Legal
Privacy policy
This is an English translation of our Chinese policy for convenience. If the two versions differ, the Chinese version prevails.
ENSCON AI ("the Company", "we") values your privacy. This policy explains how we collect, process, use and protect your personal data. It applies to all services the Company provides, including the enscon.ai and enscon.co websites and related services.
1. Applicable law
This policy is based on:
- Taiwan's Personal Data Protection Act and its enforcement rules
- The EU General Data Protection Regulation (GDPR) — for users in the European Union
2. Data we collect
2.1 Data you provide
- Account data: email address, password (stored encrypted), company name
- Service data: company information, service descriptions, contact details and similar information provided during onboarding consultations
- Payment data: handled by a third-party payment provider (Recur); the Company does not store credit card numbers directly
- Contact forms: name, email, phone number, message
2.2 Data collected automatically
- Usage records: pages viewed, how often features are used, login times
- Device information: browser type, operating system, screen resolution
- Cookies and similar technologies: see the cookie policy below
3. How we use data
We use the data we collect only to:
- Provide the service: build and manage your website, authenticate your account, manage content
- Improve the service: analyse usage to improve the product
- Send notifications: delivery notices, service expiry reminders, important system announcements
- Support customers: answer your questions and technical support requests
- Meet legal obligations: comply with tax and regulatory requirements
We will not:
- Sell your personal data to third parties
- Use it for marketing without your consent
- Use your data beyond the purposes above
4. Sharing data and third-party services
We may share data with the following third parties, only as needed to provide the service:
- Recur (payments): processes subscription payments
- Render / Railway (cloud hosting): deploys and runs websites
- Cloudflare (CDN / DNS): speeds up websites and manages domains
- Google Analytics (web analytics): anonymised usage statistics
- Anthropic Claude (AI service): generates website content (no personally identifiable information is passed on)
- OpenAI (AI customer service): messages you send to our AI assistant through the website chat, our LINE official account or our Facebook Page are sent to OpenAI to generate a reply
- Google, Meta, OpenAI, Cloudflare (website measurement and advertising results): see section 5 below
5. Cookies and tracking tools
This website loads the following tools by default. If you choose "Essential only" in the cookie notice, the Google, Meta and OpenAI tools are not loaded:
- Essential cookies: login status, security checks (cannot be turned off)
- Google Tag Manager and Google Analytics 4: how many people visit and which pages they view (cookies: _ga and those starting with _ga_)
- Meta (Facebook) Pixel: measures visits and enquiries that come from Facebook and Instagram ads (cookie: _fbp; page-view events are sent to servers of Meta and its service providers)
- OpenAI ad conversion tracking: measures visits and clicks that come from ChatGPT ads (cookie: __obref; our server also forwards events such as clicks and scrolling to OpenAI)
- Cloudflare Web Analytics: traffic statistics, no cookies
Purpose: to measure how the website is used and how our ads perform.
Your choice: on your first visit a cookie notice appears at the bottom of the page. Until you choose, or if you hide the notice with ✕, these tools load as normal. If you choose "Essential only", the Google, Meta and OpenAI tools stop loading from the next page on, and we remember your choice. To change your choice, clear this website's cookies and site data and we'll ask again on your next visit.
6. How we protect data
- Passwords are stored encrypted with SHA-256 and a random salt
- All data is transmitted encrypted over HTTPS/TLS
- Servers are in a protected cloud environment (Render / Railway)
- Regular backups to prevent data loss
- Only authorised staff can access personal data
7. Your rights
Under the Personal Data Protection Act and the GDPR, you have the right to:
- Access: ask to see the personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: ask us to delete your account and related data
- Restriction: ask us to limit how your data is processed
- Portability: ask for your data exported in a machine-readable format
- Withdraw consent: withdraw your consent to data processing at any time
To exercise any of these rights, contact us using the details below.
8. How long we keep data
- Account data: until you delete your account
- Website content: while your subscription is active and for 90 days after it ends
- Transaction records: 5 years, as required by tax law
- System logs: deleted automatically after 180 days
9. Children
The service is not aimed at people under 16. If we find we have accidentally collected a minor's data, we will delete it immediately.
10. Changes to this policy
This policy may be updated from time to time. For significant changes we will notify you by email or a notice on the website. Continuing to use the service means you accept the updated policy.
11. Contact us
ENSCON AI
Tax ID: 89115053
Email: [email protected]
Website: enscon.co