1. 我們收集的資料
你主動提供的資料
- 帳號資料：註冊時的 email（作為帳號）、密碼與顯示名稱。密碼會先經過單向雜湊再儲存，我們無法得知你的密碼。日後開放兩步驟驗證時，也會保存驗證所需的設定。
- 你上傳或建立的內容：動畫書（html、zip 及其中的圖片、音訊等檔案）、書名、簡介、標籤、公開或不公開的設定，以及在書上留下的重點、留言與表情。
- AI 工作室的內容：你在工作室輸入的指示（prompt）、上傳的參考素材，以及生成的文字、程式、圖片與音訊。
- 檢舉與聯絡紀錄：你檢舉內容或來信時提供的說明與往來信件，用來處理你的問題。
- 交易資料：開始收費後，購買點數時的交易紀錄（金額、時間、付款狀態）。信用卡等付款資訊由金流服務商處理，我們不會儲存完整卡號。
使用服務時自動產生的資料
- 使用紀錄：瀏覽與閱讀的頁面、搜尋字詞、閱讀進度、點擊等互動紀錄。
- 裝置與連線資訊：IP 位址、瀏覽器類型、作業系統、存取時間等伺服器紀錄。
- 點數紀錄：點數的取得與扣用明細（例如使用了哪些 AI 生成功能、觀看了哪些付費內容）。
- API 與代理存取紀錄：你建立的個人 API token（我們只保存雜湊值）、透過 OAuth 授權的應用程式，以及 AI 代理透過 MCP 或 API 進行的操作紀錄。
1. Data we collect
Data you provide
- Account data: the email address you register with (used as your account), your password and your display name. Passwords are stored only after one-way hashing, so we cannot know your password. When two-step verification becomes available, we will also store the settings it requires.
- Content you upload or create: animated books (html or zip files and the images, audio and other files in them), titles, descriptions, tags, public or private settings, and the highlights, comments and reactions you leave on books.
- AI Studio content: the instructions (prompts) you enter in the Studio, the reference material you upload, and the generated text, code, images and audio.
- Reports and correspondence: the explanations and emails you provide when reporting content or contacting us, used to handle your request.
- Transaction data: once paid features launch, records of your credit purchases (amount, time, payment status). Credit card and other payment details are handled by the payment provider; we do not store full card numbers.
Data generated when you use the Service
- Usage records: pages you browse and read, search terms, reading progress, clicks and other interactions.
- Device and connection information: server logs such as IP address, browser type, operating system and access time.
- Credit records: details of credits obtained and spent (for example, which AI generation features you used and which paid content you viewed).
- API and agent access records: the personal API tokens you create (we store only their hashes), apps you authorize via OAuth, and records of actions AI agents perform through MCP or the API.
2. 資料的用途
我們使用收集到的資料來：
- 提供、維護與改善本服務，例如登入、保存你的書與筆記、記住你的偏好。
- 執行你要求的功能，例如 AI 生成、產生封面與縮圖、輸出影片、轉碼。
- 計算與記錄點數用量，並在開始收費後處理購買、分潤與退款。
- 審查上架內容、處理檢舉、防止濫用、詐騙與安全事件。
- 寄送與帳號或服務有關的通知，例如重設密碼、條款或收費方式的變更。行銷訊息只會在你同意後寄送，並可隨時取消。
- 分析整體使用狀況以改善服務；這類分析以統計方式進行，不會用來識別特定個人。
- 依法令要求或為保護我們、使用者或公眾的權益。
2. How we use data
We use the data we collect to:
- Provide, maintain and improve the Service, for example signing you in, saving your books and notes, and remembering your preferences.
- Carry out features you request, such as AI generation, creating covers and thumbnails, exporting videos and transcoding.
- Calculate and record credit usage and, once paid features launch, process purchases, revenue sharing and refunds.
- Review published content, handle reports, and prevent abuse, fraud and security incidents.
- Send notices related to your account or the Service, such as password resets and changes to the terms or pricing. Marketing messages are sent only with your consent, and you can unsubscribe at any time.
- Analyze overall usage to improve the Service; such analysis is statistical and is not used to identify specific individuals.
- Comply with legal requirements or protect the rights of us, our users or the public.
3. 其他人看得到的內容
Shelvibe 是一個可以分享與協作筆記的書架，請留意以下內容會被其他人看到：
- 公開的書：所有訪客都看得到書的內容、書名、簡介、標籤、封面，以及你的顯示名稱。
- 不公開的書：只有你自己（以及為了維運、審查或處理檢舉而需要查看的管理員）看得到。
- 重點、留言與表情：在書上留下的協作筆記，其他能讀這本書的讀者都看得到，並會顯示你的顯示名稱。
- 創作者看得到的回饋：書的作者（以及作者授權的 AI 代理）可以讀取讀者在書上的筆記，用來修改作品。
請不要在公開的書或留言中放入你不想公開的個人資料。
3. Content others can see
Shelvibe is a bookshelf for sharing books and collaborative notes. Please be aware that the following can be seen by others:
- Public books: all visitors can see the book's content, title, description, tags and cover, as well as your display name.
- Private books: visible only to you (and to administrators who need to view them for operations, review or handling reports).
- Highlights, comments and reactions: collaborative notes left on a book are visible to every other reader who can read that book, along with your display name.
- Feedback visible to creators: a book's author (and AI agents the author authorizes) can read the notes readers leave on the book, in order to revise the work.
Please do not put personal information you do not want made public in public books or comments.
4. 資料的分享與第三方服務
我們不會出售你的個人資料。除了下列情況，不會把你的個人資料提供給第三方：
- 經過你的同意或指示，例如你授權給 AI 代理或第三方應用程式（OAuth）存取你的帳號。
- 依法令規定，或司法、檢調等主管機關依法要求。
- 為提供服務而委託的處理者，他們只能依我們的指示、在必要範圍內處理資料。
我們使用的主要第三方服務
- 生成式 AI 服務（例如 OpenAI、Anthropic、fal.ai）：當你使用 AI 工作室或生成功能時，你的指示、參考素材與相關內容會傳送給這些服務以產生結果。這些資料的處理也受各供應商的隱私政策規範。
- 內容審核：上架的內容會經過自動審查，部分文字或圖片可能會送到 OpenAI 的內容審核（moderation）API 判斷是否違反規範。
- 基礎設施：主機、資料儲存、email 寄送等服務商，用來運作本服務。
- 金流服務：開始收費後，付款由金流服務商處理。
透過 MCP、個人 API token 或 OAuth 接上的 AI 代理（例如 Claude Code、ChatGPT）是由你自己選擇與授權的；它們取得的資料如何被處理，依各代理服務的政策而定。
4. Sharing and third-party services
We do not sell your personal data. We do not provide your personal data to third parties except in the following cases:
- With your consent or at your direction, for example when you authorize an AI agent or a third-party app (OAuth) to access your account.
- As required by law, or when lawfully requested by judicial, prosecutorial or other competent authorities.
- To processors we engage to provide the Service, who may process data only on our instructions and only to the extent necessary.
Main third-party services we use
- Generative AI services (e.g. OpenAI, Anthropic, fal.ai): when you use the AI Studio or generation features, your instructions, reference material and related content are sent to these services to produce results. The processing of this data is also subject to each provider's privacy policy.
- Content moderation: published content goes through automated review; some text or images may be sent to OpenAI's moderation API to determine whether they violate our rules.
- Infrastructure: providers of hosting, data storage, email delivery and similar services used to operate the Service.
- Payment services: once paid features launch, payments are processed by a payment provider.
AI agents connected through MCP, a personal API token or OAuth (e.g. Claude Code, ChatGPT) are chosen and authorized by you; how the data they obtain is handled is governed by the policies of each agent service.
5. Cookie 與瀏覽器儲存
- 必要的 cookie：用來維持登入狀態與安全防護（例如防止跨站請求偽造）。沒有它們，登入等功能無法運作。
- 瀏覽器儲存（localStorage）：主題（深色或淺色）、閱讀位置等偏好設定存在你的瀏覽器裡，不會傳到我們的伺服器。
- 同意列：第一次造訪時會顯示 cookie 同意列，說明我們使用 cookie 的方式。
你可以在瀏覽器中清除或封鎖 cookie 與網站資料，但這可能讓你被登出、偏好設定被重設，或部分功能無法使用。
5. Cookies and browser storage
- Essential cookies: used to keep you signed in and for security protection (e.g. preventing cross-site request forgery). Without them, sign-in and similar features cannot work.
- Browser storage (localStorage): preferences such as theme (dark or light) and reading position are stored in your browser and are not sent to our servers.
- Consent bar: on your first visit, a cookie consent bar is shown explaining how we use cookies.
You can clear or block cookies and site data in your browser, but this may sign you out, reset your preferences or prevent some features from working.
6. 資料安全
- 網站以加密連線（HTTPS）傳輸資料。
- 密碼與 API token 只保存雜湊值；token 只在產生時顯示一次。
- 使用者上傳的書在與主站分開的網域、隔離的環境中執行，降低書中程式碼存取你帳號資料的風險。
- 我們會採取合理的技術與管理措施保護資料，但沒有任何網路服務能保證百分之百安全。若發生影響你權益的資料外洩，我們會依法通知。
6. Data security
- The site transmits data over encrypted connections (HTTPS).
- Only hashes of passwords and API tokens are stored; a token is shown only once, when it is created.
- Books uploaded by users run on a domain separate from the main site, in an isolated environment, reducing the risk of code in a book accessing your account data.
- We take reasonable technical and organizational measures to protect data, but no online service can guarantee 100% security. If a data breach affecting your rights occurs, we will notify you as required by law.
7. 資料保存與刪除
我們在你使用本服務期間保存你的資料。你可以隨時刪除自己的書、留言與筆記，也可以來信要求刪除整個帳號。
要刪除帳號，請用註冊時的 email 寄信到 [email protected]，說明要刪除的帳號。我們確認身分後會盡快處理，刪除的內容包括：
- 你的帳號與個人資料。
- 你上傳與生成的書、素材與 AI 工作室內容。
- 你建立的 API token 與 OAuth 授權。
請注意：
- 系統備份會在保存期限屆滿後自動清除，因此刪除後一段時間內，資料可能仍存在於備份中。
- 為了遵守法令（例如會計與稅務規定的交易紀錄）、處理爭議或防止濫用，部分紀錄可能會依法保存到期限屆滿。
- 你在其他人的書上留下的留言，刪除帳號後會一併刪除或改為匿名顯示。
7. Retention and deletion
We keep your data for as long as you use the Service. You can delete your own books, comments and notes at any time, and you can email us to request deletion of your entire account.
To delete your account, email [email protected] from the address you registered with, stating which account to delete. We will process the request as soon as possible after verifying your identity. Deletion covers:
- Your account and personal data.
- The books, assets and AI Studio content you uploaded or generated.
- The API tokens and OAuth authorizations you created.
Please note:
- System backups are purged automatically when their retention period expires, so your data may remain in backups for some time after deletion.
- To comply with the law (e.g. transaction records required by accounting and tax rules), resolve disputes or prevent abuse, some records may be retained as permitted by law until their retention period expires.
- Comments you left on other people's books will also be deleted, or shown anonymously, after your account is deleted.
8. 你的權利
依中華民國個人資料保護法，你可以就你的個人資料行使下列權利：
- 查詢或請求閱覽。
- 請求製給複製本。
- 請求補充或更正。
- 請求停止收集、處理或利用。
- 請求刪除。
部分資料可以直接在帳號頁修改；其他請求請來信，我們會在合理期間內回覆。你若選擇不提供某些資料（例如 email），可能無法使用需要帳號的功能。
8. Your rights
Under the Personal Data Protection Act of the Republic of China (Taiwan), you may exercise the following rights regarding your personal data:
- To inquire about or request to review it.
- To request a copy of it.
- To request that it be supplemented or corrected.
- To request that its collection, processing or use be stopped.
- To request its deletion.
Some data can be edited directly on your account page; for other requests, please email us and we will reply within a reasonable period. If you choose not to provide certain data (such as an email address), you may be unable to use features that require an account.
9. 政策的修改
我們可能因服務調整或法令變更而修改本政策。修改後會公告在這個頁面並更新「最後更新日期」；重大變更（例如資料用途或分享對象的改變）會另外在網站上或以 email 通知你。
9. Changes to this policy
We may revise this policy because of changes to the Service or to the law. Revisions will be posted on this page and the “Last updated” date will be updated; material changes (such as changes in how data is used or with whom it is shared) will also be announced on the site or sent to you by email.