Privacy Policy | Bot Rangers

我們對您的承諾

Bot Rangers 秉持「用戶至上」的原則。您的信任是我們最重要的資產。我們收集資料的目的是為了提供並改善 Green Agent 收據記賬服務（WhatsApp 機械人及網頁版），讓您的體驗更加完善。我們承諾以透明、負責任的方式處理您的資料。

我們收集的資料

電話號碼及 WhatsApp 名稱：用於 WhatsApp 通訊，以及登入網頁版（我們會透過 WhatsApp 傳送一次性驗證碼）。
Google 帳戶電子郵件地址：只在您選擇連結 Google 帳戶時收集，用於識別您連結的帳戶。
收據影像及檔案：您透過 WhatsApp 或網頁版上傳的收據相片、PDF 及 Word 檔案。
收據資料：從收據中提取的資訊（商家、金額、日期、類別等），以及您作出的修改。
AI 助理對話：您在網頁版向 AI 助理提出的問題及其回覆會被保存，方便您查看對話記錄。
付款資料：付款由 Stripe 處理，我們不會儲存您的信用卡號碼；我們只保存訂閱狀態及付款收據記錄。
登入及使用記錄：登入裝置的瀏覽器類型、IP 位址及登入時間（用於「已登入的裝置」及保安用途），以及使用次數（例如每月收據及 AI 使用量）。

資料儲存位置

已連結 Google 的用戶：收據影像儲存於您的 Google Drive，收據資料記錄於您的 Google Sheets。
未連結 Google 的用戶及網頁版：收據影像、檔案及收據資料儲存於我們的伺服器。
我們的伺服器：位於 DigitalOcean 新加坡數據中心。資料庫只可經私人網絡存取，並每日備份。

第三方服務商

我們只會為提供服務而與以下服務商分享所需的資料：

Meta（WhatsApp）：傳送及接收您的 WhatsApp 訊息。
Google：使用 Google 的 AI 模型讀取收據內容及回答 AI 助理的問題；如您連結 Google 帳戶，亦會使用 Google Drive 及 Google Sheets 儲存您的收據。
Stripe：處理訂閱付款。
DigitalOcean：伺服器及資料庫託管。

我們不會出售您的個人資料，亦不會將其用於廣告。

Google API 資料使用

如您選擇連結 Google 帳戶，我們的服務只會使用以下 Google API 權限：

drive.file：僅用於在您的 Google Drive 中建立和管理由本應用程式建立的檔案（收據影像、資料夾及記錄收據的 Google Sheets）。我們不會存取您現有的其他檔案。

我們如何使用您的 Google 資料：

建立及管理收據資料夾結構
上傳收據影像至您的 Google Drive
在 Google Sheets 中記錄收據資訊以供您查閱
提供收據管理及追蹤功能

我們不會：

將您的 Google 資料分享給第三方（除非法律要求）
將您的 Google 資料用於廣告目的
存取或修改非由本應用程式建立的檔案

Cookie

網頁版只使用一個必要的登入 Cookie，用於保持您的登入狀態（最長 90 天）。您的瀏覽器亦會記住語言等顯示設定。我們不使用廣告或追蹤 Cookie。

資料安全保護

我們採取以下措施保護您的資料安全：

加密傳輸：所有資料傳輸均使用 HTTPS/TLS 加密協定。
登入驗證：網頁版以 WhatsApp 一次性驗證碼登入，驗證碼 5 分鐘內有效。連結 Google 時使用 Google 官方 OAuth 2.0 標準，我們不會取得您的 Google 密碼。
存取控制：每個帳戶只能存取自己的收據及檔案；資料庫只可經私人網絡存取。
備份：資料庫及檔案每日備份，備份保留 14 天。

資料保留與刪除

資料保留期限：

Google Drive 及 Sheets 中的收據資料：由您完全控制，您可隨時透過 Google Drive 或 Google Sheets 刪除。
儲存於我們伺服器的收據、檔案及帳戶資料：在您使用服務期間保留。您可隨時在網頁版刪除個別收據。
付款及發票記錄：按法律要求保留。

如何刪除您的資料：

刪除收據：在網頁版刪除，或直接在您的 Google Drive 或 Google Sheets 中刪除相關檔案。
撤銷 Google 授權：前往 Google 帳戶權限設定，移除 Bot Rangers 的存取權限。
刪除帳戶：發送電子郵件至 info@botrangers.ai 要求刪除。我們將在 30 天內完成刪除。

資料刪除後：

您的帳戶資訊、收據及檔案將從我們的系統中移除；備份中的副本會在 14 天內自動清除
您的 Google Drive 及 Sheets 中的收據資料不受影響（由您自行管理）
匿名化的統計資料可能保留用於服務改進，但無法追溯到您個人

我們對匿名化與匯總資料的使用

為了了解經濟趨勢並改進我們的服務，我們可能會以匯總和匿名化的形式分析用戶資料。所有用於此類分析的資料都經過完全匿名化處理，無法追溯到任何個人用戶。我們可能會分享這些宏觀的、匿名的統計見解或將其商業化。我們絕不會出售或分享您的個人可識別資訊。

Google API 服務使用者資料政策

Bot Rangers 對於透過 Google API 取得的資訊之使用與轉移，均遵守 Google API 服務使用者資料政策，包括有限使用要求。

您的權利

根據適用的資料保護法律（包括香港《個人資料（私隱）條例》及 GDPR），您擁有以下權利：

存取權：要求查看我們持有的您的個人資料
更正權：要求更正不準確的個人資料
刪除權：要求刪除您的個人資料
限制處理權：要求限制我們如何使用您的資料
資料可攜權：要求以結構化格式接收您的資料（您亦可隨時在網頁版下載收據及檔案）
反對權：反對我們處理您的個人資料

如需行使這些權利，請聯絡 info@botrangers.ai。

聯絡我們

如對本隱私權政策有任何疑問，請聯絡：

電子郵件：info@botrangers.ai

Our Commitment to You

Bot Rangers operates on a "user-first" principle. Your trust is our most important asset. We collect data to provide and improve the Green Agent receipt bookkeeping service (the WhatsApp bot and the web app). We are committed to handling your data transparently and responsibly.

Data We Collect

Phone Number and WhatsApp Name: Used for WhatsApp communication and to log in to the web app (we send a one-time code via WhatsApp).
Google Account Email Address: Collected only if you choose to link a Google account, to identify the linked account.
Receipt Images and Files: Receipt photos, PDFs and Word files you send via WhatsApp or upload on the web.
Receipt Data: Information extracted from receipts (vendor, amount, date, category, etc.) and any changes you make.
AI Assistant Conversations: Questions you ask the AI assistant on the web and its answers are saved so you can see your conversation history.
Payment Data: Payments are processed by Stripe. We do not store your card number; we keep only your subscription status and payment receipt records.
Login and Usage Records: Browser type, IP address and login time of logged-in devices (for "Logged-in devices" and security), and usage counts (such as monthly receipt and AI usage).

Where Your Data Is Stored

Users who link Google: Receipt images are stored in your Google Drive and receipt data is recorded in your Google Sheets.
Users without Google, and the web app: Receipt images, files and receipt data are stored on our servers.
Our servers: Located in DigitalOcean's Singapore data centre. The database is reachable only over a private network and is backed up daily.

Third-Party Service Providers

We share only the data needed to provide the service with these providers:

Meta (WhatsApp): Sending and receiving your WhatsApp messages.
Google: Google's AI models read your receipts and answer AI assistant questions; if you link a Google account, Google Drive and Google Sheets store your receipts.
Stripe: Processing subscription payments.
DigitalOcean: Server and database hosting.

We do not sell your personal data or use it for advertising.

Google API Data Usage

If you choose to link a Google account, our service uses only the following Google API scope:

drive.file: Used only to create and manage files created by this application in your Google Drive (receipt images, folders and the Google Sheets that record your receipts). We do not access your existing files.

How We Use Your Google Data:

Create and manage receipt folder structures
Upload receipt images to your Google Drive
Record receipt information in Google Sheets for your reference
Provide receipt management and tracking functionality

We Do Not:

Share your Google data with third parties (unless required by law)
Use your Google data for advertising purposes
Access or modify files not created by this application

Cookies

The web app uses one necessary login cookie to keep you logged in (for up to 90 days). Your browser also remembers display settings such as language. We do not use advertising or tracking cookies.

Data Security Protection

We implement the following measures to protect your data:

Encrypted Transmission: All data transmission uses HTTPS/TLS encryption protocols.
Login Verification: The web app uses one-time WhatsApp codes that are valid for 5 minutes. Linking Google uses Google's official OAuth 2.0 standard; we never receive your Google password.
Access Controls: Each account can only access its own receipts and files; the database is reachable only over a private network.
Backups: The database and files are backed up daily, and backups are kept for 14 days.

Data Retention and Deletion

Data Retention Periods:

Receipt data in Google Drive & Sheets: Fully controlled by you. You can delete it anytime via Google Drive or Google Sheets.
Receipts, files and account data on our servers: Retained while you use the service. You can delete individual receipts on the web at any time.
Payment and invoice records: Kept as required by law.

How to Delete Your Data:

Delete Receipts: Delete them on the web, or delete the relevant files directly in your Google Drive or Google Sheets.
Revoke Google Authorization: Go to Google Account Permissions and remove Bot Rangers' access.
Delete Account: Email info@botrangers.ai to request deletion. We will complete deletion within 30 days.

After Data Deletion:

Your account information, receipts and files will be removed from our systems; copies in backups are cleared automatically within 14 days
Your Google Drive and Sheets receipt data remains unaffected (managed by you)
Anonymized statistical data may be retained for service improvement but cannot be traced back to you

Our Use of Anonymized and Aggregated Data

To understand economic trends, we may analyze user data in an aggregated and anonymized form. All data used for this analysis is fully anonymized and impossible to link back to any individual user. We may share or commercialize these high-level, anonymous statistical insights. We will never sell or share your personal, identifiable information.

Google API Services User Data Policy

Bot Rangers' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your Rights

Under applicable data protection laws (including Hong Kong's Personal Data (Privacy) Ordinance and the GDPR), you have the following rights:

Right to Access: Request to view your personal data we hold
Right to Rectification: Request correction of inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Restriction: Request limitation on how we use your data
Right to Data Portability: Request to receive your data in a structured format (you can also download your receipts and files on the web at any time)
Right to Object: Object to our processing of your personal data

To exercise these rights, please contact info@botrangers.ai.

Contact Us

If you have any questions about this Privacy Policy, please contact:

Email: info@botrangers.ai