Privacy Policy

1 Information We Collect

We collect information that helps us provide better testing services and support. This includes details you share directly with us and information gathered through your use of our systems.

• Contact information including name, email address, phone number, and business address
• Professional details about your testing processes, software systems, and improvement goals
• Technical data from testing tools and platforms used during our collaboration
• Communication records from emails, calls, and project meetings
• Usage analytics from our website and client portals
• Payment information processed through secure third-party providers

2 How We Use Your Information

Your information helps us deliver personalized testing improvement services. We use it to understand your specific challenges, develop customized solutions, and maintain ongoing support relationships.

3 Information Sharing and Disclosure

We don't sell your personal information. Sometimes we need to share limited information with trusted partners who help us deliver our services, but we're selective about these relationships.

Information may be shared with testing tool vendors when integrating systems, cloud hosting providers for secure data storage, and payment processors for billing purposes. All partners sign confidentiality agreements and follow strict data protection standards.

We may disclose information when required by Taiwan law, to protect our legal rights, or during business transitions like mergers or acquisitions. You'll be notified of any significant changes to data ownership.

4 Data Security Measures

We take data security seriously because your business information is sensitive. Our security approach combines industry-standard encryption with practical access controls and regular monitoring.

• AES-256 encryption for data storage and TLS 1.3 for data transmission
• Multi-factor authentication for all team member accounts
• Regular security audits and penetration testing by external experts
• Restricted access controls - team members only see data needed for their work
• Automated backup systems with encrypted off-site storage
• 24/7 monitoring for unusual access patterns or potential threats

5 Data Retention and Deletion

We keep your information only as long as it serves a business purpose. Active client data is retained during our working relationship plus one year for support purposes. Financial records are kept for seven years as required by Taiwan business law.

When retention periods end, we securely delete your information using multi-pass overwriting for local storage and cryptographic erasure for encrypted cloud data. Some anonymized analytics may be retained to improve our services, but this data cannot identify you or your business.

6 International Data Transfers

Some of our cloud infrastructure and partner services operate outside Taiwan. When data crosses borders, we ensure adequate protection through contractual safeguards, certification programs, or adequacy decisions recognized by Taiwan authorities.

Primary data storage remains within Taiwan or regions with equivalent privacy protections. Any international transfers are limited to what's necessary for service delivery and are protected by appropriate legal mechanisms.

7 Cookies and Website Analytics

Our website uses cookies to improve your browsing experience and help us understand how people find and use our services. Essential cookies enable basic site functionality, while analytics cookies help us identify popular content and improve navigation.

You can control cookie settings through your browser preferences. Disabling cookies won't prevent you from accessing our main content, though some interactive features may be limited.

8 Updates to This Policy

We update this privacy policy when our practices change or when laws require modifications. Significant changes will be communicated directly to active clients, and we'll post updated versions on our website with clear revision dates.

Minor clarifications or formatting changes may be made without individual notification, but the effective date will always reflect the most recent update.