1. 我們收集的資料

• 帳戶及聯絡資料：用戶名稱、電話、電郵、登入及客服通訊。
• 付款資料：訂閱、發票、付款金額及狀態、卡品牌及末四位，以及付款安全檢查結果。我們不保存完整卡號或 CVV。
• 內容資料：人設、品牌資料、你輸入的指示、AI 輸出、貼文、留言、上載的圖片、錄音、影片、素材、逐字稿及公開社交內容。
• 技術及活動資料：IP 地址、裝置、瀏覽器及使用紀錄。

2. 必須及自願提供的資料

建立及保護帳戶、處理付款和提供所選功能所需的欄位屬必須；其他人設、素材及偏好一般屬自願。如不提供必要資料，我們可能無法建立帳戶、付款或提供相關功能。

3. 使用目的

我們使用資料提供及個人化服務、生成內容、管理帳戶、訂閱、付款及退款、保障帳戶和交易安全、防止濫用及欺詐、提供支援、分析及改善產品，以及履行會計、稅務及法律責任。

4. 服務供應商及跨境處理

我們只在提供相關服務所需的範圍，把資料交給服務供應商處理，包括 Stripe（付款）、Supabase（資料庫及雲端託管）、Meta（Threads 帳號連結與發佈）、OpenAI、DeepSeek 或其他 AI 供應商，以及分析、訊息和技術支援服務。資料可能在香港以外處理；我們會要求供應商提供合適保障。供應商亦可能按其私隱政策處理資料。

5. 素材與 AI

你輸入的指示、素材及逐字稿會傳送給提供相關功能所需的 AI 或轉錄供應商。臨時上載的原始錄音、影片或其他媒體會在完成處理後刪除；逐字稿、設定、AI 輸出及歷史紀錄會按本政策保存。請勿提交不必要的敏感資料，或你無權處理的第三方資料。

5A. Threads 帳號連結與發佈

當你選擇連結 Threads，我們會透過 Meta 授權取得你的 Threads 帳號 ID、用戶名稱及發佈所需權限，用於顯示已連結帳號及按你的指示發佈貼文或串文。你可在 SocialKing 發佈前檢查及修改文案；只有你確認後，我們才會把內容傳送至 Threads。我們會安全保存授權資料，以及你確認的文案和發佈紀錄。你可隨時在「我的」解除連結，或在 Meta／Threads 管理授權。解除連結後，我們會刪除儲存的授權資料；已在 Threads 發佈的內容不會自動刪除。

6. 保存期

付款、同意及交易紀錄一般保存 7 年；一般活動紀錄一般保存 24 個月；部分臨時付款技術紀錄會在 90 日後刪除或去識別化。帳戶內容會按提供服務、處理爭議、法律及備份需要保存。涉及爭議、調查或法律要求時，相關資料可能保存較長時間。

7. 保安

我們使用權限控制、資料傳輸加密及其他合理保安措施，防止資料被未經授權存取、使用、修改或刪除。互聯網服務不存在絕對安全；你亦應保護密碼及裝置。

8. 服務通知與直接促銷

我們目前不會使用你的個人資料作直接促銷。若日後有此需要，我們會先說明使用的資料和促銷類別，並按適用法律取得同意。你可隨時免費拒絕直接促銷。付款、訂閱、帳戶安全、服務狀態及客服訊息仍可能按提供服務的需要發送。

9. 查閱、更正及其他要求

你可要求查閱或更正個人資料，亦可要求刪除帳戶或提出私隱查詢；部分資料可能因合約、會計、爭議或法律責任而不能立即刪除。請聯絡 chapterzero.tech@gmail.com，我們可能先核實身份。解除 Threads 連結及申請刪除的步驟，請參閱資料刪除說明。

10. 聯絡及修訂

資料使用者：CHAPTER ZERO TECH LIMITED；地址：觀塘觀塘道418號創紀之城5期23樓2311室。我們會在本頁公布更新版本及生效日期。中英文不一致時，以英文為準。

1. Data we collect

• Account and contact data: username, phone, email, login and support communications.
• Payment data: subscriptions, invoices, payment amounts and status, card brand and last four digits, and payment security check results. We do not store full card numbers or CVV.
• Content data: personas, brand information, instructions you enter, AI outputs, posts, comments, uploaded images, audio, video, source material, transcripts and public social content.
• Technical and activity data: IP address, device, browser and usage records.

2. Mandatory and voluntary data

Fields needed to create and secure an account, process payment and provide a selected feature are mandatory. Other persona, source and preference data is generally voluntary. Without required data we may be unable to create an account, take payment or provide the feature.

3. Purposes

We use data to provide and personalise the service; generate content; manage accounts, subscriptions, payments and refunds; protect account and transaction security; prevent abuse and fraud; support users; analyse and improve the product; and meet accounting, tax and legal duties.

4. Providers and international processing

We share data with service providers only as needed to provide the relevant service. These include Stripe (payments), Supabase (database and cloud hosting), Meta (connecting and publishing to Threads), OpenAI, DeepSeek or other AI providers, and analytics, messaging and technical support services. Data may be processed outside Hong Kong. We require providers to apply appropriate safeguards. Providers may also process data under their own privacy policies.

5. Source material and AI

Instructions you enter, source material and transcripts are sent to the AI or transcription providers needed for the relevant feature. Temporary original audio, video or other media uploads are deleted after processing. Transcripts, settings, AI outputs and history are retained under this policy. Do not submit unnecessary sensitive data or third-party data you lack authority to process.

5A. Connecting and publishing to Threads

When you choose to connect Threads, we obtain your Threads account ID, username and the permissions needed to publish through Meta authorisation. We use this information to show the connected account and publish posts or threads at your direction. You can review and edit the draft in SocialKing before publishing; we send content to Threads only after you confirm. We securely store the authorisation data, the copy you confirmed and the publishing record. You can disconnect at any time in “Me” or manage the authorisation through Meta or Threads. After disconnection, we delete the stored authorisation data; content already published on Threads is not automatically deleted.

6. Retention

Payment, consent and transaction records are generally retained for 7 years; ordinary activity records for 24 months; and some temporary payment technical records are deleted or de-identified after 90 days. Account content is retained as needed to provide the service, handle disputes, meet legal duties and maintain backups. A dispute, investigation or legal requirement may extend retention.

7. Security

We use access controls, encryption in transit and other reasonable safeguards to protect data against unauthorised access, use, alteration or deletion. No internet service is completely secure; you should also protect your password and devices.

8. Service notices and direct marketing

We do not currently use your personal data for direct marketing. If this changes, we will first explain the data and classes of marketing involved and obtain consent as required by applicable law. You may opt out of direct marketing free of charge at any time. We may still send payment, subscription, account-security, service-status and customer-support messages needed to provide the service.

9. Access, correction and requests

You may request access to or correction of personal data, account deletion, or make a privacy enquiry. Some records cannot be deleted immediately because of contractual, accounting, dispute or legal duties. Contact chapterzero.tech@gmail.com; we may verify your identity first. See our Data Deletion Instructions for steps to disconnect Threads or request deletion.

10. Contact and changes

Data user: CHAPTER ZERO TECH LIMITED; address: Suite 2311, 23/F, BEA Tower, Millennium City 5, 418 Kwun Tong Road, Kwun Tong. Updates will identify the new version and effective date. This English version prevails over translations.