私隱政策Privacy Policy

1. 適用範圍及資料使用者

本私隱政策適用於 gogoaitrading.com、GoGoAI 帳戶、購買流程、會員下載、軟件授權、教學內容及由 GoGoAI 提供的相關支援服務（統稱「服務」）。GoGoAI（「我們」）是就該等服務所收集個人資料的資料使用者／控制者。

當你使用第三方網站或服務（例如 Stripe、WhatsApp、MetaTrader、Myfxbook 或券商網站）時，該第三方亦可能按其本身的私隱政策獨立處理你的資料。

2. 我們收集的資料

• 帳戶及身份資料：電郵地址、顯示名稱、首選語言、登入及電郵確認狀態。
• 聯絡及通訊資料：你自願提供的 WhatsApp、Telegram 或電郵聯絡資料，以及支援訊息和往來紀錄。
• 交易及權益資料：Stripe 結帳識別碼、付款電郵、方案、金額、貨幣、付款狀態、購買日期、退款及軟件使用權紀錄。我們不會在 GoGoAI 系統儲存完整付款卡號或安全碼；該等付款資料由 Stripe 處理。
• 授權及產品資料：MT4／MT5 平台、交易帳號、券商伺服器、所選產品、授權狀態、下載版本及下載紀錄。
• 技術及安全資料：IP 位址、裝置／瀏覽器資料、時間戳記、請求及錯誤紀錄、登入或管理操作紀錄、反濫用及機械人辨識訊號。
• 偏好資料：語言、市場／地區選擇，以及保存在瀏覽器 localStorage 或必要 cookie 的介面和工作階段偏好。

3. 收集方式及是否必須提供

資料可由你直接提供、在你使用服務時自動產生，或由付款及基礎設施供應商提供。帳戶電郵、付款所需資料及軟件授權資料屬履行合約所必需；如不提供，我們可能無法建立帳戶、處理購買、驗證權益、發出授權或提供支援。

市場推廣同意屬自願。拒絕或撤回推廣同意不影響你購買或使用已取得的服務。

4. 使用目的及法律依據

• 履行合約：建立和管理帳戶、處理付款、交付產品、發出及管理授權、提供下載、更新與支援。
• 合法權益：維持服務安全及可靠、預防欺詐與濫用、診斷錯誤、改善服務，以及建立必要的操作及審計紀錄；我們會衡量此等利益與你的權利。
• 法律責任：保存會計及交易紀錄、處理合法要求、執行法定權利及遵守適用法律。
• 同意：在法律要求同意的情況下發送市場推廣通訊，或處理你另行明確同意的事項。你可隨時撤回同意。

5. 服務供應商及資料披露

我們只會在達成上述目的所需的範圍內，向受保密、資料保護或相應合約責任約束的供應商披露資料。目前主要供應商包括：Supabase（認證、資料庫、儲存及後端功能）、Stripe（付款及防欺詐）、Vercel（網站託管及網絡）、Cloudflare Turnstile（機械人及濫用防護），以及你主動聯絡我們時使用的 WhatsApp／Meta。

我們亦可能因法律、法院命令、監管要求、保障使用者或服務安全、調查欺詐，或企業重組／業務轉讓而披露必要資料。除非本政策另有說明並取得所需同意，我們不會出售或出租個人資料。

6. Cookie、localStorage 及外部內容

網站使用必要技術保存登入工作階段、語言／地區選擇、介面設定及限時價格顯示狀態，並使用 Turnstile 保護表格。停用必要儲存功能可能令登入、付款後權益或其他功能無法正常運作。

按下 Myfxbook、YouTube、WhatsApp、Stripe 或券商等外部連結，或載入其內容時，該供應商可能按其政策收集裝置、使用及帳戶資料。GoGoAI 不控制第三方的追蹤或資料處理。

7. 跨境處理

我們及供應商可能在香港以外的司法管轄區處理或儲存資料。資料保護水平可能與你所在地不同。我們會採取合理的合約、組織及技術措施，並在適用法律要求時採用認可的跨境傳輸保障。

8. 保存期

我們只在達成收集目的、履行合約、解決爭議、保障安全及遵守法律所需期間保存資料。帳戶與授權資料一般保存至帳戶關閉及其後合理的申索／安全期；交易、退款及稅務紀錄在法律要求或合理需要時可保存最長七年；安全、下載及審計紀錄按風險及操作需要定期刪除或匿名化。

備份中的資料會按備份週期隔離並覆寫；如法律保留、欺詐調查或爭議要求，我們可暫停刪除相關資料。

9. 你的權利

視乎適用法律及法定例外，你可要求確認我們是否持有你的個人資料，以及要求查閱、更正、刪除、限制處理、反對處理或取得可攜副本；你亦可撤回同意及反對直接促銷。香港《個人資料（私隱）條例》亦賦予查閱和改正資料的權利。

請透過本頁所列 WhatsApp 聯絡「GoGoAI 私隱負責人」，並提供足以核實身份及定位資料的資料。為保障帳戶，我們可能要求合理的身份證明。你亦可向所在地的資料保護監管機構投訴；行使權利不影響在撤回前基於同意作出的合法處理。

10. 安全、未成年人及自動決策

我們採用存取控制、加密傳輸、權限分隔、日誌及供應商安全措施等合理保障；但任何互聯網傳輸或儲存均不能保證絕對安全。請妥善保管密碼並立即通知我們可疑活動。

服務只供年滿 18 歲及具備訂約能力的人士使用。我們不打算收集兒童資料。GoGoAI 不會僅依賴自動化處理作出對你具有法律或類似重大影響的決定；Stripe 或其他供應商可獨立使用防欺詐工具。

11. 更新及聯絡

我們可因服務、供應商或法律變更而更新本政策。重大變更會在網站顯著位置通知，並在適用法律要求時另行取得同意。頁首日期表示最新版本。

私隱查詢、資料查閱／改正或刪除要求：GoGoAI 私隱負責人；WhatsApp：+852 9138 7426。請勿透過 WhatsApp 傳送付款卡資料、密碼或其他不必要的敏感資料。

1. Scope and controller

This Privacy Policy applies to gogoaitrading.com, GoGoAI accounts, checkout, member downloads, software licensing, tutorials, and related support (the "Services"). GoGoAI ("we", "us", or "our") is the data user/controller for personal data collected for these Services.

When you use a third-party website or service, such as Stripe, WhatsApp, MetaTrader, Myfxbook, or a broker website, that third party may also process your data independently under its own privacy notice.

2. Data we collect

• Account and identity data: email address, display name, preferred language, sign-in data, and email-confirmation status.
• Contact and communications data: optional WhatsApp, Telegram, or email contact details, support messages, and correspondence.
• Transaction and entitlement data: Stripe checkout identifier, payment email, plan, amount, currency, status, purchase date, refunds, and software entitlements. GoGoAI does not store full payment-card numbers or security codes in its systems; Stripe processes that payment data.
• Licensing and product data: MT4/MT5 platform, trading account number, broker server, selected products, licence status, downloaded release, and download records.
• Technical and security data: IP address, device/browser information, timestamps, requests and errors, sign-in or administrative activity, anti-abuse data, and bot-detection signals.
• Preference data: language and market/region selections, interface settings, and session preferences stored in browser localStorage or necessary cookies.

3. How we collect data and required fields

We collect data from you, automatically through your use of the Services, and from payment and infrastructure providers. Account email, checkout information, and software-licensing data are required to perform our contract. Without them, we may be unable to create an account, process a purchase, verify entitlement, issue a licence, or provide support.

Marketing consent is optional. Refusing or withdrawing it does not affect your purchase or use of Services you have obtained.

4. Purposes and legal bases

• Contract: creating and administering accounts, processing payment, delivering products, issuing and managing licences, downloads, updates, and support.
• Legitimate interests: keeping the Services secure and reliable, preventing fraud and abuse, diagnosing errors, improving the Services, and maintaining necessary operational and audit records, balanced against your rights.
• Legal obligations: maintaining accounting and transaction records, responding to lawful requests, establishing legal claims, and complying with applicable law.
• Consent: marketing where consent is required and any other activity to which you separately and clearly agree. You may withdraw consent at any time.

5. Providers and disclosures

We disclose data only as needed for the purposes above to providers bound by confidentiality, data-protection, or equivalent contractual duties. Key providers currently include Supabase (authentication, database, storage, and backend functions), Stripe (payment and fraud prevention), Vercel (hosting and network delivery), Cloudflare Turnstile (bot and abuse prevention), and WhatsApp/Meta when you choose to contact us there.

We may also disclose necessary data to comply with law, court orders or regulatory requests; protect users or the Services; investigate fraud; or complete a corporate reorganisation or business transfer. We do not sell or rent personal data unless separately disclosed and any required consent is obtained.

6. Cookies, localStorage, and external content

The site uses necessary technology for sign-in sessions, language/region choices, interface settings, and the displayed pricing-timer state, and uses Turnstile to protect forms. Disabling necessary storage may prevent sign-in, post-payment entitlement, or other features from working.

If you follow links to, or load content from, Myfxbook, YouTube, WhatsApp, Stripe, brokers, or other providers, they may collect device, usage, and account information under their own notices. GoGoAI does not control third-party tracking or processing.

7. International processing

We and our providers may process or store data outside Hong Kong. Those locations may provide different levels of data protection. We use reasonable contractual, organisational, and technical measures and, where applicable law requires, recognised transfer safeguards.

8. Retention

We retain data only as long as needed for its purpose, contract performance, disputes, security, and legal compliance. Account and licensing data is generally retained until account closure and for a reasonable claims/security period afterwards. Transaction, refund, and tax records may be retained for up to seven years where legally required or reasonably necessary. Security, download, and audit records are periodically deleted or anonymised according to risk and operational need.

Backups are isolated and overwritten on their normal cycle. We may suspend deletion where a legal hold, fraud investigation, or dispute requires preservation.

9. Your rights

Subject to applicable law and exceptions, you may ask whether we hold your data and request access, correction, deletion, restriction, objection, or a portable copy. You may withdraw consent and object to direct marketing. Hong Kong's Personal Data (Privacy) Ordinance also provides rights of access and correction.

Contact the "GoGoAI Privacy Officer" through the WhatsApp details on this page and provide enough information to verify your identity and locate the data. We may request reasonable identity evidence to protect the account. You may also complain to your local data-protection authority. Withdrawing consent does not affect processing lawfully carried out beforehand.

10. Security, children, and automated decisions

We use reasonable safeguards such as access controls, encrypted transport, separated privileges, logging, and provider security measures. No internet transmission or storage is completely secure. Protect your password and promptly report suspicious activity.

The Services are only for persons aged 18 or older who can enter a contract. We do not intend to collect children's data. GoGoAI does not make decisions with legal or similarly significant effects based solely on automated processing, although Stripe or other providers may independently use fraud-prevention tools.

11. Changes and contact

We may update this Policy when the Services, providers, or law change. Material changes will be highlighted on the site and, where law requires, we will obtain further consent. The date above identifies the current version.

Privacy enquiries and access, correction, or deletion requests: GoGoAI Privacy Officer; WhatsApp: +852 9138 7426. Do not send card data, passwords, or unnecessary sensitive information through WhatsApp.