Privacy Policy

1. Scope

This Privacy Policy (the "Policy") applies to the Sopeak website, applications and related services (the "Service") operated by Weitude Technology Co., Ltd. (the "Company", "we"). By using the Service, you confirm that you have read, understood and agreed to this Policy.

2. Who collects your personal data

1. Company: Weitude Technology Co., Ltd.
2. Tax ID (統一編號): 96817419
3. Contact: contact@sopeak.tw

3. Our role

1. For the account data of sellers who run a shop on the Service ("Sellers"), we are the data collector.
2. For the personal data of customers who buy from Sellers ("End Customers"), and the attendance, leave, salary and insurance records a Seller enters about its staff as their employer, we collect, process and use it on behalf of the Seller, as an entrusted agency, and only within the scope of the Seller's instructions and this Policy. Each Seller is responsible for giving its own notice to its End Customers and staff.
3. Where an End Customer registers a member account on the Service, we are the data collector for that account's data.

4. Categories of personal data

1. Sellers: name, email address, phone number, shop name, tax ID, shipping and return addresses and stores, payout account details, subscription payment records.
2. Seller staff (where the Seller enables the relevant features): name, job title, attendance records together with the location and network information captured at clock-in, leave records, salary and labor and health insurance details.
3. End Customers: name, phone number, email address, delivery address or pickup store, social media handle, order and payment records, bank transfer reports (including the last five digits of the account and images of transfer receipts), refund account details, membership and points records.
4. Data obtained from Instagram: see section 9.
5. Usage records: browsing and activity logs, IP address, device and browser information, push notification subscription details.

We do not collect or store credit card numbers. Card transactions are processed by third-party payment providers.

5. Purposes of collection

We collect, process and use personal data for the following specified purposes under Taiwan's Personal Data Protection Act: 069 contracts, quasi-contracts and other legal relationships; 090 consumer and customer management and service; 135 information and communication services; 136 information, communication and database management; 148 online shopping and other e-commerce services; 157 surveys, statistics and research analysis; 181 other business within the scope of our business registration or articles of incorporation.

6. Period, territory, recipients and method of use

1. Period: for as long as the specified purpose exists, the retention period required by law or contract, or the period necessary for our business, whichever is longest.
2. Territory: the Republic of China (Taiwan), and the territories where our service providers or their equipment are located, including the United States.
3. Recipients: the Company, Sellers, service providers engaged by us (including cloud hosting, data storage, email, network, payment, logistics and artificial intelligence providers), and authorities legally entitled to access the data.
4. Method: automated or non-automated means, for uses consistent with the purposes above.

7. Access by our staff

To provide customer support, help set up accounts, troubleshoot the Service, maintain information security, prevent fraud or unlawful activity, and comply with the law, we may assign authorized staff to access, view or process the data in your account, including your personal data and that of your End Customers, and to sign in to and operate the Service as your account. Those staff members are bound by confidentiality for the data they learn. Your password is stored in a non-reversible form and cannot be seen by our staff.

8. Third-party services

Parts of the Service are provided by third parties, including Google Cloud (hosting, databases and file storage), Vercel (website hosting), Resend (email delivery), Google Gemini (image and text recognition), PAYUNi, ECPay, convenience-store and logistics carriers, and Meta Platforms, Inc. (Instagram). Images or text you upload may be processed by that artificial intelligence service to help you create orders or organize data. Each third party's own privacy policy also applies to its processing of personal data.

9. Instagram data

When a Seller connects its Instagram professional account to the Service, we use Meta's official API to obtain the account's basic profile, comments on its posts, and direct messages sent to the account (including the Instagram-scoped user ID and username of the person who commented or sent the message). We use this data only for the Seller's configured automatic replies, order creation and customer support. Raw event data received from Meta is stored encrypted for seven days and then removed by a scheduled cleanup. We never ask for or store your Instagram password.

You can remove the Service's access at any time in Instagram under Settings > Apps and websites, or request deletion of the related data by emailing contact@sopeak.tw as described in section 12.

10. Cookies and similar technologies

The Service uses cookies and browser storage to keep you signed in, remember your preferences, and analyze usage. You can refuse cookies in your browser settings, but some features will then be unavailable.

11. Security

We apply reasonable technical and organizational measures to protect personal data, including encryption in transit, encrypted storage of sensitive credentials, and access controls. No transmission over the internet is completely secure. If personal data is stolen, leaked or otherwise compromised, we will notify you by appropriate means once the facts are established.

12. Your rights

Under Article 3 of Taiwan's Personal Data Protection Act, you may, for the personal data we hold about you: inquire about or review it, request a copy, request supplements or corrections, request that we stop collecting, processing or using it, and request its deletion. Send requests to contact@sopeak.tw. We may charge the necessary costs as permitted by law. End Customers may exercise these rights over data processed on a Seller's behalf through that Seller or through us, and we will forward the request to the Seller. Where the law requires us to retain data, or retention is necessary for our business, we may decline a request.

Providing personal data is your choice. If you do not provide the data we need, we may be unable to provide all or part of the Service.

13. Changes to this Policy

We may revise this Policy at any time and will publish revisions on the Service. For material changes affecting your rights, we will notify you by email or an in-service notice before they take effect. Continuing to use the Service after a revision takes effect means you accept the revised Policy.

14. Contact

If you have any questions about this Policy, email contact@sopeak.tw.