Privacy Policy隱私權政策

01Who we are我們是誰

bkpdrive is a cloud file-storage service. For the purposes of data-protection law, bkpdrive is the controller of the personal information described in this Policy. You can reach us about privacy at [email protected].bkpdrive 是雲端檔案儲存服務。就資料保護法而言，bkpdrive 是本政策所述個人資訊的控管者。隱私相關事項請來信 [email protected]。

02Information we collect我們收集的資訊

• Account information. When you sign in with Google, we receive and store a Google account identifier, your email address, your display name, and your profile picture URL.帳號資訊。當你以 Google 登入，我們會取得並儲存 Google 帳號識別碼、你的 email、顯示名稱與大頭貼網址。
• Your files. The files and folders you upload, together with related metadata such as file names, sizes, types, and upload and modification times.你的檔案。你上傳的檔案與資料夾，以及相關中繼資料，例如檔名、大小、類型、上傳與修改時間。
• Account & usage data. Information needed to run your account, such as your storage usage and allowance, your preferences (for example, an advertising flag), and — if you take part in a referral or earn-storage program — the referral relationship between accounts (who invited whom) and an invite code.帳號與使用資料。營運你的帳號所需的資訊，例如儲存用量與額度、你的偏好設定（例如廣告旗標），以及（若你參與推薦或賺取空間活動）帳號之間的推薦關係（誰邀請了誰）與邀請碼。
• Technical & log data. Information automatically generated when you use the Service, such as IP address (and approximate location derived from it), device and browser information, and request logs used to operate and secure the Service.技術與記錄資料。你使用本服務時自動產生的資訊，例如 IP 位址（及由其推得的概略位置）、裝置與瀏覽器資訊，以及用於營運與保護本服務的請求記錄。

We do not intentionally collect special categories of personal data, and you should not store such data with us unless you accept responsibility for it under our Terms.我們不會刻意收集特種個人資料；除非你依我們的條款自行承擔相關責任，否則請勿將該類資料存放於本服務。

03How we use information資訊的使用方式

We use the information to:我們將資訊用於：

• provide, maintain, and improve the Service — store your files and let you access, organize, and download them;提供、維護與改善本服務：儲存你的檔案，讓你存取、整理與下載；
• authenticate you, operate your account, and enforce storage allowances and limits;驗證你的身分、營運你的帳號，並執行儲存額度與限制；
• run optional features such as referral or earn-storage programs;營運選擇性功能，例如推薦或賺取空間活動；
• protect the Service and our users — security, fraud and abuse prevention, and troubleshooting;保護本服務與使用者：資安、詐欺與濫用防範、問題排除；
• communicate with you about your account, security, or important changes;就你的帳號、安全性或重要變更與你聯繫；
• display advertising if and when we introduce it (see §7); and若未來導入廣告，用於顯示廣告（見 §7）；以及
• comply with legal obligations and enforce our Terms.遵循法律義務並執行我們的條款。

04Legal bases (where applicable)法律依據（如適用）

Where data-protection laws such as the GDPR apply, we process personal information on these bases: performance of a contract (to provide the Service you request); legitimate interests (to operate, secure, and improve the Service and prevent abuse, balanced against your rights); consent (where we ask for it, for example for certain optional features — which you can withdraw); and legal obligation (to comply with the law).於 GDPR 等資料保護法適用之情形，我們基於下列依據處理個人資訊：契約履行（提供你請求的服務）；正當利益（營運、保護與改善本服務並防範濫用，並與你的權利衡平）；同意（於我們徵求同意之情形，例如特定選擇性功能；你可以隨時撤回）；以及法律義務（遵循法律）。

05Your files你的檔案

Your files are transmitted over secure (HTTPS) connections and stored using our infrastructure and trusted third-party cloud storage providers that we use to operate the Service. To provide the Service, your files are processed automatically (for example, prepared for storage and returned to you on download). We do not sell your files, we do not use the contents of your files to show you advertising, and we do not access their contents except as necessary to operate or secure the Service, to enforce our Terms, or to comply with the law.你的檔案經安全（HTTPS）連線傳輸，儲存於我們的基礎設施及我們用以營運本服務的受信任第三方雲端儲存供應商。為提供本服務，你的檔案會被自動化處理（例如為儲存而處理、於下載時還原）。我們不販售你的檔案，不使用你檔案的內容對你顯示廣告；除為營運或保護本服務、執行條款或遵循法律所必要外，我們也不存取其內容。

06Service providers服務供應商

We share information with trusted third parties that help us run the Service — for example, Google for sign-in, and cloud infrastructure and storage providers that host, transmit, and store data on our behalf. These providers may process personal information only as needed to provide their services to us and under appropriate confidentiality and data-protection obligations. We do not sell your personal information, and we do not share it with third parties for their own marketing.我們與協助營運本服務的受信任第三方分享資訊，例如提供登入的 Google，以及代我們代管、傳輸與儲存資料的雲端基礎設施與儲存供應商。這些供應商僅得於為我們提供服務所需的範圍內處理個人資訊，並受適當的保密與資料保護義務拘束。我們不販售你的個人資訊，也不會為第三方自身的行銷目的而分享。

07Advertising廣告

bkpdrive includes a free allowance and may be supported by advertising. We do not currently use advertising or cross-site tracking cookies, and we do not build advertising profiles from the contents of your files. If we introduce advertising, we will update this Policy to describe what is involved and any choices you have, and we will not sell your personal information.bkpdrive 包含免費額度，未來可能以廣告支持營運。我們目前不使用廣告或跨網站追蹤 Cookie，也不會從你檔案的內容建立廣告輪廓。若導入廣告，我們會更新本政策說明相關做法與你的選擇，且不會販售你的個人資訊。

08Cookies & local storageCookie 與本機儲存

We use your browser's local storage to keep you signed in — for example, a refresh token and, if you arrived via a referral, a referral code. These are necessary for the Service to function. We do not use advertising or third-party tracking cookies. Clearing your browser storage signs you out and removes these values.我們使用瀏覽器的本機儲存讓你保持登入，例如 refresh token，以及（若你經推薦連結而來）推薦碼。這些是本服務運作所必需。我們不使用廣告或第三方追蹤 Cookie。清除瀏覽器儲存會使你登出並移除這些值。

09Data retention資料保留

We keep your files until you delete them or close your account. Deleted files are moved to trash and may remain there, or in routine backups, for a limited period before being permanently removed. We keep account information for as long as your account is active. When you close your account, we delete your account information and files within a reasonable period, except for limited data we must keep to comply with legal, security, or accounting obligations. Technical logs are retained only as long as needed to operate and secure the Service.我們保留你的檔案，直到你刪除它們或關閉帳號。刪除的檔案會移入垃圾桶，並可能在垃圾桶或例行備份中停留一段有限期間後永久移除。帳號資訊於帳號有效期間保留。你關閉帳號後，我們會在合理期間內刪除帳號資訊與檔案，惟為遵循法律、資安或會計義務而必須保留的有限資料除外。技術記錄僅保留營運與保護本服務所需的期間。

10Your rights & choices你的權利與選擇

• Access & export. You can view and download your files at any time from the web app or CLI.存取與匯出。你隨時可以從網頁應用程式或 CLI 檢視並下載你的檔案。
• Delete. You can delete individual files or close your account to remove your data.刪除。你可以刪除個別檔案，或關閉帳號以移除你的資料。
• Data-protection rights. Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise them, contact us at [email protected]. You also have the right to lodge a complaint with your local data-protection authority.資料保護權利。依你居住地的法律，你可能享有存取、更正、刪除、限制或反對處理個人資料，以及資料可攜的權利。行使權利請來信 [email protected]。你也有權向當地的資料保護主管機關申訴。
• California residents. We do not sell or "share" personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.加州居民。我們不出售或「分享」加州法律所定義的個人資訊，也不會因你行使權利而歧視你。

11Security資訊安全

We protect your information with reasonable technical and organizational measures, including secure (HTTPS) transport and access controls, and if we ever become aware of a breach affecting your personal data we will notify you and the authorities where required by law. As with any online service, no method of transmission or storage can be completely secure, so we can't promise absolute security — but keeping your information safe is something we take seriously.我們以合理的技術與組織措施保護你的資訊，包括安全（HTTPS）傳輸與存取控管；若發現影響你個人資料的資安事件，我們將依法律要求通知你與主管機關。如同任何線上服務，沒有任何傳輸或儲存方式能絕對安全，因此我們無法承諾絕對的安全性，但保護你的資訊是我們認真以對的事。

To be clear about the limits: bkpdrive does not yet provide end-to-end encryption. Because we have to process your files to operate the Service, we are technically able to access their contents (we only do so as described in §5). For that reason — as with any cloud service — we recommend also keeping your own copy of your most critical files. We are a small, independent service and have not yet obtained third-party security certifications such as SOC 2 or ISO 27001 (see §13 if your use depends on them).把界限說清楚：bkpdrive 目前尚未提供端對端加密。因為我們必須處理你的檔案才能營運本服務，技術上我們有能力存取其內容（僅於 §5 所述情形為之）。因此，如同任何雲端服務，建議對你最重要的檔案自行留存副本。我們是小型獨立服務，尚未取得 SOC 2 或 ISO 27001 等第三方資安認證（若你的用途仰賴這類認證，見 §13）。

12Children兒童

The Service is not directed to children under 13 (or the minimum age of digital consent in your country, if higher), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will delete it.本服務並非以未滿 13 歲（或你所在國家法定數位同意年齡，以較高者為準）的兒童為對象，我們也不會明知而收集其個人資訊。若你認為有兒童向我們提供了個人資訊，請與我們聯絡，我們將刪除之。

13Data location, transfers & compliance資料所在地、傳輸與合規

bkpdrive is operated from Taiwan. Your information is processed and stored on globally distributed cloud infrastructure and trusted third-party providers, which may process and store data in countries other than your own, where data-protection laws may differ from those in your jurisdiction. Because we rely on globally distributed infrastructure, we cannot guarantee that your data is kept within any particular country or region; where required, we take steps to ensure appropriate safeguards for international transfers.bkpdrive 自台灣營運。你的資訊在全球分布的雲端基礎設施與受信任的第三方供應商上處理與儲存，可能在你所在國以外的國家處理與存放，該等國家的資料保護法律可能與你所在法域不同。由於我們仰賴全球分布的基礎設施，無法保證你的資料保存於任何特定國家或區域；於法律要求時，我們會採取措施確保國際傳輸具備適當保障。

We are a small, independent service and have not yet obtained formal compliance certifications (such as SOC 2 or ISO 27001), nor do we offer data-residency commitments or signed data-processing agreements. If your use depends on those guarantees, bkpdrive may not be the right fit today. You can reach us with compliance questions at [email protected].我們是小型獨立服務，尚未取得正式合規認證（如 SOC 2 或 ISO 27001），亦不提供資料在地化承諾或簽署資料處理協議。若你的使用情境仰賴上述保證，bkpdrive 目前可能不適合你。合規問題請來信 [email protected]。

14Changes to this policy政策變更

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the revised Policy.我們可能不時更新本政策。有重大變更時，我們會更新上方的「最後更新」日期，並於適當情形提供額外通知。變更生效後你繼續使用本服務，即表示接受修訂後的政策。

This Policy is provided in Chinese and English; both language versions are equally authentic.本政策以中文與英文兩種語言作成，兩種語言版本具同等效力。

15Contact聯絡方式

Questions about your privacy or this Policy, or want to exercise your rights? Contact us at [email protected].對你的隱私或本政策有疑問，或想行使你的權利？請來信 [email protected]。