Policy

Privacy policy

Fields marked "To be completed" will be filled in before launch.

Last updated: To be completed: launch date

MAHI TECH (碼海科技, "we", "us") takes your personal data seriously. This policy follows the notice requirements of Article 8 of Taiwan's Personal Data Protection Act (the "PDPA"). It explains what we collect when you contact us through this website (https://mahitech.co), our LINE official account, email or the AI assistant on the site, why we need it, how long we keep it, who processes it for us, and how you can exercise your rights.

If the Chinese and English versions differ, the Chinese version prevails.

1. Who we are

  • Name: MAHI TECH (碼海科技)
  • Registered company name: 碼海科技股份有限公司 (MAHI TECH)
  • Unified Business Number: To be completed: Unified Business Number
  • Address: To be completed: registered address
  • Contact for personal data matters: sales@mahitech.co

2. What we collect and why

We only collect what we need to reply to you, understand your needs and work with you. We never ask for national ID numbers, bank account details, passwords or health information, and we ask you not to share them in chats or forms.

LINE official account (@mahitech)

  • What: your LINE display name, the user identifier LINE provides to official accounts, the messages, photos or files you send, and any name, company or contact details you choose to give.
  • Why: to answer your questions, understand your needs, arrange a consultation and follow up.

Email (sales@mahitech.co)

  • What: your email address, name, message and attachments, and any company or phone number you include.
  • Why: as above.

Website contact form

  • What: name, company, email or phone (at least one), the problem you want to solve, and optionally your preferred timeline and whether you need AI features.
  • Why: to reply and assess your needs. The form is delivered by email to sales@mahitech.co and stored as an enquiry.
  • Before sending, you tick a box agreeing to this policy and pass a bot check (Cloudflare Turnstile) that prevents abuse.

AI assistant on the website

The assistant in the bottom corner of each page answers questions about our services and projects and, if you wish, helps turn your needs into an enquiry summary.

  • What:
    • the conversation with the assistant;
    • any name, company, email, phone or LINE ID, industry, problem, timeline or AI preference you choose to give;
    • technical data used to prevent abuse: a bot-check result, your IP address (used only as an irreversible hash to count requests, never stored in raw form) and the country of your connection.
  • Why: to generate replies; when you agree to leave contact details, to email the enquiry summary and the conversation to sales@mahitech.co so a person can follow up; and to prevent bots and abuse.
  • Please note:
    • Replies are generated by an AI model. Our team's written reply is what counts, and the assistant does not give quotes.
    • To generate replies, the conversation is processed by an AI model provider based in the United States (see section 5).
    • You can ask questions without leaving any contact details.

Website analytics

  • We use a cookie-free analytics service (Cloudflare Web Analytics). It shows only aggregate figures such as page views, popular pages, referring sites and device types. It cannot identify individual visitors and is not used for advertising.
  • The site does not use advertising or tracking cookies. The AI assistant keeps the state of the current chat in your browser tab (sessionStorage) so you can continue after changing pages; it is cleared when you close the tab.

3. Purposes and data categories under the PDPA

Specific purposes: 040 marketing; 069 contracts, quasi-contracts and other legal relationships; 090 consumer and customer management and services; 135 information and communication services; 157 surveys, statistics and research analysis (aggregate analytics only).

Data categories: C001 identifying information (name, phone, email, LINE identifiers), C038 occupation (company and job title), and any other information you include in your enquiry.

To be completed: purpose and category codes, to be confirmed by a lawyer

4. Period, place, recipients and manner of use

Retention

Data Kept for
AI assistant chat transcripts Deleted automatically 90 days after the last message
Enquiries you submit through the AI assistant or the contact form (summary and conversation) Deleted automatically 2 years after submission
LINE and email correspondence 2 years after the last exchange; for clients, for the periods required by contract, tax and accounting law
Bot checks and request counting Only as long as the calculation needs, at most about one day
Website analytics Aggregate figures only, no personal data

You can ask us to delete your data earlier at any time (see section 6).

Place

Taiwan (Republic of China), and the countries where the service providers in section 5 run their servers (which may include the United States and Japan).

Recipients

MAHI TECH and the service providers we engage to run the services listed in section 5. We do not sell, rent or share your personal data with others for their marketing, unless the law requires it or you agree.

Manner

Stored and processed electronically, to reply to enquiries, assess needs, prepare quotes, perform contracts, provide support and, with your consent, send you information related to your needs.

5. Service providers and cross-border transfers

We share only what each provider needs to deliver its service:

Service Provider Data processed
LINE official account LY Corporation and its affiliates Messages and account information exchanged with us on LINE
Email Google LLC (Google email services) Email correspondence
Website hosting, AI assistant and contact form server, enquiry storage, bot checks, analytics, email sending Cloudflare, Inc. Connection data, AI assistant transcripts and enquiries, contact form content, browser signals needed for bot checks
AI model An AI model provider based in the United States AI assistant conversations, processed by an AI model provider based in the United States to generate replies in real time

These providers may operate servers outside Taiwan, so your data may be transferred abroad. Under the terms we use, the AI model provider does not train its models on content sent through its API To be completed: verify against the provider's current commercial terms. If Taiwan's competent authority restricts transfers to a particular country or region under Article 21 of the PDPA, we will comply.

6. Your rights and how to exercise them

Under Article 3 of the PDPA, you may, regarding the personal data we hold about you:

  1. make an inquiry or request to review it;
  2. request a copy;
  3. request supplements or corrections;
  4. request that we stop collecting, processing or using it;
  5. request deletion.

How: email sales@mahitech.co with the subject "Personal data request". Tell us your name, the channel you used (LINE, email, form or AI assistant) with the related contact detail, and which right you want to exercise. We may ask you to help confirm your identity.

We follow the time limits in Article 13 of the PDPA: requests to inquire, review or obtain a copy are answered within 15 days; requests to supplement, correct, stop use or delete are answered within 30 days. Either period may be extended once by the same length, with written notice of the reason. Under Article 14, we may charge the necessary cost of making copies and will tell you beforehand.

Where the law, a contract or our business obligations require us to keep certain data, we may not be able to fulfil a request in full, and we will explain why.

7. If you choose not to provide data

Providing personal data is voluntary. Without contact details we may not be able to reply or provide services, but you can still browse the site and ask the AI assistant general questions.

8. Security

  • AI assistant conversations are stored server-side and require authorisation to access; service keys are never placed in the website code.
  • Data is transmitted over encrypted connections (HTTPS).
  • Only the people handling your enquiry can access your data.
  • If personal data is stolen, leaked, altered or otherwise compromised, we will notify you in an appropriate manner after investigating, as required by Article 12 of the PDPA.

9. Children

Our services are aimed at businesses and the people who run them, not at minors. If you are a minor, please provide personal data only with your legal guardian's consent. If we learn that we have collected a minor's data without consent, we will delete it promptly.

This site may link to other websites, such as client sites or LINE. Their privacy practices are not covered by this policy.

11. Changes to this policy

We may update this policy when laws or our services change. Updates will be posted on this page with a new "Last updated" date, and significant changes to purposes or use will be highlighted on the site.

12. Contact

For questions about this policy or your personal data, email sales@mahitech.co or message our LINE official account @mahitech.