Rieply（由 Gorvo Limited 營運，以下稱「本服務」）是一套協助商家自動回覆 Facebook、Instagram 與 LINE 訊息及留言的工具。本政策說明我們蒐集哪些資料、如何使用與保護，以及你的權利。
一、我們蒐集的資料
- 商家帳號資料：註冊時提供的電子郵件、商家名稱與聯絡人；密碼僅以雜湊形式保存。
- 連結帳號資料：透過 Facebook 登入或 Instagram 登入授權後，取得你管理的粉絲專頁與 Instagram 專業帳號之名稱、ID、應用程式範圍的使用者 ID，以及代你收發訊息所需的存取權杖。連結 LINE 官方帳號時，保存其頻道憑證。
- 訊息與留言：透過 Webhook 收到、傳給你已連結帳號的私訊與留言內容，以及傳送者的識別碼與顯示名稱、相關貼文 ID。我們不保存傳送者的大頭貼圖片。
- 轉寄的電子郵件：若你使用郵件觸發的流程，我們會接收並保存轉寄到你專屬收信地址的信件內容。
- 連結點擊紀錄：自動回覆中的追蹤連結被點擊時，記錄點擊時間與瀏覽器的 User-Agent。
- 你上傳的媒體：你在流程中上傳、用於自動回覆的圖片等檔案。
二、使用目的
上述資料僅用於提供本服務：比對你設定的流程、代你回覆訊息與留言、顯示對話紀錄與成效統計，以及寄送帳號相關通知（例如註冊確認、重設密碼）。我們不會販售你的資料，也不會將其用於廣告。
若你在流程中設定呼叫外部 API，本服務會依你的設定，將你指定的欄位（例如訊息內容或流程變數）傳送至你所指定的網址。該傳送依你的指示進行，接收端如何處理資料由你與該服務提供者負責。
三、資料儲存與安全
資料儲存於我們控管的伺服器，僅授權人員可存取。存取權杖與頻道憑證以加密方式儲存。我們依合理的技術與管理措施保護你的資料。
四、第三方服務
本服務透過 Meta Platforms, Inc. 的 Graph API 與 Instagram API，以及 LINE 的 Messaging API 運作，相關資料之傳輸與處理同時受各平台的條款與政策規範。帳號通知信透過電子郵件服務寄送。
五、資料保留與刪除
- 在後台停用頻道後，本服務即停止處理該頻道的新訊息。
- 在後台移除頻道後，該頻道與其流程會被隱藏並停止運作；資料會保留，以便你日後重新連結時復原。對話紀錄屬於你的營業紀錄，在你要求刪除前會持續保留。
- 若你在 Facebook 或 Instagram 的設定中移除本服務，我們會收到 Meta 的通知並停用對應的頻道。
- 如需完整刪除，請依 資料刪除說明 辦理：我們會刪除該帳號及其衍生資料，包含存取權杖、對話與訊息、流程與連結點擊紀錄。法律要求保存之必要紀錄除外。
六、政策更新
我們可能不時更新本政策，更新後將於本頁公告。
如有任何問題，請聯絡 metarieply@gmail.com。
Rieply (operated by Gorvo Limited, "the Service") is a tool that helps businesses automatically reply to messages and comments on Facebook, Instagram and LINE. This policy explains what data we collect, how we use and protect it, and your rights.
1. Data we collect
- Business account data: the email address, business name and contact name you provide when signing up. Passwords are stored only as hashes.
- Connected account data: after you authorize via Facebook Login or Instagram Login, the names and IDs of the Facebook Pages and Instagram professional accounts you manage, your app-scoped user ID, and the access tokens needed to send and receive messages on your behalf. When you connect a LINE Official Account, we store its channel credentials.
- Messages and comments: the content of direct messages and comments sent to your connected accounts, received via webhooks, together with the sender's ID and display name and the related post ID. We do not store senders' profile pictures.
- Forwarded emails: if you use email-triggered flows, we receive and store the emails forwarded to your assigned address.
- Link clicks: when a tracked link in an automated reply is clicked, we record the time and the browser's User-Agent.
- Media you upload: images and other files you upload for use in automated replies.
2. How we use it
We use this data only to provide the Service: matching the flows you configure, replying to messages and comments on your behalf, showing conversation history and performance statistics, and sending account notifications (such as sign-up confirmation and password resets). We do not sell your data or use it for advertising.
If you configure a flow to call an external API, the Service sends the fields you specify (such as message content or flow variables) to the URL you specify. This happens on your instruction; how the receiving service handles the data is the responsibility of you and that service's provider.
3. Storage and security
Data is stored on servers we control and is accessible only to authorized personnel. Access tokens and channel credentials are stored encrypted. We apply reasonable technical and organizational measures to protect your data.
4. Third-party services
The Service operates through the Graph API and Instagram API of Meta Platforms, Inc. and the LINE Messaging API; transmission and processing of the related data are also subject to each platform's terms and policies. Account notification emails are sent through an email delivery service.
5. Retention and deletion
- When you disable a channel in the dashboard, the Service stops processing its new messages.
- When you remove a channel, the channel and its flows are hidden and stop running; the data is kept so it can be restored if you reconnect later. Conversation history is your business record and is kept until you request deletion.
- If you remove the Service in your Facebook or Instagram settings, Meta notifies us and we disable the corresponding channel.
- For full deletion, follow the Data Deletion Instructions: we delete the account and the data derived from it, including access tokens, conversations and messages, flows and link-click records, except records we are legally required to keep.
6. Changes to this policy
We may update this policy from time to time; updates will be posted on this page.
Questions? Contact metarieply@gmail.com.