Privacy Policy

This English version is provided for convenience. If there is any inconsistency, the Traditional Chinese version prevails.

Effective date: October 19, 2026

Seller Technology Ltd. (台灣商戶科技有限公司; the "Company") takes your personal data seriously. This Policy explains how the Company collects, processes, and uses personal data in operating this website (https://sellers.carboneasy.ai) under the SOP (Sellers' Open Protocol) name and providing its services, and it provides the following notices as required by Taiwan's Personal Data Protection Act.

1. Scope of Application

• This Policy applies to this website (including its contact form), and to your dealings with the Company by email or other means, including inquiries, negotiations, and collaboration.
• When the Company is entrusted by a merchant to process personal data of the merchant's customers (for example, by integrating the merchant's LINE Official Account), the merchant acts as the collector and the Company processes the data within the scope of the entrustment. The manner of processing follows Section 6 of this Policy and the entrustment agreement between the Company and the merchant.
• When the Company sends booking notifications to merchant staff through its own LINE Official Account "SOP店家通知" (SOP Store Notifications), Section 6-1 applies.

2. Collector

• Name: Seller Technology Ltd. (台灣商戶科技有限公司)
• Contact: the contact form on this website

3. Purposes of Collection

• Responding to your inquiries and providing consultation and quotations.
• Entering into and performing contracts, including service implementation, operations, customer support, and accounting.
• Sending notices related to the services.
• Maintaining the security of this website and the services, and preventing abuse.
• Complying with legal obligations.

4. Categories of Personal Data Collected

• Contact data: Name, email, phone number, company name, and job title.
• Correspondence records: The emails and discussions exchanged between you and the Company.
• Contact form submissions: The name, company or store name, email, topic, and message you enter in the contact form.
• Contract and billing data: Data needed for invoicing and payment.
• Technical logs: This website is hosted by Cloudflare, which generates the connection logs necessary for operations and security (for example, IP address, browser type, and request time).

This website has a contact form but no registration. It uses no analytics tools and no advertising or tracking cookies. Form submissions are sent by email to the Company's mailbox and are not otherwise stored by this website. For the data categories of SOP Store Notifications, see Section 6-1.

5. Period, Area, Recipients, and Method of Use

• Period:
  • Inquiry and correspondence records: retained for 2 years from the last contact.
  • Contract and billing data: during the term of the contract, and afterward for the period required by law or by the contract.
  • After the period expires or the purpose ceases to exist, the data is deleted or its use is discontinued in accordance with Section 9.
• Area: The Republic of China (Taiwan), and the regions where the service providers used by the Company are located (for example, the United States and Japan).
• Recipients: The Company; service providers needed to accomplish the purposes above (for example, providers of website hosting and form delivery, email, AI models, and the LINE platform); and authorities with legal power to obtain the data.
• Method: Collection, processing, use, and international transfer, by automated or non-automated means, within the scope of the purposes above.

6. Processing Data on Behalf of Merchants

• When the Company is entrusted by a merchant to process personal data of the merchant's customers, the Company is treated as the merchant, processes the data only within the scope of the entrustment, and does not use it for any other purpose.
• User data obtained through the LINE platform is used only for that merchant's service. It is not provided to third parties and is not used outside that service.
• The Company does not use the conversations or data of a merchant's customers to train AI models.
• When the entrustment ends, data is returned or deleted in accordance with the entrustment agreement.
• If a merchant's customer wishes to exercise rights over their personal data, please contact the merchant first; the Company will assist the merchant in handling the request.
• SOP Store Notifications under Section 6-1 use the Company's own LINE Official Account. They are not processing on behalf of merchants, and this section does not apply to them.

6-1. SOP Store Notifications

• Scope: The Company sends booking notifications to staff of merchants that use the Company's booking service (for example, trainers, front-desk staff, and store managers) through its LINE Official Account "SOP店家通知" (SOP Store Notifications; SOP stands for Sellers' Open Protocol) (the "Notification Account"). This section applies to staff who have added the Notification Account as a friend and completed binding. The Notification Account is opened and managed by the Company; it is not a merchant's own LINE Official Account.
• Collector: The Company (see Section 2).
• Purposes: Sending booking notifications (new booking, booking confirmed, customer cancellation, and reminders of bookings awaiting confirmation); verifying binding, keeping the account secure, and preventing abuse; recording delivery results and investigating failed sends; and complying with legal obligations.
• Data collected: The user identifier provided by the LINE platform (valid only for the Company's account); binding records (the merchant, the label the merchant gives the binding, binding time, and status); and notification logs (event, time, and result). The Company does not store your LINE display name or profile picture.
• Notification content: Only the time slot, class name, number of people, and a link to the confirmation page. Notifications do not contain customers' names, phone numbers, or email addresses.
• Period: From the time you complete binding until you unbind, block or delete the Notification Account, the merchant stops using the service, or you request deletion, at which point binding data is deleted immediately. Notification logs are deleted after 90 days.
• Area: The Republic of China (Taiwan); Japan (where the LINE platform operator is located); and the United States and other regions where Cloudflare nodes are located.
• Recipients: The Company; LY Corporation (the LINE platform); Cloudflare (system hosting); the merchant you work for (which can see on its confirmation page how many staff are bound and when); and authorities with legal power to obtain the data.
• Method: Collection, processing, use, and international transfer by electronic means.
• Use limitation: Data obtained through the LINE platform is used only for the notifications in this section. It is not used for advertising or marketing, is not sold, is not provided to third parties other than those listed in this section, and is not used to train AI models.
• Your choices: You may choose not to add the Notification Account or not to complete binding. You will then not receive LINE notifications, but the booking itself is not affected and you can still check it on the confirmation page. You can block or delete the Notification Account in LINE at any time, or ask your merchant to remove your binding on the confirmation page. Other rights may be exercised under Section 7.
• LINE platform: Notifications are delivered through the LINE platform. Data on the LINE platform is handled under LINE's own privacy policy and terms.

7. Your Rights and How to Exercise Them

You may exercise the following rights with respect to your personal data:

1. Inquiry or request to review.
2. Request for a copy.
3. Request for supplementation or correction.
4. Request to stop collection, processing, or use.
5. Request for deletion.

Please make a request through the contact form (choose "Personal data request" as the topic), and state your identity and what you are requesting. After verifying your identity, the Company will respond within the period prescribed by law. For an inquiry, review, or copy, the Company may charge a fee to cover necessary costs. By law, these rights may not be waived in advance or restricted by special agreement.

8. Effect of Not Providing Personal Data

You are free to choose whether to provide personal data. If you do not provide the necessary contact data, the Company may be unable to reply to your inquiry, provide a quotation, or perform a contract.

9. Retention and Deletion

When the retention period expires, the purpose of collection no longer exists, or you request deletion and no law provides otherwise, the Company will delete your personal data or process it in a manner that does not identify any specific individual.

10. Security Measures

The Company takes appropriate security measures to protect personal data, including encryption in transit, access control, encrypted storage of credentials, and activity logs. For details, see Data Protection and Security.

11. Data Incidents

When the Company becomes aware that personal data it holds has been stolen, altered, damaged, lost, or disclosed, it will take prompt and effective measures to keep the incident from spreading and will notify the data subjects as required by law. For data processed on behalf of a merchant, the Company will notify the merchant immediately and assist in handling the incident.

12. Cookies and Technologies Used on This Website

This website does not set cookies itself. Cloudflare, the website hosting service, may set cookies necessary for security protection; these are not used for advertising or tracking.

13. Minors

This website and its services are directed to businesses and are not intended for minors.

14. Policy Changes

The Company may revise this Policy. Revisions will be posted on this website with an updated effective date, and material changes will be communicated by appropriate means before they take effect.

15. Contact

If you have any questions about this Policy, please contact us through the contact form.