Privacy Policy
Last updated: September 28, 2026
1. Introduction and scope
Leyun Digital Co., Ltd. ("we", "us") provides this notice under Article 8 of Taiwan's Personal Data Protection Act (the "PDPA"). This policy covers the client portal portal.leyun.tw, the website leyun.tw, the LINE official account @leyun.tw, our support phone line and web calls.
2. Purposes of collection
We collect, process and use personal data for the following specified purposes:
- 063 Collection, processing and use of personal data by non-government agencies under legal obligations
- 069 Contracts, quasi-contracts and other legal relationships
- 090 Consumer and customer management and services
- 104 Account management and debt transactions
- 135 Information and communication services
- 136 Information, communication and database management
- 137 Information and communication security and management
- 148 Online shopping and other e-commerce services
- 157 Surveys, statistics and research analysis
- 181 Other business within our registered business scope or articles of incorporation
Support phone calls and web calls are recorded in full; recordings are used to assure service quality and to handle disputes (within purposes 069 and 090 above).
We do not collect personal data for marketing. We only send transaction and service notices; there is no newsletter.
3. Categories of personal data
The categories are C001 identification of individuals, C002 financial identification, C038 occupation, C093 financial transactions and C132 unclassified data. In detail:
- Account: name, email, phone number, password (only a hash is stored, never the password itself), language and interface preferences.
- Teams and invoices: company name, tax ID number, address, invoice email, mobile barcode carrier, donation code.
- Orders and payments: order contents, amounts, payment method, ATM virtual account or convenience store payment code, and the transaction data returned by ECPay (for cards, only fields ECPay provides such as the last four digits; ECPay handles the full card number and we never see it).
- Support: tickets and email correspondence, live chat conversations and attachments, full recordings of support phone calls and web calls, call summaries and caller numbers.
- LINE: LINE user ID, display name, profile picture, whether you have added us as a friend.
- Web calls: display name (for members, name and company), reference number, a hash of your IP address, a browser summary.
- Technical records: sign-in IP address, browser, sign-in and activity records, error logs.
- Service content: data you store on hosting, VPS, bare metal, GPU and similar services is managed by you; we access it only to provide the service, fix faults or comply with the law. Site passwords are stored encrypted; bare metal and GPU services keep the SSH public keys you provide.
- Company lookup: when you enter a tax ID number, we look up the company name in the Ministry of Economic Affairs' public company registration data.
4. Retention period
From collection until the specified purpose no longer exists or the contract ends. Data that must be kept under the law (for example the Business Entity Accounting Act and tax regulations), or that is necessary to perform a contract, handle a dispute, or cooperate with an investigation by a competent authority or judicial authority, is kept for as long as necessary.
5. Where data is used
Within the Republic of China (Taiwan), and in the regions where the servers of the service providers listed in section 6 are located (including outside Taiwan).
6. Who uses the data
Our company; the service providers below, to the extent necessary to provide their services; and competent authorities and judicial authorities as required by law.
| Recipient | Purpose | Data involved |
|---|---|---|
| ECPay | Payments, e-invoices (including issuing and prize notices) | Order amounts, invoice buyer details, email, carrier, donation code |
| LINE | Notifications, account linking, support | LINE user ID, display name, notification summaries |
| Cisco Webex | Web calls and contact center, including processing and storing call recordings | Call audio, call recordings, display name, reference number |
| Support mailbox (Gmail), web fonts | Incoming email; your IP address when fonts load | |
| Cloudflare | Hosting, database, file storage, email sending, bot verification (Turnstile), network security | All data passing through the portal, IP addresses |
| Ministry of Economic Affairs company registration data | Company name lookup by tax ID number | Tax ID number |
| Domain name registries and their registrars | Domain registration (when you apply for a domain service) | Registrant details required by domain registration rules |
7. How data is used
Collected, processed, used and transferred internationally, by automated or non-automated means, within the purposes above.
8. Cookies and similar technologies
We only use cookies and browser storage that the site needs to work. We do not use advertising or tracking cookies, and we use no analytics tools.
| Name | Purpose | Duration |
|---|---|---|
| __Host-session | Keeps you signed in | 30 days |
| __Host-csrf | Protects against cross-site request forgery | 30 days |
| __Host-team | Remembers the team you selected | 30 days |
| __Host-impersonate | Used when staff view an account to help you (set only in staff browsers) | 30 minutes |
| __Host-line_oauth | Security check for linking your LINE account | 10 minutes |
| __Host-flash | One-time notice messages | 1 minute |
| lang | Interface language | 1 year |
| leyun_theme | Interface theme | 1 year |
| __Host-liff_bind | First-time account linking inside LINE | 10 minutes |
| __Host-liff_open | Connection credential for portal pages opened inside LINE | 1 hour |
| Browser storage (sessionStorage) | Whether the live chat panel is open, unsent chat drafts, and a re-sign-in marker for pages inside LINE | Cleared when the tab closes |
9. Your rights
Under Article 3 of the PDPA, you may: make an inquiry or request to review your data, request a copy, request supplements or corrections, request that we stop collecting, processing or using your data, and request deletion.
- How to exercise them: email support@leyun.tw or call 05-362-2288. You can also supplement or correct your data yourself on the portal's settings pages.
- Deleting your account: you can request it yourself under "Settings > Security". After deletion the account is disabled and can no longer sign in, and we stop processing and using your personal data; data that must be kept under the law, or that is necessary to perform a contract, handle a dispute, or cooperate with an investigation by a competent authority or judicial authority, is kept for as long as necessary.
- Response times: inquiries, reviews and copies within 15 days; supplements, corrections, stopping collection, processing or use, and deletion within 30 days. Where necessary we may extend this and will tell you the reason in writing (PDPA Article 13).
10. If you do not provide data
Without the required data we cannot register your account, accept orders, issue invoices or provide support. Leaving optional data out does not affect your use of the services.
11. Security
The portal uses HTTPS throughout; passwords are stored only as hashes; sensitive data is stored encrypted; staff access is limited by role and activity is logged.
12. Breach notification
If personal data is stolen, leaked, altered or otherwise infringed, we will notify you by appropriate means once the facts are established (PDPA Article 12).
13. Minors
Our services are intended for businesses and adults. Minors must have the consent of their legal representative to use them.
14. Changes to this policy
Changes are published on this page with an updated date at the top. We will also tell you about significant changes by email or a portal notice.
15. Effective date
This policy takes effect on September 28, 2026.