私隐政策 Privacy Policy
最后更新:2026 年 7 月 8 日 · Last updated: 8 July 2026
elematch 由 Open The Door Company(“本公司”、“我们”)营运。本政策说明我们如何收集、使用、保存、转移及删除你的个人资料,以及你可行使的权利。我们以最少收集、限期保存为原则:出生日期属个人资料,我们只收集提供服务所必需的资料。elematch is operated by Open The Door Company. This policy explains how we collect, use, retain, transfer and delete your personal data, and the rights you may exercise. We follow data minimisation and time-limited retention: a birth date is personal data, and we collect only what the Service needs.
本政策旨在符合香港《个人资料(私隐)条例》(PDPO)、新加坡《个人资料保护法》(PDPA)及马来西亚《2010 年个人资料保护法》(PDPA,经 2024 年修订)的适用要求。This policy is intended to comply with the Hong Kong PDPO, the Singapore PDPA and the Malaysia PDPA 2010 (as amended in 2024), as applicable.
一、我们收集什么 What we collect
- 帐户资料:电邮地址(用于登入、帐户及服务通知)。Account data: email address, for login, account and service notices.
- 分析输入:你为个人分析或团队合盘输入的姓名(可选;建议以代号或缩写代替真实姓名)、出生日期及性别(性别只用于人生阶段计算)。Analysis inputs: name (optional — we recommend codenames or initials instead of real names), birth date and gender (gender is used solely for life-stage calculation).
- 用量与交易:方案、每月用量、储值结余及交易纪录。付款卡资料由 Stripe 直接处理,我们不会接触或储存你的信用卡号码。Usage and transactions: plan, monthly usage, credit balance and transaction records. Card details are handled directly by Stripe — we never see or store your card number.
- 技术资料:为保安及运作所需的基本日志(如 IP 位址、浏览器类型)。Technical data: basic logs needed for security and operation (e.g. IP address, browser type).
我们不会要求出生时辰,亦不收集政府身份证明文件、健康资料或其他敏感类别资料。We never ask for birth time, and we do not collect government ID, health data or other sensitive categories.
二、收集及使用的目的与依据 Purposes & legal bases
| 目的 Purpose | 资料 Data | 依据 Basis |
|---|---|---|
| 生成你所要求的个人分析及团队报告 Generate the analyses and team reports you request | 出生日期、性别、姓名(可选) Birth date, gender, name (optional) | 履行与你的合约 / 你的同意 Contract performance / consent |
| 管理帐户、方案、用量与付款 Manage accounts, plans, usage and payments | 电邮、用量、交易纪录 Email, usage, transactions | 履行合约、法律责任(帐务) Contract; legal obligations (billing) |
| 服务保安、防止滥用 Security and abuse prevention | 技术日志 Technical logs | 合法利益(保障服务及用户) Legitimate interests |
| 直接促销(如有) Direct marketing (if any) | 电邮 | 仅在你事先明确同意(opt-in)下进行,你可随时免费取消 Only with your explicit prior opt-in; unsubscribe anytime, free |
我们不会出售或出租你的个人资料,亦不会将其用于与上述无关的用途。报告由自动化系统(包括人工智能模型)生成,属参考内容;我们不会作出对你产生法律效力或类似重大影响的纯自动化决策,亦不会利用你的资料作自动化的雇佣决定。We never sell or rent your personal data, nor use it for unrelated purposes. Reports are generated by automated systems (including AI models) as reference content; we make no solely automated decisions with legal or similarly significant effects, and never use your data for automated employment decisions.
三、他人资料:团队功能的同意要求 Other people's data
如你在团队合盘中输入其他人士的资料,你必须事先取得该人士的明确同意,并向其说明资料将用于 elematch 团队分析。此为服务条款第 2.3 条下你的责任。任何人如发现自己的资料在未经同意下被输入,可电邮 contact@elematch.asia 要求删除,我们会尽快处理。If you enter another person's data in a team map, you must first obtain their explicit consent and explain the purpose — your responsibility under clause 2.3 of the Terms. Anyone whose data was entered without consent may email contact@elematch.asia for deletion, which we will action promptly.
四、保存期与自动删除 Retention & auto-deletion
- 已储存的分析与团队资料:建立后 90 日自动删除(系统每日自动清理)。Stored analyses and team data: auto-deleted 90 days after creation (daily automated cleanup).
- 帐户基本资料(电邮、方案):保存至你删除帐户为止。Basic account data (email, plan): kept until you delete your account.
- 交易纪录:按适用税务及会计法律所需年期保存。Transaction records: kept for the period required by tax and accounting law.
五、资料保安 Security
- 每人只见自己的资料:资料库层面的存取控制(row-level security)确保用户之间互相不能读取对方资料。Each person sees only their own data: database row-level security prevents users from reading one another's data.
- 所有连线经 HTTPS 加密传输;资料于储存层加密。All connections use HTTPS; data is encrypted at rest.
- 资料外泄通报:如发生可能对你构成重大风险的个人资料外泄,我们会按适用法律(包括新加坡 PDPA 及马来西亚 PDPA 的强制通报要求)通知相关监管机构及受影响用户,并会在切实可行范围内尽快处理。Breach notification: if a breach is likely to pose significant risk to you, we will notify the relevant regulators and affected users as required by applicable law (including the mandatory notification regimes of the Singapore and Malaysia PDPAs), as soon as practicable.
六、第三方服务商与跨境传输 Processors & cross-border transfers
我们仅使用为提供本服务所需的服务商,并以合约要求其按不低于本政策的标准处理资料:We use only the processors needed to run the Service, contractually required to protect data to no lesser standard than this policy:
| 服务商 Processor | 用途 Purpose | 处理地点 Location |
|---|---|---|
| Supabase | 资料库与登入验证 Database & authentication | 云端(可能位于香港以外,包括新加坡/美国) Cloud (may be outside HK, incl. SG/US) |
| Stripe | 付款处理 Payment processing | 全球(按 Stripe 之基建) Global (Stripe infrastructure) |
| Vercel | 网站寄存 Hosting | 全球边缘网络 Global edge network |
由于上述服务商的伺服器可能位于你所在司法管辖区以外,你的资料可能被跨境传输及储存。我们会采取合理措施(包括合约条款)确保资料于境外获得相若程度的保障。使用本服务即表示你同意上述传输安排。Because these processors' servers may be outside your jurisdiction, your data may be transferred and stored across borders. We take reasonable measures (including contractual terms) to ensure comparable protection abroad. By using the Service you consent to these transfers.
七、Cookies Cookies
我们使用三类 cookies:(一)登入状态及服务运作所必需的 cookies;(二)分析 cookies(Google Analytics),用于统计访客数量及使用情况,IP 位址经匿名化处理;(三)广告成效 cookies(Meta Pixel),用于量度广告成效及转换。你可随时透过浏览器设定封锁或删除 cookies,不影响网站基本使用。We use three types of cookies: (1) essential cookies for login and operation; (2) analytics cookies (Google Analytics) to measure visits and usage, with IP anonymisation; (3) advertising cookies (Meta Pixel) to measure ad performance and conversions. You can block or delete cookies at any time in your browser settings without affecting core site functions.
八、你的权利 Your rights
视乎你所在司法管辖区的适用法律(香港 PDPO、新加坡 PDPA、马来西亚 PDPA),你可:Depending on the law of your jurisdiction (HK PDPO, SG PDPA, MY PDPA), you may:
- 查阅及索取我们持有关于你的个人资料副本;Access and obtain a copy of your personal data held by us;
- 更正不准确的资料(你亦可随时在帐户内自行更正输入资料——包括出生日期——并重新生成分析);Correct inaccurate data — you can also amend your inputs (including birth date) in your account at any time and regenerate the analysis;
- 撤回同意及要求停止处理(撤回后我们可能无法继续提供部分服务);Withdraw consent and request that processing stop (some services may then be unavailable);
- 要求删除帐户及其所有资料;Request deletion of your account and all its data;
- 拒收直接促销讯息(随时、免费);Opt out of direct marketing, at any time and free of charge;
- 就资料处理向我们查询或投诉;你亦有权向所在地的监管机构投诉(香港:个人资料私隐专员公署 PCPD;新加坡:个人资料保护委员会 PDPC;马来西亚:个人资料保护局 JPDP)。Raise queries or complaints with us; you may also complain to your local regulator (HK: PCPD; SG: PDPC; MY: JPDP).
行使上述权利,请电邮 contact@elematch.asia。我们一般会于 30 日内回复(或按适用法律规定的更短时限)。为保障你,我们可能需要先核实你的身份。To exercise these rights, email contact@elematch.asia. We normally respond within 30 days (or any shorter period required by law). We may need to verify your identity first.
九、团队报告的红线 The team-report red line
这是我们对每位成员的核心承诺:团队报告不会展示任何个人的时机参考、升迁或去留建议。团队层面只呈现整体的协作与工作节奏参考;涉及时机的个人内容,载于当事人的个人报告,作自我反思之用。Our core promise to every member: team reports never show any individual's timing, promotion or retention suggestions. The team level presents only overall collaboration and pacing references; individual timing content appears in that person's own report, for self-reflection.
十、儿童 Children
本服务仅限年满 18 岁人士使用。我们不会在知情下收集未成年人的个人资料;如你发现有未成年人资料被输入,请联络我们删除。The Service is for persons aged 18 or above. We do not knowingly collect minors' data; if you find a minor's data has been entered, contact us for deletion.
十一、政策更新与联络 Changes & contact
本政策如有更新,我们会在此页公布并更新“最后更新”日期;重大变更会另行以电邮或服务内通知。Updates will be posted here with a revised "last updated" date; material changes will also be notified by email or in-service.
资料使用者/营运者:Open The Door Company
私隐事宜联络:contact@elematch.asiaData user / operator: Open The Door Company · Privacy contact: contact@elematch.asia