隱私權政策

適用於 cloudad.tech 網站及其線上服務(含 clouda 對話夥伴)

生效日期:2026 年 5 月 30 日

最後更新:2026 年 5 月 30 日

一、前言與適用範圍

本隱私權政策(以下簡稱「本政策」)說明 CloudAD(公司全稱見末節,以下簡稱「本公司」)在您使用 cloudad.tech 網站及其線上服務(電子報訂閱、聯絡與諮詢表單、clouda 對話夥伴,合稱「本服務」)時,如何蒐集、處理、利用與保護您的個人資料。

您得自由選擇是否提供個人資料;若拒絕提供必要資料,可能導致部分功能無法提供。開始使用本服務,即表示您已閱讀並同意本政策。本公司得不定期更新本政策,並公告於本網站,建議您不時查閱。

二、蒐集目的與個人資料類別

蒐集目的包括:提供與改善本服務、回應諮詢與安排會議、消費者與客戶管理、寄送您訂閱之電子報、網站流量與成效之統計分析、維護資訊安全,以及履行法令義務。對應法務部公告之「個人資料保護法之特定目的及個人資料之類別」,本公司之特定目的包含:040 行銷、069 契約、類似契約或其他法律關係事務、090 消費者、客戶管理與服務、136 資(通)訊與資料庫管理、152 廣告或商業行為管理、157 調查、統計與研究分析。

蒐集的個人資料類別如下:

本公司不會蒐集您的財務資訊(如信用卡號、銀行帳號),請勿於對話或表單提供。資料類別主要對應 C001 辨識個人者、C102 約定或契約。

三、clouda 對話夥伴

四、利用之期間、地區、對象與方法

五、Cookies、廣告追蹤與退出機制

本網站使用 Cookie 及類似技術以維持運作、記錄偏好、分析流量。本網站並使用 Google、Meta 等第三方廣告與分析平台之追蹤技術(如 Cookie、網路信標),用於流量分析與興趣相關廣告之投放與成效衡量;此類技術所蒐集之資料不會直接揭露您的姓名或聯絡方式。

您可隨時管理或拒絕追蹤:

六、第三方服務提供者與跨境傳輸

為營運本服務,本公司委由下列服務提供者於必要範圍內、依本公司指示處理部分個人資料:Google(Google Analytics 4、Google Tag Manager 等分析與代碼管理)、Supabase(clouda 後端與資料庫),以及第五節所述之廣告平台;電子報寄送則委由 Brevo 處理。

部分服務提供者之據點位於我國境外(例如美國及歐洲),您的個人資料可能因此被傳輸、儲存或處理於境外。國際傳輸依個人資料保護法第 21 條辦理;除中央目的事業主管機關依該條限制之情形(涉及國家重大利益、國際條約或協定有特別規定、接受國法規不完善致有損當事人權益之虞、以迂迴方法規避本法)外,本公司得進行國際傳輸,並要求受託之服務提供者採取與本政策相當之保護措施。

七、個人資料之分享

除前述受託之服務提供者外,本公司不會將您的個人資料出售、出租,或提供予其他第三方 ── 包括本公司之關係企業及 iKala 集團其他成員 ── 作為其獨立行銷或其他目的之使用。但下列情形不在此限:經您同意;法令規定或主管機關、司法機關依法要求;為免除您或第三人生命、身體、自由或財產上之急迫危險;為釐清爭議或糾紛之責任歸屬而於必要範圍內提供。

八、未成年人、歐盟與第三方連結

本服務並非以未成年人為對象,亦未於歐盟(EU)或歐洲經濟區(EEA)提供;本公司無意蒐集未成年人或位於該等地區之個人資料,如偶然取得將予刪除。本服務可能包含第三方網站或應用程式之連結,其隱私處理非本公司所能管控,本公司對此概不負責。

九、個人資料安全維護

本公司採取合理之技術與管理措施(例如傳輸與儲存之加密、存取權限控管、僅對職務上有必要知悉之人員開放),保護個人資料免於喪失、誤用、未經授權之存取、揭露、變更或毀損。clouda 不儲存逐字對話內容,僅存留必要之摘要與聯絡資料。請妥善保管您的帳戶資訊;如有遭盜用或其他安全疑慮,請立即通知本公司。

十、當事人權利及行使方式

依個人資料保護法,您得就本公司保有之個人資料,行使下列權利:查詢或請求閱覽、請求製給複製本、請求補充或更正、請求停止蒐集處理或利用、請求刪除。請來信本公司個資保護聯絡窗口(見末節)。為保護您的權益,本公司於查證您之身分前得暫緩處理,依法得酌收必要費用;若因法令規定或業務必要須繼續保存,本公司得拒絕,或改以封存、去識別化等方式處理。

十一、本政策之修訂與聯絡方式

本公司得隨時修訂本政策,修訂後公告於本網站即生效;如法律要求,將以適當方式通知您。如您對本政策有任何疑問,或欲行使前述權利,請聯繫本公司個資保護聯絡窗口:

十二、公司資訊

Privacy Policy

Applies to the cloudad.tech website and its online services (including the clouda conversational partner)

Effective date: 30 May 2026

Last updated: 30 May 2026

1. Introduction and Scope

This Privacy Policy (the “Policy”) explains how CloudAD (full legal name at the end, the “Company”) collects, processes, uses, and protects your personal data when you use the cloudad.tech website and its online services (newsletter subscription, contact and enquiry forms, and the clouda conversational partner, together the “Services”).

You may freely choose whether to provide personal data; if you decline data necessary for the Services, some functions may be unavailable. By using the Services, you acknowledge that you have read and agree to this Policy. The Company may update this Policy from time to time and will post changes on this website.

2. Purposes and Categories of Personal Data

Purposes of collection include: providing and improving the Services; responding to enquiries and arranging meetings; consumer and customer management; sending newsletters you subscribe to; statistics and analysis of website traffic and performance; maintaining information security; and complying with legal obligations. Per the Ministry of Justice’s published list of specific purposes and personal-data categories, the Company’s specific purposes include: 040 Marketing; 069 Contracts and other legal relationships; 090 Consumer and customer management and service; 136 Information/communications and database management; 152 Advertising or commercial conduct management; 157 Surveys, statistics, and research analysis.

Categories of personal data collected:

The Company does not collect your financial information (such as credit card or bank account numbers); please do not provide it in conversations or forms. Categories correspond principally to C001 Personal identifiers and C102 Agreements or contracts.

3. clouda Conversational Partner

4. Period, Region, Recipients, and Manner of Use

5. Cookies, Ad Tracking, and Opt-Out

This website uses cookies and similar technologies to operate the site, remember preferences, and analyse traffic. It also uses tracking technologies of third-party advertising and analytics platforms such as Google and Meta (e.g., cookies, web beacons) for traffic analysis and interest-based advertising and measurement; data collected by such technologies does not directly reveal your name or contact details.

You can manage or refuse tracking at any time:

6. Third-Party Service Providers and International Transfers

To operate the Services, the Company entrusts certain personal data to the following providers, who process it only on the Company’s instructions and as necessary: Google (Google Analytics 4, Google Tag Manager, etc.); Supabase (clouda backend and database); the advertising platforms in Section 5; and Brevo (newsletter delivery).

Some providers operate outside Taiwan (e.g., the United States and Europe), so your personal data may be transferred, stored, or processed abroad. International transfers are conducted under Article 21 of the Personal Data Protection Act; absent a restriction imposed by the competent authority under that Article, the Company may carry out international transfers and requires its service providers to apply protections comparable to this Policy.

7. Sharing of Personal Data

Other than the entrusted service providers above, the Company does not sell, rent, or provide your personal data to any other third party — including its affiliates and other members of the iKala Group — for their independent marketing or other purposes, except where: you consent; required by law or a competent authority or judicial body; necessary to avert imminent danger to life, body, freedom, or property of you or a third party; or necessary, within reasonable scope, to clarify responsibility in a dispute.

8. Minors, EU/EEA, and Third-Party Links

The Services are not directed at minors and are not offered in the European Union (EU) or European Economic Area (EEA); the Company does not intend to collect data of minors or persons in those regions, and will delete such data if inadvertently collected. The Services may contain links to third-party websites or applications whose privacy practices are beyond the Company’s control and for which it is not responsible.

9. Data Security

The Company adopts reasonable technical and organisational measures (such as encryption in transit and at rest, access controls, and limiting access to personnel with a need to know) to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or damage. clouda does not store verbatim conversations and retains only the necessary summary and contact details. Please keep your account information secure; notify the Company immediately of any misuse or security concern.

10. Your Rights

Under the Personal Data Protection Act, you may inquire about or review, request a copy of, request supplementation or correction of, request cessation of collection/processing/use of, and request deletion of your personal data. To exercise these rights, contact the Company’s data protection contact (below). The Company may defer processing until it verifies your identity, may charge necessary costs as permitted by law, and may decline or instead archive/de-identify data where it must be retained for legal or business necessity.

11. Changes and Contact

The Company may revise this Policy at any time; revisions take effect upon posting on this website, and where required by law the Company will notify you appropriately. For questions or to exercise your rights, contact the Company’s data protection contact:

12. Company Information