私隱政策Privacy Policy

1.適用範圍

本政策說明 喜居物業（「本公司」、「我們」）的公司內部加密備份應用程式 heyhomeBackup（「本應用程式」）如何存取、使用、儲存、分享及刪除 Google 使用者資料。

本應用程式只供本公司授權人員使用，並只會連接本公司自己的 Google 帳戶。本應用程式不向公眾提供。

1.Scope

This policy explains how heyhomeBackup (the "app"), the company-internal encrypted backup application of 喜居物業 (the "company", "we"), accesses, uses, stores, shares and deletes Google user data.

The app is used only by the company's authorised personnel and connects only to the company's own Google account. It is not offered to the public.

2.我們存取的 Google 資料

本應用程式只要求以下一項 OAuth 權限範圍：

https://www.googleapis.com/auth/drive.file

在 Google 的 drive.file 權限範圍下，本應用程式只能存取由本應用程式建立，或經使用者特意以本應用程式開啟或與本應用程式分享的個別 Google 雲端硬碟檔案。本應用程式不要求存取整個 Google 雲端硬碟，亦不要求 Gmail、通訊錄、日曆或相片等其他 Google 服務的權限。

在此權限下，本應用程式使用：

• 本應用程式建立的備份檔案：加密備份檔案，以及核對及復原備份所需的少量元資料；
• 已連接帳戶的電郵地址：只用於向本公司授權人員顯示目前連接的是哪個帳戶；
• 雲端硬碟儲存空間用量：只用於在空間不足時提醒本公司授權人員。

2.Google data we access

The app requests exactly one OAuth scope:

https://www.googleapis.com/auth/drive.file

Under Google's drive.file scope, the app can access only the specific Google Drive files that were created by the app, or that a user deliberately opened with or shared with the app. The app does not request access to all of Google Drive, or to other Google services such as Gmail, Contacts, Calendar or Photos.

Under this scope the app uses:

• Backup files created by the app: encrypted backup files and the minimal metadata needed to check and recover them;
• The connected account's email address: only to show the company's authorised personnel which account is connected;
• Drive storage usage: only to warn the company's authorised personnel when space is running low.

3.資料用途

本應用程式使用上述 Google 資料，只為在本公司的 Google 雲端硬碟內建立、上載、核對、列出、下載（以作復原）及刪除本應用程式自己的加密備份檔案。

我們不會將 Google 使用者資料用於任何其他用途。

3.How we use Google data

The app uses the Google data above only to create, upload, check, list, download (for recovery) and delete its own encrypted backup files in the company's Google Drive.

We do not use Google user data for any other purpose.

4.加密及儲存

• 備份內容在上載前已經加密。
• Google 雲端硬碟只儲存加密備份檔案，以及核對完整性及復原所需的少量元資料。
• 「復原私鑰」（Recovery Private Key）及其密碼短語由本公司負責人保管，不會上載到 Google 雲端硬碟或 Cloudflare。

4.Encryption and storage

• Backup content is encrypted before upload.
• Google Drive stores only the encrypted backup files and minimal integrity and recovery metadata.
• The Recovery Private Key and its passphrase remain in the custody of the company Owner and are not uploaded to Google Drive or Cloudflare.

5.服務供應商及分享

• Google 雲端硬碟：作為本公司選用的備份儲存供應商，處理加密備份檔案。
• Cloudflare：只負責提供本公開網站的靜態頁面，並可能按其自身條款處理一般的網站請求資料（例如 IP 地址及瀏覽器類型）。Cloudflare 不會收到任何備份檔案或 Google 使用者資料。

我們不會出售 Google 使用者資料，亦不會將其用於廣告、分析或追蹤。我們不使用任何供應商中轉服務，亦不會與任何無關的第三方分享或轉移 Google 使用者資料，除非為遵守適用法律所必需。

我們不會使用 Google 使用者資料去開發、改進或訓練一般用途的人工智能或機器學習模型，亦不會用於判斷信用或借貸。

只有本公司授權人員可在備份運作、復原資料、處理保安事故或遵守法律要求時接觸備份內容。

5.Service providers and sharing

• Google Drive processes the encrypted backup files as the company's selected backup storage provider.
• Cloudflare serves only the static pages of this public website and may process standard request metadata (such as IP address and browser type) under its own terms. Cloudflare does not receive any backup files or Google user data.

We do not sell Google user data and do not use it for advertising, analytics or tracking. We use no vendor relay service, and we do not share or transfer Google user data to any unrelated third party, except where required to comply with applicable law.

We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models, or to determine creditworthiness or for lending purposes.

Only the company's authorised personnel may access backup content, and only to operate backups, recover data, handle a security incident or comply with legal requirements.

6.有限使用聲明

heyhomeBackup 使用及轉移從 Google API 取得的資料時，將遵守 Google API 服務使用者資料政策，包括其中的「有限使用」（Limited Use）規定。

6.Limited Use disclosure

heyhomeBackup's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7.保留及刪除

• 加密備份副本按本公司的備份政策輪替；較舊的副本會在輪替時被刪除。
• 刪除後，Google 可能按其自身政策在其系統中保留剩餘副本一段時間，這不受本公司控制。
• 中斷連接或撤銷存取權（見第 8 節）會停止本應用程式日後的存取，但此舉本身不會刪除已存放在 Google 雲端硬碟內的檔案。
• 本公司負責人可隨時在 Google 雲端硬碟直接刪除本應用程式建立的檔案。
• 私隱查詢可經第 12 節所列的已批准聯絡方式提出。

7.Retention and deletion

• Encrypted backup copies are rotated under the company's backup policy; older copies are deleted as part of that rotation.
• After deletion, Google may keep residual copies in its systems for a period under its own policies, which the company does not control.
• Disconnecting the app or revoking its access (section 8) stops future access by the app, but does not by itself delete files already stored in Google Drive.
• The company Owner can delete the files created by the app directly in Google Drive at any time.
• Privacy enquiries can be made through the approved contact listed in section 12.

8.撤銷存取權

可隨時以下列任一方式撤銷 heyhomeBackup 對 Google 帳戶的存取權：

• 由本公司授權人員在 heyhomeBackup 內選擇中斷連接；或
• 登入該 Google 帳戶，前往 Google 帳戶的「第三方連結」頁面，移除 heyhomeBackup 的存取權。

已存放的檔案處理方式見第 7 節。

8.Revoking access

Access by heyhomeBackup to the Google account can be revoked at any time by either:

• the company's authorised personnel choosing disconnect in heyhomeBackup; or
• signing in to the Google account and removing heyhomeBackup on the Google Account "Third-party connections" page.

See section 7 for files already stored.

9.關於本網站

本網站是純靜態頁面，只提供應用程式及私隱資料，並不是登入頁面或系統連接端點。本網站沒有程式碼、表格、Cookie、分析或追蹤工具，亦不會載入任何第三方資源，並不會收集或接收任何 Google 使用者資料或備份資料。

9.About this website

This website is plain static pages that provide application and privacy information only; it is not a sign-in page or a system endpoint. It has no scripts, forms, cookies, analytics or trackers, loads no third-party resources, and never collects or receives Google user data or backup data.

10.兒童

本應用程式是公司內部應用程式，並非為兒童而設，亦不會刻意處理兒童的資料。

10.Children

The app is a company-internal application. It is not directed at children and does not knowingly process children's data.

11.政策更新

如本應用程式處理 Google 使用者資料的方式有變，我們會在使用新方式前更新本頁及頁首的「最後更新」日期。

11.Changes to this policy

If the way the app handles Google user data changes, we will update this page and the "Last updated" date at the top before the new practice takes effect.

12.聯絡我們

如對本政策或 heyhomeBackup 處理 Google 使用者資料的方式有任何查詢，包括刪除要求，請電郵至 heyhome28@gmail.com 與喜居物業聯絡。

12.Contact us

For privacy enquiries about this policy or how heyhomeBackup handles Google user data, including deletion requests, please email 喜居物業 at heyhome28@gmail.com.