LaunBooking 與 LaunLive 攏來隱私權政策：Google 使用者資料

本頁適用於台灣小象出海有限公司（無界聯盟）提供的 LaunBooking（book.jaygallery.com）與 LaunLive 攏來（launlive.jaygallery.com）連接 Google 帳號與 Google 日曆的功能。處理 Google 使用者資料時，如本頁與本網站隱私權政策不同，以本頁為準。

我們取得哪些資料

只有你在後台按下「連接 Google 日曆」並同意授權後，我們才會取得以下資料：

  • Google 帳號 Email：用來顯示目前連接的是哪個帳號。
  • 存取權杖與更新權杖：讓系統在你沒有開著後台時也能同步日曆。
  • 忙碌時段：你設定要檢查衝突的日曆（主要日曆，以及你自行填入的其他日曆，合計最多五本）的忙碌開始與結束時間。我們只取得時間，不取得這些行程的標題、內容、地點或參與者。
  • 日曆名稱：LaunLive 攏來連接時會讀取主要日曆的名稱，通常是你的 Email，用來顯示連接的帳號。
  • 系統自己建立的行程：行程 ID、Google Meet 連結與行程狀態。除了系統建立的行程，我們不會讀取日曆裡其他行程的內容。
  • 日曆變動通知：Google 會通知我們日曆有變動，讓可預約時間保持正確。通知本身不含行程內容。

我們怎麼使用這些資料

  • 避免重複預約：忙碌時段只用來把預約頁上的時間擋掉。客人只看得到可預約的時間，看不到你為什麼沒空。
  • 把預約寫進日曆：預約成立時，系統在你選定的日曆建立行程，內容包含時間、地點、客人姓名、電話、問卷答案與改期取消連結。活動地點選 Google Meet 時會自動建立會議連結。預約改期或取消時，系統會更新或刪除這筆行程。
  • 把研討會寫進日曆：使用 LaunLive 攏來的研討會日曆功能時，系統在主持人的日曆建立場次行程，把報名者的 Email 加為與會者，由 Google 寄出日曆邀請。報名者之間看不到彼此。

客人資料會寫進 Google 日曆

如果你是預約的客人：你填寫的姓名、電話與問卷答案，會寫入為你服務的顧問的 Google 日曆行程，方便顧問準備諮詢。這份資料之後由該顧問的 Google 帳號保存。

儲存與保護

資料存放在我們租用的主機（Hostinger）。權杖以加密方式保存，所有傳輸都使用 HTTPS。資料庫每日加密備份至 Cloudflare R2。

分享與使用限制

  • 我們不販售 Google 使用者資料，也不提供給廣告平台、資料仲介或資訊轉售商。
  • 我們不把 Google 使用者資料用於廣告（包含再行銷與個人化廣告），也不用於判斷信用或貸款資格。
  • 我們不用 Google 使用者資料建立、訓練或改善任何機器學習或人工智慧模型。
  • 除了為提供上述功能所需的主機與備份服務商（Hostinger、Cloudflare），我們只在這些情況轉移資料：經你同意提供你看得到的功能、為了安全（例如調查濫用）、遵守法律，或公司併購或資產出售且事先取得你的明確同意。
  • 工作人員不會閱讀這些資料，除非你同意我們查看特定內容、為了安全或法律需要，或資料已彙總並去識別化且僅供內部營運使用。
  • 如果你自行授權外部 AI 助理連接後台，它能讀取日曆連線狀態與帳號 Email，不包含忙碌時段或行程內容。

保留與刪除

  • 中斷連線：到後台的日曆設定頁按中斷連線，系統會立刻刪除存取權杖、更新權杖、忙碌時段與日曆通知設定。
  • 撤銷 Google 授權：LaunBooking 中斷連線時不會替你撤銷 Google 帳號的整體授權，因為同一個 Google 帳號可能同時連著 LaunLive 攏來；LaunLive 攏來中斷連接時則會向 Google 撤銷這個帳號的授權。你也可以隨時到 Google 帳戶的第三方連線頁面 移除授權。
  • 已寫入日曆的行程：留在你的 Google 日曆，由你自行管理。
  • 其他紀錄：連接過的 Email，以及預約紀錄裡的行程 ID 與 Meet 連結，會保留作為服務紀錄。你可以寫信到 [email protected] 要求刪除，我們會在收到請求後 30 日內處理。已刪除的資料會在加密備份中最多再留存 12 個月，之後自動清除。

Google 有限使用聲明

LaunBooking 與 LaunLive 攏來使用從 Google Workspace 範圍取得的資料時，會遵守 Google 使用者資料政策，包含其中的有限使用規定。

English summary

This page applies to the Google account and Google Calendar connection in LaunBooking (book.jaygallery.com) and LaunLive (launlive.jaygallery.com), operated by 台灣小象出海有限公司 (League of Dreamers). Where it differs from our general privacy policy, this page governs Google user data.

Data we access. After you click “Connect Google Calendar” and grant consent, we access: your Google account email, to show which account is connected; access and refresh tokens, to keep your calendar in sync while you are offline; the start and end times of busy periods on the calendars you choose to check (your primary calendar plus up to four others), never the title, details, location or attendees of those events; the name of your primary calendar when connecting LaunLive, to show which account is connected; the event ID, Google Meet link and status of events our app created, and no other event content; and change notifications from Google, which contain no event content.

How we use it. Busy periods block times on the booking page, and customers only see available times. When a booking is made, we create an event on the calendar you selected, with the time, location, customer name, phone number, questionnaire answers and a reschedule or cancel link, plus a Google Meet link if the event location is Google Meet. We update or delete that event when the booking changes. In LaunLive, we create a webinar session event on the host’s calendar and add registrants’ emails as attendees so that Google sends them an invitation. Registrants cannot see each other.

Customer data. If you book as a customer, your name, phone number and questionnaire answers are written to your consultant’s Google Calendar event, where the consultant’s Google account keeps them.

Storage and protection. Data is stored on servers we rent from Hostinger. Tokens are encrypted at rest and all data is transmitted over HTTPS. The database is backed up daily, encrypted, to Cloudflare R2.

Sharing and limits. We do not sell Google user data or provide it to advertising platforms, data brokers or information resellers. We do not use it for advertising, including retargeting and personalized ads, or to determine creditworthiness or for lending. We do not use it to create, train or improve any machine learning or artificial intelligence model. Apart from the hosting and backup providers needed to run these features (Hostinger, Cloudflare), we transfer data only to provide user-facing features with your consent, for security purposes such as investigating abuse, to comply with applicable law, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent. Our staff do not read this data unless you agree to let us view specific content, it is necessary for security or legal reasons, or the data is aggregated and anonymized for internal operations. If you authorize an external AI assistant to connect to the admin area, it can read the calendar connection status and account email, but not busy periods or event content.

Retention and deletion. To disconnect, open the calendar settings page in the admin area and click disconnect. We immediately delete your access token, refresh token, busy periods and calendar notification channels. Disconnecting in LaunBooking does not revoke the Google grant, because the same Google account may also be connected to LaunLive; disconnecting in LaunLive does revoke the grant for that account. You can also remove access at any time on your Google Account third-party connections page. Events already written to your calendar stay there for you to manage. The connected email address, and the event IDs and Meet links in booking records, are kept as service records; email [email protected] to request deletion and we will handle it within 30 days of receiving your request. Deleted data may remain in encrypted backups for up to 12 months, after which it is automatically purged.

Limited Use. The use of information received from Google Workspace scopes by LaunBooking and LaunLive will adhere to the Google User Data Policy, including the Limited Use requirements.