4Fourtisan

隱私權政策 Privacy Policy — 4Fourtisan

生效及最後更新日期 Effective & Last Updated: 2026-11-15

1. 適用範圍與服務概述 Overview & Scope

本隱私權政策說明 4Fourtisan（包含公開資訊網站 https://info.4fourtisan.net 及線上預約平台 https://booking.4fourtisan.net，以下簡稱「本服務」）如何收集、存取、使用、儲存、保護及刪除使用者的個人資料與 Google 使用者資料。一般訪客無須登入即可公開瀏覽資訊頁與本政策；僅在您主動於預約平台進行 Google 登入以提交攝影預約或企劃時，我們才會請求相關授權。

This Privacy Policy explains how 4Fourtisan (operating across https://info.4fourtisan.net and https://booking.4fourtisan.net, collectively the "Service") accesses, collects, uses, stores, protects, and deletes personal information and Google user data. Visitors may browse our information portal and policies freely without signing in; Google OAuth authorization is requested only when you actively sign in to submit a Cosplay photography booking or proposal.

2. 我們存取與收集的資料 Data We Access & Collect

Google 帳號基本身分資料 (openid, email, profile)： 當您於 booking.4fourtisan.net 點擊使用 Google 帳號登入時，我們會透過 Google OAuth 2.0 取得您的 Google 帳戶唯一識別碼（sub）、已驗證之電郵地址、顯示名稱及個人頭像網址，用於識別預約者身分與寄送預約確認信。
Google Account Basic Profile: When you sign in with Google on booking.4fourtisan.net, we receive your Google unique account ID (sub), verified email address, display name, and profile picture URL via Google OAuth 2.0 to identify your booking account and send confirmation emails.
Google Calendar 活動建立權限 (https://www.googleapis.com/auth/calendar.events)： 僅在您主動填寫並確認送出正式私影預約時，本服務會使用此權限於您的主要 Google Calendar 建立該筆已確認之拍攝活動（包含拍攝日期、時間、香港拍攝地點與預約摘要）。我們絕不會讀取、掃描、下載、修改或刪除您 Google Calendar 上與該筆預約無關的任何既有私人行程。
Google Calendar Event Creation Scope: Strictly when you submit and confirm a photoshoot booking, the Service uses this permission solely to insert that specific confirmed photoshoot appointment (date, time, location, and booking summary) into your primary Google Calendar. We do not read, scan, store, modify, or delete any pre-existing or unrelated personal events on your Google Calendar.
使用者主動提交之預約與企劃表單資料 (User-Submitted Booking & Proposal Details)： 您在預約或投稿表單中自願填寫之作品名稱、角色名稱、期望拍攝日期與時段、拍攝場地偏好、備註及聯絡方式（如 Instagram、Telegram 或電郵地址）。
Information you voluntarily enter into booking or tentative concept proposal forms, including Cosplay series/title, character name, preferred date/time slot, Hong Kong venue preference, notes, and contact handles (Instagram, Telegram, or email).
基本連線與安全紀錄 (Essential Session & Security Logs)： 為維持登入狀態與防範惡意濫用所需的必要登入憑證（Session Cookie / Token）以及標準伺服器存取紀錄（IP 位址、請求時間與瀏覽器資訊）。
Essential authentication session cookies/tokens and standard server security logs (IP address, request timestamp, and user-agent) used strictly to maintain secure sessions and prevent automated abuse.

3. 資料使用目的與方式 How We Use Information & Google User Data

身分核實與防濫用 (Identity Verification & Anti-Spam)： 確認預約申請人為真實使用者，防止冒用他人身分或惡意洗版佔用拍攝檔期。
Verify the identity of users submitting bookings to prevent impersonation and fraudulent schedule blocking.
建立與同步預約日曆行程 (Calendar Appointment Synchronization)： 將您主動確認送出之私影預約寫入您的 Google Calendar 及攝影師的工作日曆，方便雙方準時出席。
Create and synchronize your confirmed photoshoot appointment on both your Google Calendar and the photographer's booking calendar.
發送預約確認與行程通知 (Transactional Notifications)： 發送預約成功確認信、行程摘要及必要的檔期異動通知至您驗證後的電郵地址（我們不發送與預約無關的行銷垃圾郵件）。
Send transactional booking confirmation emails, appointment summaries, and schedule updates to your verified email address (no unsolicited marketing emails).
審閱未定案企劃投稿 (Project Coordination)： 儲存未定案企劃投稿資料於系統資料庫，僅供 4Fourtisan 攝影師審閱拍攝可行性並與投稿者聯繫洽談。
Store tentative photoshoot proposals solely for review and scheduling coordination between you and the 4Fourtisan photographer.

4. 資料分享、移轉與第三方揭露 Data Sharing, Transfers & Third-Party Disclosures

絕不出售或用於廣告 (No Sale or Advertising)： 4Fourtisan 絕不會將您的個人資料或任何透過 Google API 取得的資料出售、出租、交換或移轉予任何第三方、廣告網路、資料經紀商（Data Brokers）或資訊轉售商，亦不會用於定向廣告或信用評估。
4Fourtisan never sells, rents, leases, or transfers your personal data or Google user data to third parties, advertising networks, data brokers, or information resellers, and never uses it for advertising or creditworthiness determination.
絕不用於訓練 AI 模型 (No AI / ML Model Training)： 我們不會將任何 Google 使用者資料或預約資料用於訓練、微調或改進任何通用人工智慧（AI）或機器學習（ML）模型。
Google user data and booking records are never used to train, fine-tune, or improve generalized artificial intelligence (AI) or machine learning (ML) models.
必要之技術處理與法律遵循 (Limited Operational & Legal Disclosure)： 除透過官方 Google API 介面執行您本人要求的登入與日曆寫入操作，或依香港特別行政區適用法律之強制規定外，我們不會向任何外部第三方揭露您的資料。
Aside from communicating directly with Google API infrastructure to execute the sign-in and calendar actions you initiate, or complying with mandatory legal obligations under applicable Hong Kong law, we do not disclose your data to third parties.

5. 資料儲存與安全保護措施 Data Storage & Security Protection

傳輸加密 (Encryption in Transit)： 本網站所有頁面、後端應用程式與 Google API 之間的所有資料傳輸均強制採用 HTTPS / TLS 1.2 以上加密協定保護。
All data transmitted between user browsers, 4Fourtisan servers, and Google APIs is encrypted in transit using industry-standard HTTPS / TLS 1.2+ protocols.
靜態儲存與存取權限控管 (Storage Security & Access Control)： 預約與企劃資料庫部署於受防火牆與存取權限嚴格保護之雲端伺服器，僅限系統管理員（攝影師本人）基於排程管理目的存取。Google OAuth 存取權杖（Access Tokens）僅於執行使用者授權之預約寫入流程中使用並受安全加密保護，不會公開暴露於前端或未加密日誌中。
Booking records and authentication credentials are stored in access-controlled cloud infrastructure restricted strictly to the system administrator. OAuth tokens are handled securely to complete your requested calendar action and are never exposed publicly or logged in plaintext.

6. Google API 使用者資料政策與禁止 AI NCII 合規聲明 (Google API Policy & Anti-AI NCII Compliance)

有限使用規範 (Limited Use Disclosure)： 4Fourtisan 對從 Google API 接收之任何資訊的使用與傳輸至任何其他應用程式之行為，完全遵守 Google API Services User Data Policy（包含「有限使用 Limited Use」要求）。
4Fourtisan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

遵守 Google APIs 服務條款及嚴格禁止 AI NCII (Google APIs Terms of Service & Prohibition of AI NCII)： 4Fourtisan 嚴格遵守 Google APIs Terms of Service。本服務僅提供實體攝影之預約排程，不包含任何 AI 影像生成或合成功能；我們絕不使用 Google API 或任何透過 Google API 取得之資料來生成、訓練、編輯、託管或散播 AI 生成之非自願親密影像（AI-generated Non-Consensual Intimate Imagery, AI NCII）或深偽（Deepfake）內容。
4Fourtisan strictly complies with the Google APIs Terms of Service. 4Fourtisan provides real-world photography appointment scheduling only and does not offer AI image or video generation. We do not and will never use Google APIs or any data obtained through Google APIs to create, generate, edit, host, or distribute AI-generated Non-Consensual Intimate Imagery (AI NCII) or non-consensual synthetic media.

7. 資料保留期限、撤銷授權與刪除方式 Data Retention, Revocation & Deletion

資料保留期限 (Retention Period)： 預約與未定案企劃投稿紀錄僅保留至完成拍攝合作與檔期協調所需之期間（自拍攝完成或投稿日起算最長保留 12 個月作檔期紀錄核對，除非您提前要求刪除）；伺服器安全存取日誌最長保留 90 天後自動清除。
Booking and proposal records are retained only as necessary to fulfill and coordinate scheduled sessions (up to 12 months after the appointment or submission date unless earlier deletion is requested). Server security logs are automatically purged within 90 days.
隨時撤銷 Google 授權 (Revoking Google OAuth Access)： 您可隨時前往 Google 帳戶安全性與第三方存取權限設定 (https://myaccount.google.com/permissions)，一鍵移除對 4Fourtisan 的存取授權，撤銷後本系統將立即停止對您 Google 帳戶之任何存取。
You can revoke 4Fourtisan's access to your Google Account at any time via Google Account Permissions (https://myaccount.google.com/permissions). Revocation takes effect immediately.
申請查閱、更正或永久刪除資料 (Data Deletion Requests)： 如欲查閱、修改或要求永久刪除您於本系統的帳號紀錄、預約資料、企劃投稿及相關授權憑證，請使用您的預約電郵發信至 lancec35@gmail.com。我們將於收到請求後 7 個工作天內完成永久刪除並以電郵回覆確認。
To request access to, correction of, or permanent deletion of your account profile, booking history, proposal submissions, and stored tokens, please email lancec35@gmail.com. All verified deletion requests are permanently processed within 7 business days.

8. 政策修訂與聯絡我們 Policy Updates & Contact Information

若本隱私權政策有任何重大變更，我們將於本頁（https://info.4fourtisan.net/privacy_policy）更新生效日期；若涉及 Google 使用者資料使用方式之變更，我們將在取得您重新同意後始行適用。如有任何隱私權或資料保護疑問，請聯絡：
If we make material updates to this Privacy Policy, we will post the updated policy on https://info.4fourtisan.net/privacy_policy and obtain renewed user consent if Google user data practices change. For any questions, please contact:
Service / App Name: 4Fourtisan
Email: lancec35@gmail.com