Legal法務文件

Data Retention Policy資料保留政策

Last updated: May 22, 2026 · Effective: May 22, 2026最後更新：2026 年 5 月 22 日 · 生效日期：2026 年 5 月 22 日

Key principle: We store only what's necessary, for only as long as necessary. Raw CSV file contents are never stored — only the processed results. You can request deletion of your data at any time.核心原則：我們只儲存必要的內容，且只儲存必要的時間。原始 CSV 檔案內容不會被儲存——我們只保存處理結果。您可以隨時申請刪除您的資料。

1. Data Retention Schedule資料保留時間表

Data Type資料類型	What We Store儲存內容	Free免費	Paid付費	After Account Deleted帳號刪除後
Account profile帳號資料	Email, name, Google ID, plan, created_atEmail、姓名、Google ID、方案、建立時間	Until deleted刪除前	Until deleted刪除前	Deleted in 30 days30 天內刪除
Job records任務記錄	Filename, row count, score, column stats, issue list檔案名稱、列數、分數、欄位統計、問題清單	30 days天	90 days天	Deleted immediately立即刪除
Raw CSV contents原始 CSV 內容	Not stored — processed in memory only不儲存——僅在記憶體中處理	Never stored從不儲存	Never stored從不儲存	—
Billing / payment records付款記錄	Transaction ID, amount, plan, date (no card numbers)交易 ID、金額、方案、日期（不含卡號）	7 years (legal)7 年（法規要求）		Kept 7 years保留 7 年
Login session data登入工作階段	Session token (encrypted), last seen timestamp工作階段 Token（加密）、最後活動時間	7 days from last activity最後活動後 7 天		Deleted immediately立即刪除
Security / access logs安全 / 存取日誌	IP address, timestamp, endpoint, HTTP statusIP 位址、時間戳、端點、HTTP 狀態	30 days天		Deleted in 30 days30 天內刪除
Translated CSV resultsAI 翻譯結果	Translated field values cached in job record任務記錄中快取的翻譯欄位值	30 days天	90 days天	Deleted with job隨任務刪除

2. Automatic Deletion自動刪除

We run automated cleanup processes that delete expired data according to the schedule above. Specifically:我們執行自動化清理程序，按照上述時間表刪除過期資料。具體來說：

Job records older than the plan's retention period are deleted in nightly cleanup runs超過方案保留期間的任務記錄在每晚的清理程序中被刪除
Inactive login sessions are purged after 7 days of inactivity非活躍的登入工作階段在 7 天無活動後被清除
No manual action is required from you — deletion happens automatically您無需手動操作——刪除自動進行

3. Account Deletion & Data Erasure帳號刪除與資料清除

You can delete your account at any time. Upon account deletion:您可以隨時刪除帳號。帳號刪除後：

All job records are deleted immediately所有任務記錄立即刪除
Your account profile (email, name, Google ID) is deleted within 30 days您的帳號資料（Email、姓名、Google ID）在 30 天內刪除
Active sessions are invalidated immediately活躍的工作階段立即失效
Billing records are retained for 7 years as required by Taiwan tax law付款記錄依台灣稅務法規要求保留 7 年

To delete your account, go to App → Settings → Delete Account, or email [email protected] with subject "Account Deletion Request".若要刪除帳號，請前往應用程式 → 設定 → 刪除帳號，或以「帳號刪除請求」為主旨發送 Email 至 [email protected]。

4. Backups備份

We maintain encrypted database backups for disaster recovery purposes. Backup schedules:我們為災難恢復目的維護加密的資料庫備份。備份時間表：

Daily backups — retained for 7 days每日備份——保留 7 天
Weekly backups — retained for 4 weeks每週備份——保留 4 週

When you delete your account, your data will be removed from all active databases within 30 days and from backup snapshots within the backup rotation period (maximum 35 days from deletion request).當您刪除帳號時，您的資料將在 30 天內從所有活躍資料庫中移除，並在備份輪替期間內（最多自刪除請求起 35 天）從備份快照中移除。

5. Data Security Measures資料安全措施

Encryption in transit: All data is transmitted over TLS 1.2+ (HTTPS)傳輸加密：所有資料透過 TLS 1.2+（HTTPS）傳輸
Encryption at rest: Database stored on encrypted volumes (Hetzner Cloud)靜態加密：資料庫儲存在加密磁碟區上（Hetzner Cloud）
Access control: Database access restricted to the application server; no public database port存取控制：資料庫存取僅限應用程式伺服器；不開放公開資料庫連接埠
Session security: Sessions are stored in encrypted file store with 7-day TTL工作階段安全：工作階段儲存在加密檔案存放區中，TTL 為 7 天
Rate limiting: API endpoints are rate-limited to prevent abuse and data harvesting速率限制：API 端點設有速率限制以防止濫用和資料採集
DDoS protection: Traffic is proxied through CloudflareDDoS 防護：流量通過 Cloudflare 代理

6. Data Breach Response資料外洩應對

In the event of a confirmed data breach that affects your personal data, we will:如發生確認影響您個人資料的資料外洩事件，我們將：

Notify affected users by email within 72 hours of confirmation在確認後 72 小時內透過 Email 通知受影響的用戶
Report to relevant regulatory authorities as required by applicable law按適用法律要求向相關監管機構報告
Take immediate steps to contain the breach and prevent further unauthorized access立即採取措施遏制外洩並防止進一步的未授權存取
Provide guidance on protective steps you can take提供您可以採取的保護措施指引

7. Your Rights & Requests您的權利與請求

To exercise any data rights or submit a data-related request:如需行使任何資料權利或提交資料相關請求：

Email: [email protected]
Subject: "Data Request – [Access / Deletion / Export / Correction]"主旨：「資料請求 – [查詢 / 刪除 / 匯出 / 更正]」
We will respond within 15 business days我們將在 15 個工作天內回覆
Identity verification may be required before processing sensitive requests處理敏感請求前可能需要驗證身份