卡菲卡金融科技股份有限公司 ("we") respects your privacy. This policy explains how SinoBee.ai (the "Service") collects, processes, uses and protects your personal data under Taiwan's Personal Data Protection Act. The Traditional Chinese version prevails if the two versions differ.
1. What we collect
| Category | Details | Source |
|---|---|---|
| Account | CAFECA identity address, handle, KYC level (not your documents), sign-in times | CAFECA sign-in |
| Payment and invoice | Payer name, email, invoice carrier or tax ID, amounts and status, Oen transaction numbers | You at checkout; Oen |
| Service content | Task prompts and files, results, working data in your container, skills and tools, shared conversations, comments and ratings | You |
| Encrypted vault | Connection settings of private tools, encrypted on your computer before upload; we hold only ciphertext and cannot decrypt it | SinoBee client |
| Usage | Model usage, quotas, device names and last use, IP address, browser details, error logs | Generated by the system |
| Cookies | Sign-in session (sb_session), sign-in binding (sb_bind), language | Your browser |
We never receive or store your full card number; card data is handled by Oen (應援科技股份有限公司) and the acquirer.
2. Why
- To provide, maintain and improve the Service, including running crowdfunded tasks and metering usage and quotas.
- Payments, e-invoices, refunds and reconciliation.
- Account security, abuse and fraud prevention, handling reports.
- Notifying you through CAFECA or email about task results, expiry and quota reminders.
- Keeping or providing data where the law requires.
3. Who we share with
Only as needed to provide the Service:
| Recipient | Data | Purpose |
|---|---|---|
| 應援科技股份有限公司 (Oen, oen.tw) | Payer name, email, invoice details, amount, order number | Payment, e-invoice, refunds |
| AI model vendors (e.g. Anthropic, OpenAI, Google, DeepSeek) | Prompts and content sent by tasks and subscription use | Generating AI responses, under each vendor's API terms |
| Cloud hosting and storage (e.g. Amazon Web Services) | Site data, task containers, result files | Hosting and storage |
| Boltchain storage nodes | Encrypted results and shared content | Distributed backup; nodes cannot read it |
| CAFECA | Notification content | Delivering notifications |
We do not sell your personal data or give it to others except as above or as required by law. Some providers are outside Taiwan, so data may be processed abroad.
4. How long we keep it
- Account data: while the account exists, then as long as the law requires.
- Payment and invoice records: as tax and accounting law requires (at least 5 years).
- Results and containers: while subscribed plus a 30-day grace period; without a subscription they expire 7 days after a task finishes.
- Shared content: until you revoke it or it is taken down; on takedown the content key is destroyed so the encrypted data can no longer be read.
- Usage logs: up to 1 year, longer when needed (for example to investigate abuse).
5. Your rights
Under Article 3 of the Personal Data Protection Act you may ask us to:
- let you inquire about or review your data;
- give you a copy;
- supplement or correct it;
- stop collecting, processing or using it;
- delete it.
Contact us as described in section 8. Some data must be kept by law (for example invoices), and deleting some data means we can no longer provide the Service; we will explain this in our reply.
6. Security
We protect data with HTTPS, access controls, least privilege and encrypted storage (private tool connections are kept only as ciphertext). No transmission over the internet is perfectly secure; if a personal data breach occurs we will notify you as the law requires.
7. Changes
We may change this policy and will announce the changes and their effective date on the site.
8. Contact
- Company：卡菲卡金融科技股份有限公司（tax ID 52650861）
- Website：cafeca.com.tw
- Address：臺北市信義區基隆路1段206號18樓
- Email：[email protected]