1. Data Collection Scope
We (BBKers Tech) may collect the following data when you use our services:
1.1 BBKers Biz
- Account information: email address, name, store name
- Business data: products, orders, customers, and supplier data you input
- Usage records: system operation logs, IP address, browser type
1.2 SoShow SCRM
- Account information: email address, name, organization name
- Social platform data: When you authorize platform connections, we access: Facebook Page info, posts, comments & engagement; Instagram Business account posts, stories & analytics; Threads posts & comments; Messenger & Instagram Direct conversations (business use only); LINE OA 1-on-1 messages (via Messaging API); Google Business Profile reviews & info (via Google OAuth2)
- AI-generated content: copy, replies, and prompts produced through AI features
- Media files: images and videos you upload for posting
1.3 Device & Connection Info
- IP address, browser type, operating system (for security and fraud detection)
2. Purpose of Data Use
Collected data is used solely for the following purposes:
- Providing, maintaining, and improving BBKers Biz and SCRM platform features
- Executing social post scheduling, AI copywriting, auto-reply, and other core functions
- Verifying your identity and protecting account security
- Sending service-related notifications (subscription expiry, system updates, authorization expiry)
- AI analytics (data is de-identified before being used to optimize AI models)
Important Notice
- We will NOT sell, rent, or share your Meta platform data with any third party
- We will NOT use your social data for advertising or marketing purposes
- All Meta platform data is used exclusively for providing necessary SCRM service functions
3. Third-Party Service Providers
To provide our services, we may engage the following types of third-party processors:
- Cloud infrastructure providers: server hosting, file storage, and email delivery
- AI service providers: AI copywriting and auto-reply features
- Social platform APIs: data access for Facebook, Instagram, Threads, Messenger, LINE, Google Business Profile
- Payment processors: subscription payment processing and electronic invoice issuance
These providers process your data only within the scope necessary to deliver our services. We do not sell or rent your personal data to third parties.
4. Data Storage & Security
Your data is stored on Microsoft Azure cloud infrastructure, managed by Supabase (PostgreSQL). Security measures include:
- TLS 1.3 encrypted transmission
- Database-level Row Level Security (RLS) access control
- Media files stored in Azure Blob Storage with SAS Token access authorization
5. Social Platform Authorization (Meta)
This service accesses your authorized social account data via Meta Graph API, strictly complying with Meta Platform and Developer Policies. Access permissions obtained when you connect social accounts are used solely for executing your specified automation operations (publishing posts, replying to comments, reading Threads comments and posts). You can unlink accounts at any time in your settings.
6. Cookies & Tracking
This service uses essential cookies to maintain your login state and system settings. We do not use third-party tracking cookies for advertising or cross-site tracking. You can manage cookies through browser settings, but disabling them may affect some features.
7. Data Retention & Deletion
- Your data is retained during your account's active period
- You can revoke social account authorization at any time; we will delete all related platform data within 30 days
- You can also revoke our app's access directly through Meta's platform settings
- To delete your account and all associated data, email services@bbkers.com.tw — we will complete deletion within 30 days
- Data subject to legal retention requirements (e.g., transaction records retained 5 years per tax law) is exempt from deletion
- Backup data will be purged per backup cycle (maximum 90 days)
8. Your Rights
Under the Personal Data Protection Act, you have the following rights:
- Inquire or request access to your personal data
- Request correction or supplementation of inaccurate data
- Request cessation of collection, processing, or use of your personal data
- Request deletion of your personal data
To exercise these rights, email services@bbkers.com.tw — we will respond within 30 days.
9. Policy Changes
If this policy is revised, we will announce changes on the platform. Major changes will be communicated via email or system notification. Continued use of the service constitutes acceptance of the revised terms.
10. Contact Us
For any questions, email services@bbkers.com.tw