enterprise license with cluster instances, unified customer inbox, and distributed bot dispatching.
Infrastructure Telemetry Obfuscated client IP, access timestamp, TLS handshake version, ingress edge route Utilized to mitigate distributed denial-of-service (DDoS) attempts, prevent brute-force attacks, and preserve proxy routing reliability.
Billing & Transaction Hashes USDT (TRC-20) blockchain transaction hash, subscription tier, expiration timestamp Validated via decentralized payment gateway (EPUSDT) to unlock features automatically. No bank cards or sensitive financial details are collected or retained.
Formal Commitment: Compliance with Google API Services User Data Policy

TMH and TGMatrix strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information received from Google APIs will NEVER be sold, rented, or transferred to third-party ad networks, data brokers, or marketing aggregates; will NEVER be utilized for credit assessment; and will NEVER be employed to train general commercial AI/ML models.

3. Cryptographic Standards and Storage Security

Our platform enforces enterprise-grade security protocols across every computational tier:

  • Strict Transport Security: All traffic is enforced with TLS 1.3 / HTTPS. Core dedicated physical servers are decoupled from public internet exposures via Cloudflare Zero Trust Tunnel endpoints.
  • Storage Encryption at Rest: Sensitive session metadata, tokens, and authorization credentials are encrypted utilizing AES-256-GCM authenticated encryption.
  • Zero-Trust Microsegmentation: Internal API nodes communicate over mutual TLS (mTLS) with role-based access control (RBAC).

4. Subprocessors and Third-Party Integrations

We work exclusively with industry-vetted infrastructure partners under strict data processing agreements:

  • Identity Providers: Google Identity Services (OAuth 2.0 authentication), Telegram Official MTProto API.
  • Edge Security & CDN: Cloudflare, Inc. (Global Anycast edge acceleration, DDoS mitigation, and SSL termination).
  • Payment Auditing: EPUSDT Decentralized Protocol (public ledger hash validation).

5. User Rights, Data Control & The Right to Erasure (GDPR Art. 17)

In accordance with global privacy legislation, you retain unqualified sovereignty over your personal data:

  1. Revocation of Google Access: You may instantly revoke TMH's access at any time through Google Account Permissions.
  2. Permanent Data Erasure: To wipe your profile, transaction history, and associated logs, simply submit a written request to [email protected]. Upon identity verification, your records will be irreversibly erased from all active databases and cold backups within 48 hours.

6. Governance and Contact Information

For any inquiries, legal notices, or Data Protection Officer (DPO) communications regarding this policy, please reach out directly:

© 2026 TMH • TGMatrix Global Network. All Rights Reserved.