Aiii Co., Ltd. (類神經網路股份有限公司, "Aiii", "we", "us" or "our") respects and protects your personal data. This policy explains how we collect, process, use and protect personal data when you visit our official website www.aiii.ai (including the /en, /ja and /th locale pages, the "Site"), and provides the notice required under Article 8 of the Taiwan Personal Data Protection Act ("PDPA").
This policy applies to the Site only. Where an Aiii product or service (e.g. Aiii DocuGuard, Dr.Desk, Aiii CRM Agent) has its own privacy policy, that product policy governs.
- How we collect data
- Data we collect
- Purposes and use
- Cookies and tracking
- Storage and retention
- Sharing and processors
- Cross-border transfer
- Security
- Your rights
- Third-party links
- Children's privacy
- Policy updates
- Contact us
1. How we collect data
The Site collects data in the following three ways:
1.1 Voluntarily provided by you
When you submit the "Contact us / Book a demo" form on the Site, you voluntarily provide your company name, name, email address, phone number, subject and message. Before submitting, you may optionally use the "AI Polish" feature, which sends the text you typed to Aiii's own AI inference service (Aiii AI Hub) and returns a tidied summary. The result is only displayed in your browser and is not stored until you submit the form.
1.2 Generated automatically during use
When you browse the Site, our systems and analytics tools automatically record technical data including IP address, browser and device information (User-Agent), pages visited, time on page, click and scroll behaviour, referrer URL and timestamps. When you submit a form we also record the originating page and the Google reCAPTCHA Enterprise risk assessment result to prevent automated abuse.
1.3 Browser-side preferences
The Site stores your chosen display language (aiii_locale) in your browser's localStorage so the same locale is shown on your next visit. This value stays on your device only and is never sent to our servers.
2. Data we collect
| Category | Items | Source |
|---|---|---|
| Identity and contact | Company, name, email, phone | Contact form |
| Enquiry content | Subject, message (including the AI-polished version) | Contact form |
| Technical and security | IP address, User-Agent, referring page, timestamps, reCAPTCHA score, submission-rate counter | Automatic |
| Site usage | Pages, clicks, scrolls, dwell time, device/browser type, approximate location (IP-based) | Google Analytics 4, Google Tag Manager, Microsoft Clarity |
| Preferences | Display language | Browser localStorage |
The Site does not require you to create an account or sign in, and does not collect national ID numbers, dates of birth, financial account details, or special categories of personal data (medical records, genetic data, sexual life, health examinations or criminal records).
3. Purposes and use
Under the PDPA and the Ministry of Justice's list of specified purposes, the Site collects personal data for the following purposes: 040 Marketing; 063 Collection, processing and use by non-government agencies under statutory obligations; 069 Contractual, quasi-contractual or other legal relationships; 090 Consumer, customer management and services; 135 Information and communication services; 157 Surveys, statistics and research analysis.
| Data | Purpose | Processing |
|---|---|---|
| Contact form data | Respond to your enquiry, arrange demos, provide quotations and follow-up sales contact | Written by a server-side API to our Firebase Cloud Firestore database and emailed to our sales team via SendGrid |
| "AI Polish" input text | Turn your brief into a structured requirement summary | Processed in real time by Aiii AI Hub and returned; not used to train models |
| IP address, reCAPTCHA score | Prevent bots and abuse (per-IP submission rate limit) | IP kept short-term as a masked key in a Firestore rate-limit record |
| Site usage | Understand traffic and usage, improve content and UX, measure marketing effectiveness | Processed by Google Analytics 4 and Microsoft Clarity as statistics, heatmaps and de-identified session recordings |
We do not sell, rent or otherwise provide your personal data to third parties for profit, and do not use contact form content to train generalised AI models. Unless you consent otherwise, we only contact you about the subject of your enquiry; you may opt out of further sales contact at any time as described in Sections 9 and 13.
4. Cookies and tracking
The Site uses the following third-party tools, which set cookies or similar technologies in your browser:
| Tool | Provider | Purpose | Opt-out |
|---|---|---|---|
| Google Analytics 4 / Google Tag Manager | Google LLC | Traffic statistics, click events, marketing analytics | Google Analytics opt-out add-on |
| Microsoft Clarity | Microsoft Corporation | Heatmaps and de-identified session replay for UX improvement | Clarity terms; or block third-party cookies in your browser |
| Google reCAPTCHA Enterprise | Google LLC | Bot protection on forms | Required for the form to function; cannot be disabled separately |
You can refuse or delete cookies through your browser settings. Refusing cookies does not prevent you from browsing the Site, though some analytics features will not work. Data processing by these tools is also governed by their providers' policies: Google Privacy Policy, Microsoft Privacy Statement.
5. Storage and retention
The Site is served by Google Firebase Hosting; form data is stored in Cloud Firestore hosted on Google Cloud Platform. All transmissions are encrypted via HTTPS/TLS.
| Data type | Storage | Retention |
|---|---|---|
| Contact form data | Cloud Firestore; copy emailed to our sales mailbox | Up to 3 years after last contact, or until you request deletion (unless law requires otherwise) |
| Rate-limit records (IP) | Cloud Firestore | Only the short window needed to compute submission rate |
| Analytics data | Google Analytics, Microsoft Clarity | Per provider defaults (GA4 user-level data up to 14 months) |
| Display language | Your browser's localStorage | Until you clear browser data |
When the retention period ends or the purpose of collection no longer exists, we delete or de-identify your personal data.
6. Sharing and processors
We only share your data with third parties in the following circumstances:
| Recipient | Data | Purpose | Basis |
|---|---|---|---|
| Google LLC (Firebase, Cloud Platform, reCAPTCHA, Analytics, Tag Manager) | Form data, technical data, usage | Hosting, database, bot protection, analytics | Processor / necessary for operation |
| Twilio Inc. (SendGrid) | Form data | Email delivery of enquiries to us | Processor |
| Microsoft Corporation (Clarity) | Usage (de-identified) | Heatmaps, session analytics | Processor |
| Government / judicial authorities | As required by the request | Per law or judicial/administrative order | Legal obligation |
Third parties processing data on our behalf are contractually bound to act only on our instructions. Other than the above, we do not provide your personal data to any third party.
7. Cross-border transfer
Because the Site relies on international cloud services from Google, Microsoft and Twilio, your data may be stored or processed outside Taiwan (including in the United States and those providers' Asia-Pacific data centres). These providers maintain security measures meeting international standards. By using the Site you acknowledge and consent to such cross-border transfer.
8. Security
- HTTPS/TLS enforced site-wide.
- Form data can only be written through a server-side API; the frontend cannot read or modify it. Database access is protected by Firestore Security Rules and limited to authorised staff.
- Google reCAPTCHA Enterprise plus per-IP rate limiting to block automated abuse.
- API keys are managed in Secret Manager and never shipped in frontend code.
- Staff access data on a least-privilege basis and are bound by confidentiality obligations.
9. Your rights
Under Article 3 of the PDPA, you may exercise the following rights regarding personal data we hold about you:
- Access or request to review
- Request a copy
- Request supplementation or correction
- Request cessation of collection, processing or use
- Request deletion
Submit requests via the contact details in Section 13 with sufficient information to verify your identity. We respond within 15 days of receipt, extendable by a further 15 days with notice; we will honour your request unless the law provides otherwise or the data is necessary for the performance of our business.
Consequences of not providing data: form fields are marked optional or required on the page; if you do not provide required fields we cannot respond to your enquiry. You may contact us by phone or email instead.
10. Third-party links
The Site contains links to third-party websites and services such as 104 Job Bank (job applications), our LINE Official Account, Instagram and partner sites. These sites have their own privacy policies; we are not responsible for their content or data practices and recommend you review their policies before use.
11. Children's privacy
The Site is intended for business customers and is not designed for persons under 18. We do not knowingly collect personal data from minors; if you believe we have inadvertently done so, please contact us and we will delete it promptly.
12. Policy updates
We may revise this policy to reflect changes in law, our services or technology. Revised versions are posted on this page with an updated version number and effective date; material changes will be highlighted on the Site. Continued use of the Site after a revision takes effect constitutes acceptance of the revised policy.
13. Contact us
For questions, comments or requests regarding this policy or your personal data, contact:
- Aiii Co., Ltd. (類神經網路股份有限公司)
- Email: [email protected]
- Phone: +886-2-5568-7660
- Web form: www.aiii.ai/en/about#contact