Privacy Policy
This Privacy Policy explains how Starlight Business Consulting Services Inc. ("Starlight", "we", "us" or "our") collects, uses, shares, stores and protects personal information when you use the Starlight AI Vault app on iOS, Android or the web (the "App"). We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").
1. Who we are and how to contact us
Starlight is the personal information controller for the processing described in this Policy.
- Company: Starlight Business Consulting Services Inc.
- Address: 5th Floor, Salustiana D. Ty Tower, 104 Paseo de Roxas, Legaspi Village, Makati City 1229, Metro Manila, Philippines
- Data Protection Officer: Atty. James Earl Chew. Write to him at the address above, or email dpo@starlight.ph
- Phone: 0917 631 8876 (+63 917 631 8876) or (02) 7255 4774
- Support hours: 24 hours a day
2. Who this Policy covers
The App is for clients of Starlight. Access is by invitation: a Starlight consultant invites a person who acts for a client company, and that person creates an account and links it to the company. This Policy applies to you if you use the App. It also applies to other people whose information appears in documents or requests submitted through the App, such as company directors, officers, employees or passport holders. If you submit information about another person, you must have the authority to do so and, where required, inform that person about this Policy.
3. Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | The name you display in the App, the email address you sign in with, your preferred language (Chinese or English), the companies your account is linked to, your role for each company (owner or member), and who invited you and when. | You, and the Starlight consultant who invites you. |
| Sign-in and session information | One-time verification codes sent to your email (we store them only in a protected, hashed form; each code is valid for 10 minutes), records of code requests including the email address the code was sent to, and session records showing the platform (web, iOS or Android), a general device type (for example "iPhone") and when the session started and was last used. | You and your device. |
| Documents and uploads | Files you upload (PDF and image files such as JPG, PNG and HEIC; some images are converted to JPG), the file name, type and size, the document type, holder name, document number, issue and expiry dates, and review status or reasons a document was returned. We store the full document number in encrypted form and show only its last four characters. Documents may contain sensitive personal information, such as passport details, government-issued identification numbers or tax returns. | You, other authorized users of your company, and Starlight staff handling your company's services. |
| Service information | Services your company has engaged us for and their progress, document expiry dates, and renewal or other service requests you send through the App, including any note you write. | Starlight's service records, and you. |
| AI assistant information | Questions you send to the assistant (after automatic masking, described in section 5), the answers, conversation titles and times, the knowledge sources cited, and usage counts. | You and the App. |
| Consent records | Your agreement to our Privacy Policy and to processing outside the Philippines, your choices on AI processing, with the version and the time of each choice. | You. |
| Security and activity records | Your IP address and browser or device information (user agent) when you register, sign in or out, change your profile or AI consent, delete your account, or view or download a document (for profile changes, we record which fields were changed, not their new values); and short-lived anti-abuse counters that use a one-way hash of your IP address or email address. | Your device and our systems. |
| Communications | Messages you send to us by email, phone or through the App, and our replies. | You. |
We do not access your contacts or location, and we remove location (GPS) data from photos you upload. The App uses your camera or photo library only when you choose to take or select a file to upload. The App contains no advertising, no third-party analytics and no tracking tools, and we do not use your information to track you across other companies' apps or websites.
4. How we use your information and our legal basis
We use personal information to:
- verify your identity, create and secure your account, and link it to the companies you are authorized to act for;
- provide our consulting services, including receiving and reviewing documents, showing document expiry dates and service progress, and handling renewal and other service requests;
- provide the optional AI assistant (section 5);
- communicate with you, including sending verification codes and responding to support and privacy requests;
- keep the App secure, prevent fraud and misuse, and keep records of access and important actions;
- comply with legal and regulatory obligations, respond to lawful requests from public authorities, and establish, exercise or defend legal claims.
Depending on the activity, we rely on one or more of the following legal bases under the Data Privacy Act: your consent; the processing being necessary to provide the services you or your company have requested, or to take steps you request before entering into a service arrangement; compliance with a legal obligation; and our legitimate interests in operating and securing our services and our relationship with your company, where those interests are not overridden by your rights and freedoms.
Sensitive personal information (for example, government-issued identification numbers, passport details and tax returns) receives a higher level of protection. We process it only where you have given consent for the specific purpose, where the processing is provided for by existing laws and regulations, or where it is necessary for the protection of lawful rights and interests in court proceedings, for the establishment, exercise or defense of legal claims, or when provided to government or a public authority, as allowed by the Data Privacy Act. We use such information only for the services for which it was submitted.
5. The AI assistant
It is optional and needs your separate consent. The App asks for your consent before your questions are processed by AI. You may decline, and you may withdraw your consent at any time in My account → Privacy and data. If you do not consent, quick questions, your document vault and expiry reminders remain available.
Third-party AI processing. We use third-party service providers, including AI service providers, to process your information so that the assistant can answer your questions. Your information may be processed outside the Philippines, and we require our service providers to apply appropriate safeguards (see section 7).
What is sent to AI service providers:
- your question, after we automatically mask identifiers such as document numbers, email addresses and phone numbers;
- limited information about the companies you are authorized to access: company names, document titles, review status, expiry dates, the last four characters of document numbers, upcoming expiries and service progress;
- excerpts from Starlight's knowledge base on tax, compliance and business-registration topics; and
- the proposed answer, which may be checked by an additional AI review step before it is shown to you.
To find relevant knowledge-base excerpts, your masked question (shortened to 250 characters) is sent to our knowledge-retrieval service without your name, email address or account identifiers.
What is not sent: your uploaded files or their contents, full document numbers, your verification codes, or your earlier conversations (each question is answered on its own). Automatic masking cannot recognize every kind of personal information, so please do not type full identification or bank numbers, passwords, verification codes or other people's sensitive information into the assistant.
How long conversations are kept and who can see them. Conversations are kept for 180 days from the date the conversation started and are then deleted. You can delete a conversation at any time, and deleting your account deletes all of your conversations. You can see your own conversations. The Starlight consultant currently responsible for your company can also read the company's assistant conversations so they can follow up on your needs, and each time they do so is recorded. Other users of your company cannot see your conversations. If you ask the assistant to have Starlight contact you or to request a service, a short masked summary made of your current question and up to four of your earlier questions in that conversation is sent to the Starlight staff handling your company, including through the internal messaging service our staff use.
When you withdraw consent, we stop sending your new questions to AI service providers. Requests already sent cannot be recalled. Withdrawing consent does not delete past conversations; you can delete them separately. After withdrawal, the assistant answers basic questions without AI, and those questions and answers are still saved (in masked form) in your conversation history under the same 180-day rule.
AI answers are for reference only. They may be incomplete or inaccurate and are not professional advice. See our Terms of Use.
6. Who we share information with
We share personal information only as needed for the purposes in section 4:
- Starlight staff, according to their role and the companies they serve, such as your consultant, document reviewers and our service and finance teams.
- Other authorized users of your company, who can see your company's document records and service information in the App. They cannot see your AI conversations or the notes you write in your service requests.
- Our service providers, who process information on our behalf under contract: cloud hosting and data-centre providers; network delivery and security providers (including a bot-protection check on sign-in that receives your IP address); cloud storage and backup providers; email delivery providers; AI service providers; knowledge-retrieval service providers; and the internal messaging service used by our staff.
- Government agencies and public authorities, when you ask us to file or submit documents on your company's behalf, or when we are required by law, regulation or a lawful order.
- Professional advisers and auditors, under a duty of confidentiality, where needed to protect our rights or meet our obligations.
We do not sell personal information and do not use it for advertising.
7. Processing outside the Philippines
We use third-party service providers, including AI service providers, to process information so that we can provide the App and its features. Your information may be processed outside the Philippines. We require our service providers to apply appropriate safeguards. We remain responsible for personal information we transfer to service providers for processing, whether in the Philippines or abroad, and we use contractual and other reasonable means to ensure that it receives a level of protection comparable to that required by the Data Privacy Act. Data protection laws in other countries may differ from those of the Philippines. Because our services depend on these providers, agreeing to this processing is required to register for and use the App; if you do not agree, you cannot create an account, but you can contact us for other ways to work with your consultant. This is separate from your optional consent to the AI assistant in section 5. You may ask our Data Protection Officer, Atty. James Earl Chew, for a list of our main service providers.
8. How long we keep information
We keep personal information only for as long as needed for the purposes in this Policy, or as required or allowed by law, and then delete or anonymize it.
| Information | How long we keep it |
|---|---|
| Account information | While your account is active. When you delete your account, your display name, email address and the device information in your session records are removed immediately, your sessions and company links are ended, and your AI conversations are deleted. A record without your name or contact details (an internal identifier, language setting and dates) is kept so that our other records stay consistent. |
| AI conversations | 180 days from the date the conversation started, or earlier if you delete the conversation or your account. |
| Verification-code records | Each code is valid for 10 minutes. Records of code requests, including the email address the code was sent to, are deleted in a daily clean-up once they are more than 48 hours old, normally within 72 hours. |
| Anti-abuse counters | Deleted about 48 hours after the time window they cover ends, normally within two to three days. |
| Company documents, uploads, service records and service requests | For as long as needed to provide our services and to meet our legal, accounting and audit obligations. This includes disaster-recovery copies of company records and of historical company archives. Deleting your own account does not delete your company's records. |
| Consent records | For as long as your account exists. After you delete your account, they are kept only with the record that no longer contains your name or contact details, as evidence of the choices you made. |
| Security and audit records | Kept on a long-term basis, because they are needed for legal compliance and security (including investigating incidents and resolving disputes). They are protected against alteration. |
| Backups | Database backups: our databases are backed up daily. Information deleted from our databases is removed from our live systems, but may remain in database backups for up to 90 days, after which it is automatically deleted. Backups of files you upload through the App: encrypted copies are kept separately for disaster recovery; each copy is locked against deletion for 365 days and is deleted after about one year. Disaster-recovery copies of company records and historical archives follow the company-records rule above. Backups are used only to restore our systems. |
9. How we protect information
We use organizational, physical and technical security measures, including:
- encryption of data in transit (HTTPS) and AES-256-GCM encryption of uploaded files and full document numbers, with each file protected by its own key;
- regular database backups kept in separate, access-restricted storage;
- one-time verification codes that are stored only in hashed form, expire after 10 minutes and lock after five wrong attempts, with limits on how often codes can be requested;
- access controls that limit staff access to the companies and functions their role requires, and records of access to documents and assistant conversations;
- secure storage of sign-in tokens, with sessions that expire after 30 days and end when you sign out.
No system is completely secure. Please keep your device and email account secure and never share your verification codes or invitation links.
Personal data breaches. Our Data Protection Officer, Atty. James Earl Chew, is responsible for handling personal data breaches. If a personal data breach occurs that must be notified under the Data Privacy Act and NPC rules, we will notify the NPC and the affected individuals within 72 hours after we become aware of it, and we will take steps to contain the breach and reduce its effects.
10. Your rights
Under the Data Privacy Act, and subject to its conditions and exceptions, you have the right to:
- be informed whether and how your personal information is processed;
- object to processing, including processing based on consent or legitimate interests;
- access your personal information and obtain a copy;
- correct inaccurate or incomplete information;
- request erasure or blocking of information that is incomplete, outdated, false, unlawfully obtained or no longer necessary;
- data portability, to obtain your information in an electronic, commonly used format;
- withdraw consent at any time, without affecting processing that took place before;
- be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information; and
- file a complaint with the NPC.
Your lawful heirs and assigns may exercise these rights in the cases allowed by law.
How to exercise your rights. You can do some things yourself in the App: update your name and language, withdraw AI consent, delete assistant conversations and delete your account. For anything else, contact our Data Protection Officer, Atty. James Earl Chew, at dpo@starlight.ph or at our office address. We may ask you to confirm your identity or your authority to act for a company before we act on a request. Please never send us your verification codes. We will respond within 15 working days after we receive your request. Some requests may be limited where we must keep information to meet a legal obligation, where the information also concerns other people, or where the information belongs to your company's service records; if so, we will explain why.
11. Deleting your account and your company's records
You can delete your account in My account → Delete account. If you cannot sign in, contact us. Deleting your account removes your display name, email address and the device information in your session records, ends your sessions and company links, and deletes your AI conversations. It does not delete your company's documents, uploads, service records or service requests, because they belong to your company's service relationship with Starlight; these are kept as described in section 8. To ask for a specific document or piece of information to be corrected or erased, contact our Data Protection Officer, Atty. James Earl Chew, and we will assess the request.
12. Children
The App is intended for adults who act for client companies. It is not directed at anyone under 18, and you must not create an account if you are under 18. If our services for your company require information about a minor (for example, in a dependent visa application), submit it only with the authority of the minor's parent or guardian. If we learn that a minor has created an account, we will deactivate it.
13. Information stored on your device
On iOS and Android, the App stores your sign-in tokens in your device's secure storage. On the web, we use one strictly necessary, secure cookie to keep you signed in for up to 30 days. The App also remembers simple preferences on your device, such as your chosen assistant character. We do not use cookies or similar technologies for advertising or analytics.
14. Changes to this Policy
We may update this Policy from time to time. We will show the version and effective date at the top and tell you about material changes in the App before they take effect. If a change requires your consent, for example a new use of your information or new AI features, we will ask for it, and we will not start the new processing without it.
15. Complaints
If you have a concern, please contact our Data Protection Officer, Atty. James Earl Chew, first so that we can try to resolve it. You also have the right to file a complaint with the National Privacy Commission of the Philippines at https://privacy.gov.ph. Contacting us first does not affect that right.
16. Governing law and language
This Policy is governed by the laws of the Philippines. It is available in English and Simplified Chinese; if there is any inconsistency, the English version prevails.
隐私政策
本隐私政策说明 Starlight Business Consulting Services Inc.（以下称“星耀”或“我们”）在您使用 iOS、Android 或网页版星耀智库 App（以下称“App”）时，如何收集、使用、共享、保存和保护个人信息。我们依照菲律宾《2012 年数据隐私法》（第 10173 号共和国法）、其实施细则以及菲律宾国家隐私委员会（“NPC”）的相关规定处理个人信息。
1. 我们是谁以及如何联系我们
星耀是本政策所述处理活动的个人信息控制者。
- 公司：Starlight Business Consulting Services Inc.
- 地址：5th Floor, Salustiana D. Ty Tower, 104 Paseo de Roxas, Legaspi Village, Makati City 1229, Metro Manila, Philippines
- 数据保护负责人：James Earl Chew 律师（Atty. James Earl Chew），可寄信至上述地址，或发邮件至 dpo@starlight.ph
- 电话：0917 631 8876（+63 917 631 8876）或 (02) 7255 4774
- 服务时间：24 小时
2. 本政策适用于谁
App 供星耀的客户使用，采用邀请制：星耀顾问邀请代表客户公司办事的人员，受邀人员创建账号并与该公司绑定。您使用 App 时适用本政策。通过 App 提交的文件或需求中出现的其他人（例如公司董事、高管、员工或护照持有人）的信息，同样适用本政策。如果您提交他人的信息，您必须具有相应授权，并在需要时告知对方本政策。
3. 我们收集哪些信息
| 类别 | 包括 | 来源 |
|---|---|---|
| 账号信息 | 您在 App 中显示的名字、用于登录的邮箱、语言偏好（中文或英文）、账号绑定的公司、您在每家公司的角色（所有者或成员），以及邀请人和邀请时间。 | 您本人，以及邀请您的星耀顾问。 |
| 登录与会话信息 | 发送到您邮箱的一次性验证码（我们只以受保护的哈希形式保存，每个验证码 10 分钟内有效）、验证码请求记录（含验证码发送到的邮箱），以及会话记录：平台（网页、iOS 或 Android）、大致设备类型（例如“iPhone”）、会话开始和最近使用的时间。 | 您本人及您的设备。 |
| 文件与上传资料 | 您上传的文件（PDF 及 JPG、PNG、HEIC 等图片；部分图片会被转换为 JPG）、文件名、类型和大小，以及证件类型、持有人姓名、证件号码、签发和到期日期、审核状态或退回原因。完整证件号码加密保存，App 只显示后四位。文件可能包含敏感个人信息，例如护照信息、政府签发的身份证件号码或纳税申报表。 | 您本人、您公司的其他获授权用户，以及为您公司办理服务的星耀员工。 |
| 服务信息 | 您公司委托我们办理的服务及其进度、证件到期日期，以及您通过 App 提交的续办或其他服务需求（含您填写的备注）。 | 星耀的服务记录，以及您本人。 |
| AI 助理信息 | 您发给助理的问题（经自动遮盖处理，见第 5 节）、回答、对话标题与时间、引用的知识来源，以及使用次数。 | 您本人及 App。 |
| 同意记录 | 您对本隐私政策及在菲律宾境外处理所作的同意、您对 AI 处理所作的选择，以及每项选择的版本和时间。 | 您本人。 |
| 安全与操作记录 | 您注册、登录或退出、修改资料或 AI 同意、注销账号、查看或下载文件时的 IP 地址和浏览器或设备信息（user agent）（修改资料时只记录改了哪些项目，不记录修改后的内容）；以及使用 IP 地址或邮箱单向哈希值的短期防滥用计数。 | 您的设备及我们的系统。 |
| 往来沟通 | 您通过邮件、电话或 App 发给我们的信息，以及我们的回复。 | 您本人。 |
我们不读取您的通讯录或位置信息，并会删除您上传照片中的位置（GPS）信息。只有在您选择拍摄或选取要上传的文件时，App 才会使用相机或相册。App 不含广告、第三方分析工具或追踪工具，我们也不会利用您的信息在其他公司的 App 或网站上追踪您。
4. 我们如何使用信息及法律依据
我们使用个人信息以：
- 核实您的身份、创建并保护您的账号，并将账号与您获授权代表的公司绑定；
- 提供咨询服务，包括接收和审核文件、显示证件到期日期和服务进度、处理续办及其他服务需求；
- 提供可选的 AI 助理（见第 5 节）；
- 与您沟通，包括发送验证码，以及回复支持和隐私请求；
- 保障 App 安全，防止欺诈和滥用，并记录访问和重要操作；
- 遵守法律和监管义务，回应主管机关的合法要求，以及确立、行使或抗辩法律主张。
视具体活动而定，我们依据《数据隐私法》的以下一项或多项法律依据处理信息：您的同意；为提供您或您公司所请求的服务，或应您的要求在订立服务安排前采取措施所必需；履行法律义务；以及我们在运营和保护服务、维护与您公司关系方面的正当利益（以不凌驾于您的权利与自由为前提）。
敏感个人信息（例如政府签发的身份证件号码、护照信息和纳税申报表）受到更高程度的保护。我们只在以下情形处理此类信息：您已就特定目的给予同意；现行法律法规规定须处理；或为保护诉讼中的合法权利和利益、确立、行使或抗辩法律主张，或向政府或主管机关提供而必需，且均在《数据隐私法》允许范围内。此类信息只用于提交时所对应的服务。
5. AI 助理
AI 助理是可选功能，需要您另行同意。 您的问题交由 AI 处理前，App 会请求您的同意。您可以拒绝，也可以随时在 我的 → 隐私与数据 中撤回同意。不同意也可以继续使用快捷问题、资料库和到期提醒。
第三方 AI 处理。 我们会使用第三方服务商（包括 AI 服务商）处理您的资料，以便助理回答您的问题。资料可能在菲律宾境外处理，我们要求服务商采取适当的保护措施（见第 7 节）。
发送给 AI 服务商的内容：
- 您的问题，其中证件号码、邮箱、电话号码等标识会先经自动遮盖；
- 您有权访问的公司的有限信息：公司名称、文件标题、审核状态、到期日期、证件号码后四位、即将到期事项及服务进度；
- 星耀知识库中关于税务、合规和公司注册等主题的摘录；
- 拟定的回答，在展示给您之前可能经过另一道 AI 审核。
为了查找相关的知识库摘录，您经遮盖的问题（截取至 250 个字符）会发送到我们的知识检索服务，其中不含您的姓名、邮箱或账号标识。
不会发送的内容： 您上传的文件及其内容、完整证件号码、您的验证码，以及您以前的对话（每个问题单独回答）。自动遮盖无法识别所有类型的个人信息，请不要在助理中输入完整的证件号码或银行账号、密码、验证码或他人的敏感信息。
对话保存多久、谁能看到。 对话自开始之日起保存 180 天，之后删除。您可以随时删除对话；注销账号会删除您的全部对话。您可以查看自己的对话。目前负责您公司的星耀顾问也可以查看公司的助理对话，以便跟进您的需求，每次查看都会留下记录。您公司的其他用户看不到您的对话。如果您通过助理请星耀联系您或提出服务需求，系统会把一段经遮盖的简短摘要（由您当前的问题及该对话中最多四个此前的问题组成）发送给负责您公司的星耀员工，包括通过我们员工使用的内部通讯工具发送。
您撤回同意后， 我们会停止把您的新问题发送给 AI 服务商；已经发出的请求无法收回。撤回同意不会删除过去的对话，您可以另行删除。撤回后，助理会在不使用 AI 的情况下回答基本问题，这些问答仍会以遮盖后的形式保存在对话记录中，同样适用 180 天的保存期。
AI 回答仅供参考。 回答可能不完整或不准确，不构成专业意见。详见使用条款。
6. 我们与谁共享信息
我们只为第 4 节所述目的、在必要范围内共享个人信息：
- 星耀员工：按其岗位和所服务的公司，例如您的顾问、文件审核人员以及服务和财务团队。
- 您公司的其他获授权用户：他们可以在 App 中看到您公司的文件记录和服务信息，但看不到您的 AI 对话，也看不到您在服务需求中填写的备注。
- 我们的服务商：依合同代表我们处理信息，包括云主机与数据中心服务商；网络传输与安全服务商（包括登录时接收您 IP 地址的防机器人验证）；云存储与备份服务商；邮件发送服务商；AI 服务商；知识检索服务商；以及我们员工使用的内部通讯服务。
- 政府机关和主管机关：在您请我们代表您公司提交文件或办理申报时，或法律、法规或合法命令要求时。
- 专业顾问和审计师：在保护我们的权利或履行我们的义务所需时，且其负有保密义务。
我们不出售个人信息，也不将个人信息用于广告。
7. 在菲律宾境外处理
我们会使用第三方服务商（包括 AI 服务商）处理资料，以提供 App 及其功能。资料可能在菲律宾境外处理，我们要求服务商采取适当的保护措施。无论服务商位于菲律宾境内还是境外，我们对交由其处理的个人信息仍负有责任，并通过合同及其他合理方式，确保这些信息获得与《数据隐私法》要求相当的保护。其他国家的数据保护法律可能与菲律宾不同。由于我们的服务依赖这些服务商，注册和使用 App 必须同意上述处理；如不同意，将无法创建账号，但您可以联系我们，了解与顾问协作的其他方式。这与第 5 节 AI 助理的可选同意相互独立。您可以向我们的数据保护负责人 James Earl Chew 律师（Atty. James Earl Chew）索取主要服务商的名单。
8. 我们保存信息多久
我们只在实现本政策所述目的所需的期间内，或在法律要求或允许的期间内保存个人信息，之后予以删除或匿名化。
| 信息 | 保存期限 |
|---|---|
| 账号信息 | 账号有效期间保存。注销账号时，您的显示名、邮箱以及登录会话记录中的设备信息会立即删除，登录会话和公司绑定随即终止，AI 对话一并删除。为保持其他记录的一致性，我们会保留一条不含您姓名或联系方式的记录（内部标识、语言设置和日期）。 |
| AI 对话 | 自对话开始之日起 180 天；如您提前删除对话或注销账号，则提前删除。 |
| 验证码记录 | 每个验证码 10 分钟内有效。验证码请求记录（含验证码发送到的邮箱）在 48 小时后的每日清理中删除，通常不超过 72 小时。 |
| 防滥用计数 | 在所覆盖的时间段结束约 48 小时后删除，通常在两到三天内完成。 |
| 公司文件、上传资料、服务记录和服务需求 | 为提供服务及履行法律、会计与审计义务所需的期间内保存，包括公司记录和公司历史档案的灾备副本。注销您本人的账号不会删除您公司的记录。 |
| 同意记录 | 账号存续期间保存。注销账号后，仅随那条不含您姓名或联系方式的记录保存，作为您所作选择的证明。 |
| 安全与审计记录 | 因法律合规与安全需要（包括调查事件和解决争议）而长期保存，受保护，不能被篡改。 |
| 备份 | 数据库备份：我们的数据库每天备份。从数据库中删除的资料会从在用系统中移除，但在数据库备份中最长保留 90 天后自动删除。您通过 App 上传的文件的备份：加密副本另行存放，用于灾难恢复；每份副本锁定 365 天、不可删除，最长保留约 1 年后删除。公司记录和历史档案的灾备副本按上一行公司记录的规则保存。备份只用于恢复我们的系统。 |
9. 我们如何保护信息
我们采取组织、物理和技术安全措施，包括：
- 数据传输加密（HTTPS），上传文件和完整证件号码采用 AES-256-GCM 加密，每个文件使用独立密钥；
- 定期备份数据库，并存放在单独、访问受限的存储中；
- 一次性验证码只以哈希形式保存，10 分钟后失效，输错五次即锁定，并限制请求频率；
- 访问控制，员工只能访问其岗位所需的公司和功能，并记录对文件和助理对话的访问；
- 登录凭证安全保存，登录会话 30 天后过期，退出登录即终止。
任何系统都无法做到绝对安全。请保护好您的设备和邮箱，切勿向任何人透露验证码或邀请链接。
个人数据泄露。 个人数据泄露由我们的数据保护负责人 James Earl Chew 律师（Atty. James Earl Chew）负责处理。如发生依《数据隐私法》及 NPC 规定须通知的个人数据泄露，我们会在知悉后 72 小时内通知 NPC 和受影响的个人，并采取措施控制泄露、减轻影响。
10. 您的权利
根据《数据隐私法》，在其条件和例外范围内，您有权：
- 知情：了解您的个人信息是否被处理以及如何被处理；
- 反对处理，包括基于同意或正当利益的处理；
- 访问您的个人信息并获取副本；
- 更正不准确或不完整的信息；
- 要求删除或封锁不完整、过时、虚假、非法取得或不再需要的信息；
- 数据可携：以常用的电子格式获取您的信息；
- 随时撤回同意，撤回不影响此前已进行的处理；
- 获得赔偿：因个人信息不准确、不完整、过时、虚假、非法取得或未经授权使用而遭受损害的，有权获得赔偿；
- 向 NPC 投诉。
在法律允许的情形下，您的合法继承人和受让人可以行使上述权利。
如何行使权利。 部分操作您可以在 App 中自行完成：修改名字和语言、撤回 AI 同意、删除助理对话以及注销账号。其他请求请联系我们的数据保护负责人 James Earl Chew 律师（Atty. James Earl Chew）（dpo@starlight.ph 或寄信至公司地址）。在处理请求前，我们可能需要核实您的身份或您代表公司行事的授权。请勿向我们发送验证码。我们会在收到请求后 15 个工作日内答复。如我们须为履行法律义务而保存信息、信息同时涉及他人，或信息属于您公司的服务记录，部分请求可能受到限制；届时我们会说明原因。
11. 注销账号与公司记录
您可以在 我的 → 注销账号 中注销账号；如无法登录，请联系我们。注销账号会删除您的显示名、邮箱以及登录会话记录中的设备信息，终止您的登录会话和公司绑定，并删除您的 AI 对话。注销不会删除您公司的文件、上传资料、服务记录或服务需求，因为这些属于您公司与星耀之间的服务关系，将按第 8 节保存。如需更正或删除某份文件或某项信息，请联系我们的数据保护负责人 James Earl Chew 律师（Atty. James Earl Chew），我们会评估您的请求。
12. 未成年人
App 面向代表客户公司办事的成年人，不针对未满 18 岁的人士。未满 18 岁请勿创建账号。如果我们为您公司提供的服务需要未成年人的信息（例如随行家属签证申请），请仅在获得其父母或监护人授权后提交。如我们发现有未成年人创建了账号，会停用该账号。
13. 保存在您设备上的信息
在 iOS 和 Android 上，App 把您的登录凭证保存在设备的安全存储中。在网页版上，我们使用一个必要的安全 Cookie 保持您的登录状态，最长 30 天。App 还会在您的设备上记住简单的偏好设置，例如您选择的助理形象。我们不使用 Cookie 或类似技术进行广告或分析。
14. 本政策的变更
我们可能不时更新本政策，并在页首注明版本和生效日期。如有重大变更，我们会在生效前通过 App 告知您。如变更需要您的同意（例如以新的方式使用您的信息或推出新的 AI 功能），我们会请求您的同意，未经同意不会开始新的处理。
15. 投诉
如有疑虑，请先联系我们的数据保护负责人 James Earl Chew 律师（Atty. James Earl Chew），以便我们设法解决。您也有权向菲律宾国家隐私委员会投诉：https://privacy.gov.ph。先联系我们不影响您的这项权利。
16. 适用法律与语言
本政策受菲律宾法律管辖。本政策有英文和简体中文两个版本；如有不一致，以英文版本为准。