CosMate Privacy Policy

The CosMate Privacy Policy (hereinafter referred to as "this Privacy Policy") applies to the websites, services, software, and other products (hereinafter collectively referred to as the "Services") provided by Cosmate Co., Ltd. (hereinafter referred to as "the Company"). To safeguard your rights, please carefully review the following provisions prior to using the Services. By commencing use of the Services, you are deemed to have read, understood, and agreed to be bound by this Privacy Policy. EU membership status is excluded from all current Company services. If you have not informed us whether you possess citizenship in any EU member state, the Company will assume you do not hold such citizenship and will provide services accordingly:

1. Introduction
We warmly welcome you to use the Services and regard your privacy as paramount. To uphold our commitment to respect and protect your privacy, we adhere to the fundamental principles detailed herein and have expressly formulated this Privacy Policy accordingly:
      1. When users access or use the Services, they are deemed to have consented to these Terms. Users logging into the Company’s products through the Services or migrating/merging their original user account data into the Services are likewise bound by these terms.
      2. We undertake that upon actively collecting your personal data, we will notify you and obtain your explicit consent regarding the collection, use (including cross-border transfer), or disclosure of such personal data.
      3. We shall explicitly specify the specific purpose(s) for which personal data is collected at the point of collection.
      4. We will only collect personal data reasonably necessary to fulfill the specified purpose(s).
      5. Unless otherwise consented to by you, or as required or permitted by law, we will only use (including cross-border transfer) or disclose your personal data within the scope of the specified purpose(s), and shall only retain such data as reasonably necessary for that purpose.
      6. We endeavor to maintain the accuracy, completeness, and currency of your personal data.
      7. Appropriate security safeguards will be implemented to protect your personal data.
      8. Our policies and actions relating to the processing of your personal data shall maintain transparency to the greatest extent practicable.
      9. You have the right to access and review your personal data held by us.
      10. We are accountable to you and welcome any feedback regarding our compliance with these principles, this Privacy Policy, and applicable laws.
      11. We will continuously ensure that related measures remain appropriate, adequate, and effective in light of operational requirements, information security, and privacy protection, including responding to requests from relevant stakeholders such as regulators, statutory requirements, and contractual obligations.
      12. We will identify and comply with all relevant privacy protection and personally identifiable information (PII) requirements pursuant to applicable Personal Data Protection Act(s), enforcement rules, and pertinent data security maintenance regulations applicable to digital economy industries.

2. Scope of this Privacy Policy
      1. This Privacy Policy explains how the Services collect, process, protect, and manage your personal data, as well as your rights to access and control such data. This Policy applies universally to the Services, software, and related products offered by the Company.

3. Types of Information Collected
To provide the Services, we collect and process (including cross-border transfer) the following categories of information:
      1. Should you contact us via our contact form or through other channels, you may voluntarily provide the following information, which the Company will collect and use (including cross-border transfer) to process and investigate your inquiries, provide assistance, and improve customer support:
             1.1. [Phone Number]: When registering and creating an account to use the Services, you are required to provide a valid phone number. Upon consent, we may send verification SMS messages to confirm authenticity.
             1.2 [E-Mail]:You must provide an email address during account registration for verification purposes. We will send confirmation emails accordingly.
             1.3 [Name or Nickname]: You may designate a real name or a nickname for your account to be more easily recognizable by family and friends.
             1.4 [Electronic Records (LOG)]: The Company collects electronic logs related to your usage such as device IP address, usage time, browser information, browsing and clickstream data.
             1.5 [Profile Data]: You may voluntarily provide profile information such as interests, preferences, occupation, and location to enrich your profile, enhance matching accuracy, and foster interactions with other users. You control what information is shared with other users.
             1.6 [Customer Service Interaction Records]: Communications with our customer service (including text-based messages, call recordings with consent, and related materials) may be recorded for case follow-up, quality assurance, and staff training.
      2. We also collect device-specific technical identifiers and logs (including OS type, IP address with nationality and language settings, mobile app IDs) for operational analytics.

4. Purposes and Use of Information
Collected information is used (including cross-border transfer) to provide, operate, improve, and maintain the Services and associated functionalities, including:
      1. Core Service Provision and Account Management
             1.1 Account creation, authentication, registration management, and login facilitation.
             1.2 Core functions such as:
                          1.2.1 Profile creation and display.
                          1.2.2 Matching recommendations based on personal data.
                          1.2.3 Messaging and chat.
                          1.2.4 Social interactions, post sharing, and commenting features.
             1.3 Management of paid subscriptions and value-added services including transaction processing and accounting.
             1.4 Customer support, dispute handling, and inquiry response.
             1.5 Notifications about critical service updates, policy changes, or account-related communications.
             1.6 Optimization and Development
                          1.6.1 Analyzing user behavior to enhance interface, functions, and experience.
                          1.6.2 Market analysis, surveys, and research to develop new features and measure service performance.
                          1.6.3 Monitoring service health, troubleshooting technical issues, and ensuring operational stability.
                          1.6.4 Maintaining information security by detecting and preventing unauthorized or fraudulent use.
             1.7 Marketing and Commercial Activities
                          1.7.1 Delivering personalized or targeted advertisements. 
                          1.7.2 Conducting marketing and promotional campaigns, including partner collaborations.    
                          1.7.3 Analyzing ad effectiveness and managing commercial operations.
             1.8 User Content Management and Community Engagement  
                          1.8.1 Moderating content posted publicly (posts, photos, videos, comments).  
                          1.8.2 Reviewing content compliance with applicable regulations including child protection.
                          1.8.3 Encouraging social activity and integration with marketing functions.
             1.9 Compliance and Legal Protection
                         1.9.1 Complying with applicable laws, government requests, and court orders.
                          1.9.2 Enforcing terms of Service and related policies to safeguard Company and user interests.
                          1.9.3 Addressing disputes and resolving legal matters.
                          1.9.4 Conducting legitimate business activities as defined by Company registration and statutes.
      2. Information Storage and Transmission. All data processing and storage are performed on secure servers to ensure service integrity.
      3. Data Retention Period Personal data is retained only for the period necessary to achieve the purposes outlined or as mandated by law. Absent explicit consent or statutory exceptions, data will be deleted within six months:
             3.1 Compliance with legal obligations.
             3.2 Fulfillment of customer support services.
             3.3 Resolution of user or Company-user disputes.
             3.4 Prevention of misuse or unauthorized activities.
      4. Use of External Service Providers and Agents
Third parties may be engaged as service providers or agents for processing and storage of data. These entities are subject to rigorous evaluations and binding compliance with relevant laws, accessing personal data solely to perform duties on behalf of the Company.
      5. Sharing with Third Parties
Absent user consent, personal data is not disclosed to third parties except as legally required or to protect Company rights and properties.
      6. Use of Cookies and Similar Technologies Cookies and related technologies are used to:
             6.1 Maintain Service sessions.
             6.2 Enhance security.
             6.3 Store browser preferences.
             6.4 Analyze user behavior for Service improvement. Use of third-party analytics tools (e.g., Google Analytics) may be employed. Continued Service use implies consent to such technologies.
      7. Data Security Measures Personal data is safeguarded with appropriate technical and organizational measures such as firewalls and access controls. Employee access to personal data is strictly limited to job requirements.

5. Third-Party Websites Disclaimer
      1. The Services may, as part of efforts to provide greater value, include links to third-party websites or embed third-party websites within the Services. Such linked or embedded websites may allow you to access their content, products, and services, including but not limited to users, advertisers, affiliates, and sponsors of those third-party websites.
      2. You acknowledge and agree that the Services do not guarantee the security of any personal data or information you provide on third-party websites. Each such third-party website has its own independent privacy policies and security measures. Even if the third-party website is related to the provision of Services by the Company, the Company does not control such third-party websites and assumes no responsibility or obligation with respect to the content, products, services, or security measures of such third-party websites or obtained therefrom. Therefore, when you access such websites, you do so at your own risk.
      3. If you encounter any content you dislike or disagree with, we recommend that you immediately leave the website. The Company shall not be liable, directly or indirectly, for any loss or damage caused by the content, products, or services on or from such third-party websites, or any losses or damages arising from your use of or reliance upon such content, products, or services. Nonetheless, the Company takes reasonable efforts to preserve the integrity of the Services and all links contained therein and welcomes your feedback regarding such third-party websites.

6. User Rights
Under applicable Personal Data Protection laws in Taiwan, users have the rights to:
      1. Access and inquire about personal data.
      2. Obtain copies of personal data.
      3. Request data correction or supplementation.
      4. Request cessation of data collection or processing.
      5. Request deletion of personal data.

7. Privacy Policy Modifications
The Company reserves the right to amend this Policy at any time. Revised Policies are effective upon posting. Material changes will be notified fifteen days in advance. Continued use after notification signifies acceptance.