中文摘要
① 财务文件本地处理、不上传：您拖入的月度 P&L 财务文件全程仅在您的浏览器本地解析与计算，绝不会上传到我们的服务器，我们也没有存储客户财务数据的后端数据库。
② 授权仅上传最小授权记录：首次激活时，工具会把您载入的许可证文件本身、一个本机随机生成的设备号、客户端版本号发给授权服务；此后每次核查只发指纹，不再发文件。授权服务保存的记录仅含：许可证指纹（由编号、计划、签发日、到期日算出的 SHA-256 哈希，不是文件本身的哈希）、计划与到期日、授权状态、该计划的设备数上限、首次激活时间与最近一次出现时间、随机设备号及该设备最近出现日期。这是假名化数据，不是匿名数据——它能对应到某一份许可证，但不含姓名、不含邮箱、不含报表数据、酒店名称或任何具体数字。无网络也可离线校验授权。
③ 一次性买断、非订阅：本产品为一次性付款、永久有效的许可证（授权跟人不跟台：本人使用的设备不限台数，不得团队共用，同事各自需要一份），无任何续费项目，也无需取消。许可证一经开具即为交付，故不接受「改变主意」式退款；若许可证无法激活且我们无法解决，全额退款。当地法律强制赋予且不可放弃的撤回权不受影响。可先用内置示例数据确认是否合用再购买。
④ 非会计 / 税务建议：本工具仅为报表编制辅助，不构成会计、税务或法律意见；输出完全取决于您录入的数据，您须对源数据准确性与对外发布的报表自行负责。
⑤ 数据范围（PDF 通道）：工具面向餐饮部（F&B）范围损益表。PDF 通道支持整店 P&L 直接导入：先按报表页标题定位 F&B 页；页面无标题可依据时，再按章节标题从文字层切出 F&B 区块，遇到下一个部门（客房 / 水疗 / 健身 / 停车 / 商务中心）即停。若识别不到 F&B 章节，则退回全文并在导入确认页提示。导入后的列角色与科目归类由您确认，写入数据底座前请核对。
⑥ 经营者身份：本产品的经营者是个人经营者（自然人独资、个体经营），经营者为 崔公坡（Cui Gongpo），营业地位于中国北京。经营者名下没有公司，因此不存在公司注册号，背后也没有另一家法人主体。法定姓名与营业城市 / 国家已在上述英文条款中列明；需要完整街道地址时（发票、采购流程、合规问询），可向下单邮箱 support@inhousepl.phjmmc.com 书面索取。每一笔销售都由持牌的销售平台完成，该平台（而非经营者）是销售方（merchant of record）：您的收据与账单上显示的是平台名称，发票亦由平台开具。当前使用的平台在结账页与订单确认中列明。
⑦ 三方各管什么：一次购买涉及三方，各管一段，这里写清分界。销售平台（独立第三方，非经营者本人）：每一笔销售都由持牌的销售平台完成，该平台是销售方（merchant of record）：由它扣款、计算并代缴适用税费、开具发票与收据，并按它自己的买家条款裁定与支付退款；销售合同在您与该平台之间，经营者负责供货。买家（您）：付款、在本人使用的设备上一次性激活、自行妥善保管密钥（许可证具名开具给一位个人，请勿同事之间共用）；下单前即确认「许可证一经开具即为交付」，故已开具的许可证不接受「改变主意」式退款；录入数据与对外发布的报表由您负责。经营者（我们）：铸造许可证、每笔已完成订单交付且仅交付一把密钥、提供自购买起 3 年 v4 线内的更新，以及工作日 09:00–17:00 的邮件支持；经营者全程不经手卡号、不持有您的财务文件，也从不持有您已支付的款项——退款须经销售平台提出并由该平台裁定与支付。
⑧ 隐私权利与处理依据：适用 GDPR 时，经营者的处理依据为：履约（签发与支持许可证）、正当利益（维持站点安全可用、防止授权滥用，如激活校验）、法律义务（须留存的记录）；不以同意为依据，不做画像，不做自动化决策。您有权要求查阅、更正、删除、限制或反对处理，并要求以可携带形式取得数据；提供下单邮箱是签发许可证的必需条件（不提供则无法交付）。行使上述权利请写信到 support@inhousepl.phjmmc.com，一个月内答复；如不满意，可向您居住地、工作地或涉嫌侵权地的数据保护监管机构投诉。经营者设立于中国，未在欧盟或英国设立机构；因属偶发、范围有限且风险很低的处理，未依 GDPR 第 27 条指定欧盟或英国代表（情况变化将在生效前更新）。数据可能由内容分发服务商与销售平台在境外（含美国、欧盟）存储与处理，适用其标准合同条款或充分性认定等保障。本产品为面向酒店餐饮管理的专业报表工具，不面向未成年人、不供 18 岁以下人士使用，经营者亦不主动处理未成年人的个人数据。
⑨ 加州隐私（CCPA / CPRA）与卡数据：经营者不出售、不共享个人信息，过去十二个月亦未出售或共享；所持类别即上文所列三类（技术请求日志、订单记录、授权记录），页面不嵌入任何第三方跟踪器、标签或 Cookie。行使查阅、更正、删除或不受歧视的权利，请写信到 support@inhousepl.phjmmc.com，45 天内答复。本站页面从不接收、处理或存储卡号（全站没有任何卡片输入栏），结账由销售平台托管，卡数据在平台符合 PCI DSS 的环境中处理——经营者没有自己的持卡人数据环境，任何环节都拿不到卡数据。
⑩ 语言与优先顺序：本页条款以英文写成。上面这段中文摘要仅为便于阅读而提供；如中英文表述在任何方面存在不一致，以英文条款为准。本条不削减您所在国家或地区强制性法律赋予您的任何保护。
1. Privacy Policy
Last updated with the current release. This policy explains what the operator holds and, just as importantly, what the operator never holds.
What we hold
The operator maintains only limited technical data required to deliver the site and administer orders:
- Site delivery logs. Hosting and access logs are processed by our content delivery provider (Cloudflare) for security and availability. These logs contain technical request metadata such as IP address, timestamp, and requested path — not your financial figures.
- Purchase records. The payment provider stores the records needed to process and support your order: the email address you used at checkout, what you purchased (including any discount applied), and the order identifier. Every sale is sold by a licensed reseller platform, which is the seller of record for the sale.
- License records. When you activate a license, the operator stores a license record consisting of:
- a license fingerprint — a SHA-256 hash of the license's identifying fields (its serial number, plan, issue date and expiry date). It is not a hash of the license file, and it is not derived from anything you typed;
- the license plan and its expiry date;
- the status of the license (active or revoked);
- the device limit that applies to that plan;
- the date the license was first activated, and the date it was last seen;
- a random device identifier generated on your device, together with the most recent date each such device was seen.
What we never hold
We do not collect or store the contents of your financial files, the name of your hotel or group, or any figure from your reports. There is no backend database of customer financial data. The product is a browser-based tool that runs entirely on your own device; the parsing and calculation of your monthly P&L happens entirely in your browser.
Cookies and analytics
The tool page itself sets no tracking cookies and loads no analytics. The third-party payment page that you reach at checkout is operated by the payment provider and is governed by that provider's own privacy policy, not this one.
Legal bases and your rights
Where the GDPR applies, the operator relies on these legal bases: performance of a contract for issuing and supporting your licence and delivering the tool; legitimate interests for keeping the site secure and available and for preventing licence abuse, such as the activation check; and legal obligation where records must be kept. No processing described here relies on consent, and none of it is used for profiling or for automated decision-making with legal effect.
You have the right to ask for access to the personal data held about you, to have it corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable form. Giving an order email address is necessary to issue a licence: without it the operator cannot deliver or support the product. To exercise any of these rights, write to support@inhousepl.phjmmc.com; the operator answers within one month. If you are not satisfied with the answer, you have the right to lodge a complaint with the data-protection supervisory authority of your country of residence, your place of work, or the place of the alleged infringement.
International transfers
The operator is established in China. The providers that deliver this site and administer orders — the content delivery provider and the reseller platform — may store and process data outside your country, including in the United States and in the European Union. Where personal data of a person in the EEA or the United Kingdom is transferred, the operator relies on the safeguards those providers put in place, such as Standard Contractual Clauses or an adequacy decision covering the destination.
Where the operator is established
The operator has no establishment in the European Union or the United Kingdom. Because the processing described here is occasional, limited in scope, and unlikely to result in a risk to the rights and freedoms of data subjects, the operator does not maintain an EU or UK representative under Article 27 GDPR. If that changes, this section will be updated before the change takes effect.
Age and intended use
InHouse P&L is a professional reporting tool, sold for use in hotel food & beverage management. It is not directed at children and is not designed for use by anyone under 18, and the operator does not knowingly process the personal data of a minor.
California — CCPA / CPRA
The operator does not sell or share personal information, and has not done so in the preceding twelve months. The categories it holds are the ones listed under "What we hold" above: technical request logs, order records, and pseudonymous license records. No third-party trackers, tags or cookies are embedded in these pages. To exercise a right of access, correction, deletion or non-discrimination, write to support@inhousepl.phjmmc.com; the operator answers within 45 days.
Retention
Access logs are retained by the content delivery provider on its standard schedule. Purchase records are kept by the payment provider for as long as needed to fulfil and support the sale and to meet legal obligations. License records are kept for as long as they are needed to confirm that a license has not been revoked or refunded, to honour the three-year update window, and to resolve any payment or refund dispute; the operational records behind a single order expire automatically three years after they are written. You may request deletion of your license record and any data tied to your license by contacting our support address, support@inhousepl.phjmmc.com.
Contacting support
For any privacy question or to request deletion of your activation record, write to our support address, support@inhousepl.phjmmc.com. That address is the only channel the operator publishes for support and data requests.
2. Terms of Service / EULA
This agreement governs your use of InHouse P&L, a browser-based reporting tool that runs on your own device.
License grant
Subject to your valid, paid license, the operator grants you — the named individual to whom the license is issued — a non-exclusive, non-transferable license to use the purchased copy of the tool for your own work, on any device you personally use. This license is personal: it may not be assigned or given to another person, but it is not tied to a property — the named licensee keeps it if they move to a different hotel, and no re-purchase is needed. The tool is provided as one HTML file that you open in a web browser — with two local helper files alongside it for PDF import; no installation, server or account login is required to run it. The license is perpetual and irrevocable except as set out under Termination below: it carries no expiry date and no renewal obligation.
Who the license covers
The license is granted to one person, not to a site or a department, and it is not capped by a device count: the same individual may open the tool on their office desktop, their laptop and their home machine. What it does not permit is one copy serving several people — a colleague who needs the tool needs their own license. We state this plainly because the product is plain browser HTML and we have no technical means of policing it: the license is designed to record entitlement, not to prevent copying (see "Limitations of technical protection" below).
- Included: use by the named licensee, on the devices they personally use, and at whatever property they work at — the license is issued to a person, not to a hotel.
- Colleagues: each requires a separate license.
- Multiple properties: one licence covering several properties is a group or management-company purchase, quoted per organisation; ask for a quote. For an individual, moving to a different hotel is a separate matter and needs no new license.
Term
There is no term to renew. Your license does not expire and nothing is billed on a recurring basis, so there is nothing to cancel. Updates within the v4 line of the tool are included at no extra charge for 3 years from purchase. When that window ends, you keep the last v4 version released inside it — permanently, with full access. Versions released after your window ends may require a paid upgrade, and a future major line may be offered separately. Email support is available on weekdays, 09:00-17:00 Beijing time (GMT+8). The periodic license check described in the Privacy Policy only confirms that a license has not been revoked or refunded.
Refunds
A license is issued to you as soon as your order is fulfilled, and you can evaluate the tool with its built-in sample data beforehand. By ordering, you request immediate delivery and accept that an issued license is not returnable. Two qualifications apply, and they are intended:
- If a license fails to activate and the operator cannot resolve it for you, it is refunded in full.
- Where the consumer law of your country of residence grants you a right of withdrawal that cannot lawfully be waived, that right is unaffected by this clause.
Where the law of your country of residence gives you a 14-day right of withdrawal from a distance sale, that right applies to this purchase. Because the product is delivered the moment the licence is issued, you are asked to request immediate delivery and to acknowledge that you lose the withdrawal right once delivery has begun. Where you buy through the reseller platform, that request and acknowledgement are presented, recorded and confirmed to you by the platform, in a durable medium, on its own behalf.
There is no free tier and no time-limited trial.
Data scope
The tool is built for a Food & Beverage scope profit-and-loss statement. On the PDF route it locates the F&B pages of a whole-property statement by page title, or extracts the F&B block from the PDF text layer by section heading, and it reverts to the full extracted text if no F&B section can be identified. It follows that the operator does not warrant that the extracted scope matches your intent for every report layout: the column mapping and scope confirmation shown after import are your point of control, and you are responsible for checking the imported figures before the tool writes them into your data base.
Acceptable use
You agree to use the tool only for lawful internal reporting at full-service hotels. You will not resell, sublicense, or rent the tool, and you will not remove or obscure its license or attribution notices.
Intellectual property
The tool, including its code, design, and documentation, is the property of the operator and is protected by applicable intellectual-property law. This agreement does not transfer ownership of the software to you; it grants a limited right to use it as described here.
Limitations of technical protection
We are honest about a known constraint: because the tool is plain, inspectable HTML that runs in your browser, it cannot be technically protected against copying in the way installable software with a server can. The license is an Ed25519-signed block of text verified on your device, and the activation check is designed to confirm entitlement, not to make the licence impossible to duplicate. This limitation is stated plainly so there is no misunderstanding about the nature of the protection.
Termination
The operator may terminate or suspend your license if the purchase is refunded or reversed, or if you breach this agreement. Upon termination you must stop using the tool. Sections that by their nature survive termination remain in effect.
Warranty disclaimer
The tool is provided "as is" without warranties of any kind, express or implied, including fitness for a particular purpose or accuracy of output. The operator does not warrant that the tool will be error-free or uninterrupted.
Limitation of liability
To the maximum extent permitted by law, the operator is not liable for indirect, incidental, or consequential damages, or for any loss arising from figures you enter or reports you publish. The operator's total liability is limited to the amount you paid for the license.
Operator and contracting party
The operator is an individual sole trader — Cui Gongpo, a natural person trading under the product name InHouse P&L, with a place of business in Beijing, China. The operator is not a company, has no company registration number, and no separate legal entity stands behind this product. The operator's legal name and place of business are stated above; a full street address, where a document requires one, appears on the invoice or order confirmation issued for your purchase and is also available in writing on request to support@inhousepl.phjmmc.com. Every sale runs through a licensed reseller platform, and that platform — not the operator — is the merchant of record (the legal seller named on your receipt and card statement): its name is on your receipt and your credit-card statement, it charges you, it calculates and remits any applicable sales tax or VAT, and it issues your invoice. The platform in use is named at checkout and in your order confirmation. The operator is your supplier; the platform is your seller.
Who does what
A purchase involves three parties, and each one owns a different part of it.
- The merchant of record platform — your seller. Your purchase is sold by a licensed reseller platform, named at checkout and on your receipt. That platform charges you, calculates and remits any applicable sales tax or VAT, issues your invoice and receipt, and decides and pays any refund under its own buyer terms. The contract of sale is between you and that platform; the operator supplies the product. Its name appears at checkout and on your receipt.
- You — the buyer. You pay the price and activate the licence once on a device you personally use. The licence is issued to one named individual, so keep the key to yourself and do not pass it around a team. Before ordering you accept that a licence is delivered the moment it is issued, which is why an issued licence is not returnable. You remain responsible for the accuracy of the figures you enter and for any report you publish.
- The operator — us. The operator mints your licence, hands over exactly one key for each completed order, publishes updates within the v4 line for 3 years from purchase, and answers email support on weekdays 09:00-17:00 Beijing time (GMT+8). The operator never receives your card details, never holds your financial files, and never holds money you have paid: every payment is collected by the reseller platform, and any refund is requested through that platform and decided and paid by it under its buyer terms. The operator cannot refund you directly, because it never received the money.
The delivery point is the same on every page of this site: a licence is delivered the moment it is issued. Handing over the key is the delivery. Nothing else is required from you at that moment, and nothing is sent to you unsolicited afterwards.
Governing law
This agreement, and any dispute arising out of the supply of the tool to you, is governed by the laws of the People's Republic of China. Where the mandatory consumer law of your country of residence gives you stronger protection, that protection is unaffected.
Language and order of precedence
These terms are drafted in English and the English text governs. The Chinese summary at the top of this page is provided for convenience only: if the two differ in any respect, the English text prevails. This clause does not reduce any protection given to you by the mandatory law of your country of residence.
Changes to these terms
The operator may update these terms from time to time. The version that applies to your purchase is the one published at the time you bought, together with any later version you have expressly accepted. Material changes will be notified to the email address on the order before they take effect, and they will not reduce the licence already granted to you: a perpetual licence stays perpetual.
3. Disclaimer
Read this before relying on any output.
InHouse P&L is a reporting aid. It is not accounting, tax, or legal advice, and it does not replace a qualified professional.
- Every output derives solely from the figures you enter. The tool performs calculation and formatting; it does not validate the underlying business reality of your numbers.
- You are responsible for the accuracy of the source data you load, and for any report you review or publish based on the tool's output.
- The product is not affiliated with or endorsed by any hotel brand or hotel group. It is an independent tool for use at full-service hotels.
- The product is not affiliated with or endorsed by USALI or HFTP. USALI is a published industry standard and is referenced here only for account naming; neither body sponsors or approves this product.
4. Security
How the tool keeps your data on your device.
Runs in your browser
The tool sends no telemetry and loads no third-party scripts. The only request it ever makes is the licence check described below — nothing about your figures goes with it. It is one HTML file, opened in your browser, together with two local helper files it uses only for PDF import.
Reviewable source
Because the tool is plain HTML text with no build step or obfuscation layer to block inspection, your IT team may open the file and review exactly what it does before deployment.
Card data and PCI DSS
These pages never receive, process or store a card number: there is no card field anywhere on this site, and checkout is hosted by the reseller platform. Card data is entered on the platform's own checkout page and handled inside that platform's PCI DSS compliant environment. The operator therefore maintains no cardholder data environment of its own, and no card data reaches the operator at any point.
What the license check transmits
On first activation the tool sends three things: the license file you loaded, a random device id, and the client version. Every later check sends no file at all — only the fingerprint below. The exact fields are:
- License file — sent once, on first activation only. It contains the license's serial number, plan, issue and expiry dates, and a digital signature. It carries no name and no email address.
- License fingerprint — a SHA-256 hash of the license's identifying fields (serial number, plan, issue date, expiry date). Not a hash of the file, and not derived from anything you typed.
- Random device id — generated on your device.
- Timestamp — when the check occurred.
- Client version — the version of the tool you run.
Nothing else is transmitted: no report data, no hotel name, no financial figure, and nothing you typed into the tool. Verification itself runs with no internet at all — the check only confirms that the license has not been revoked or refunded.
Clearing local data
The tool stores only what your browser keeps for a local file. To clear any local state, remove the tool file from your device and clear site data for the page in your browser settings if you opened it through a server. No account exists to delete.
Reporting a vulnerability
If you find a security issue, report it to our support address, support@inhousepl.phjmmc.com. Please include a clear description and, if relevant, steps to reproduce, so the operator can assess and address it.