隱私權政策Privacy Policy
1. 我們是誰 Who we are
飛起來有限公司（以下稱「本公司」）為 Fly up 服務之提供者。本公司受各商業客戶（以下稱「業主」）委託，代其於 Facebook 粉絲專頁及 Instagram 帳號回覆訊息。就前述處理，業主為個人資料之蒐集及利用主體，本公司為受託處理者，僅於業主指示範圍內處理資料。
Fly Up Co., Ltd. ("we") provides the Fly up service. We act on behalf of our business customers ("Owners") to reply to messages on their Facebook Pages and Instagram accounts. For such processing, the Owner is the data controller and we are the data processor, processing data only as instructed by the Owner.
業主本身的帳戶資料（管理員資訊、帳務與服務使用紀錄），則由本公司為提供及維運服務之目的處理。
Account data of Owners themselves (administrator details, billing, and service usage records) is processed by us for the purpose of providing and operating the service.
2. 我們蒐集哪些資料 What we collect
- 訊息內容 Message content
- 使用者主動傳送給業主的訊息，以及本服務代為送出的回覆。
- 平台識別碼 Platform identifiers
- Meta 平台提供之對話與使用者識別碼，用於接續同一段對話。
- 聯絡資訊 Contact information
- 使用者主動提供的電話號碼或其他聯絡方式。取得時將同時告知蒐集目的。
- 廣告來源 Ad source
- 詢問所來自的廣告識別資訊，用於承接對話與成效歸因。
本服務不會蒐集使用者的付款資訊、政府核發之身分證件號碼或生物特徵資料。請勿於對話中提供病歷、身分證號、信用卡完整資訊、帳戶密碼或其他敏感資料。
We do not collect payment information, government-issued identification numbers, or biometric data. Please do not share medical records, national ID numbers, full payment-card details, account passwords, or other sensitive data in conversations.
3. 利用目的與期間 Purpose and retention
資料於業主委託範圍內，用於：代業主回覆訊息並接續對話、辨識詢問所來自之廣告、協助預約到店或依使用者請求進行後續聯繫，以及服務之維運、除錯與安全防護。
Data is used, within the scope of the Owner's instructions, to reply to messages and maintain the conversation, recognise the ad an inquiry came from, arrange store visits or follow-up at the user's request, and to operate, debug, and secure the service.
一般客服對話自最後互動起預設保存 12 個月；業主得於 6 至 24 個月之範圍內設定保存期間，不得設定為無期限。期間屆滿或蒐集目的消失後，資料將刪除或作不可逆之去識別化。與訂單、帳務、客訴或爭議處理相關之紀錄，依交易、稅務、消費者保護及爭議處理之必要，於法令或契約所定期間內另行保存。
Ordinary customer-service conversations are retained for 12 months by default from the last interaction; Owners may configure a retention period between 6 and 24 months, and may not set it to indefinite. Upon expiry, or when the purpose of collection no longer exists, data is deleted or irreversibly de-identified. Records relating to orders, billing, complaints, or disputes are retained separately for the period required by law or contract.
4. 資料如何分享與跨境傳輸 How data is shared; international transfers
本公司不出售個人資料。為提供服務，資料會由下列受託之服務供應商於必要範圍內處理，其中涉及中華民國境外之傳輸與儲存：
- Meta 平台（Meta Platforms, Inc.，美國）——訊息之傳輸與平台端保存，依 Meta 之條款與政策辦理。
- 雲端資料庫與託管服務（伺服器位於大韓民國）——儲存對話紀錄與客戶紀錄。
- AI 語言模型服務供應商（位於美國）——為產生回覆內容，訊息內容會傳送至其服務處理。本公司與其約定：不得將訊息內容用於訓練其通用模型、不得另行利用、非經核准不得再委託。
We do not sell personal data. To provide the service, data is processed by the following engaged service providers, which involves transfer and storage outside Taiwan: the Meta platform (Meta Platforms, Inc., USA) for message delivery and platform-side storage under Meta's own terms; cloud database and hosting services with servers located in the Republic of Korea, for storing conversation and customer records; and AI language-model service providers located in the United States, to which message content is sent for generating replies — contractually barred from using message content to train their general-purpose models, from any other use, and from sub-delegation without approval.
經不可逆去識別化處理之彙整統計資料，可能用於服務品質之分析與改善；訊息內容不用於訓練第三方通用 AI 模型。
Aggregated, irreversibly de-identified data may be used to analyse and improve service quality; message content is not used to train third-party general-purpose AI models.
除上述情形外，僅於法令、主管機關或法院要求時，於必要範圍內揭露資料。
Beyond the above, data is disclosed only where required by law, competent authorities, or courts, and only to the extent necessary.
5. 安全維護 Security
本公司採取與資料性質相當之技術與組織措施，包括：全程傳輸加密（HTTPS／TLS）、來自 Meta 平台訊息之簽章驗證、依職務所需之存取權限控管，以及系統紀錄之留存。發生個人資料事故時，本公司將依個人資料保護法查明後以適當方式通知受影響之當事人，並依相關規定向主管機關通報，同時通知受影響之業主。
We apply technical and organisational measures appropriate to the data, including encryption in transit (HTTPS/TLS), signature verification of messages from the Meta platform, role-based access controls, and system logging. In the event of a personal-data incident, we will notify affected individuals in an appropriate manner as required by Taiwan's Personal Data Protection Act, report to the competent authority where required, and notify affected Owners.
6. 使用者權利 Your rights
依中華民國個人資料保護法，使用者得就其個人資料行使查詢、閱覽、複製、補充、更正、停止蒐集處理利用及刪除之權利，且此等權利不因契約而預先拋棄。您聯繫之商家為法定之主要受理窗口；您亦得依資料刪除說明向本公司提出，或來信 privacy@getflyup.com，本公司將處理或轉交該商家處理。
Under Taiwan's Personal Data Protection Act, you may request access, review, copies, supplementation, correction, cessation of processing, and deletion of your personal data; these rights cannot be waived in advance by contract. The business you contacted is the primary statutory point of contact; you may also submit requests to us per our Data Deletion Instructions or by emailing privacy@getflyup.com, and we will handle the request or forward it to the business.
7. 政策變更 Changes
本政策如有修訂，將於本頁公告並更新頁尾之版本日期。涉及資料利用目的之重大變更，將以適當方式另行告知。
Any revisions will be posted on this page with an updated version date. Material changes to the purposes of data use will be separately notified in an appropriate manner.