Privacy Policy

1. Legal Compliance

The Platform adheres to Taiwan's Personal Data Protection Act and follows GDPR standards for cross-border users.

2. Categories and Purposes of Information Collection

When registering or using Patisco, we may collect:

· Identity and contact data: name, title, company, email, phone, address · Transaction and document data: product specifications, quotations, purchase orders, proforma invoices, change records · Technical data: IP address, browser type, device info, cookies, system logs

Purposes: to provide trade collaboration services, identity verification, transaction recordkeeping, customer support, system optimization, and necessary business notifications.

3. Data Use Principles: Trust Network and Audit Trail

· Internal use: all data is limited to purposes necessary for delivering platform services · Non-repudiation records: to maintain trust in B2B trade, the system automatically records each document's submission time, operator, and modification history. These audit trails are preserved as evidence for the duration of the transaction relationship and any legally required retention period, and cannot be deleted at the unilateral request of either party · Anonymized analytics: the Company may use aggregated platform data (e.g. transaction hotspots, currency distribution) for analytics and service improvement, excluding any specific company name or individual identifier

4. Data Sharing and Third-Party Services

The Company does not sell or rent user data. Sharing occurs only in the following cases:

· Trading counterparties: when a user sends an invitation or submits a trade document, the invited party may access the relevant business information shared · API integrations / third-party services: when users enable third-party services (e.g. payment gateways, ERP/CRM integrations), the Company transmits necessary data to that provider based on user authorization · Legal requirements: when required by judicial proceedings, investigations, or regulatory authorities

5. Information Security Measures

· Encryption: the Platform enforces SSL site-wide to prevent data interception or tampering in transit · Access control: the system provides multi-tier role-based access control (RBAC); users should configure internal account permissions on a least-privilege basis · User self-protection: users must protect their account credentials and not share them with third parties; privacy breaches resulting from improper account management are the user's responsibility

6. Use of Cookies

The Platform uses cookies to record your login status and operational preferences. Users may disable cookies via browser settings, though some features (such as auto-login and collaboration tools) may not function properly as a result.

7. Data Subject Rights and Corrections

Users may access, review, obtain copies of, or correct personal data by logging into the Platform. Account deletion (subscription termination) will be handled per the subscription agreement and applicable law. Transaction audit trails already generated are not subject to deletion under this provision.

8. Amendments to This Policy

The Company reserves the right to amend this Policy at any time. Material changes will be announced on the official website or notified by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact: service@patisco.com　+886 2 2396-9522 Address: 11F, No. 34, Section 2, Jen-Ai Road, Taipei City, Taiwan 10026