Privacy Policy

To make the content of this policy clear and understandable, the following definitions apply throughout this policy:

• Platform Operator ("we" / "the Company" / "AI GO"): Refers to URFiT CO., LTD., the developer, operator, and manager of the AI GO platform.
• Subscriber: Refers to legal entities or natural persons who register an account, subscribe to services on the AI GO platform, and build enterprise applications through the platform. The Subscriber acts as the Data Controller for personal data collected within their custom applications.
• End User: Refers to individuals who interact with the AI GO platform through Custom Apps built by Subscribers, regardless of whether they have an AI GO account themselves.
• Personal Data: Refers to data that can directly or indirectly identify a natural person, including but not limited to names, email addresses, phone numbers, IP addresses, etc.
• Services: Refers to all functions and services provided by the AI GO platform, including but not limited to ERP modules, AI app builders, custom apps, file storage, message centers, etc.
• Custom App: Refers to applications built by Subscribers using the App Builder function of the AI GO platform, which can be deployed on independent subdomains for End Users.
• Enterprise Data: Refers to all business-related data inputted, uploaded, or generated by Subscribers during their use of the platform services, including accounting data, customer lists, inventory, payroll, etc.

• Scope of this Policy: This Privacy Policy applies to the AI GO official website (www.ai-go.app), the AI GO platform application, API services, and all subdomain services deployed through this platform.
• Subscriber's Responsibility for Custom Apps: If a Custom App built by a Subscriber collects personal data of End Users, the Subscriber is the Data Controller of such data and must establish and adhere to applicable privacy policies. The Company acts as a Data Processor in this scenario.
• Third-Party Service Exemption: The platform may contain hyperlinks to third-party websites or services. The Company is not responsible for the privacy practices of such third parties and recommends reviewing their privacy policies before use.

We collect the following types of personal data based on service requirements:

3.1 Account and Authentication Data

When you register an account, we collect your email address and encrypted password to establish and maintain your account.

3.2 Enterprise and Team Data

The platform uses a multi-tenant architecture. When a Subscriber creates an organization, we collect the company name, team member info (name, title, role), and invitation records.

3.3 ERP Module Data

When Subscribers use the platform's ERP modules (accounting, sales, HR, etc.), the financial data, customer info, and employee records entered are determined entirely by the Subscriber for their business purposes.

3.4 AI Feature-Related Data

When using AI chat, AI customer service, or Builder AI Agents, we collect and store your chat history and uploaded knowledge base documents to provide and improve service quality.

3.5 Custom Apps and Dynamic Databases

For Custom Apps built by Subscribers, the content in Custom Data tables is managed solely by the Subscriber. The Company only provides the technical infrastructure.

3.6 Files and Storage

Files you upload to the platform (documents, images) are stored in cloud object storage services.

3.7 Marketing and Form Data

When filling out forms like "Book a Demo," we collect contact info such as name, phone, company, and email to contact you.

3.8 Automatically Collected Technical Data

When you visit the platform, our servers automatically record your IP address, browser type, OS, pages visited, time spent, click records, and referring URLs. This is used to analyze usage trends and improve services.

The personal data we collect will be used for the following purposes:

• Providing and Maintaining Services: Ensuring the normal operation of all AI GO platform features.
• Account Management and Authentication: Handling registration, login verification, password resets, role management, and team invitations.
• Service Improvement and Analytics: Analyzing service usage to optimize the experience and tracking AI model inference usage.
• Marketing and Communication: Sending updates, event info, and promotions. You can opt-out of marketing messages at any time.
• Legal Compliance and Security: Complying with legal obligations, responding to lawful government requests, preventing fraud, and maintaining system security.
• Approvals and Audits: Processing internal enterprise approval workflows and storing audit logs.

5.1 Duration

We will continue to use your personal data for the duration necessary to fulfill the collection purposes, the retention period required by laws, or the duration of your contractual relationship with us. Afterwards, data will be deleted or anonymized.

5.2 Territory

Your personal data is primarily processed within Taiwan. However, due to the use of cloud infrastructure and AI inference services, some data may be transferred to servers in other countries. We ensure such transfers comply with applicable personal data protection laws.

5.3 Recipients

Recipients of your personal data include: the Company and its affiliates, trusted cloud service providers, AI service providers, and legally authorized government agencies.

5.4 Methods

Processing and utilization are carried out via automated machines and other non-automated means within the scope of the collection purposes.

6.1 Cookie Usage

The platform uses Cookies and similar tracking technologies to maintain your login status, remember preferences, and collect site statistics.

6.2 Google Tag Manager (GTM)

We use GTM to manage site tracking tags to analyze traffic and behavior. This service may collect anonymized browsing data.

6.3 Google Ads Conversion Tracking

This site uses Google Ads tracking to measure marketing effectiveness, tracking conversion events after you interact with ads.

6.4 Google Analytics 4 (GA4)

This site uses Google Analytics 4 to analyze traffic and user behavior, including page views and form submission events. This service collects anonymized statistics and does not personally identify you.

6.5 Managing Cookie Preferences

You can manage or reject Cookies via browser settings. Note that disabling Cookies may cause some platform features to function improperly.

We will never arbitrarily sell, exchange, or rent your personal data to third parties. However, to provide services, we may partner with the following:

7.1 Cloud Infrastructure

The platform uses cloud computing to host applications. Your data is stored in a protected cloud environment.

7.2 AI Service Providers

To provide AI features, we may send conversation content to AI model providers for inference processing. We strictly limit their use of your data.

7.3 Marketing Analytics

We use tools like GTM, Google Analytics 4, and Google Ads to analyze traffic. These services may collect anonymized data.

7.4 Notification Services

We use third-party notification services to send system alerts or marketing messages.

7.5 CRM Integration

Contact info from form submissions may be synced to our CRM system for follow-up.

7.6 Other Service Providers

We may commission other vendors for specific tasks (data analysis, tech support). They are bound by strict confidentiality obligations.

7.7 Legal Disclosures

We may disclose personal data to cooperate with lawful investigations, comply with authority requests, or protect public safety.

8.1 AI GO as Data Processor

When Subscribers collect and process End User or employee data via AI GO, the Company acts as a "Data Processor", processing data according to Subscriber instructions.

8.2 Subscriber as Data Controller

Subscribers are the "Data Controller" for all personal data they collect via AI GO. They must determine the purpose, scope, and method of collection and bear responsibility for its legality.

8.3 Protection of End User Data in Custom Apps

If Subscribers collect End User data via Custom Apps, they must fulfill notification obligations, obtain necessary consent, and ensure compliance with applicable privacy laws.

8.4 Independent Privacy Policy

We strongly recommend Subscribers establish an independent privacy policy for their Custom Apps to clearly inform End Users about data handling practices.

9.1 ERP Connector Mode

AI GO provides an ERP Connector to link existing external ERP systems (e.g., SAP). Data accessed via this mode is not stored on AI GO servers but is merely relayed via encrypted channels.

9.2 Data Managed by Subscribers

Storage, backups, access control, and security of data accessed via ERP Connector remain the sole responsibility of the Subscriber and their ERP vendor. AI GO does not persistently store this data.

9.3 AI GO is Only an Intermediary

The Company acts merely as a data transmission intermediary and bears no final responsibility for the integrity or security of data in external ERP systems.

9.4 Compliance Requirements

Subscribers must ensure their external ERP systems comply with applicable data protection laws and bear responsibility for any external data leaks.

We employ industry-standard security measures to protect your data:

• TLS/SSL Encryption: All data transmissions are encrypted.
• RBAC Access Control: Role-based access ensures only authorized personnel can access necessary data.
• Multi-Tenant Isolation: Tables a Subscriber creates in the Data Center reside in a database schema dedicated to that Subscriber, separated at the database level. Tables belonging to the platform's built-in business modules are isolated by enforced tenant filtering at the application layer, and are being progressively migrated to the same dedicated-schema architecture. Tenant routing is fail-closed: a query that does not correctly specify its tenant fails rather than falling back to shared data.
• Sandbox Isolation (AI Builder): All AI-generated changes execute in an isolated sandbox.
• Audit Logs: The platform records critical operation logs for security tracking.
• Encrypted ERP Channels: Channels accessing external systems via ERP Connector are encrypted.

While we strive to protect data security, absolute security over the internet cannot be guaranteed. Contact us immediately if you discover any security issues.

According to applicable personal data protection laws, you may exercise the following rights:

• Inquiry and Review: Request to inquire about or review your data.
• Request Copies: Request copies of your data.
• Supplement or Correct: Request to supplement or correct your data.
• Cease Processing: Request to stop the collection, processing, or use of your data.
• Request Deletion: Request deletion of your data. You can delete your account via the settings page, which will clear your data and records.

How to Exercise Rights

Contact us via email: us@urfit.com.tw. We will respond within the statutory deadline.

Impact of Not Providing Data

If you choose not to provide necessary personal data, you may be unable to complete account registration or use certain platform features.

Our platform is intended for enterprise users and is not directed at children under the age of 14. We do not intentionally collect personal data from children under 14. If we inadvertently collect such data, we will delete it immediately. If you are a parent or guardian and discover your child has provided data, please contact us.

The Company reserves the right to amend this Privacy Policy at any time. The amended policy will be posted on the platform website with an updated date. For significant changes, we will notify you via email or in-app notification.

We recommend reviewing this policy regularly. Continued use of the services constitutes your agreement to the amended policy.

If you have any questions regarding this Privacy Policy, please contact us:

• Company Name: URFiT CO., LTD.
• Email: us@urfit.com.tw
• Website: www.ai-go.app