[Company Name] (“we”, “us”) operates Barn (the “Service”) and respects your privacy. In line with Taiwan’s Personal Data Protection Act, this policy explains how we collect, process and use your personal data and the rights you have.
This policy is also published in Traditional Chinese. If the versions differ, the Traditional Chinese version prevails.
1. Why we collect your data
- To perform our contract with you: providing the services you order, including creating Google accounts and subscribing to or renewing AI plans on your behalf.
- Customer management and service: managing your membership, support, expiry reminders and notifications.
- E-commerce: credit top-ups, payments, refunds and invoicing.
- Information and security management: operating our systems, protecting accounts and preventing abuse.
2. What we collect
- Account data: name, email address, a hash of your password (we cannot see your password) and language preference.
- Registration details (when you apply for a Google account): name, date of birth, gender (optional), mobile number, recovery email and address.
- Service data: the sign-in emails, platforms, plans and expiry dates of the Google and AI accounts you add or that we set up for you; your orders, credit and payment history. We do not store passwords or API keys for your AI accounts.
- Recovery inbox messages: subject, body and verification codes of emails sent to your recovery address by allowed senders.
- Payment data: amount, time and Stripe payment reference; the last five digits of the bank account used for a transfer; the tax ID and company name needed for invoices. Card numbers are handled by Stripe; we never see or store them.
- Technical data: IP address, browser information, sign-in times and activity logs.
3. How long, where, by whom and how
- Retention: while you use the Service, and after your account is closed for as long as needed to meet legal obligations (such as tax and accounting records) or to handle disputes. Recovery inbox messages are kept for 7 days; initial passwords of accounts we create for you are kept for at most 72 hours.
- Location: Taiwan, and the regions where the service providers below run their servers.
- Recipients: our staff, with access granted only as their role requires; providers we engage to run the Service, including cloud hosting (Google Cloud), email (Cloudflare), card payments (Stripe) and our e-invoice service provider; Google and the AI platforms you choose, when we sign up or subscribe on your behalf; and authorities where the law requires.
- Method: automated and manual processing, limited to the purposes above.
4. Your rights
You may ask to access or obtain a copy of your personal data, have it completed or corrected, have us stop collecting, processing or using it, or have it deleted. Email support@barnai.net from your registered address and we will act on your request once we have verified your identity. Data we are legally required to keep, such as transaction and invoice records, may not be deleted until the retention period ends.
5. If you do not provide data
Providing personal data is your choice. If you do not provide the data a service needs, for example the registration details for a Google account, we cannot provide that service.
6. Security
- The website and platform use HTTPS encryption throughout.
- Recovery inbox messages and verification codes are stored encrypted and are visible only to you, not to our staff.
- Staff must pass two-factor authentication to sign in and receive only the permissions their role needs; important actions are logged.
7. Cookies and similar technologies
We use your browser’s local storage to keep you signed in and remember your language. We do not use advertising or tracking cookies. Our sign-up and sign-in pages use Google reCAPTCHA to prevent abuse, and card payments take place on Stripe’s checkout page; these services process data under their own privacy policies.
8. International transfers
Some providers, such as Stripe and Cloudflare, may process data outside Taiwan. We only transfer what is needed to provide the Service and choose providers with appropriate safeguards.
9. Children
The Service is intended for businesses and adults. Do not register if you are under 18. If we learn that we have collected data from a minor, we will delete it promptly.
10. Changes to this policy
We may update this policy because of legal or service changes and will publish the update on the website. We will email you about significant changes.
11. Contact
For anything related to your personal data, contact: [Company Name]
Address: [Company Address]
Email: support@barnai.net