REAL
Application name: REAL
Privacy Policy / 隱私權政策
Last updated: July 27, 2026. This page is publicly readable without login.
Google user data disclosure
REAL accesses Google user data only after you authorize Google OAuth for YouTube. Via the YouTube Data API (youtube.force-ssl), REAL reads your YouTube channel information and video comments, and posts public comment replies you configure. We do not access YouTube DMs, do not upload videos, and do not sell Google / YouTube user data. Data is used solely to provide the REAL automation features you enable. You may revoke access at any time in the dashboard or via your Google Account permissions.
We comply with the Google API Services User Data Policy, including the Limited Use requirements.
Data protection mechanisms for sensitive data / 敏感資料保護機制
We apply the following technical and organizational safeguards to personal data and sensitive user data obtained through Google / YouTube APIs (including OAuth access and refresh tokens, YouTube channel identifiers, video comment content retrieved via the API, and related authorization metadata):
- Encryption in transit: All website and API traffic uses HTTPS / TLS to protect data against interception or tampering while in transit.
- Protection at rest & token handling: Production databases and sensitive fields are access-controlled. OAuth access tokens and refresh tokens are used only by backend services, are not exposed in plaintext to the browser / frontend, and are not written to public application logs.
- Access control & least privilege: Only authorized service processes and personnel may access data required to operate the Service. Human access follows need-to-know principles with role-based controls and operational logging.
- Limited Use: Google / YouTube user data is used only to provide, maintain, and improve the features you request (for example, reading channel comments and publicly replying under rules you configure). It is not used for advertising, resale, creditworthiness, or other unrelated purposes.
- Retention & deletion: After you disconnect a YouTube channel or delete your account, we stop using the related tokens and delete or anonymize authorization data and associated cached API content within a reasonable period (except where retention is required by law, billing, or dispute resolution). Operational logs are rotated and purged.
- Monitoring: We review access, errors, and security-related events and take remedial action when anomalies are detected.
傳輸採 HTTPS／TLS；OAuth 權杖僅供後端使用、不以明文暴露於前端或公開日誌；存取採最小權限與操作紀錄；Google／YouTube 資料僅用於您啟用的自動化功能（讀留言並公開回覆），不轉售、不用於廣告；解除連結或刪除帳戶後於合理期間內停止使用並刪除／匿名化（依法令或帳務爭議所需除外）。
政策概述
REAL 營運社群自動化與訊息管理服務。本政策說明我們如何蒐集、使用、保護與分享個人資料，並與服務條款一併適用。
蒐集之資料
- 帳戶資料：電子郵件、顯示名稱、密碼雜湊
- 社群連結資料：您授權之粉絲專頁／YouTube 頻道 ID、存取權杖／重新整理權杖、顯示名稱與權限範圍
- 服務設定：自動回覆規則、流程、廣播、上傳素材與客戶名單
- 互動與營運紀錄：留言／私訊處理狀態與操作日誌（依 API 授權範圍）
- 技術與付款相關資料（Stripe 處理付款；我們不存完整卡號）
社群平台連線方式
Meta／Instagram／Threads／YouTube 透過官方 OAuth 與官方 API 連線。我們不要求、不儲存 Instagram／Facebook 登入密碼，亦不匯入平台登入用的 session Cookie 來模擬登入。
YouTube／Google 資料用途
授權後，REAL 僅在您的授權範圍內透過官方 API 讀取頻道與影片留言並公開回覆。解除連結後停止以該權杖存取新資料，並依本政策之保存與刪除原則處理既有資料。
第三方與跨境
平台服務商含 Meta、Threads、Google／YouTube；基礎設施與金流含雲端主機與 Stripe。我們不會出售您的個人資料。若資料涉及跨境傳輸（例如雲端主機所在地），我們將依適用法律採取適當保護措施。
您的權利與聯絡
您可請求查詢、更正、停止處理或刪除個資。請透過網站「聯絡我們」提出。完整條款見服務條款頁。