Privacy Policy

Effective date: August 17, 2026

Last updated: August 18, 2026

This is an English translation of our Traditional Chinese privacy policy, provided for convenience. If the two versions differ, the Chinese version prevails.

Kaiwu Tech (凱吳科技有限公司, Taiwan business ID 00124879; "the Company", "we", "us") respects your privacy. This Privacy Policy explains how we collect, process, use and protect your personal data. It applies to our website (https://www.kaiwu.com.tw/) and to the advertising management service we provide, including the platform that will be located at ads.kaiwu.com.tw (together, "the Service").

By using the Service, you confirm that you have read and agree to this Policy. If you do not agree, please stop using the Service.

1. Data we collect

1.1 Data you provide

• Account data: name, email address, company name and contact phone number.
• Content you provide when you contact us (for example, customer support messages).

1.2 Advertising platform data you authorize us to access

When you connect your advertising accounts to the Service through Facebook Login or Google Sign-In, we access the following, within the scope you authorize:

• Basic ad account information (account name, account ID, currency, time zone).
• Campaign structure and settings (campaigns, ad sets, ads, creatives, audience settings, budgets and bids).
• Advertising performance data (impressions, clicks, spend, conversions and other metrics and reports).
• The access tokens required to carry out the actions you approve.

We only access the accounts and permissions that you explicitly select on the authorization screen. You can revoke this authorization at any time (see Section 6).

1.3 Data collected automatically

• Website browsing records, device and browser information, IP address and cookies (see Section 8).

2. Purposes and how we use data

We process and use the data above, to the extent necessary to provide the Service, for the following purposes:

• Monitoring, aggregating, analyzing and visualizing advertising performance.
• Generating recommendations for managing your ads, including recommendations produced with artificial intelligence.
• Making changes to your ad accounts on your behalf, only after your explicit approval (for example, adjusting budgets, pausing or enabling ads, publishing creatives).
• Producing performance reports.
• Billing, customer support, system security and anomaly detection.
• Meeting our legal obligations.

Period of use: from the date of your consent until you stop using the Service or revoke your authorization. Place of use: within the Republic of China (Taiwan) and in the regions where the cloud services used by the Service are located. Who uses the data: the Company and the processors listed in Section 4.

3. Google user data

Our use of information received from Google APIs (including the Google Ads API) adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We use Google user data only to provide and improve user-facing features of the Service.
• We do not sell Google user data to any third party.
• We do not use Google user data for marketing or for building advertising profiles for purposes other than running your ads.
• No person reads this data unless it is necessary to provide a feature, you have explicitly consented, it is needed for a security investigation, or the law requires it.

4. Processors and third parties

To provide the Service, we use the following types of third-party services to process data, and we require them by contract to keep the data confidential and secure:

• Cloud hosting and database services (for storage and computing).
• Artificial intelligence model services (for analyzing data and generating recommendations; we send only the data needed to provide the feature, and we do not allow these providers to use your data to train their models).
• Email and notification services (for system notifications).

Except for the processors above and where the law requires it, we do not provide, sell or rent your personal data or ad account data to any third party.

5. Storage and security

• Access tokens for advertising platforms are stored encrypted, and internal access to them is restricted.
• All data in transit is encrypted with TLS.
• Each customer's data is isolated from other customers' data within the system.
• We keep only the data needed to provide the Service. If a data security incident occurs, we will notify the competent authorities and the affected individuals as required by law.

6. Revoking authorization and deleting data

You can revoke the Service's access to your ad accounts at any time:

• Meta: in Facebook Business Manager, go to Settings → Integrations → Connected apps and remove the Service; or in your personal account, go to Settings & privacy → Apps and websites and remove it.
• Google: go to https://myaccount.google.com/permissions and remove the Service's access.

Once you revoke authorization, we can no longer access your ad accounts. You may also email us at kai@kaiwu.com.tw to request deletion of the personal data and ad account data we have stored about you. We will complete the deletion within thirty (30) days of receiving your request, except for data we are required by law to keep (such as billing records). After the Service ends, the related data will be deleted or anonymized within ninety (90) days at the latest.

Data deletion requests

Besides emailing us, you can start a data deletion request directly through Meta:

• In Facebook, go to Settings & privacy → Settings → Apps and websites, select this app, click Remove and choose to request deletion of your data. Meta will send your deletion request to the Service's data deletion callback endpoint: https://ads.kaiwu.com.tw/api/webhooks/meta/data-deletion.
• When we receive the request, we issue a confirmation code and provide a link to a status page: https://ads.kaiwu.com.tw/data-deletion?code=<confirmation code>. You can use the confirmation code on that page at any time to check the status of your request.
• After receiving the request, we will delete your personal data and ad account data within thirty (30) days, except for data we are required by law to keep.
• When you remove this app's authorization on Meta's side, the Service immediately marks the corresponding platform connection as revoked and stops accessing your ad accounts.

7. Your rights under Taiwan's Personal Data Protection Act

Under Article 3 of the Personal Data Protection Act of the Republic of China (Taiwan), you may exercise the following rights over your personal data: to inquire about or review it; to request a copy; to request that it be supplemented or corrected; to request that we stop collecting, processing or using it; and to request its deletion. To exercise these rights, email kai@kaiwu.com.tw and we will respond within the period required by law.

8. Cookies

This website uses strictly necessary cookies to keep you signed in and to keep the system secure, and may use analytics cookies to understand how the website is used. You can refuse cookies in your browser settings, but some features may then not work properly.

9. Minors

The Service is intended for business users. It is not directed at anyone under the age of eighteen, and we do not knowingly collect their personal data.

10. Changes to this Policy

We may revise this Policy at any time. Revisions will be posted on this page with an updated "Last updated" date; we will notify you of material changes by email or within the Service.

11. Contact us

Kaiwu Tech (凱吳科技有限公司) Email: kai@kaiwu.com.tw Website: https://www.kaiwu.com.tw/