一、適用範圍

「店家客戶管理」(以下稱本服務)包含 iPhone App 與電腦版程式,讓自己當老闆的店家(例如汽車修配廠、美甲美睫、電商網拍)管理客戶、車輛、預約與服務紀錄。本服務的提供者為 JIAN TING JIANG;本政策中的「我們」指本服務的提供者與營運團隊。

本服務的帳號只能由我們替店家建立,不開放自行註冊。

二、我們處理哪些資料

• 店家帳號資料:登入用的電子郵件、顯示名稱、所屬店家與角色(老闆或員工)。店家選擇用 Apple 或 Google 登入時,我們會收到該服務提供的帳號識別碼與電子郵件;使用 Apple「隱藏我的電子郵件」時,收到的是轉寄地址。
• 店家輸入的營業資料:客戶(個人或公司)的姓名、電話、電子郵件、地址與備註;聯絡人;車輛的車牌、廠牌車型、年份、車身號碼、引擎號碼與里程;預約、服務與消費紀錄(品項、金額、付款方式);待辦與互動紀錄;商機;商品與庫存;訂單,包含收件人姓名、電話與地址;以及店家在程式中建立的其他紀錄。這些資料屬於店家,由店家決定輸入哪些內容。
• 辨識用的照片與文字:店家使用「認車」時拍攝或選取的行照照片,以及輸入的車身號碼或描述。行照照片可能含有車主姓名、地址等資料。
• 回報問題:店家按程式右上角「回報問題」,或更新失敗自動回報時,會送出這台電腦的診斷資訊(版本、系統、當時的畫面位置、資料筆數、錯誤紀錄),不含客戶資料。
• 我們不收集:廣告識別碼、位置資訊、通訊錄或健康資料。App 內沒有廣告,也沒有第三方分析或追蹤工具。

三、資料存放在哪裡

• 雲端:提供者在台灣自行管理的伺服器(包含帳號與登入)。資料在網路上傳送時全程加密,經 Cloudflare 的加密通道轉送,Cloudflare 不保存店家資料。伺服器每天備份,備份保留 30 天,並另存一份在提供者的網路儲存設備。
• 店家的電腦:電腦版程式在店家電腦保存一份資料,並與伺服器同步。
• 手機:App 會在手機上暫存資料,方便沒有網路時使用;登出時清除。
• 更新前的備份:電腦版更新前,會自動把資料備份到店家電腦的「文件/客戶管理系統備份」資料夾。這份備份只存在店家電腦,不會上傳。
• 檢查更新:電腦版檢查新版本時會連到 GitHub,不會傳送任何店家資料。

四、人工智慧處理

店家使用人工智慧功能時(電腦版與手機相同),當次需要的資料會先送到我們的人工智慧處理服務(由本服務營運團隊管理的主機),再由它透過 OpenRouter 送到人工智慧模型供應商(例如 Google Gemini)處理;這些服務依其各自的隱私權政策處理傳入的資料。給人工智慧的指示與人工智慧金鑰只放在我們的處理服務,不在店家的電腦裡。各功能送出的內容如下:

• 認車:行照照片,或店家輸入的車身號碼、車款描述。照片可能含車主姓名、地址。照片處理完成後即從我們的雲端刪除。
• 查原廠保養資料、零件問答:只送車款(廠牌、車型、年份、引擎)、車身號碼前 11 碼,以及店家輸入的問題,並上網查詢公開的原廠資料;不送車主資料。
• 智慧建檔:店家貼上的對話或文字,可能含客戶姓名、電話。
• 整理分類:客戶資料的摘要。
• 公開資料補齊:只用於公司客戶,上網查詢公開的營業資訊。

另外,電腦版認車時,17 碼的北美規格車身號碼會送到美國公路交通安全署(NHTSA)的公開解碼服務,查詢車款資料。

五、誰可以看到資料

• 店家:店家老闆與店家授權的員工帳號。員工不能刪除資料。
• 我們:只有在管理帳號、提供技術支援、處理店家回報的問題或備份還原需要時,我們才會查看店家資料。我們不出售、不出租資料,也不用於廣告。
• 服務供應商:Cloudflare(加密傳輸,不保存店家資料);店家使用人工智慧功能時,另有我們的人工智慧處理服務、OpenRouter 與人工智慧模型供應商;電腦版認車時的美國公路交通安全署(NHTSA)公開車身號碼解碼服務。
• 店家自己開啟的人工智慧操作接口:電腦版有「人工智慧操作接口」(本機網址介面與 MCP),預設關閉。店家自己開啟後,店家指定的本機人工智慧工具(例如 Claude Desktop)可以讀寫店家的資料;要不要開、給哪個工具用,由店家決定並負責。
• 依法要求:法院或主管機關依法要求提供時。

六、保存與刪除

• 店家刪除的紀錄會先標記為已刪除,30 天後從伺服器清除;每日備份保留 30 天後刪除。
• 人工智慧工作:電腦版送出的,拿到結果後立即從雲端刪除;手機送出的,完成 7 天後刪除。
• 每日的人工智慧用量彙總(次數與費用,不含內容)會上傳到雲端,供我們管理額度。
• 店家停止使用時,可以聯絡我們刪除整個店家的帳號與雲端資料。
• 店家的客戶如果想查詢、更正或刪除自己的資料,請直接聯絡該店家,店家可以在程式中修改或刪除;我們也會協助店家處理。

七、資料安全

資料傳輸一律加密(HTTPS);雲端依帳號與角色限制存取;電腦版保存的金鑰經過加密。

八、兒童

本服務供店家營業使用,不是為兒童設計。

九、政策變更

政策更新時會修改本頁並標示日期;有重大變更時會在 App 內通知。

十、聯絡我們

對本政策有疑問,或要查詢、刪除資料,請來信 [email protected]。

1. Scope

Shop CRM (the "Service"), consisting of the iPhone app and the desktop app, helps owner-operated shops (such as car repair shops, nail and beauty salons, and online sellers) manage customers, vehicles, appointments and service records. The Service is provided by JIAN TING JIANG; in this policy, "we" means the provider and the team operating the Service.

Accounts are created by us for each shop. Public sign-up is not available.

2. Data we process

• Shop account data: sign-in email, display name, shop and role (owner or staff). If a shop signs in with Apple or Google, we receive the account identifier and email provided by that service (a relay address if Apple's "Hide My Email" is used).
• Business data entered by the shop: names, phone numbers, emails, addresses and notes of customers (individuals or companies); contacts; vehicle plates, make and model, year, VIN, engine number and mileage; appointments and service or purchase records (items, amounts, payment method); tasks and interaction records; deals; products and inventory; orders, including recipient names, phone numbers and addresses; and any other records the shop creates in the app. This data belongs to the shop, which decides what to enter.
• Photos and text for vehicle identification: registration photos taken or selected in "Identify", and VINs or descriptions typed in. Registration photos may include the owner's name and address.
• Problem reports: when the shop presses "Report a problem" in the app, or when an update fails, diagnostic information about that computer (version, system, current screen, record counts, error logs) is sent to us. It contains no customer data.
• We do not collect advertising identifiers, location, the phone's address book or health data. The app has no ads and no third-party analytics or tracking.

3. Where data is stored

• Cloud: servers in Taiwan managed by the provider (including accounts and sign-in). Data is encrypted in transit and relayed through Cloudflare's encrypted tunnel; Cloudflare does not store shop data. The server is backed up daily; backups are kept for 30 days, with an additional copy on the provider's network storage.
• The shop's computer: the desktop app keeps a copy and keeps it in sync with the server.
• Phone: the app caches data on the phone for offline use and clears it on sign-out.
• Backups before updates: before updating, the desktop app automatically backs up its data to the "Documents/客戶管理系統備份" folder on the shop's computer. This backup stays on the shop's computer and is never uploaded.
• Update checks: the desktop app connects to GitHub to check for new versions; no shop data is sent.

4. AI processing

When a shop uses AI features (the desktop and mobile apps work the same way), the data needed for that request is first sent to our AI processing service (a server run by the team operating the Service), which sends it through OpenRouter to AI model providers (such as Google Gemini). These services handle the data under their own privacy policies. AI instructions and AI keys are kept only on our processing service, not on the shop's computer. What each feature sends:

• Identify: a registration photo, or a VIN or vehicle description typed by the shop. Photos may include the owner's name and address. Photos are deleted from our cloud once processing is complete.
• OEM maintenance data and parts Q&A: only the vehicle model (make, model, year, engine), the first 11 characters of the VIN and the shop's question, plus online searches of public manufacturer information. No owner data is sent.
• Smart entry: conversations or text pasted by the shop, which may include customer names and phone numbers.
• Organize and classify: summaries of customer data.
• Public data enrichment: for company customers only, online searches of public business information.

In addition, when the desktop app identifies a vehicle, a 17-character North American VIN is sent to the U.S. National Highway Traffic Safety Administration (NHTSA) public decoding service to look up the vehicle model.

5. Who can see the data

• The shop: the owner and staff accounts the shop authorizes. Staff cannot delete data.
• Us: we view shop data only when needed to manage accounts, provide technical support, handle a problem reported by the shop, or restore backups. We do not sell or rent data or use it for advertising.
• Service providers: Cloudflare (encrypted transport; does not store shop data); our AI processing service, OpenRouter and AI model providers when the shop uses AI features; the NHTSA public VIN decoding service when the desktop app identifies a vehicle.
• AI access interface enabled by the shop: the desktop app has an "AI access interface" (a local web API and MCP), which is off by default. If the shop turns it on, local AI tools chosen by the shop (such as Claude Desktop) can read and write the shop's data. Whether to turn it on, and for which tools, is the shop's decision and responsibility.
• Legal requests: when required by a court or authority under law.

6. Retention and deletion

• Records deleted by a shop are marked as deleted and removed from the server after 30 days; daily backups are deleted after 30 days.
• AI requests: those sent from the desktop app are deleted from the cloud as soon as the result comes back; those sent from the phone are deleted 7 days after completion.
• A daily summary of AI usage (counts and costs, no content) is uploaded to the cloud so we can manage usage limits.
• When a shop stops using the Service, it can contact us to delete the shop's accounts and cloud data.
• A shop's customers who want to access, correct or delete their data should contact that shop, which can edit or delete it in the app; we will help the shop do so.

7. Security

All data is encrypted in transit (HTTPS); cloud access is restricted by account and role; keys stored by the desktop app are encrypted.

8. Children

The Service is for business use by shops and is not designed for children.

9. Changes

We update this page and its date when the policy changes, and notify users in the app of significant changes.

10. Contact

For questions about this policy, or to access or delete data, email [email protected].