私隱政策Privacy Policy

最後更新:2026 年 8 月 8 日Last updated: 8 August 2026

本政策說明 VistaCriativa(下稱「我們」)如何收集、使用及保護本網站訪客與客戶的個人資料。我們的資料處理受歐盟《一般資料保護規例》(GDPR, Regulation (EU) 2016/679)及葡萄牙適用法律規管。「AI 知客」是 VistaCriativa 面向澳門、香港及大灣區市場的服務名稱。 This policy explains how VistaCriativa ("we") collects, uses and protects the personal data of visitors to this site and of its clients. Our processing is governed by the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Portuguese law. "AI 知客" is the name under which VistaCriativa offers this service in Macau, Hong Kong and the Greater Bay Area.

1. 資料控制者1. Data controller

VistaCriativa,葡萄牙。私隱聯絡:info@vistacriativa.com。 VistaCriativa, Portugal. Privacy contact: info@vistacriativa.com.

請留意:控制者為葡萄牙實體,資料在歐盟境內的伺服器處理。若您身處澳門,除下列權利外,亦可向澳門個人資料保護辦公室 (GPDP) 查詢:gpdp.gov.mo;若您身處香港,可向個人資料私隱專員公署 (PCPD) 查詢:pcpd.org.hk。 Please note: the controller is a Portuguese entity and data is processed on servers within the European Union. If you are in Macau, you may also contact the Macau Office for Personal Data Protection (GPDP): gpdp.gov.mo. If you are in Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data (PCPD): pcpd.org.hk.

2. 我們收集甚麼資料2. What data we collect

聯絡資料 — 您透過表格、WhatsApp 或電郵傳送給我們的姓名、電郵、電話及訊息內容。Contact details you send us via the form, WhatsApp or email: name, email, phone and the message content.
帳單與付款資料 — 當您成為客戶時的帳單資料及付款所需資料。信用卡資料由 Stripe 直接處理,我們不儲存卡號。Billing and payment data, when you become a client. Card data is processed directly by Stripe. We do not store card numbers.
技術與使用資料 — 匯總的瀏覽統計,不使用第三方追蹤 cookie。Technical and usage data: aggregated visit statistics, with no third-party tracking cookies.
最終客戶的訊息 — 當我們為客戶營運 AI 助理時,我們僅為營運該服務而處理該渠道上往來的訊息,並按客戶的指示行事(該等資料的控制者為客戶)。End-customer messages: when we operate an AI assistant for a client, we process the messages exchanged on that channel only to operate the service, on the client's instructions (the client being the controller of that data).

3. 目的與法律依據3. Purposes and legal basis

回覆查詢與提交報價 — 合約前措施 / 正當利益。Responding to enquiries and proposals: pre-contractual steps / legitimate interest.
提供已簽約的服務 — 履行合約。Providing the contracted service: performance of a contract.
開立發票及遵守稅務義務 — 法律義務。Billing and tax compliance: legal obligation.
瀏覽統計與網站改善 — 正當利益。Visit statistics and site improvement: legitimate interest.

4. 處理者與夥伴4. Processors and partners

我們使用下列供應商代為處理資料,僅限於上述目的,並設有適當的合約保障: We use providers that process data on our behalf, only for the purposes above and with appropriate contractual safeguards:

Meta / WhatsApp Business Platform — 訊息渠道;Meta / WhatsApp Business Platform: messaging channel;
Google — 當客戶連接其帳戶以管理預約時,使用 Google Calendar API;Google: Google Calendar API, when a client connects its account for appointment management;
Stripe — 付款處理;Stripe: payment processing;
人工智能模型供應商 — 生成助理的回覆;Artificial-intelligence model providers: generating the assistant's replies;
伺服器託管及電郵服務。Server hosting and email service.

部分供應商可能於歐洲經濟區以外處理資料;在該等情況下,我們確保採用有效的傳輸機制(例如標準合約條款)。完整的處理者名單可應要求提供。 Some of these providers may process data outside the European Economic Area; in those cases we ensure a valid transfer mechanism (e.g. standard contractual clauses). An up-to-date list of processors is available on request.

WhatsApp Business Platform 資料 (Meta)WhatsApp Business Platform data (Meta)

我們透過 Meta 的官方平台營運 WhatsApp 助理 — 既包括我們自己的號碼,亦包括客戶透過 Meta Embedded Signup 連接其 WhatsApp Business 帳戶的情況。我們接收並處理的 Meta 平台資料,嚴格僅用於營運該助理:來自接收訊息 (whatsapp_business_messaging) 的最終客戶號碼與檔案名稱、訊息內容、編號與時間戳,以及接收方號碼編號;來自帳戶管理 (whatsapp_business_management) 的 WhatsApp Business 帳戶編號、號碼編號與顯示號碼,以及訊息範本的中繼資料。 We operate WhatsApp assistants through Meta's official platform, both on our own number and, where a client connects its own WhatsApp Business Account via Meta Embedded Signup. We receive and process Meta Platform Data strictly to operate that assistant: from inbound messages (whatsapp_business_messaging): the end-customer's number and profile name, the message content, id and timestamp, and the receiving phone-number id; and from account management (whatsapp_business_management): the WhatsApp Business Account id, the phone-number id and display number, and message-template metadata.

此等資料按客戶分隔儲存,存取權杖加密保存,且僅與 Meta(用於送遞回覆)及我們的 AI 模型供應商(用於生成回覆)共享。我們絕不出售此等資料、用於廣告,或用於訓練通用 AI 模型;並會在客戶要求時或服務結束時刪除。 This data is isolated per client, the access token is encrypted at rest, and it is shared only with Meta (to deliver replies) and our AI model provider (to generate the reply). It is never sold, used for advertising, or used to train generalized AI models, and is deleted on request or at the end of service.

Google 使用者資料Google user data

當客戶明確連接其 Google 帳戶時,我們僅存取 calendar 範圍(以及 openid 與 email),用以讀取空閒/忙碌時段,並建立、更新或取消由助理處理的預約所對應的行事曆項目。我們只儲存加密的 refresh token 及已連接帳戶的電郵,不會複製或保留行事曆內容。客戶可隨時中斷連接,或於 myaccount.google.com/permissions 撤銷授權。VistaCriativa 對自 Google API 取得之資訊的使用與傳輸,均遵守 Google API Services User Data Policy,包括其 Limited Use 要求。 When a client explicitly connects its Google account, we access the calendar scope (plus openid and email) solely to read free/busy availability and to create, update or cancel the events corresponding to bookings made through the assistant. We store only an encrypted refresh token and the connected account's email; we do not copy or retain calendar contents. The client can disconnect at any time, or revoke access at myaccount.google.com/permissions. VistaCriativa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. 資料保留5. Data retention

我們只在必要期間保留資料:潛在客戶的聯絡資料保留 24 個月;帳單文件按葡萄牙法定期限保留(現為 10 年)。最終客戶的訊息在客戶提出要求時或服務結束時刪除。 We keep data only for as long as necessary: lead contacts for 24 months, and billing documents for the legal period applicable in Portugal (currently 10 years). End-customer messages are deleted at the client's request or at the end of the service.

6. 您的權利6. Your rights

您可隨時行使查閱、更正、刪除、限制處理、反對及可攜的權利,並撤回同意,方法是聯絡 info@vistacriativa.com。刪除資料的具體步驟,請見刪除資料說明。您亦有權向監管機關投訴 — 在葡萄牙為國家資料保護委員會 (CNPD),www.cnpd.pt;在澳門可聯絡 GPDP,gpdp.gov.mo;在香港可聯絡 PCPD,pcpd.org.hk。 You may at any time exercise the rights of access, rectification, erasure, restriction, objection and portability, and withdraw consents, by contacting info@vistacriativa.com. For step-by-step deletion instructions, see Data deletion. You also have the right to lodge a complaint with the supervisory authority: in Portugal the National Data Protection Commission (CNPD), www.cnpd.pt; in Macau you may contact the GPDP, gpdp.gov.mo; in Hong Kong the PCPD, pcpd.org.hk.

7. Cookies7. Cookies

本網站不使用廣告或第三方追蹤 cookie。瀏覽統計為第一方且以匯總形式處理。 This site uses no advertising or third-party tracking cookies. Visit analytics are first-party and aggregated.

8. 變更8. Changes

本政策可能更新,最後修訂日期顯示於本頁頂部。 This policy may be updated. The date of the last revision appears at the top of this page.