隱私權政策 (Privacy Policy)

0. 本政策適用對象

本政策說明 Amoura Booking（以下稱「本平台」或「我們」）如何處理兩種人的個人資料：

• 店家：註冊並使用本平台後台的美業店家（以下稱「您」）。
• 顧客：透過店家專屬預約網址預約的消費者。

顧客的個人資料是由店家蒐集的，本平台只受店家委託，提供預約系統來處理這些資料。顧客若想查詢、更正或刪除自己的資料，請直接聯絡預約的那家店，本平台不直接受理顧客的請求。

1. 蒐集者

本平台由 Amoura Booking（負責人：呂宜珊）經營，聯絡信箱 support@amourabooking.com。顧客資料的蒐集者為顧客預約的店家，店名顯示在預約頁上方。

2. 蒐集目的

• 〇九〇 消費者、客戶管理與服務（提供預約、通知與店家的顧客管理功能）
• 一三五 資（通）訊服務、一三六 資（通）訊與資料庫管理（系統營運、防止濫用、錯誤排除）
• 一四八 網路購物及其他電子商務服務（店家帳號與方案管理）
• 一五七 調查、統計與研究分析（僅限店家層級的統計數字，見第 6 節）
• 〇四〇 行銷（僅限寄給店家，見第 7 節；不會用於顧客）

3. 我們蒐集哪些資料

店家

顧客

所有訪客（含店家與顧客）

• IP 位址：用於限制同一來源短時間內的請求次數，防止灌單與暴力嘗試，最長約 3 天後自動刪除。

「加密」是指端對端加密：資料只有店家用解密密碼才解得開，本平台的伺服器與工作人員都看不到。新註冊的店家一律須設定加密。

4. 保存期限

上表的「自動刪除」由資料庫的到期清除機制執行，到期後最多再延遲約 1 天才會實際刪除。

5. 資料存放地區與委託處理的廠商

我們不會販售任何人的資料。為了提供服務，我們委託下列廠商處理資料，他們只能依我們的指示、為提供服務而使用：

除上表與法律要求的情形外，我們不會將資料提供給其他第三方。

6. 資料的使用方式

• 提供並維護預約服務。
• 寄送預約確認信與前一天提醒信給顧客。
• 發送新預約推播通知給店家。通知內容只有預約日期、時間與服務項目，不含顧客姓名、聯絡方式或問卷內容。
• 寄送與服務本身相關的必要通知給店家，例如系統維護公告、方案變更、本政策或服務條款的變更說明。
• 營運統計：為掌握平台整體狀況（例如店家數、每日預約與發信量），我們保留店家層級的帳號資訊與統計數字。這份紀錄不含任何顧客個人資料，也不含您的加密金鑰或第三方授權憑證。

7. 行銷訊息（僅寄給店家）

我們可能寄給店家新功能說明、使用建議、優惠等推廣訊息。每封都附上退訂連結，您也可以來信 support@amourabooking.com 要求退訂，我們收到後會立即停止。退訂只停止推廣信，不影響服務本身的通知（寄給顧客的確認信與提醒信、寄給您的方案與維護公告）。

我們不會將顧客的個人資料用於任何行銷，也不會寄推廣訊息給顧客。

8. Google 使用者資料的存取與使用

本服務提供選用的「Google 日曆同步」功能。只有在您主動點擊「連結 Google 日曆」並於 Google 授權畫面同意之後，我們才會存取您的 Google 帳號資料。

• 我們要求的權限範圍：僅 https://www.googleapis.com/auth/calendar.events（查看及編輯日曆上的活動）。我們不會要求讀取您的 Gmail、聯絡人、雲端硬碟或個人檔案等任何其他權限。
• 用途：當顧客成功預約時，於您的 Google 日曆自動建立對應行程；當該預約被修改或取消時，同步更新或刪除該行程；並接收您在日曆上對這些行程所做的變動，將時間調整與刪除同步回本服務。此權限僅用於此一目的。
• 為何需要編輯權限：本功能的核心是代您「寫入」與「移除」行程，唯讀權限無法達成，因此無法改用更小的權限範圍。
• 我們儲存什麼：僅儲存 Google 核發的授權憑證 (refresh token)、所建立行程的識別碼，以及一組用於接續同步的識別碼 (sync token)。為了得知您對預約行程做了什麼改動，系統會接收您日曆的變動通知，其中不屬於預約的行程一律略過；我們不會複製或保存您其他行程的內容。
• 不用於廣告或 AI 訓練：自 Google API 取得的資料不會用於投放廣告、不會販售，也不會用於開發、改善或訓練通用的人工智慧或機器學習模型。
• 如何撤銷：您可隨時於本服務後台「安全與隱私」分頁點擊「解除日曆綁定」，或前往 Google 帳戶第三方應用程式權限頁 移除本應用程式的存取權。解除綁定後我們會刪除所儲存的授權憑證，並停止一切同步。

Limited Use 聲明：Amoura Booking 對自 Google API 取得之資訊的使用與轉移，皆遵守 Google API Services User Data Policy，包含其中的 Limited Use 規範。

9. 您的權利與行使方式

依個人資料保護法，您可以對自己的個人資料：

1. 查詢或請求閱覽
2. 請求製給複製本
3. 請求補充或更正
4. 請求停止蒐集、處理或利用
5. 請求刪除

店家：大部分資料可以直接在後台查看、修改；也可以在後台「帳號與方案」分頁刪除帳號（刪除範圍見第 11 節）。其他請求請來信 support@amourabooking.com。查詢、閱覽、製給複製本的請求，我們會在 15 天內決定；補充、更正、停止利用、刪除的請求，會在 30 天內決定。必要時可延長一次（分別不超過 15 天、30 天），並以書面告訴您原因。

顧客：請聯絡您預約的店家。店家的聯絡方式顯示在預約頁上。

10. 不提供資料的影響

• 顧客：姓名與電子郵件是完成預約的必要資料，不提供就無法預約。店家自訂的問卷題目可能是選填，未填不影響預約。
• 店家：不提供 Google 帳號就無法註冊；不連結 Google 日曆、不開啟推播，都不影響其他功能。

11. 刪除帳號

店家在後台刪除帳號時，系統會立即、不可逆地刪除：店家設定、所有顧客預約資料、已驗證信箱紀錄、Google 日曆授權憑證、所有裝置的推播訂閱資料、預約網址與登入帳號。

下列資料不會隨帳號立即刪除：

• 寄信紀錄：依第 4 節，寄出後 90 天自動刪除。
• 系統備份：為了在系統故障時能還原資料，資料庫會保留最近 7 天的備份，已刪除的資料會在 7 天後從備份中消失。
• 營運統計：保留「這家店曾經存在、何時離開」的紀錄與統計數字，但會同時抹除店家信箱與預約網址。

12. 資料安全與外洩通知

• 顧客姓名與問卷回答採端對端加密，平台無法解讀。
• 所有傳輸都經過 HTTPS 加密。資料庫存取權限以安全規則限制，只有該店家本人讀得到自己的預約資料。
• 若發生個人資料被竊取、竄改、毀損、滅失或洩漏，我們會立即採取應變措施防止擴大，以電子郵件通知受影響的店家，並依法令規定通報主管機關。涉及顧客資料時，我們會協助店家通知顧客。

13. 政策修改

本政策如有修改，會更新本頁上方的日期。重大變更會以電子郵件通知店家，並在生效前公告。

14. 聯絡我們

如對本政策有任何疑問，請來信 support@amourabooking.com。

Privacy Policy (English)

This English version is provided for convenience. If there is any inconsistency, the Chinese version prevails.

0. Who This Policy Covers

This policy explains how Amoura Booking ("the Platform", "we", "us") handles the personal data of two groups of people:

• Merchants: beauty businesses that register for and use the Platform's dashboard ("you").
• Customers: consumers who book appointments through a merchant's booking page.

Customers' personal data is collected by the merchant. The Platform processes that data only on the merchant's behalf, by providing the booking system. Customers who wish to access, correct, or delete their data should contact the business they booked with directly; the Platform does not accept requests from customers.

1. Data Controller

The Platform is operated by Amoura Booking (Representative: YI SHAN LU), reachable at support@amourabooking.com. For customer data, the collector is the business the customer booked with, whose name is shown at the top of the booking page.

2. Purposes of Collection

• 090 Consumer and customer management and services (bookings, notifications, and the merchant's customer management features)
• 135 Information and communication services; 136 Information and database management (operating the system, preventing abuse, troubleshooting)
• 148 Online shopping and other e-commerce services (merchant account and plan management)
• 157 Surveys, statistics, and research analysis (merchant-level statistics only; see Section 6)
• 040 Marketing (to merchants only; see Section 7; never to customers)

The codes refer to the specific purposes defined under Taiwan's Personal Data Protection Act.

3. What We Collect

Merchants

Customers

All visitors (merchants and customers)

• IP address: used to limit how many requests a single source can make in a short time, to prevent spam bookings and brute-force attempts. Automatically deleted within about 3 days.

"Encrypted" means end-to-end encryption: only the merchant, using their decryption password, can unlock the data. Neither the Platform's servers nor its staff can see it. All newly registered merchants are required to set up encryption.

4. Retention

"Automatically deleted" above is carried out by the database's expiry mechanism, which may take up to about 1 additional day after expiry.

5. Where Data Is Stored and Our Service Providers

We never sell anyone's data. To provide the service, we engage the following providers, who may use the data only on our instructions and only to provide the service:

Apart from the providers above and where required by law, we do not provide data to any other third party.

6. How We Use Data

• To provide and maintain the booking service.
• To send booking confirmations and day-before reminders to customers.
• To send new booking push notifications to merchants. A notification contains only the appointment date, time, and services — not the customer's name, contact details, or intake answers.
• To send merchants necessary service-related notices, such as maintenance announcements, plan changes, and changes to this policy or our terms.
• Operational statistics: to understand how the platform as a whole is used (for example the number of merchants and daily booking and email volumes), we retain merchant-level account information and aggregate statistics. This record contains no customer personal data, and none of your encryption keys or third-party authorization credentials.

7. Marketing Messages (Merchants Only)

We may send merchants product updates, usage tips, offers, and other promotional messages. Every such email includes an unsubscribe link, and you may also email support@amourabooking.com to opt out; we will stop as soon as we receive your request. Opting out stops promotional email only and does not affect notices that are part of the service (confirmations and reminders sent to your customers, and plan and maintenance notices sent to you).

We never use customers' personal data for marketing, and we never send promotional messages to customers.

8. Access to and Use of Google User Data

Amoura Booking offers an optional Google Calendar sync feature. We access your Google account data only after you explicitly click "Connect Google Calendar" and grant consent on Google's authorization screen.

• Scope requested: only https://www.googleapis.com/auth/calendar.events (view and edit events on your calendars). We do not request access to Gmail, Contacts, Drive, or any other data.
• Purpose: to automatically create a calendar event on your Google Calendar when a customer books an appointment; to update or delete that event when the appointment is changed or cancelled; and to receive the changes you make to those events on your calendar, so that reschedules and deletions are synced back into the service. The scope is used for no other purpose.
• Why write access is required: the feature exists to create and remove events on your behalf. A read-only scope cannot accomplish this, so no narrower scope is sufficient.
• What we store: only the OAuth refresh token issued by Google, the identifiers of the events we created, and a sync token used to resume incremental synchronization. To learn what you changed about an appointment, the service receives change notifications from your calendar; events that do not correspond to an appointment are skipped. We do not copy or retain the contents of your other calendar events.
• No advertising, no AI training: data obtained from Google APIs is not used for advertising, is not sold, and is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
• How to revoke: you may disconnect at any time via "Disconnect Google Calendar" in the "Security & Privacy" (安全與隱私) tab of your admin dashboard, or remove our access at the Google Account third-party access page. Upon disconnection we delete the stored refresh token and stop all synchronization.

Limited Use disclosure: Amoura Booking's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Your Rights and How to Exercise Them

Under Taiwan's Personal Data Protection Act, you may, with respect to your own personal data:

1. make inquiries or request to review it;
2. request a copy;
3. request that it be supplemented or corrected;
4. request that its collection, processing, or use be stopped;
5. request its deletion.

Merchants: most data can be viewed and edited directly in the dashboard, and you can delete your account from the "Account & Plan" tab (see Section 11 for what is deleted). For other requests, email support@amourabooking.com. We will decide on requests to inquire, review, or obtain a copy within 15 days, and on requests to supplement, correct, stop use, or delete within 30 days. Where necessary, each period may be extended once (by no more than 15 and 30 days respectively), and we will tell you the reason in writing.

Customers: please contact the business you booked with. Their contact details are shown on the booking page.

10. If You Do Not Provide Data

• Customers: name and email address are required to complete a booking; without them a booking cannot be made. A merchant's intake questions may be optional, and leaving them blank does not affect the booking.
• Merchants: a Google account is required to register. Not connecting Google Calendar or not enabling push notifications does not affect any other feature.

11. Deleting Your Account

When a merchant deletes their account from the dashboard, the system immediately and irreversibly deletes: the merchant's settings, all customer bookings, verified email records, Google Calendar authorization credentials, the push subscriptions of all devices, the booking URL, and the sign-in account.

The following are not deleted immediately with the account:

• Email delivery records: automatically deleted 90 days after sending, as described in Section 4.
• System backups: so that data can be restored after a system failure, the database keeps backups for the most recent 7 days. Deleted data disappears from the backups after 7 days.
• Operational statistics: we keep a record that the business existed and when it left, together with its statistics, but the merchant's email address and booking URL are erased at the same time.

12. Security and Breach Notification

• Customer names and intake answers are end-to-end encrypted and cannot be read by the Platform.
• All traffic is encrypted over HTTPS. Database access is restricted by security rules so that only the merchant can read their own bookings.
• If personal data is stolen, altered, damaged, lost, or leaked, we will promptly take measures to contain it, notify affected merchants by email, and report to the competent authority as required by law. Where customer data is involved, we will assist the merchant in notifying customers.

13. Changes to This Policy

When this policy changes, we will update the date at the top of this page. Material changes will be communicated to merchants by email and announced before they take effect.

14. Contact Us

Questions about this policy may be sent to support@amourabooking.com.