1. 资料使用者与适用范围
OCTOHAWK 是由 HONG KONG CANGYING TECHNOLOGY LIMITED(香港公司编号 80835651,下称“本公司”或“我们”)运营的海外素材分析及报告服务。本政策适用于 octohawk.com、报告中心,以及与服务有关的沟通。
就《个人资料(私隐)条例》(香港法例第 486 章)而言,本公司是其控制收集、持有、处理或使用的个人资料的资料使用者。
2. 个人资料收集声明
创建账号时,我们要求提供姓名、电子邮箱和密码。姓名和邮箱用于识别账号、提供服务、安全通知和回复请求;密码仅以不可逆摘要形式保存。提供这些资料属于自愿,但如不提供,我们无法创建账号或提供账号功能。
当你提交分析任务时,你可提供产品、品牌、市场、平台账号、网址、关键词、评论范围或其他研究要求。提交任务属于自愿,但缺少必要资料可能导致我们无法完成所请求的分析。请不要提交身份证件、财务账号、健康资料、私人通信或其他非分析所必需的敏感个人资料。
3. 我们收集的资料
- 账号资料:姓名、邮箱、工作区名称、验证状态及账号设置;
- 服务资料:任务输入、报告、证据数据、反馈、交付与下载记录;
- 交易及体验权益记录:权益变动、订单状态;目前免费试用且不接受付款;
- 技术及安全资料:经加密散列处理的 IP 信息、浏览器或设备信息、会话和安全事件;
- 沟通资料:你向我们发送的查询、投诉、资料权利请求及支持记录。
4. 使用目的
- 建立、认证和维护账号;
- 接收任务、调用分析工具、生成和交付报告;
- 保障系统、预防滥用、调查故障及保留审计记录;
- 改善服务质量、处理反馈及提供客户支持;
- 履行法律、会计、监管及争议处理义务。
除非取得你的明示及自愿同意或法律允许,我们不会把个人资料用于与原收集目的无关的新目的,也不会把个人资料用于直接促销。
5. 服务处理与外部资料
为完成用户请求,任务输入和必要上下文可能由受委托的数据处理及基础设施服务商处理。报告可能包含来自公开商品、评论、创作者或社交媒体页面的资料。公开可见资料仍可能涉及个人资料及第三方权利,我们会按任务目的限制处理范围。
系统生成的报告可能存在遗漏、延迟或错误,不会用于对个人作出具有法律或类似重大影响的全自动决定。重要商业决定应由用户进行人工核验。
6. 披露、处理商与跨境传输
我们可能向以下类别的接收者提供必要资料:托管和信息技术服务商、数据分析及基础设施服务商、邮件和客户支持服务商、将来启用的支付服务商、专业顾问,以及依法有权接收资料的机构。
部分服务商及其系统可能位于香港以外。我们会采取合理可行的合同、权限和安全措施,要求受委托处理商仅按指定目的处理资料、保障安全并在不再需要时删除资料。
7. 保留与删除
我们只在实现上述目的所需期间保留个人资料。账号资料一般保留至账号关闭及必要的争议处理期届满;报告和相关交付文件通常按适用的服务保留期保存;安全、交易和法律记录可能按法定或合理审计期限保存。资料不再需要时,我们会采取合理步骤删除或去标识化。
8. 安全与本地存储
我们采用访问控制、传输加密、密码摘要、会话管理、操作审计和最小权限等措施。任何互联网服务均无法保证绝对安全,请妥善保护账号凭据并及时报告异常。
网站使用浏览器本地存储保存语言偏好和登录会话。当前网站不使用广告追踪 Cookie。
9. 查阅、更正与删除请求
你可要求查阅或更正我们持有的你的个人资料,也可要求关闭账号或删除不再需要的资料。我们可能需要核实身份,并可在法律允许的情况下保留必要记录或拒绝部分请求并说明理由。
请通过 zengmiaomiao@seamew.net 提交请求,主题注明“个人资料请求”。
10. 未成年人、更新与联系
服务面向企业及成年用户,不以 18 岁以下人士为目标。我们可能不时更新本政策,重大变更会在网站显著位置通知。隐私查询请参阅联系我们。
1. Data User and Scope
OCTOHAWK is a global creative intelligence and reporting service operated by HONG KONG CANGYING TECHNOLOGY LIMITED (Hong Kong Company No. 80835651, "we", "us" or the "Company"). This policy applies to octohawk.com, the report center and service-related communications.
For the purposes of the Personal Data (Privacy) Ordinance (Cap. 486), the Company is the data user for personal data whose collection, holding, processing or use it controls.
2. Personal Information Collection Statement
To create an account, we require a name, email address and password. We use the name and email to identify the account, provide the service, send security notices and answer requests. Passwords are stored only as non-reversible hashes. Supply is voluntary, but we cannot create an account or provide account features without this information.
For an analysis task, you may provide products, brands, markets, platform accounts, URLs, keywords, review scopes or research instructions. Supply is voluntary, but missing information may prevent us from completing the requested analysis. Do not submit identity documents, financial account details, health data, private communications or other sensitive personal data that is not necessary for the analysis.
3. Data We Collect
- Account data, including name, email, workspace, verification status and settings;
- Service data, including task inputs, reports, evidence, feedback, delivery and download records;
- Order and trial-credit records; the service is currently free to try and does not accept payment;
- Technical and security data, including hashed IP information, browser or device information, sessions and security events;
- Communications, complaints, data-rights requests and support records.
4. Purposes of Use
- Create, authenticate and maintain accounts;
- Accept tasks, operate analysis tools, and generate and deliver reports;
- Protect the service, prevent abuse, investigate failures and maintain audit records;
- Improve service quality, process feedback and provide support;
- Meet legal, accounting, regulatory and dispute-handling obligations.
We do not use personal data for an unrelated new purpose or direct marketing without express and voluntary consent or another lawful basis.
5. Service Processing and External Data
Task inputs and necessary context may be processed by contracted data-processing and infrastructure providers to fulfil a request. Reports may include information from public product, review, creator or social-media pages. Publicly visible information may still involve personal data and third-party rights, so processing is limited to the task purpose.
System-generated reports may contain omissions, delays or errors. They are not used to make solely automated decisions about individuals that have legal or similarly significant effects. Users should apply human review to important business decisions.
6. Disclosures, Processors and Transfers
Necessary data may be provided to hosting and IT providers, data-analysis and infrastructure providers, email and support providers, payment providers if enabled in future, professional advisers, and authorities legally entitled to receive it.
Some providers and systems may be outside Hong Kong. We use reasonably practicable contractual, access-control and security measures to require processors to act only for specified purposes, protect data and erase it when no longer required.
7. Retention and Erasure
We retain personal data only as long as necessary for the purposes above. Account data is generally retained until account closure and expiry of a necessary dispute period. Reports and delivery files follow the applicable service retention period. Security, transaction and legal records may be retained for statutory or reasonable audit periods. Data that is no longer needed is erased or de-identified through reasonably practicable steps.
8. Security and Local Storage
Measures include access controls, encryption in transit, password hashing, session management, operational audit and least privilege. No internet service can guarantee absolute security; protect account credentials and promptly report suspicious activity.
The site uses browser local storage for language preferences and login sessions. It currently uses no advertising-tracking cookies.
9. Access, Correction and Erasure Requests
You may request access to or correction of your personal data, account closure, or erasure of data no longer required. We may verify identity and may retain necessary records or refuse part of a request where permitted by law, giving reasons where required.
Email zengmiaomiao@seamew.net with the subject "Personal Data Request".
10. Minors, Updates and Contact
The service is intended for businesses and adults, not persons under 18. We may update this policy and will prominently notify users of material changes. See Contact Us for privacy enquiries.