FRIDAI Privacy Policy
Privacy Policy
Last Updated: November 3, 2026
This Privacy Policy ("Policy") explains how FansNetwork Inc. ("we", "us", or "our") collects, processes, uses, and protects your personal data when you use the FRIDAI platform and services (collectively, "Services"). By using the Services, you acknowledge that you have read, understood, and agree to this Policy.
1. Data We Collect
We may collect the following types of data:
• Account Data: Email, password (encrypted), display name
• Payment Data: Processed through Stripe; we do not directly store complete credit card information
• Social Platform Data: Messages, comments, interaction data from IG, FB, LINE, Threads, etc. accounts you authorize
• Usage Data: Login records, feature usage frequency, API call logs
• Device Data: IP address, browser type, operating system, device identifiers
• Cookies and Tracking Technologies: Used to improve user experience and analyze service usage
2. How We Use Your Data
We use your data for the following purposes:
• Providing, maintaining, and improving the Services
• Processing subscription payments and account management
• Executing AI auto-reply and related functions
• Sending service notifications, updates, and marketing information (unsubscribe available)
• Running ads, building ad audiences, and measuring ad performance
• Analyzing service usage to improve products
• Complying with legal obligations and protecting our legitimate interests
• Preventing fraud, abuse, and maintaining service security
3. Data Sharing and Disclosure
We may share your data in the following circumstances:
• Service Providers: Including Stripe (payment processing), AWS/GCP (cloud hosting), OpenAI (AI models), and other technology partners
• Social Platforms: Data exchange through platform APIs you authorize
• Advertising Providers: We may provide Meta Platforms with your email address and phone number, hashed with SHA-256, together with subscription and event registration records and cumulative payment amounts, to match and build Custom Audiences and Lookalike Audiences and to measure ad performance. You may email [email protected] at any time to stop this use
• Legal Requirements: Responding to subpoenas, court orders, or other legal processes
• Business Transactions: Your data may be transferred in mergers, acquisitions, or asset sales
• With Your Consent: Sharing with third parties after obtaining your explicit consent
We never sell your personal data to third parties for marketing purposes.
4. Data Security Measures
We take the following measures to protect your data:
• Transmission Encryption: All data transmission uses TLS/SSL encryption
• Storage Encryption: Sensitive data is stored with industry-standard encryption
• Access Controls: Only authorized personnel can access customer data
• Regular Audits: Security assessments and penetration testing are conducted
• Incident Response: Data breach notification and response procedures are in place
While we make every effort to protect your data, no internet transmission is completely secure, and you should understand this risk.
5. Data Retention Period
• While Account Active: We retain your data to provide Services
• After Account Cancellation: Non-essential data will be deleted or anonymized within 30-90 days
• Legal Retention: Some data may be retained longer due to legal requirements (e.g., tax, litigation)
• Backup Data: May exist in backup systems and be cleared according to backup cycles
6. Your Rights
Under applicable law, you may have the following rights:
• Right of Access: Request a copy of your personal data we hold
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to Restrict Processing: Request restriction of how we process your data
• Right to Data Portability: Obtain your data in a structured format
• Right to Object: Object to our use of your data for specific purposes
To exercise these rights, contact: [email protected]
7. Cookies and Tracking Technologies
We use the following types of Cookies:
• Essential Cookies: Maintain normal service operation
• Analytics Cookies: Understand how users use the Services
• Functional Cookies: Remember your preference settings
You can manage Cookies through browser settings, but disabling certain Cookies may affect service functionality.
8. International Data Transfers
We currently process data mainly in these regions:
Taiwan: the Shopee integration service and shop authorization data (Google Cloud Taiwan region).
Singapore: website and application hosting (Vercel) and our main database (Neon).
United States: AI replies are generated by OpenAI.
Other regions: website traffic passes through Cloudflare's global network; payment, advertising, and the social and messaging platforms you connect (such as Stripe, Meta, and LINE) process data where they operate.
Data protection laws in these regions may differ from those where you live. We work with these providers under their data processing terms and use encryption, access control, and other safeguards. If an authority restricts transfers to a region, we will comply, and we will update this policy when the main regions change.
9. Children's Privacy
The Services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected minor's data, we will delete it immediately.
10. Third-Party Links
The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties, and we recommend you review their privacy policies.
11. Policy Changes
We may update this Policy at any time. Material changes will be communicated via email or in-service notifications. Continued use of the Services constitutes acceptance of the updated Policy.
12. Language
This Policy is written in Chinese. Any translated versions are for reference only. In case of any inconsistency, the Chinese version shall prevail.
Contact
If you have any questions about this Policy, please contact us:
FansNetwork Inc.
Seattle, Washington, USA
Email: [email protected]
APPENDIX
FRIDAI Data Processing Agreement
Data Processing Agreement (DPA)
Last Updated: November 3, 2026
This Data Processing Agreement ("Agreement") is entered into by FansNetwork Inc. (a Delaware corporation, hereinafter "Data Processor" or "we") and the customer using FRIDAI services (hereinafter "Data Controller" or "you"). This Agreement governs how the Data Processor processes personal data on behalf of the Data Controller. By using the Services, creating an account, or providing data, you agree to all terms of this Agreement.
1. Definitions
"Data Controller" means the user or organization that determines the purposes and means of processing personal data.
"Data Processor" means FansNetwork Inc., which processes personal data on behalf of the Data Controller.
"Personal Data" means any information that can identify a natural person.
"Processing" means collecting, storing, transmitting, analyzing, or using data.
"Applicable Laws" means GDPR, Taiwan's Personal Data Protection Act, US privacy laws, and any related regulations.
2. Data Controller's Responsibilities
(1) The Data Controller warrants that all data provided is lawful, accurate, and complete, and that all necessary consents, authorizations, and notification obligations have been obtained.
(2) The Data Controller is solely responsible for ensuring the lawfulness of social platform data, messages, authorization tokens, and user interaction content.
(3) Any liability arising from the Data Controller providing incorrect, unlawful, or unauthorized data shall be borne solely by the Data Controller.
(4) The Data Controller must ensure its use of the Services complies with applicable laws; we have no obligation to review.
3. Data Processor's Processing Scope
The Data Processor processes data only for the following purposes:
(1) Providing, operating, maintaining, and improving FRIDAI systems and features.
(2) Executing automated message replies, interaction management, comment processing, Scout detection, and related functions.
(3) Performing data analysis, classification, storage, and delivery according to Data Controller settings.
(4) Providing technical support, security detection, and system maintenance.
(5) Processing required to comply with legal requirements or official requests.
The Data Processor will not process data outside the Data Controller's instructions.
4. Data Types and Sources
The Data Processor may process:
Account information, authorization tokens, user interaction content, social platform data, configuration data, technical logs, notification data, system-generated machine data, etc.
Ownership of all data is retained by the Data Controller.
5. Data Controller Instructions
The Data Processor processes data only according to the Data Controller's settings, operations, and instructions.
The Data Controller understands:
(1) Incorrect settings may lead to unexpected data processing results.
(2) The Data Processor is not responsible for verifying the correctness, legality, or reasonableness of instructions.
(3) All consequences from incorrect instructions are borne by the Data Controller.
6. Third-Party Platform Risks
The Data Controller agrees:
(1) FRIDAI relies on third-party platforms including Meta (Facebook, Instagram, Threads), LINE, Stripe, Telegram, etc.
(2) Any third-party API failures, policy changes, restrictions, suspensions, or authorization denials may cause data processing to stop or malfunction.
(3) Such situations are entirely outside the Data Processor's control, and the Data Processor bears no liability for damages.
7. Data Security Measures
The Data Processor implements:
Encrypted storage, secure transmission, access controls, firewalls, and security mechanisms.
The Data Processor will use commercially reasonable measures to protect data but does not guarantee complete prevention of data breaches, attacks, or vulnerabilities.
The Data Controller agrees to assume the inherent risks of using online systems.
8. Sub-processors
The Data Processor may use trusted sub-processors (such as cloud services, Stripe, messaging platforms, etc.) to provide the Services. The main sub-processors are currently Google Cloud (Shopee integration service, Taiwan), Vercel (application hosting, Singapore), Neon (database, Singapore), OpenAI (AI replies, United States), and Cloudflare (website traffic, global network).
The Data Controller agrees that the Data Processor may select, replace, or remove sub-processors at its discretion without obtaining separate consent from the Data Controller.
9. Cross-Border Data Transfers
Data is processed in the regions listed in Section 8, mainly Taiwan, Singapore, and the United States; the social, messaging, and payment platforms the Data Controller connects process data where they operate.
The Data Controller expressly agrees that cross-border processing is necessary for Service operation and is responsible for informing its customers or users of these regions as applicable law requires.
When the Data Controller connects Shopee, Shopee data is also handled under the Shopee Open Platform Data Protection Policy: shop authorization data is stored in Taiwan, conversation records from connected periods are kept for at most 90 days, and they are deleted within 30 days after disconnecting.
10. Data Retention and Deletion
(1) Data retention periods are determined by the Data Processor based on system requirements, legal obligations, and technical limitations.
(2) When the Data Controller requests data deletion, the Data Processor will process it within a reasonable period, but if deletion would:
a. Affect system operation
b. Violate legal obligations
c. Cause unreasonable burden
The Data Processor may refuse or delay such request.
(3) After account termination, the Data Processor may delete, anonymize, or retain data as required by law within a reasonable period.
11. Data Breach Notification
If a data security incident occurs, the Data Processor will notify the Data Controller within a reasonable time.
The Data Controller is responsible for notifying its own customers or users; the Data Processor does not bear this obligation.
12. Audit Rights
To protect platform security and company operations:
The Data Controller may not request on-site inspections, code audits, or audits that interfere with platform operations.
The Data Processor may provide reasonable compliance documentation or statements as an alternative.
13. Beta Feature Data Processing
The Data Controller understands that Beta, incomplete, experimental, or testing features may be:
Unstable, incomplete, inaccurate, or subject to change at any time.
The Data Controller assumes all risks from using Beta features; the Data Processor bears no liability.
14. Indemnification and Limitation of Liability
The Data Controller agrees to indemnify and hold the Data Processor harmless from:
(1) Claims arising from the Data Controller's actions or settings
(2) Risks arising from unlawful or unauthorized data
(3) Damages caused by third-party platform restrictions, failures, or blocks
The Data Processor's maximum liability is limited to the total amount paid by the Data Controller in the preceding 12 months.
15. Agreement Priority
If this Agreement conflicts with other agreements (such as Terms of Service), this Agreement shall prevail.
16. Agreement Changes
The Data Processor may update this Agreement at its discretion without obtaining individual consent from the Data Controller. Continued use of the Services after updates constitutes acceptance of the new version.