Cloudsoft Technology Ltd. (ci-après dénommée « la Société ») s'engage à protéger votre vie privée. La Société vous recommande de lire attentivement cette politique de confidentialité pour comprendre comment nous collectons, utilisons et protégeons vos informations personnelles.
We collect personal information in the course of operating CoSecHK so we can deliver the Services, maintain security, comply with legal obligations, and improve user experience. The categories of data we may collect include:
Nous traitons ces informations pour fournir les services que vous demandez, administrer votre compte, fournir une assistance technique, surveiller les performances du service, détecter et prévenir les abus, nous conformer aux obligations légales et développer de nouvelles fonctionnalités.
If you choose to connect a third-party cloud storage service (such as Google Drive) to CoSecHK, we will request only the access scopes necessary to create, store, and manage the documents you explicitly select. Depending on the actions you take, we may process:
En réponse à vos instructions, les Services peuvent créer, télécharger, modifier, déplacer, copier, télécharger, convertir ou supprimer des fichiers et des dossiers dans les emplacements que vous autorisez. Toutes les copies temporaires mises en cache pour effectuer ces opérations sont automatiquement purgées une fois le traitement terminé, à moins qu'une conservation plus longue ne soit légalement requise.
Notre utilisation des informations reçues des API Google sera conforme à la politique relative aux données utilisateur des services API Google, y compris les exigences d'utilisation limitée. Nous n'utilisons pas les données des utilisateurs de Google pour développer des fonctionnalités sans rapport, à des fins publicitaires ou pour un traitement lisible par l'homme, sauf lorsque cela est requis pour des raisons de sécurité, pour se conformer à la loi ou lorsque vous accordez votre consentement explicite.
You may revoke CoSecHK access to your Google account at any time by visiting https://myaccount.google.com/permissions. If you disconnect the integration, we will delete the associated access tokens and cease processing data from that account.
If you use the optional Third-Party Company Reference Features (as described in our Terms of Use), we may process the following categories of information in order to provide the Features, calculate usage fees, prevent abuse, maintain audit records, and comply with legal obligations:
We process this information to deliver the Features you request, operate billing and fair-use controls, secure the Services, and meet record-keeping or legal requirements. The Features rely on third-party commercial data providers. Those providers process queries and return data under their own terms; we do not control the completeness or accuracy of their datasets.
Where the returned information includes personal data, you acknowledge that you determine the purposes of using such data for your client work, and you are responsible for ensuring that your collection and use comply with applicable privacy and data-protection laws (including the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and, where applicable, laws of relevant jurisdictions). We retain Feature-related logs and cached reference data only for as long as reasonably necessary for the purposes above, subject to longer retention where required by law or for dispute resolution.
If you use the optional AI Document Import Features (as described in our Terms of Use), we may process the following categories of information in order to provide the Features, prevent abuse, maintain audit records, and comply with legal obligations:
To operate the Features, uploaded content is transmitted to third-party AI service providers engaged by us, including but not limited to Alibaba Cloud Computing Co., Ltd. (阿里云计算有限公司) and its affiliates providing Alibaba Cloud Model Studio / DashScope and related AI model services, and such other AI providers as we may use from time to time. Those providers process the content under their own terms and infrastructure. We do not control their systems in full, and we cannot guarantee that unauthorised access or leakage will never occur on third-party platforms.
Where uploaded materials include personal data, you acknowledge that you determine the purposes of uploading and using such data for your client work, and you are responsible for ensuring that your collection and use comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong and other applicable laws. We retain Feature-related uploads, extractions, and logs only for as long as reasonably necessary to provide the Features, secure the Services, bill or meter usage where applicable, and meet legal or dispute-resolution requirements.
Lorsque les lois applicables en matière de protection des données l’exigent, nous nous appuyons sur les fondements juridiques suivants pour traiter vos informations personnelles :
Nous ne vendons pas vos informations personnelles. Nous pouvons partager des données personnelles uniquement dans les circonstances décrites ci-dessous :
Nous conservons les informations personnelles aussi longtemps que nécessaire pour fournir les services, remplir les objectifs décrits dans la présente politique de confidentialité, respecter nos obligations légales, résoudre les litiges et faire respecter nos accords. Lorsque nous n'avons plus besoin de ces informations, nous les supprimerons ou les anonymiserons, à moins que la loi n'exige leur conservation.
Nous mettons en œuvre des mesures de protection administratives, techniques et physiques conçues pour protéger la confidentialité, l'intégrité et la disponibilité de vos informations personnelles et des données clients. Ces garanties comprennent, entre autres :
Where Client Data stored in the Services contains personal data of your clients or of other individuals, and you determine the purposes of collecting and using that personal data, you are the data user and the Company is the data processor under section 2(1) of the Personal Data (Privacy) Ordinance (Cap. 486). The Company is the data user in respect of account, billing, and support contact details, and in respect of limited technical and security logs of use of the Services. The division of those roles, the Company's undertakings as data processor, the location of off-site database backups, and your responsibility for any further forwarding after you send a file or a link to your own client, are set out in Section 9 of the Terms of Use. If there is any inconsistency, Section 9 of the Terms of Use prevails.
The Company's current off-site repository for operational database backups is a private object-storage bucket in the Hong Kong Special Administrative Region. Backup objects uploaded to that repository are encrypted by the Company before upload. This describes those backup copies only, and not the location of every system used to operate the Services or of every optional third-party feature.
Pour les documents stockés dans votre propre Google Drive ou dans un autre service tiers, leurs mesures de sécurité s'appliquent également. Nous vous encourageons à consulter la documentation du fournisseur concerné et à configurer les autorisations de partage de manière appropriée.
CoSecHK is operated from Hong Kong. Depending on your location and the location of our service providers, your personal information may be processed in jurisdictions that may have different data protection laws than your home jurisdiction. We take appropriate measures to ensure that any cross-border transfers comply with applicable legal requirements.
Off-site copies of operational database backups uploaded by the Company are stored in Hong Kong, as stated in the Data Security section of this Privacy Policy. Other processing, including optional features that you choose to enable, may take place elsewhere as described in this Privacy Policy.
If you use the Third-Party Company Reference Features, query requests and related reference data may be transmitted to or processed by third-party providers operating in various jurisdictions. By using those Features, you instruct us to transmit the necessary query parameters to such providers for the purpose of returning the requested reference results.
If you use the AI Document Import Features, uploaded document content and related extraction requests may be transmitted to or processed by third-party AI providers operating in various jurisdictions (including mainland China and/or other regions where those providers host their models). By using those Features, you instruct us to transmit the necessary content to such providers for the purpose of returning extraction results.
Sous réserve des lois applicables, vous pouvez avoir le droit d'accéder, de corriger, de mettre à jour ou de supprimer vos informations personnelles, de vous opposer ou de restreindre certains traitements et de demander la portabilité des données.
Vous pouvez exercer ces droits en nous contactant aux coordonnées ci-dessous. Nous devrons peut-être vérifier votre identité avant de répondre à votre demande, et nous pouvons conserver des informations lorsque la loi l'exige.
You may manage email communication preferences in your account settings or by following the unsubscribe instructions in our emails. To revoke CoSecHK access to Google Drive or other integrations, use the provider's security settings (for Google, visit https://myaccount.google.com/permissions).
Nous utilisons des cookies et des technologies similaires pour fournir et améliorer les Services, mémoriser vos préférences, authentifier les sessions et analyser les modèles d'utilisation. Les cookies sont de petits fichiers texte stockés sur votre appareil.
Vous pouvez contrôler les cookies via les paramètres de votre navigateur et d'autres outils. Si vous désactivez certains cookies, certaines fonctionnalités des Services peuvent ne pas fonctionner correctement.
To help protect the Services against bots, automated abuse, and fraudulent submissions (for example on login, registration, and related forms), we use Cloudflare Turnstile, a security service provided by Cloudflare, Inc. Turnstile may operate in a managed or invisible mode. In invisible mode, verification may occur without a visible challenge widget on the page.
When Turnstile runs, Cloudflare may process limited technical signals such as IP address, TLS fingerprint, browser User-Agent, and related site/origin information, solely for distinguishing human users from bots and protecting the website. Cloudflare states that it does not use these signals to directly identify individuals. Further details are set out in Cloudflare's Turnstile Privacy Addendum, which supplements Cloudflare's Privacy Policy and is incorporated by reference into this Privacy Policy for the purpose of explaining Turnstile-related processing.
We use Turnstile only for security and abuse-prevention purposes described above, and not for advertising. Your use of forms protected by Turnstile is also subject to Cloudflare's applicable terms and privacy notices. If you have questions about Cloudflare's processing of Turnstile data, you may contact us using the details below, and we will assist where appropriate or direct you to Cloudflare's privacy contacts.
Nous pouvons mettre à jour cette politique de confidentialité de temps à autre pour refléter les changements dans nos pratiques, les services ou les lois applicables. Lorsque nous apporterons des modifications importantes, nous publierons la politique mise à jour sur cette page et mettrons à jour la date de « Dernière mise à jour » ci-dessous. Nous pouvons également fournir un préavis supplémentaire si nécessaire.
Si vous avez des questions ou des commentaires concernant cette politique de confidentialité ou nos pratiques de traitement des données, veuillez nous contacter.
Cloudsoft Technology Limited
Courriel : [email protected]
Dernière mise à jour : November 04, 2026