THEMIS 隱私政策 / Privacy Policy

本政策適用於 TerraPeak Holdings Limited（香港）（「TerraPeak」、「我們」）營運的 THEMIS AI Compliance Suite 的全部組件：

/ This policy covers all components of the THEMIS AI Compliance Suite operated by TerraPeak Holdings Limited（香港）: the THEMIS Website, the Compliance Management Console (web application), the Browser Probe (Chrome extension), the Desktop DLP (macOS / Windows application), and the AI Gateway deployed within your corporate network, which works with the Compliance Management Console to form the audit evidence chain.

企業客戶（僱主）以自身的合法目的部署 THEMIS 並決定收集哪些員工資料時，企業客戶是該等資料的資料使用者（data user / controller）；TerraPeak 僅按企業客戶的指示處理該等資料，屬資料處理者（data processor）。就此：

• 企業客戶須按香港《個人資料（私隱）條例》（第 486 章）向其員工作出妥善告知（例如在僱傭通知或員工政策中說明 THEMIS 的部署與監測範圍）；
• TerraPeak 就平台自身營運直接收集的資料（例如官網查詢、帳戶管理），屬資料使用者，本政策以下條款直接適用。

/ Where your employer deploys THEMIS for its own purposes, your employer is the data user (controller) of your personal data, and TerraPeak acts only as a data processor following the employer's instructions. Your employer is responsible for notifying you of such deployment as required by the Personal Data (Privacy) Ordinance (Cap. 486). TerraPeak (the operator of THEMIS) is the data user of the data it collects directly for operating the platform (e.g. website enquiries, account administration), and the following provisions of this policy apply directly.

1. 你主動提供的 / Information you provide

• 官網查詢：姓名、公司、電郵 / Enquiry via the Website: name, company, email；
• 帳戶資料：姓名、企業電郵、所屬公司與角色（由你的企業管理員配置）/ Account data: name, corporate email, company and role (configured by your company administrator)；
• 簽署與合規記錄：政策知悉簽署、豁免申請等提交記錄 / Policy acknowledgements, exemption requests and other submissions。

2. 產品自動收集的 / Information collected automatically

• 設備授權信息：軟件設備指紋與設備類型 / Device licensing data: soft fingerprint and device type；
• 審計事件元數據：AI 站點域名與平台名稱、命中的檢測規則編號與名稱、處置動作（放行／提醒／攔截）、時間戳與使用時長；經 AI 網關上傳文件時，另記錄該文件的檔名、類型與大小，及壓縮包內各文件的檔名（僅文件屬性，文件內容不離開企業網絡） / Audit event metadata: AI site domain and platform, rule matched, disposition (allow/warn/block), timestamps and usage duration; where a file is uploaded via the AI Gateway, the file's name, type and size are also recorded(file attributes only — file content never leaves your corporate network)——由 Browser Probe、Desktop DLP 及 AI Gateway 收集 / collected by the Browser Probe, Desktop DLP and AI Gateway。

僅用於：①向企業管理員提供合規告警、審計報告與證據鏈驗證；②設備授權與訂閱管理；③帳戶管理與安全防護；④回應你的查詢；⑤在整體、去識別化層面改進檢測規則準確性。我們不出售任何個人資料，不將個人資料用於與上述目的不相關的廣告或畫像。

/ Solely for: compliance alerts, audit reports and evidence-chain verification for company administrators; device licensing and subscription management; account administration and security; responding to enquiries; and improving detection-rule accuracy on an aggregated, de-identified basis. We never sell personal data and never use it for unrelated advertising or profiling.

帳戶資料在企業訂閱有效期內保留；審計事件元數據按企業客戶的訂閱方案配置的保留期存儲，到期由系統自動清除；官網查詢信息在處理完畢後按需要保留最長 24 個月。超出目的所需時間的資料會被刪除或去識別化。

/ Account data is retained for the duration of the enterprise subscription; audit event metadata is retained according to the retention period configured in the enterprise plan and purged automatically upon expiry; website enquiry data is retained for up to 24 months as needed. Data no longer necessary is deleted or de-identified.

資料存儲於香港及新加坡的數據中心。我們採取合同與技術措施確保跨境傳輸符合《個人資料（私隱）條例》的要求。

/ Data is stored in data centres in Hong Kong and Singapore. We apply contractual and technical safeguards to ensure that cross-border transfers comply with the Personal Data (Privacy) Ordinance (Cap. 486).

我們實施與風險相稱的技術及組織措施，包括：傳輸加密（TLS）；敏感事件僅以 HMAC-SHA256 簽名形式對賬；審計記錄以每日哈希鏈防篡改，任何事後修改都會令鏈條斷裂並可被獨立驗證；基於角色的訪問控制與行級租戶隔離（RLS）；管理操作獨立鑑權。

/ We apply technical and organisational measures proportionate to the risk, including TLS in transit; HMAC-SHA256 signed reconciliation for sensitive events; a daily hash chain over audit records so any retroactive tampering breaks the chain and is independently verifiable; role-based access control with row-level tenant isolation (RLS); and separate authentication for administrative operations.

我們使用受信賴的第三方服務提供商（包括雲端數據庫與身份認證、基礎設施及訂閱支付處理）協助營運本平台。除上述及法律要求外，我們不向任何第三方披露個人資料。

/ We rely on trusted third-party service providers (including cloud database and authentication hosting, infrastructure, and subscription payment processing) to operate the platform. Other than these and disclosures required by law, we do not disclose personal data to third parties.

根據《個人資料（私隱）條例》，你有權查閱及更正你的個人資料。員工對其審計記錄的查閱請求，請先聯絡你的企業管理員；你亦可直接透過下方聯絡方式向我們提出，我們將在 40 日內回應。

/ Under the Ordinance you have the right to request access to and correction of your personal data. Employees should first direct access requests regarding audit records to their company administrator; you may also contact us directly and we will respond within 40 days.

我們可能不時更新本政策，重大變更將於官網公告並更新生效日期。

/ We may update this policy from time to time; material changes will be announced on the website with a new effective date.