1. 本政策適用範圍
本隱私權政策說明拓偕科技有限公司（以下稱「我們」）如何於 Yellow Grapes 行動應用程式及相關服務中蒐集、處理、利用、保存與分享個人資料。
本政策應與本服務使用條款併同閱讀。若本政策與強制法令有不一致之處，以適用法令為準。
隱私權政策
最後更新：2026年8月21日 · 第 7 版
2. 我們蒐集的資料類型
依您使用本服務之方式不同，我們可能蒐集以下資料：
• 帳戶與識別資料：例如姓名、顯示名稱、電子郵件地址、登入供應商識別資訊、頭像。
• 使用者偏好與帳戶設定：例如語言、通知設定、收藏商家與收藏酒款、同意條款紀錄。
• 您主動提交之內容：例如編輯建議、酒單修正、檢舉內容、客服訊息、問卷回覆、商家認領資料、證明文件。
• 商家管理資料：若您認領商家，我們可能蒐集商家聯絡資訊、審核資料、認證紀錄、商家管理紀錄與操作歷程。
• 裝置與技術資料：例如裝置型號、作業系統版本、App 版本、語言、IP 位址、崩潰紀錄、診斷與分析資料。
• 位置資料：若您授權，我們可能蒐集精確或概略位置，用於顯示附近商家、地圖置中與搜尋區域功能。
• 交易與方案資料：若日後推出付費功能，我們可能蒐集訂閱狀態、購買紀錄、兌換紀錄與付款相關識別碼（但不一定直接保存完整信用卡資訊）。
除法律允許或要求外，我們原則上不會主動要求您提供醫療、健康、基因、犯罪前科等敏感個人資料。請勿於提交內容中主動揭露與本服務目的無關之敏感資料。
3. 蒐集目的
我們蒐集與利用個人資料之主要目的包括：
• 提供帳戶註冊、登入、身分驗證與帳戶管理；
• 提供地圖、搜尋、收藏、酒單瀏覽、個人化顯示與在地探索功能；
• 接收、審核與處理編輯建議、商家認領申請、檢舉與客服需求；
• 讓商家經營者管理其已認領之商家與酒單；
• 進行服務維運、資安防護、除錯、分析、統計與改善體驗；
• 在您同意或法令允許之範圍內，寄送服務通知、活動消息、行銷或優惠資訊；
• 履行法律義務、回應主管機關要求、處理爭議與主張權利。
4. 法律依據與告知事項（台灣個資法）
依台灣《個人資料保護法》，我們將於蒐集個人資料時或依法律容許之時間點，告知蒐集者名稱、蒐集目的、資料類別、利用期間、地區、對象及方式，以及您依法得行使之權利與不提供資料可能對您權益之影響。
若您拒絕提供必要資料，我們可能無法為您建立帳戶、處理認領申請、回覆客服、提供個人化功能，或完成您要求之服務。
5. 資料利用方式
我們僅於與蒐集目的具有正當合理關聯且必要之範圍內利用您的資料，並採取適當措施避免不當使用。
我們可能將資料用於內部資料彙整、去識別化分析、服務安全監控、功能測試與營運決策；惟若資料可識別特定個人，我們仍將依適用法令處理。
6. 我們可能分享資料的對象
我們不會任意出售您的個人資料。惟在以下範圍內，我們可能提供或揭露資料：
• 雲端與技術服務供應商：例如 Firebase/Google Cloud、Mapbox、推播、分析、錯誤追蹤、客服與儲存服務供應商；
• 登入與身分驗證服務：例如 Google、LINE；
• 付款與交易處理方：如日後推出訂閱或付費方案；
• 商家經營者：若您對已認領商家提交建議、檢舉或認領爭議資料，我們可能將必要資訊提供給該商家或其代表以利審核與處理；
• 專業顧問與受託人：例如律師、會計師、稽核、資安顧問；
• 主管機關、司法機關或依法有權機關：於法律要求、調查、執法、權利主張或防止危害時；
• 企業交易相對人：如公司重組、併購、資產移轉或投資交易中，於合法且必要範圍內。
若涉及跨境傳輸，我們會在合理可行範圍內採取合約、權限控管與安全措施保護資料。
7. 國際傳輸
由於我們可能使用位於台灣以外之雲端與技術供應商，您的個人資料可能被傳輸至或儲存於台灣以外地區。您理解並同意，在適用法令允許範圍內，我們得為本政策所載目的進行必要之跨境處理與利用。
8. Cookie、SDK 與類似技術
我們或第三方服務供應商可能使用 SDK、裝置識別碼、日誌、Cookie 或類似技術，以維持登入狀態、記錄偏好、分析流量、衡量功能使用情況、進行防濫用與改善服務。
您可透過裝置或應用程式設定限制部分權限，但這可能影響部分功能之正常運作。
9. 資料保存期間
我們會在達成蒐集目的所必要期間內保存個人資料，並依適用法令、契約、稅務、會計、爭議處理、反詐欺、資安與稽核需求決定具體保存時間。
帳戶刪除後，我們可能在合理期間內保留必要紀錄，以履行法律義務、處理爭議、維護安全，或保留去識別化／彙總資料作統計分析。
10. 您的權利
依台灣《個人資料保護法》第 3 條，您得就您的個人資料行使下列權利：
• 查詢或請求閱覽；
• 請求製給複製本；
• 請求補充或更正；
• 請求停止蒐集、處理或利用；
• 請求刪除。
您可透過【客服信箱／App 內聯絡表單】與我們聯繫。我們得為確認身分而要求合理驗證資訊，並於法律允許範圍內回覆您的請求。
11. 資料安全
我們採取合理之技術與組織安全措施，以保護個人資料免於未經授權存取、竄改、毀損、滅失或洩漏，例如權限控管、身分驗證、加密傳輸、稽核紀錄與最小權限原則。
但任何系統均無法保證絕對安全。若發生個資外洩、遺失或其他事故，我們將依適用法令採取應變措施並通知受影響當事人及／或主管機關。
12. 未成年人的資料
本服務聚焦酒類相關資訊。我們不希望未滿十八（18）歲之人註冊付費、認領商家或參與酒類相關互動。如您為法定代理人且認為未成年人向我們提供了不當資料，請與我們聯繫，我們將在法律允許範圍內處理。
13. 第三方內容與外部網站
本服務可能連結第三方網站、地圖導航、社群平台或商家外部頁面。該等第三方對其自身資料處理行為負責，請您另行參閱其隱私政策。
14. 政策修改
我們得不時修訂本隱私權政策。若有重大變更，我們將以 App 內公告、網站公告、電子郵件或其他合理方式通知您。修訂後繼續使用本服務，即表示您同意修訂後內容。
15. 聯絡我們
若您對本政策或個人資料處理有任何疑問、申訴或權利行使需求，請聯絡：
營運者：拓偕科技有限公司
電子郵件：contact@torsade.com.tw
Privacy Policy
Last updated: August 21, 2026 · v7
1. Scope of This Policy
This Privacy Policy explains how Torsade Technologies Company Limited ("we", "us", or "our") collects, processes, uses, stores, and shares personal data in connection with the Yellow Grapes mobile application and related services.
This Policy should be read together with our Terms of Service. If any part of this Policy conflicts with mandatory law, applicable law will prevail.
2. Categories of Data We Collect
Depending on how you use the Service, we may collect the following categories of data:
• Account and identity data, such as your name, display name, email address, sign-in provider identifiers, and profile photo.
• Preference and settings data, such as language, notification preferences, saved merchants, saved wine items, and records of legal consents.
• Content you submit, such as edit suggestions, wine-list corrections, reports, customer support messages, survey responses, claim materials, and verification documents.
• Merchant-management data, if you claim a business, including contact details, review materials, verification records, and operational history.
• Device and technical data, such as device model, OS version, app version, language, IP address, crash logs, diagnostics, and analytics information.
• Location data, if you grant permission, including precise or approximate location used for nearby merchants, map centering, and area search functions.
• Transaction and plan data, if we launch paid features, including subscription status, purchase history, redemption history, and payment-related identifiers, though we may not directly store full payment-card details.
Unless permitted or required by law, we do not intend to collect sensitive personal data such as medical, health, genetic, or criminal-record data. Please do not submit sensitive data that is unrelated to the Service.
3. Purposes of Collection and Use
We collect and use personal data for the following main purposes:
• to register and manage accounts, authenticate users, and support login;
• to provide maps, search, favorites, wine-list browsing, personalization, and local discovery functions;
• to receive, review, and process edit suggestions, merchant claims, reports, and support requests;
• to enable business owners to manage claimed merchants and wine lists;
• to operate, secure, debug, analyze, and improve the Service;
• to send service notices and, where permitted, marketing, promotions, or event information; and
• to comply with legal obligations, respond to authorities, resolve disputes, and enforce rights.
4. Taiwan PDPA Notice
Under Taiwan's Personal Data Protection Act, we will provide notice regarding the name of the collector, purposes of collection, data categories, period, area, recipients and methods of use, your statutory rights, and the consequences of not providing required data, at the time of collection or as otherwise permitted by law.
If you do not provide data necessary for a specific function, we may be unable to create your account, process a claim request, respond to support, enable personalization, or complete the requested service.
5. How We Use Data
We use personal data only within the scope necessary for the stated purposes and in a manner reasonably connected to those purposes.
We may also use data for internal aggregation, de-identified analysis, service-security monitoring, feature testing, and operational decision-making, subject to applicable law where data remains identifiable.
6. When We Share Data
We do not sell your personal data as a general business model. We may disclose data in the following circumstances:
• Cloud and technology providers, such as Firebase/Google Cloud, Mapbox, push-notification, analytics, error-tracking, storage, and customer-support vendors;
• Identity and sign-in providers, such as Google and LINE;
• Payment and transaction processors, if we offer subscriptions or paid plans;
• Merchant owners or their representatives, where reasonably necessary to review suggestions, reports, or claim-related disputes involving a claimed business;
• Professional advisers and contractors, such as lawyers, accountants, auditors, or security consultants;
• Authorities, regulators, courts, or law-enforcement bodies where required by law or necessary to protect rights, investigate misconduct, or prevent harm; and
• Parties to a merger, restructuring, financing, acquisition, or asset transfer, to the extent legally and operationally necessary.
Where cross-border transfer is involved, we will use reasonable safeguards, including contractual and access-control measures where appropriate.
7. International Transfer
Because we may use cloud and technology vendors located outside Taiwan, your personal data may be transferred to, processed in, or stored outside Taiwan. You understand and agree that, to the extent permitted by applicable law, such cross-border processing may occur for the purposes described in this Policy.
8. SDKs, Cookies, and Similar Technologies
We and our service providers may use SDKs, device identifiers, logs, cookies, and similar technologies to keep you signed in, remember preferences, analyze traffic, measure feature usage, prevent abuse, and improve the Service.
You can limit some permissions through your device or app settings, but doing so may affect functionality.
9. Retention
We retain personal data for as long as reasonably necessary to fulfill the stated purposes and for additional periods required or permitted by applicable law, contract, tax, accounting, dispute-resolution, fraud-prevention, security, and audit obligations.
After account deletion, we may retain necessary records for a reasonable period to meet legal obligations, resolve disputes, maintain security, or preserve de-identified and aggregated information for analytics.
10. Your Rights
Under Article 3 of Taiwan's Personal Data Protection Act, you may have the right to:
• inquire about or review your personal data;
• request a copy of your personal data;
• request supplementation or correction;
• request cessation of collection, processing, or use; and
• request deletion.
You may exercise these rights by contacting us at [Privacy / Support Email] or through the in-app contact form. We may request reasonable verification information before acting on a request.
11. Security
We implement reasonable technical and organizational safeguards to protect personal data against unauthorized access, alteration, damage, loss, or leakage, including access controls, authentication, encrypted transmission, audit logging, and least-privilege practices.
No system can be completely secure. If a personal-data incident occurs, we will take responsive measures and provide notifications to affected individuals and/or competent authorities as required by law.
12. Minors
The Service focuses on alcohol-related merchant information. We do not intend for persons under eighteen (18) to register for paid features, claim merchants, or engage in alcohol-related interactive functions. If you are a parent or legal guardian and believe a minor has improperly provided personal data, please contact us and we will address the matter as permitted by law.
13. Third-Party Content and External Sites
The Service may link to third-party websites, map-navigation services, social platforms, or merchant pages. Those third parties are responsible for their own privacy practices, and you should review their policies separately.
14. Changes to This Policy
We may revise this Privacy Policy from time to time. If we make material changes, we will notify you by in-app notice, website notice, email, or another reasonable method. Continued use of the Service after the revised Policy takes effect means you accept the updated Policy.
15. Contact Us
If you have any questions, complaints, or requests regarding this Policy or our handling of personal data, please contact us:
Operator: Torsade Technologies Company Limited
Email: contact@torsade.com.tw