AviviD AI Connector Privacy Notice

This English version is a translation. If it differs from the Traditional Chinese version, the Chinese version prevails.

This notice applies to the connector that AviviD.ai (禾多移動多媒體股份有限公司, "we") provides for use with ChatGPT, Claude and other AI assistants (https://mcp.avivid.ai/avivid/mcp, "the Service"). It supplements our Privacy Policy and Personal Data Protection. We give you this notice under Article 8 of Taiwan's Personal Data Protection Act ("PDPA"). Anything not covered here is governed by our Privacy Policy and Personal Data Protection.

What we collect (categories of personal data)

1. Contact requests: when you agree to be contacted, we receive the name, company name, contact details (email or phone), topic of interest and optional note that you provide (personal data categories: C001 identifying information; C061 current employment). No contact request is created without your consent. By sending a contact request, you confirm that you have read and agree to this notice. Providing this information is up to you. If you don't, we can't respond to your contact request, but you can still use the other lookup features.
2. Connection logs: each time the connector is called, we log the request and response (including the query text, the tool results and any contact details above), the time and the client type. The access logs of our web server include IP addresses.
3. Please do not enter special categories of personal data, such as medical records, medical care, genetic information, sex life, health examinations or criminal records, in your queries or notes. If you provide someone else's contact details, you must get their consent first and make them aware of this notice.

The connector requires no sign-in. It does not read your ChatGPT or Claude account, chat history or files, and it does not use cookies.

How we use it

Contact details are used to respond to your request, for follow-up business contact, and to send you information about our products, services or events (specified purposes: 040 marketing; 069 contracts, quasi-contracts or other legal relationships; 090 consumer and customer management and services). Connection logs are used to operate, troubleshoot and improve the Service (specified purposes: 135 information and communication services; 136 information, communication and database management; 157 surveys, statistics and research analysis). The first time we send you marketing, we will tell you how to opt out. You can opt out at any time by email or through the method given in the marketing message, and we will stop. We may also de-identify the data and use it for statistics and product improvement.

Period, area, recipients and method of use

Period: as set out under "How long we keep it" below. Area: the Republic of China (Taiwan), and the locations of the servers and cloud services we use, which may be outside Taiwan. Recipients: AviviD, AviviD's affiliates, and vendors we engage to provide hosting, cloud, information system or customer service services. Method: collection, processing, use and international transfer, by automated or non-automated means, within the purposes above.

Who sees it

We do not sell your personal data or provide it to third parties, except with your consent, as required by law or lawfully requested by judicial or competent authorities, to prevent serious harm to the rights of others, or when we engage the vendors above to process it. Contact details can be accessed only by staff of AviviD and of those vendors who need them for their work. The conversation itself is handled by OpenAI or Anthropic under their own privacy policies; content that an AI assistant sends to the Service is handled by us under this notice.

How long we keep it

Connection logs are overwritten on a rolling basis by file size (about 80 MB in total) and deleted when overwritten. Contact requests are kept until one year after our last contact with you. If we have entered into a business relationship, they are kept for the period required by law or contract after the relationship ends. They are then deleted or de-identified.

Data security

We take appropriate security measures under the PDPA to protect your personal data. If a personal data breach occurs, we will notify you as required by law.

Your rights

Email [email protected] to access, correct or delete your data, or to request to review it, receive a copy, supplement it, or stop its collection, processing or use (PDPA Article 3), or to exercise your other rights under our Privacy Policy and Personal Data Protection. We will handle your request within the statutory period after verifying your identity, and may charge the necessary costs as permitted by law. If the law allows us to refuse a request, we will tell you why. Data contained in connection logs is deleted when the logs are overwritten and is not otherwise used before then.

Changes to this notice

We may revise this notice. Revisions are published on this page with an updated date. If we change the purposes of collection, we will obtain your consent again as required by law.