隱私權政策 (Privacy Policy)

1. 資訊收集

當您註冊成為本平台 Amoura Booking（以下簡稱「我們」）的店家時，我們會收集您的電子郵件與基本帳號資訊。當顧客透過您的專屬網址進行預約時，我們會收集顧客的姓名、聯絡方式與預約時間，以便提供完整的預約服務。

2. 資訊使用

我們所收集的資料僅用於：

• 提供並維護我們的 SaaS 服務
• 發送預約成功與變更的通知信件
• 協助您管理您的美業客戶資料

3. 資訊保護與共享

我們絕不會將您的資料販售給第三方。所有資料皆加密儲存於安全的雲端資料庫（如 Firebase）中。除非因應法律要求，我們不會與任何無關之第三方共享您的資料。

4. Google 使用者資料的存取與使用

本服務提供選用的「Google 日曆同步」功能。只有在您主動點擊「連結 Google 日曆」並於 Google 授權畫面同意之後，我們才會存取您的 Google 帳號資料。

• 我們要求的權限範圍：僅 https://www.googleapis.com/auth/calendar.events（查看及編輯日曆上的活動）。我們不會要求讀取您的 Gmail、聯絡人、雲端硬碟或個人檔案等任何其他權限。
• 用途：當顧客成功預約時，於您的 Google 日曆自動建立對應行程；當該預約被修改或取消時，同步更新或刪除該行程。此權限僅用於此一目的。
• 為何需要編輯權限：本功能的核心是代您「寫入」與「移除」行程，唯讀權限無法達成，因此無法改用更小的權限範圍。
• 我們儲存什麼：僅儲存 Google 核發的授權憑證 (refresh token) 與所建立行程的識別碼，用於後續同步。我們不會讀取、複製或保存您日曆上其他既有行程的內容。
• 不用於廣告或 AI 訓練：自 Google API 取得的資料不會用於投放廣告、不會販售，也不會用於開發、改善或訓練通用的人工智慧或機器學習模型。
• 如何撤銷：您可隨時於本服務後台「設定」分頁點擊「解除日曆綁定」，或前往 Google 帳戶第三方應用程式權限頁 移除本應用程式的存取權。解除綁定後我們會刪除所儲存的授權憑證，並停止一切同步。

Limited Use 聲明：Amoura Booking 對自 Google API 取得之資訊的使用與轉移，皆遵守 Google API Services User Data Policy，包含其中的 Limited Use 規範。

5. 您的權利 (GDPR / CCPA)

身為店家，您有權隨時要求匯出您的資料。您也可以隨時在管理後台點選「刪除帳號」，系統將會徹底、不可逆地清除您與您顧客的所有相關預約與設定資料，其中包含所儲存的 Google 授權憑證。

6. 政策修改

我們保留隨時修改本政策的權利。重大變更將會透過電子郵件通知您。

7. 聯絡我們

如對本政策有任何疑問，請來信 support@amourabooking.com。

Privacy Policy (English)

1. Information We Collect

When you register as a merchant on Amoura Booking ("we", "us"), we collect your email address and basic account information. When your customers book through your dedicated booking page, we collect the customer's name, contact details, and appointment time in order to provide the booking service.

2. How We Use Information

Collected data is used solely to operate and maintain our SaaS service, to send booking confirmation and change notification emails, and to help you manage your salon customer records.

3. Protection and Sharing

We never sell your data to third parties. All data is stored encrypted in secure cloud infrastructure (Firebase). We do not share your data with unrelated third parties except where required by law.

4. Access to and Use of Google User Data

Amoura Booking offers an optional Google Calendar sync feature. We access your Google account data only after you explicitly click "Connect Google Calendar" and grant consent on Google's authorization screen.

• Scope requested: only https://www.googleapis.com/auth/calendar.events (view and edit events on your calendars). We do not request access to Gmail, Contacts, Drive, or any other data.
• Purpose: to automatically create a calendar event on your Google Calendar when a customer books an appointment, and to update or delete that event when the appointment is changed or cancelled. The scope is used for no other purpose.
• Why write access is required: the feature exists to create and remove events on your behalf. A read-only scope cannot accomplish this, so no narrower scope is sufficient.
• What we store: only the OAuth refresh token issued by Google and the identifiers of the events we created, for the purpose of keeping them in sync. We do not read, copy, or retain the contents of your other existing calendar events.
• No advertising, no AI training: data obtained from Google APIs is not used for advertising, is not sold, and is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
• How to revoke: you may disconnect at any time via "Disconnect Google Calendar" in the Settings tab of your admin dashboard, or remove our access at the Google Account third-party access page. Upon disconnection we delete the stored refresh token and stop all synchronization.

Limited Use disclosure: Amoura Booking's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Your Rights (GDPR / CCPA)

As a merchant, you may request an export of your data at any time. You may also delete your account at any time from the admin dashboard, which permanently and irreversibly removes all of your and your customers' bookings and settings, including any stored Google authorization credentials.

6. Changes to This Policy

We reserve the right to amend this policy. Material changes will be communicated to you by email.

7. Contact Us

Questions about this policy may be sent to support@amourabooking.com.