1. 我們蒐集哪些個人資料
當你使用回音室服務時，我們會蒐集以下資料：
- 基本識別資料：你的名字、Email 地址
- 回顧內容：你在表單中填寫的每週回顧文字、能量指數、心情選項、下週意圖
- 付款資料：付款流程由第三方金流平台處理，我們不儲存你的信用卡或支付資訊
- 使用紀錄：送出時間戳記、AI 處理狀態、Email 寄送狀態
- 伺服器紀錄：當你造訪本網站時，伺服器會自動記錄你的 IP 位址、瀏覽器類型及造訪時間，僅用於服務維運，不用於識別個人身份
2. 我們如何使用你的資料
我們蒐集的資料僅用於以下目的：
- 生成個人化的 AI 週回顧內容並寄送至你的 Email
- 服務運作記錄與品質改善
- 回應你的服務相關詢問
我們不會將你的個人資料用於廣告投放、出售給第三方，或任何與提供回音室服務無關的用途。
3. 資料儲存、保存期限與安全措施
你的回顧資料儲存於雲端資料儲存服務商，伺服器位於美國。我們會保存你的回顧內容、Email、姓名、AI 生成結果與服務紀錄，保存期間最長為 24 個月，用於提供服務、處理客服與退款請求、排查系統問題，以及改善回音室的內容品質。
保存期滿後，我們會刪除或去識別化相關資料，除非法律、稅務、付款爭議處理或防止濫用等必要目的要求我們保留更長期間。
本服務所使用的各項基礎設施均符合業界資安標準，並採用 HTTPS 加密傳輸。僅有授權人員可接觸你的個人資料。
如你希望刪除個人資料，請來信至 support@echoroomai.com，我們將於 30 個工作天內處理。
4. 第三方服務
為提供本服務，我們委託以下類別的第三方服務商協助處理資料，各服務商均有其獨立隱私政策，並依其所在地適用相關法規。本服務不對你點擊外部連結後所進入之第三方網站的隱私行為承擔連帶責任：
- AI 語言模型推論服務商：用於分析你的回顧內容並生成個人化回音（伺服器位於美國）
- 電子郵件遞送服務商：用於將回音寄送至你的信箱（伺服器位於美國）
- 雲端資料儲存服務商：用於儲存服務運作紀錄（伺服器位於美國）
- 網站託管與部署服務商：用於提供本網站的運作環境（伺服器位於美國）
- 第三方支付處理服務商：用於處理付款，不在本服務儲存任何支付資訊
5. 你的權利
依據你所在地適用的個人資料保護法規，你可能得向我們行使以下權利。若要提出申請，請來信 support@echoroomai.com：
- 查閱權：要求查看我們持有的你的個人資料
- 更正權：要求更正不正確或不完整的個人資料
- 刪除權：要求刪除你的個人資料
- 限制或反對處理：於適用法律允許的範圍內，要求我們停止蒐集、處理或利用你的個人資料
- 取得副本：於適用法律允許的範圍內，要求取得我們持有之你的個人資料副本
6. 未成年人
本服務不針對 18 歲以下未成年人。若你未滿 18 歲，請勿使用本服務或提交個人資料。
7. 隱私政策的修改
我們可能不定期更新本隱私政策。重大變更將於本頁面公告，並更新時間。繼續使用服務即表示你接受更新後的政策。
8. 準據法與爭議解決
本隱私權政策依中華民國法律解釋及適用。若你對本政策或本服務的資料處理方式有任何疑慮，請優先透過 support@echoroomai.com 與我們聯繫，我們將於 30 個工作天內回覆並協商解決。
若你所在地區有強制適用的當地個人資料保護或隱私法規，本政策不影響你依當地法律所享有的相關權利。
1. Information We Collect
When you use Echo Room, we collect the following information:
- Identity information: Your name and email address
- Weekly reflection content: The text, energy level, mood selections, and intentions you submit in our form
- Payment information: Payments are processed by a third-party platform. We do not store your credit card or payment details
- Usage records: Submission timestamps, AI processing status, email delivery status
- Server logs: When you visit this website, our servers automatically record your IP address, browser type, and visit time. This information is used solely for service operations and is not used to identify individuals
2. How We Use Your Information
We use your information solely for the following purposes:
- Generating personalized AI weekly reflection content and delivering it to your email
- Service operation records and quality improvement
- Responding to your service-related inquiries
We do not use your personal information for advertising, sell it to third parties, or use it for any purpose unrelated to providing the Echo Room service.
3. Data Storage, Retention and Security
Your reflection data is stored with a cloud-based data storage provider, with servers located in the United States. We retain your reflection content, email address, name, AI-generated output, and service records for up to 24 months to provide the service, handle support and refund requests, troubleshoot system issues, and improve Echo Room's content quality.
After the retention period ends, we will delete or de-identify the relevant data, unless we need to retain it longer for legal, tax, payment dispute, or abuse-prevention purposes.
All infrastructure we use complies with industry-standard security practices and all data is transmitted via HTTPS encryption. Only authorized personnel have access to your personal data.
If you wish to delete your personal data, please email support@echoroomai.com and we will process your request within 30 business days.
4. Third-Party Services
To provide this service, we engage the following categories of third-party service providers to assist with data processing. Each provider maintains its own privacy policy and complies with applicable regulations in its jurisdiction. We are not responsible for the privacy practices of any third-party websites you may access via external links:
- AI language model inference provider: Used to analyze your reflection content and generate personalized echoes (servers located in the United States)
- Email delivery service provider: Used to deliver your echo to your inbox (servers located in the United States)
- Cloud data storage provider: Used to store service operation records (servers located in the United States)
- Website hosting and deployment provider: Used to operate this website (servers located in the United States)
- Third-party payment processing provider: Used to handle payments. No payment data is stored in our service
5. Your Rights
Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@echoroomai.com:
- Access: Request to view the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete personal data
- Deletion: Request deletion of your personal data
- Restriction or Objection: Where permitted by applicable law, request that we stop collecting, processing, or using your personal data
- Copy of Your Data: Where permitted by applicable law, request a copy of the personal data we hold about you
6. Minors
This service is not directed at individuals under the age of 18. If you are under 18, please do not use this service or submit any personal information.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be announced on this page with an updated date. Continued use of the service constitutes acceptance of the updated policy.
8. Governing Law and Dispute Resolution
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of China (Taiwan). If you have any concerns regarding this policy or our data practices, we encourage you to contact us first at support@echoroomai.com. We will respond within 30 business days and work in good faith to resolve any issues.
If you are located in a jurisdiction with mandatory local data protection or privacy laws, nothing in this policy limits the rights you are entitled to under those applicable laws.