1. 適用範圍與法律依據
本隱私權政策說明財犬 AI（Chai AI，以下稱「我們」）在你使用本服務時，如何蒐集、使用及保護個人資料。我們依據台灣《個人資料保護法》（PDPA）及其他適用之資料保護法規處理個人資料。
2. 我們蒐集的個人資料
你貼上的評論文字可能包含第三方（你的顧客）之個人資料。你應確保有合法權利提交此內容；我們僅為生成回覆及下列目的處理該內容。
3. 蒐集目的
我們蒐集及使用個人資料以：(a) 提供、營運及改善本服務，包括生成回覆草稿；(b) 驗證你的帳號並寄送登入連結；(c) 傳送你已啟用的 LINE 通知；(d) 處理訂閱付款並開立發票；(e) 提供客戶支援；(f) 產出匿名化的使用統計；(g) 履行法律義務。我們不會出售個人資料，也不會使用你的評論內容訓練我們或第三方之 AI 模型。
4. 第三方處理者
我們僅於營運服務所必要範圍內，與下列處理者共享資料。部分處理者位於台灣境外；此類跨境傳輸依 PDPA 規定並附有適當之契約保障措施。
5. 資料保留期間
只要你的帳號仍為使用中，我們即會保留個人資料，並保留至提供服務所需之期限。當你刪除帳號後，我們會於 30 天內刪除或不可逆匿名化你的個人資料，惟法律要求保留之紀錄（如發票與稅務紀錄，依台灣法律規定期限保留）及加密備份中之資料除外，備份最長於 90 天之輪替週期內清除。
6. 你的權利
依 PDPA 第 3 條，你可以：(a) 查詢及請求閱覽個人資料；(b) 請求複製；(c) 請求補充或更正；(d) 請求停止蒐集、處理或利用；(e) 請求刪除。欲行使上述任一權利，請以你註冊之 email 寄信至 privacy@chai.tw。我們將於 15 天內回應查詢／複製請求，於 30 天內回應更正或刪除請求（依 PDPA 規定）。行使上述權利原則上免費，惟法律允許就複製收取合理費用者不在此限。
7. 資訊安全
資料於傳輸中（TLS）及儲存中均經加密。存取權杖（包括 Google OAuth token）皆加密儲存，僅用於提供你已連結的功能。正式環境資料之存取權限僅限於有業務需要之授權人員。若發生影響你個人資料之資安事件，我們將依 PDPA 規定通知你及主管機關。
8. 政策修訂與聯絡方式
我們可能修訂本政策；重大變更將於生效前至少 14 天以 email 或站內通知公告。如有隱私相關問題或請求，請聯絡 privacy@chai.tw。
1. Scope and Legal Basis
This Privacy Policy explains how Chai AI ("we", "us") collects, uses, and protects personal data when you use our service. We process personal data in accordance with the Personal Data Protection Act of Taiwan, R.O.C. (個人資料保護法, "PDPA") and, where applicable, other data protection laws.
2. Personal Data We Collect
Review text you paste into the Service may contain personal data of third parties (your customers). You are responsible for ensuring you may lawfully submit such content; we process it solely to generate your reply and for the purposes below.
3. Purposes of Collection
We collect and use personal data to: (a) provide, operate, and improve the Service, including generating reply drafts; (b) authenticate your account and send login links; (c) deliver LINE notifications you have enabled; (d) process subscription payments and issue invoices; (e) provide customer support; (f) produce aggregated, non-identifying usage statistics; and (g) comply with legal obligations. We do not sell personal data, and we do not use your review content to train our own or third parties' AI models.
4. Third-Party Processors
We share data with the following processors only to the extent necessary to operate the Service. Some processors are located outside Taiwan; such cross-border transfers are made under the PDPA with appropriate contractual safeguards.
5. Data Retention
We retain personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or irreversibly anonymize your personal data within 30 days, except for records we are legally required to keep (e.g., invoicing and tax records, retained for the period required by Taiwanese law) and data in encrypted backups, which is purged on the backup rotation cycle of no more than 90 days.
6. Your Rights
Under Article 3 of the PDPA, you may: (a) inquire about and request to review your personal data; (b) request a copy; (c) request correction or supplementation; (d) request cessation of collection, processing, or use; and (e) request deletion. To exercise any of these rights, email privacy@chai.tw from your registered address. We respond within 15 days for review/copy requests and within 30 days for correction or deletion requests, as required by the PDPA. Exercising these rights is free of charge except where the law permits a reasonable cost for copies.
7. Security
Data is encrypted in transit (TLS) and at rest. Access tokens (including Google OAuth tokens) are stored encrypted and used solely to provide features you have connected. Access to production data is restricted to authorized personnel on a need-to-know basis. In the event of a data breach affecting your personal data, we will notify you and the competent authority as required by the PDPA.
8. Changes and Contact
We may update this Policy; material changes will be announced by email or in-app notice at least 14 days before taking effect. For privacy questions or requests, contact privacy@chai.tw.