개인정보처리방침

1. Data Collection

The personal information we collect includes:

• Basic information (name, email)
• Authentication information (provided by Google account)
• Usage records
• Device information

2. Data Usage

We use the collected data to:

• Provide and improve services
• Personalize user experience
• Send necessary notifications
• Ensure account security

3. Google Login

We use Google OAuth as a login method. When you choose to login with your Google account:

• We receive basic information from your Google account (such as name, email address, and profile picture)
• We do not have access to your Google password
• We will not post content to your Google account without your consent

You can revoke our access to your Google account at any time in your Google account settings.

4. Google Workspace API Usage and AI/ML Model Training

Important statement regarding our use of Google Workspace APIs:

• We do not use any user data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or machine learning (ML) models
• All data obtained through Google Workspace APIs is used solely to provide direct service functionality to you
• We are committed to protecting your Google Workspace data and will not use it for any AI or ML model training purposes

5. Outbound Call Data Processing

When you use Pathors AI outbound calling services, we may process the following data:

• Phone numbers and contact information (from customer-provided call lists)
• Call recordings (for quality assurance, dispute resolution, and service improvement)
• Call transcripts (generated by speech recognition technology)
• Call metadata (call time, duration, status, etc.)

6. AI Voice Interaction Data

Regarding data generated during AI voice interactions:

• Speech synthesis data: AI-generated voice content does not contain the call recipient's personal voice characteristics
• Interaction records: Conversation flow records between the AI and call recipients
• Analytics data: Derived analysis results such as call sentiment analysis and intent recognition

7. Legal Basis for Processing

Our legal bases for processing personal data include:

• Consent: The call recipient or data subject has explicitly consented to the processing of their data
• Contractual necessity: Processing is necessary for the performance of a service contract with the customer
• Legitimate interest: Processing is necessary for platform operations, security maintenance, and service improvement, provided it does not override the fundamental rights of data subjects
• Legal obligation: Processing is necessary to comply with applicable laws and regulations

8. Call Recording Retention

• Call recordings are retained for a default period of 90 days; customers may adjust this based on their plan
• Recordings are automatically deleted after the retention period expires
• Customers may request early deletion of their call recordings at any time
• Recordings involved in disputes or legal proceedings may be retained for an extended period as required by law

9. Data Protection

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure.

10. Third-Party Services and Telecommunications Infrastructure

Our services integrate with multiple third-party services:

• Authentication service providers such as Google
• Telecommunications infrastructure providers (for voice transmission in AI outbound calls)
• Cloud service providers (for data storage and computing)

These third parties may process your information in accordance with their respective privacy policies. By using our services, you acknowledge and accept data processing involving these third-party services.

11. Cross-Border Data Transfers

Your data may be processed outside of Taiwan, including but not limited to:

• Data center locations of cloud service providers
• Call routing nodes of telecommunications service providers
• Regions where AI model computation services are hosted

We ensure that cross-border data transfers comply with applicable data protection regulations and implement appropriate safeguards.

12. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Revoke our access permissions at any time
• Request restriction or cessation of processing your personal data
• Request a portable copy of your data

13. Policy Updates

We may update this privacy policy from time to time. We will post any changes on our website and notify you of significant changes.