隱私政策
Privacy Policy

中文版

1. 適用範圍與責任

本政策說明 WEBCA Lab 如何透過 XK+ COMPASS 收集、使用、披露、保存及保護個人資料。我們按卑詩省《Personal Information Protection Act》（PIPA）管理個人資料；商業活動中的資料跨省或跨國流動時，加拿大《Personal Information Protection and Electronic Documents Act》（PIPEDA）亦可能適用。我們已指定私隱負責人處理查詢及申訴。

2. 我們收集的資料

• 帳戶資料：電郵地址、顯示名稱、頭像、會員識別碼及由 Google 或 Netlify Identity 提供的登入資料。我們不會收到你的 Google 密碼。
• 量測資料：你登入後儲存的標題、日期、角度、坐向、元運、飛星盤資料與 Snapshot 圖像。
• 支援資料：你提交的問題、建議及相關跟進。
• 技術資料：IP 位址、瀏覽器、裝置類型、登入事件、Cookie、錯誤與安全日誌。
• 感測資料：羅盤及水平尺讀數主要在裝置本機處理；只有你登入並儲存量測時，相關讀數才會連同紀錄上傳。

3. 使用目的

我們用資料來驗證會員、提供與同步量測、下載／改名／刪除紀錄、回覆支援、管理 VIP 與測試資格、防止濫用、維護安全、除錯、改善服務及履行法律義務。我們不出售或出租個人資料。

4. 同意與選擇

建立或啟用帳戶、儲存量測或提交留言時，你同意相關處理。你可不登入而使用 Snapshot 及列印，可刪除個別量測，亦可要求關閉帳戶。撤回同意可能使我們無法繼續提供會員功能。

5. 披露與跨境處理

我們只會向協助營運服務的供應商（包括 Google 登入，以及 Netlify 的 Identity、Functions、託管及 Blobs 儲存）披露所需資料，或在法律要求、保護權利與安全、企業重組時披露。資料可能在加拿大以外（包括美國）儲存或處理，並可能受當地法律及合法存取要求約束。

6. 保存與刪除

我們只在提供服務、解決爭議、保安或法律需要期間保存資料。刪除量測時，主要紀錄與 Snapshot 會從現行會員儲存移除；備份、安全日誌或快取可能在有限時間內保留。支援訊息可為處理個案及建立服務紀錄而保留。你可透過會員支援要求刪除帳戶及相關個人資料，但法律要求保存的資料除外。

7. 保護措施

我們使用與資料敏感程度相稱的技術及管理措施，包括身分驗證、存取控制及傳輸加密；然而任何網路服務均不能保證絕對安全。請使用獨特密碼並妥善保護裝置及登入狀態。

8. Cookie 與本機儲存

服務及身分驗證供應商會使用必要的 Cookie、權杖或瀏覽器儲存，以維持登入、安全及偏好。封鎖必要儲存可能令會員功能無法運作。

9. 查閱、更正與申訴

你可在會員中心查看和管理部分資料，並可要求查閱、更正或刪除個人資料。請透過會員支援或 www.webca.com 聯絡私隱負責人；我們可能先核實身分。若問題未獲妥善處理，你可向 Office of the Information and Privacy Commissioner for British Columbia 查詢或申訴。

10. 兒童與政策更新

本服務不以 13 歲以下兒童為對象；未成年人應在法律要求時取得家長或監護人同意。我們可更新本政策並在本頁列出新生效日期；重大變更會在合理可行情況下通知會員。

English Version

1. Scope and accountability

This Policy explains how WEBCA Lab collects, uses, discloses, retains, and safeguards personal information through XK+ COMPASS. We manage personal information under British Columbia’s Personal Information Protection Act (PIPA). Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) may also apply when information in commercial activities crosses provincial or national borders. We designate a Privacy Officer to handle questions and complaints.

2. Information we collect

• Account information: email, display name, profile image, member identifier, and authentication details supplied by Google or Netlify Identity. We do not receive your Google password.
• Measurement information: titles, dates, angles, directions, period, Flying Star chart data, and Snapshot images saved while signed in.
• Support information: questions, suggestions, and related follow-up.
• Technical information: IP address, browser, device type, sign-in events, cookies, error, and security logs.
• Sensor information: compass and level readings are primarily processed on your device. Related readings are uploaded as part of a record only when you are signed in and save a measurement.

3. Why we use information

We use information to authenticate members; provide and sync measurements; enable downloading, renaming, and deletion; respond to support; administer VIP and testing eligibility; prevent abuse; maintain security; troubleshoot; improve the Service; and comply with law. We do not sell or rent personal information.

4. Consent and choices

When you create or activate an account, save a measurement, or send a message, you consent to the related processing. You can use Snapshot and printing without signing in, delete individual measurements, and request account closure. Withdrawing consent may prevent us from providing member features.

5. Disclosure and international processing

We disclose information only as needed to service providers that help operate the Service—including Google sign-in and Netlify Identity, Functions, hosting, and Blobs storage—or when required by law, to protect rights and safety, or for a business reorganization. Information may be stored or processed outside Canada, including in the United States, where it may be subject to local law and lawful access requests.

6. Retention and deletion

We retain information only while needed for service delivery, disputes, security, or legal requirements. Deleting a measurement removes its primary record and Snapshot from active member storage; backups, security logs, or caches may persist for a limited period. Support messages may be retained to resolve cases and maintain service records. You may request deletion of your account and related personal information through member support, subject to legally required retention.

7. Safeguards

We use technical and organizational safeguards appropriate to the sensitivity of the information, including authentication, access controls, and encryption in transit. No internet service can guarantee absolute security. Use a unique password and protect your device and session.

8. Cookies and local storage

The Service and authentication providers use necessary cookies, tokens, or browser storage to maintain sign-in, security, and preferences. Blocking necessary storage may prevent member features from working.

9. Access, correction, and complaints

You may view and manage some information in the Member Centre and request access to, correction of, or deletion of personal information. Contact the Privacy Officer through member support or www.webca.com; we may first verify your identity. If your concern is unresolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia.

10. Children and policy updates

The Service is not directed to children under 13. Minors should obtain parent or guardian consent where required by law. We may update this Policy and post a new effective date, with reasonable notice of material changes where practicable.

Language: The Chinese version is provided for convenience. If the two versions differ, the English version governs to the extent permitted by law.