AziTani › 客緣管家
客緣管家 隱私權政策
「客緣管家」（以下稱「本服務」，包含電腦版與平板／手機 App）由 AziTani 提供，在台灣由永佳創新負責銷售與客戶服務（以下合稱「我們」）。本服務是給店家、公司管理自己客戶資料的工具。這份文件說明本服務會處理哪些資料、資料存放在哪裡，以及你可以如何控制。
在本服務裡，你（使用本服務的店家或公司）是客戶資料的蒐集者；我們只依你的指示代為保存與處理。你向你的客戶蒐集個人資料時，請依當地的個人資料保護法規告知你的客戶。
重點摘要
- 你輸入的客戶資料主要存在你自己的電腦和裝置上。
- 有加購雲端時，客戶資料會加密後上傳到我們的伺服器，讓你的電腦、平板、手機之間同步，也作為雲端備份。
- 手寫辨識的照片只在辨識當下送到我們自己的辨識電腦，辨識完就刪除，不保存。
- 我們不會把你的客戶資料用於廣告，也不會賣給任何人。
- 指紋或手機密碼的驗證由手機系統處理，本 App 收不到你的指紋或密碼。
- 手機 App 的試用版（還沒購買）會顯示 Google AdMob 的廣告；購買方案後不會再顯示。
1. 帳號與授權資料
為了確認你有使用本服務的授權，我們會保存：
- 序號、公司代號、客戶（店家）名稱與聯絡方式（購買時提供）。
- 已啟用的裝置：由本服務產生的裝置識別碼（隨機產生，無法反推出個人資料）、裝置名稱或型號、程式版本、最後連線時間。
- 有加購雲端時，用來在新裝置登入的帳號名稱，以及密碼經過單向雜湊後的結果（我們無法得知原本的密碼）。
- 連線時的 IP 位址，用於防止濫用與排除問題。
2. 你輸入的客戶資料
客戶的姓名、電話、Email、LINE ID、地址、公司與職稱、生日、聯絡紀錄、待辦、商機等，都存在你的電腦或裝置裡屬於本服務的私有空間。
- 沒有加購雲端時：這些資料不會傳送給我們。
- 有加購雲端時：資料會用你公司專屬的資料金鑰加密後，上傳到我們的伺服器，用來在你的各台裝置之間同步，並每天保留一份雲端備份（保留最近 30 天）。資料金鑰由我們保管，這樣你的電腦遺失或壞掉時，我們可以協助你把資料救回來。我們只會在你要求協助（例如救回資料、處理你回報的問題）時才使用它，每一次都會留下紀錄。
- 本服務不保存照片、掃描稿或附件，只保存文字資料。
3. 手寫辨識（測試中）
你使用拍照或選擇照片辨識時，照片會縮小後送到我們的伺服器，再轉給我們自己放在台灣的辨識電腦處理，辨識結果傳回你的裝置，由你核對後才存檔。照片和辨識結果在辨識完成後就刪除，我們不保存，也不會用於其他用途。我們只記錄每個序號使用了幾張。
App 會請求相機權限，只用於拍照辨識與掃描電腦上的 QR code。從相簿選照片時使用手機系統的相片挑選器，App 只會拿到你選的那一張。
4. 自家廣告與系統訊息
本服務會在畫面下方的小欄位顯示我們自己的業務介紹或系統訊息（例如伺服器維護通知）。每台裝置每天向伺服器取得一次內容，並回報各則訊息的顯示與點擊次數。回報的只有次數加總，不含任何客戶資料，也不追蹤個人。
5. 錯誤紀錄與問題回報
程式出錯（包括閃退前的錯誤）時，會在你的裝置上記下錯誤的種類與發生的程式位置，並先把可能含有客戶資料的內容遮掉。這份紀錄平常只留在你的裝置上；只有在你按「回報問題」時，才會連同你寫的說明、程式版本與裝置的系統版本一起送給我們，用來找出並修正問題。
在電腦版回報時，你可以自己選擇是否附上資料副本（遮蔽個資或完整資料），副本加密後上傳，只供我們處理這次的問題，處理完或 30 天後自動刪除，每次查看都會留下紀錄。手機與平板 App 的回報不附資料副本。
手機與平板 App 的閃退回報：App 閃退或出錯時，會自動把當機紀錄（錯誤種類、程式位置、App 版本、手機型號與系統版本、發生時間）透過 Google 的 Firebase Crashlytics 傳給我們，讓我們在你沒有回報時也能發現並修正問題。送出前同樣會遮掉可能含有客戶資料的內容；我們不會把你的帳號、店名或任何客戶資料放進閃退回報。Firebase 會用一組隨機產生的安裝識別碼區分不同的安裝，這組識別碼不會用來辨識你本人。閃退回報在 Firebase 保存 90 天後自動刪除。
6. 試用版與商店購買（手機與平板 App）
試用版不用帳號，資料只存在你的裝置上（最多 3 位客戶）。試用版的手寫辨識（共 3 張）會用本服務產生的裝置識別碼計算次數。
購買方案、加購辨識張數由 Google Play 或 App Store 處理付款，我們不會取得你的信用卡或付款資料。我們會收到商店的購買憑證或交易編號，用來向 Google 或 Apple 確認購買、開通授權與延長到期日，並保存購買紀錄（方案、到期日、加購的張數）。購買時填寫的店名、管理員帳號會用來建立你的授權與帳號。
7. 試用版的廣告（Google AdMob）
只有手機 App 的試用版會顯示由 Google LLC 提供的 AdMob 橫幅廣告。為了投放與衡量廣告，Google 的廣告元件會自動收集並處理裝置的廣告 ID、IP 位址（可能用來推估大概的所在地區）、裝置與 App 資訊、廣告的顯示與點擊情形，以及與廣告元件有關的診斷資料。這些資料由 Google 直接收集，不經過我們。我們要求只顯示不個人化的廣告、內容分級為普遍級，並封鎖博弈、交友、借貸等類別。你輸入的客戶資料不會提供給 Google 作為廣告用途。
- Google 如何使用合作夥伴網站或應用程式的資訊
- 可以在 Android 的「設定」→「Google」→「廣告」重設或刪除廣告 ID。
- 購買方案後，本 App 不再顯示 AdMob 廣告。
8. 我們使用的外部服務
- Cloudflare：提供我們的伺服器與雲端儲存空間。
- Google Play：App 的下載、更新、訂閱與購買。
- Apple App Store：iPhone / iPad App 的下載、更新、訂閱與購買。
- Google AdMob：只在試用版顯示廣告（見上一段）。
- Google Firebase Crashlytics：手機與平板 App 的閃退回報（見第 5 段）。
我們不會把你的資料出售、出租或提供給其他公司作為廣告或行銷用途。
9. 資料的保存與刪除
- 在 App 的「設定」按「移除這台裝置」，會刪除這台裝置上的資料（雲端與其他裝置上的資料不受影響）。
- 要刪除雲端上的資料或停止使用本服務，請聯絡我們。我們會在確認身分後刪除雲端上的客戶資料與帳號資料；法律要求保存的交易紀錄除外。
- 本服務不會把資料備份到 Google 的雲端備份。
10. 安全
資料傳輸一律使用加密連線（HTTPS）。雲端上的客戶資料以你公司的資料金鑰加密。你可以在 App 設定開啟時要用指紋或手機密碼驗證。請保管好你的帳號密碼，不要和別人共用。
11. 兒童
本服務是給店家與公司使用的工作工具，不是為兒童設計，我們也不會刻意蒐集兒童的個人資料。
12. 政策的變更
本服務的功能或相關法規有變動時，我們可能會更新這份政策，並修改本頁上方的「最後更新」日期。有重大變更時，會在程式的更新說明中告知。
13. 聯絡我們
提供者：AziTani（日本）
台灣銷售與客戶服務：永佳創新 電話 (+886)04-8961867
電子郵件：azitanistudio@zohomail.jp
Keyuan Butler (客緣管家) Privacy Policy
“Keyuan Butler” (客緣管家, “the Service”, including the PC version and the tablet / phone app) is provided by AziTani; in Taiwan it is sold and supported by 永佳創新 (together, “we”). The Service is a tool for shops and companies to manage their own customers. This document explains what data the Service handles, where it is kept, and the choices you have.
Within the Service, you (the shop or company using it) are the collector of your customers’ data; we only store and process it on your behalf. When you collect personal data from your customers, please inform them as required by your local data protection laws.
Summary
- The customer data you enter is kept mainly on your own computers and devices.
- With the cloud add-on, customer data is encrypted and uploaded to our servers to sync your PCs, tablets and phones and to keep a cloud backup.
- Photos used for handwriting recognition go to our own recognition computer only while they are being recognized and are deleted right after; we do not keep them.
- We never use your customer data for advertising and never sell it.
- Fingerprint or device-PIN checks are handled by the phone’s system; the app never receives your fingerprint or PIN.
- The trial of the phone app (before purchase) shows Google AdMob ads; they disappear after you buy a plan.
1. Account and licence data
- Licence key, company code, the customer (shop) name and contact details given at purchase.
- Activated devices: a device ID generated by the Service (random; it cannot be traced back to you), device name or model, app version and last connection time.
- With the cloud add-on: user names for signing in on new devices, and a one-way hash of each password (we cannot see the password itself).
- The IP address of connections, used to prevent abuse and to troubleshoot.
2. Customer data you enter
Names, phone numbers, email, LINE IDs, addresses, companies and titles, birthdays, contact history, tasks and deals are stored in the Service’s private storage on your computers and devices.
- Without the cloud add-on, this data is not sent to us.
- With the cloud add-on, the data is encrypted with a data key unique to your company and uploaded to our servers to sync your devices; a daily cloud backup is kept for the last 30 days. We hold the data key so that we can help you recover your data if a computer is lost or broken. We use it only when you ask for help (for example recovery or a problem you reported), and every use is logged.
- The Service stores text only; it does not keep photos, scans or attachments.
3. Handwriting recognition (beta)
When you recognize a photo, it is reduced in size and sent to our server, which passes it to our own recognition computer in Taiwan. The result is returned to your device, and you check it before saving. The photo and the result are deleted once recognition is done; we do not keep them or use them for anything else. We only record how many pages each licence has used.
The app asks for camera permission only to take photos for recognition and to scan the QR code shown on the PC. When you pick from the gallery, the system photo picker is used, so the app receives only the photo you choose.
4. Our own notices and promotions
A small bar at the bottom of the screen shows our own business notices or system messages (such as maintenance notices). Each device fetches them once a day and reports how many times each was shown or clicked — totals only, with no customer data and no tracking of individuals.
5. Error logs and problem reports
When the program hits an error (including errors before a crash), it records the type of error and where in the program it happened on your device, removing anything that might contain customer data first. The log stays on your device; it is sent to us only when you press “Report a problem”, together with your description, the app version and the device’s system version, so that we can find and fix the problem.
On the PC version you may choose to attach a copy of your data (masked or full); it is encrypted, used only for that report, deleted after the report is closed or after 30 days, and every view is logged. Reports from the phone and tablet app never include a data copy.
Crash reports from the phone and tablet app: when the app crashes or hits an error, it automatically sends a crash log (error type, program location, app version, phone model and system version, time) to us through Google’s Firebase Crashlytics, so that we can find and fix problems even if you don’t report them. Anything that might contain customer data is removed first; we never put your account, shop name or any customer data into crash reports. Firebase uses a randomly generated installation ID to tell installations apart; it is not used to identify you. Crash reports are kept by Firebase for 90 days and then deleted automatically.
6. Trial and app store purchases (phone and tablet app)
The trial needs no account; your data stays on your device (up to 3 customers). Trial handwriting recognitions (3 in total) are counted with a device ID generated by the Service.
Plans and recognition packs are paid through Google Play or the App Store; we never receive your card or payment details. We receive the store’s purchase token or transaction ID to confirm the purchase with Google or Apple, activate your licence and extend its expiry, and we keep the purchase record (plan, expiry, pages bought). The shop name and administrator account entered when buying are used to create your licence and account.
7. Ads in the trial (Google AdMob)
Only the phone app’s trial shows AdMob banner ads provided by Google LLC. To serve and measure ads, Google’s ad SDK automatically collects the device’s advertising ID, IP address (which may be used to estimate an approximate region), device and app information, ad views and clicks, and diagnostic data about the SDK. Google collects this directly; it does not pass through us. We request non-personalised ads rated for general audiences and block categories such as gambling, dating and loans. The customer data you enter is never given to Google for advertising.
- How Google uses information from sites or apps that use its services
- You can reset or delete the advertising ID in Android Settings → Google → Ads.
- After you buy a plan, the app no longer shows AdMob ads.
8. Services we use
- Cloudflare: hosts our servers and cloud storage.
- Google Play: app downloads, updates, subscriptions and purchases.
- Apple App Store: iPhone / iPad app downloads, updates, subscriptions and purchases.
- Google AdMob: ads in the trial only (see above).
- Google Firebase Crashlytics: crash reports from the phone and tablet app (see section 5).
We do not sell, rent or give your data to other companies for advertising or marketing.
9. Keeping and deleting data
- “Remove this device” in the app’s settings deletes the data on that device (data in the cloud and on your other devices is not affected).
- To delete your cloud data or stop using the Service, contact us. After confirming your identity we delete your customer data and account data from the cloud, except transaction records we are required by law to keep.
- The app does not back up to Google’s cloud backup.
10. Security
All connections use encryption (HTTPS). Customer data in the cloud is encrypted with your company’s data key. You can require a fingerprint or device PIN when opening the app. Please keep your password safe and do not share it.
11. Children
The Service is a business tool for shops and companies. It is not designed for children, and we do not knowingly collect children’s personal data.
12. Changes to this policy
We may update this policy when the Service or the law changes, and will update the date at the top. Significant changes will be announced in the update notes.
13. Contact
Provider: AziTani (Japan)
Sales and support in Taiwan: 永佳創新, phone (+886)04-8961867
Email: azitanistudio@zohomail.jp