Go Task 隱私政策
Version: 1.1
生效日期: 2026-10-06
最後更新日期: 2026-10-06(本版取代 2026-09-15 生效之 1.0 版)
Governing Language: 中文(繁體)
管轄法律: 《個人資料(私隱)條例》Cap 486(下稱「PDPO」)、香港特別行政區法律
語言版本：本文件同時提供中文及英文版本。如中英文版本有任何歧異或不一致，概以中文版本為準；英文版本僅供參考便利之用。
1.1 版更新摘要：本版更正及補充以下內容：註冊及身份驗證所收集之資料（第 2 節）；其他用戶可見之資料（第 4.1 節）；保安措施之現有限制（第 5.4 節）；資料修正方式（第 6.2 節）；刪除帳號後之刪除及保留安排（第 6.3 節）；資料儲存地點（第 7 節）；第三方服務、AI 功能及送交 Google Gemini 之資料（第 8、10 節）；申訴安排（第 10.2 節）；本平台不使用分析工具（第 9 節）。
序言
本《Go Task 隱私政策》(下稱「本政策」)說明 Go Task 任務懸賞撮合平台(下稱「本平台」、「Go Task」)如何收集、使用、儲存、共享及保護閣下之個人資料。
本政策應與《Go Task 平台用戶守則與免責聲明》一併閱讀,二者構成閣下與本平台之間完整協議。
本政策依照 PDPO 保障資料原則(Data Protection Principles,DPP) 1-6 之要求草擬,並參考 PCPD AI Guidance 2021(個人資料私隱專員公署人工智能指引)之透明度、解釋權與 appeal 權原則。
1. 平台運營者(Data Controller / 資料使用者)聲明
運營主體: WECAN DESIGN COLLECTIVE LIMITED(香港註冊有限公司)
聯絡電郵: wecangotask@gmail.com
用途範圍: 資料查閱、修正、刪除、客戶服務、AI appeal 申訴
如閣下對本平台之個人資料處理有任何疑問,可向香港個人資料私隱專員公署(PCPD)查詢:
2. 收集之個人資料類別
本平台收集之個人資料分為以下幾類:
2.1 註冊時提供之資料
- 電郵地址（必填，用作登入）
- 密碼（必填；經單向加密儲存，平台無法直接讀取明文）
- 手機號碼（必填；須連國家或地區代碼，例如香港 +852；註冊時以短訊驗證碼核實；註冊後不能自行更改，見《用戶守則》第 27 條）
- 出生日期（必填；用於 18 歲門檻核實）
- 顯示名稱（App 內稱為「姓名」；選填，可用化名，但不得冒充他人；註冊後不能自行更改）
- 性別（選填）
- 技能及證書自述（選填；閣下接單後會向賞金人顯示）
註冊時毋須提供正面相片；正面相片只在身份驗證時收集，詳見第 2.2 節。
2.2 身份驗證（活體驗證）資料
- 何時需要：註冊時不需要。閣下接受賞金達平台指定門檻（現為 HK$80，平台可調整）之任務前，須先完成身份驗證。
- 手機 App：使用前置鏡頭，按畫面指示完成眨眼及張口動作。鏡頭畫面只在閣下之裝置上由 Google ML Kit 即時分析，不會儲存或上載；過程不會錄音。
- 正面相片：完成動作後，App 會即時拍攝一張正面相片，並上載至平台之雲端儲存，供系統或管理員審核。審核通過之相片會成為閣下之頭像，並用作身份核對及爭議處理（見《用戶守則》第 25 條）。
- 網頁版：以瀏覽器拍攝或選取相片上載，一律由管理員人手審核。
- 每次提交之相片均會保留：被拒、重做或未獲通過之相片，連同審核紀錄，目前不會自動刪除（保留期見第 6.3 節）。
- 本平台不會從相片提取或儲存任何人臉特徵模板，亦不會以人臉比對方式偵測重複帳號；防止一人多帳號主要依靠電話號碼。
2.3 系統自動生成識別碼
- 用戶代碼（格式為「USER-註冊日期-四個隨機字元」，例如 USER-20260915-AB12）：會在任務詳情及紀錄頁與經遮蔽之顯示名稱一同顯示；其他用戶亦可憑用戶代碼或電話號碼封鎖用戶（見第 4.1 節）
- 內部用戶識別號：平台內部唯一識別碼
- 裝置識別碼：由 App 在閣下之裝置上隨機產生，用於單一裝置登入（見第 2.5 節）
2.4 任務及行為資料
- 已刊登 / 已接受之任務內容（名稱、描述、要求、地點、開始時間、賞金、交收方式、挑戰準則、任務相片等）
- 任務聊天記錄（只限任務雙方之間）
- 完工相片、交收備註及催款備忘錄（備忘錄內容包括雙方姓名、電話號碼、用戶代碼、任務資料、相片及最近 10 條聊天記錄；備忘錄紀錄亦儲存雙方電郵地址）
- 評分及評分歷史紀錄(最近 5 次評分滾動)
- 信用度分數
- 違規紀錄(包括違規累計次數、警告次數、封鎖標記、凍結期限等)
- 舉報（任務舉報、聊天室舉報及贊助內容舉報）及其補充說明
- 閣下之黑名單（被封鎖用戶之用戶代碼、電話號碼及封鎖原因）
- 站內通知（部分通知會附上任務聊天記錄摘要，例如任務被取消或任務獵人退出時）
- 使用紀錄：每日刊登及接單次數、AI 助手每日使用次數，以及刪除帳號時所選之原因（如有）
2.5 技術 / 裝置資料
- 由 App 隨機產生之裝置識別碼、裝置型號（例如 iPhone 之機型代號；不包括閣下為裝置自訂之名稱）及最近登入時間：用於單一裝置登入，防止同一帳號同時在多部裝置使用
- 推送通知權杖及介面語言設定：用於傳送通知；閣下可於 App 內「通知設定」或裝置系統設定關閉推送通知
- Firebase（包括登入、資料庫、推送及 App Check 裝置驗證）及 Google ML Kit 會為保安、防濫用及診斷，自動處理 IP 位址、裝置資料（例如型號及作業系統版本）、App 版本及安裝識別碼等資料；詳見第 8 節
- App 只會在閣下使用相關功能時要求以下權限：相機（身份驗證及拍攝任務相片）、相片（選取任務相片及儲存催款備忘錄圖片）及通知（推送通知）
- 本平台不使用任何分析、廣告或崩潰報告工具（例如 Firebase Analytics、Performance Monitoring 或 Crashlytics），不會讀取裝置位置，亦不會錄音
2.6 GM 審計紀錄
- 管理員於後台執行之操作，以及系統自動執行之部分操作（例如身份驗證結果、任務自動下架），均寫入管理員審計日誌（包含執行者之識別、被影響用戶、部分紀錄中該用戶之電郵地址、動作類型、原因、時間戳等）
3. DPP1 — 個人資料之收集目的
依 PDPO DPP1(Purpose & Collection),本平台收集個人資料僅用於以下五大目的:
- 身份核實：以電話短訊驗證及出生日期聲明，確保用戶滿 18 歲；接受賞金達門檻之任務前，另以活體驗證確保用戶為真人
- 任務撮合：賞金人與任務獵人之配對、聊天溝通、結算流程及通知；以及 AI 助手提供之刊登建議與參考賞金、任務分類及平台參考價統計
- 信用度評估:評分、棄單偵測、新手保護、Sliding Window 計算
- 安全與防偽：反詐騙、反洗版、反 Brigade、單一裝置登入、舉報處理及 AI 違規評估
- 法律合規:遵守 PDPO、PCPD AI Guidance、香港其他法例及執法請求
收集之資料不超出達成上述目的所必需之程度(資料最小化原則)。
4. DPP3 — 個人資料之使用限制
依 PDPO DPP3(Use of Personal Data),本平台:
- 不會將閣下之個人資料用於收集時所披露目的以外之任何用途;
- 不會出售、出租或交換閣下之個人資料予任何第三方;
- 不會將閣下之臉部影像或聊天訊息上傳至任何第三方 LLM；送交 Google Gemini 之資料只限第 10.1 節所列。
4.1 其他用戶可見之資料
為進行任務撮合，App 會向其他用戶顯示以下資料：
- 所有已登入用戶：閣下刊登之任務內容（名稱、描述、要求、地點、時間、賞金及任務相片），以及賞金人經遮蔽之顯示名稱（只顯示首字）及用戶代碼。
- 配對後之任務對方（任務獵人接單後，於任務進行期間）：閣下之顯示名稱（如未設定顯示名稱，會改為顯示閣下之電郵地址）、頭像（即審核通過之正面相片）、身份驗證標記及電話號碼；賞金人另可見任務獵人之技能及證書自述，任務獵人另可見賞金人之成功刊登次數；雙方亦可見任務聊天記錄及完工相片。
- 催款備忘錄：任務獵人提交催款備忘錄後，雙方均可查看及下載，內容包括雙方姓名、電話號碼、用戶代碼、任務資料、相片及最近 10 條聊天記錄。
- 紀錄頁：曾與閣下合作之用戶，可在其紀錄頁看到閣下經遮蔽之顯示名稱及用戶代碼。
- 黑名單：其他用戶以閣下之電話號碼或用戶代碼把閣下加入其「黑名單」後，其黑名單頁會顯示閣下之用戶代碼及電話號碼。
- 通知：任務被取消或任務獵人退出時，雙方收到之通知會附上該任務最多 10 條聊天記錄。
除上述情況及第 5.4 節所述之技術存取範圍外，本平台不會向其他用戶披露閣下之個人資料。
5. DPP4 — 個人資料之安全保護措施
依 PDPO DPP4(Security),本平台承諾採取合理及業界認可之安全措施,保護閣下之個人資料免遭未經授權訪問、處理、刪除、遺失或使用。
5.1 技術措施(概述)
- 採用業界標準之傳輸層加密（TLS）保護用戶與平台之間之通訊
- 用戶密碼經單向加密儲存,平台無法讀取明文密碼
- 資料儲存於 Google Cloud / Firebase 基建，並由服務供應商按其標準於儲存時加密
- 資料庫及雲端儲存設有存取規則，例如：任務聊天記錄只限任務雙方及管理員讀取；催款備忘錄只限當事雙方及管理員讀取；刪除帳號後之資料副本、管理員審計日誌及電話封鎖名單只限管理員讀取；管理員後台另設第二重驗證
5.2 程序措施
- 系統管理員(GM)訪問用戶資料須具備合理理由(爭議調解、合規檢查、安全應對)
- 管理員於後台執行之操作會留底審計，供必要時審查
- GM 不會於無合理需要時訪問用戶私人通訊內容
5.3 局限性聲明
互聯網傳輸無法 100% 保證絕對安全。本平台已採取符合業界合理標準之保護措施,但不能保證絕對防止所有未經授權之入侵。
如本平台發現重大資料外洩事件:
- 將於合理時間內透過 in-app 通知及 email 通知受影響用戶
- 必要時依法向香港個人資料私隱專員公署(PCPD)或執法機關報告
- 啟動內部資料外洩應變程序
5.4 現有限制
App 介面只會按第 4.1 節向其他用戶顯示資料。然而，本平台現時未能保證其他已登入用戶不能以技術方法取得帳號資料及相片。本平台正收緊有關設定，並會於完成後更新本政策。
6. DPP6 — 用戶資料權利(存取、修正、刪除)
依 PDPO DPP6(Access & Correction),閣下對本平台所持有之個人資料享有以下法定權利:
6.1 資料存取權(Data Access)
閣下可:
- 隨時於 App 內「個人資料及設定」查閱大部分個人資料
- 透過 email 至 wecangotask@gmail.com 提交完整 Data Access Request
- 平台須於法定 40 天內或合理較短期限內回應
6.2 資料修正權(Data Correction)
如閣下發現本平台持有之個人資料有錯誤或過時:
- App 內「個人資料及設定」可查閱帳號資料，並可重置密碼、完成身份驗證，以及管理黑名單及通知設定
- 顯示名稱、出生日期、性別、電話號碼、技能及證書自述、電郵地址及頭像等資料，目前不能在 App 內自行修改；如需修正，請以 email 提出並說明理由，經核實後由 GM 手動處理（更換電話號碼另受《用戶守則》第 27 條限制）
- SLA：於收到要求後 40 日內（PDPO 法定期限）回覆及處理
6.3 資料刪除權(Data Erasure / Right to Be Forgotten)
閣下有權:
刪除時即時進行：
- 帳號紀錄中之顯示名稱改為「[已刪除用戶]」，並移除電郵地址、出生日期，以及頭像及身份驗證相片之連結；清除推送通知權杖；帳號即時登出，App 不再容許該帳號登入。
刪除後之保留安排（現行系統之實際做法）：
- 閣下之個人資料副本（顯示名稱、電話號碼、電郵地址、出生日期、相片連結及用戶代碼）會另存於只限管理員讀取之紀錄，一般保留 30 日（期間閣下可申請恢復帳號）；如刪除時帳號涉及催款備忘錄紀錄（不論是提交方或被提交方）或有違規紀錄，則保留 3 年。期滿後由系統自動清除。
- 電話號碼及登入紀錄（包括登入系統內之電郵地址、電話號碼及經單向加密之密碼）目前不會隨帳號刪除而刪除，以防止規避封鎖及確保一個電話只綁定一個帳號（《用戶守則》第 27、56 條）。
- 帳號紀錄內之其他資料（性別、技能及證書自述、用戶代碼、註冊時間、信用度及評分紀錄、違規及警告紀錄、身份驗證狀態、最近登入之裝置型號及刪除原因）會繼續保留，目前沒有自動刪除期限。
- 相片檔案（身份驗證相片、任務相片及完工相片）目前不會隨帳號或任務刪除而刪除。
- 任務、聊天記錄、催款備忘錄、通知及舉報按下表之一般保留期處理，不會因帳號刪除而提早刪除。
- 違法 / 違規任務證據按《用戶守則》第 30 條保留 3 年；法律 / 合規必須保留之資料（稅務、AML、執法請求等）按相關法定保留期保留。
資料保留期一覽:
| 資料類別 | 保留期 |
|---|
| 帳號資料 | 帳號存續期間；刪除帳號後之處理見上文 |
| 刪除帳號時另存之個人資料副本 | 30 日；如涉及催款備忘錄或有違規紀錄則 3 年；期滿自動清除 |
| 電話號碼、登入紀錄及帳號紀錄內之其他資料（見上文） | 目前沒有自動刪除期限 |
| 活體驗證之鏡頭畫面 | 只在裝置上即時處理，不會儲存或上載 |
| 身份驗證相片（包括被拒或重做之相片）及審核紀錄 | 目前沒有自動刪除期限 |
| 任務相片、完工相片 | 目前沒有自動刪除期限（任務紀錄刪除後，相片檔案仍會保留） |
| 已完成、已過期或涉及催款備忘錄之任務及其聊天記錄 | 完成、過期或提交備忘錄後約 30 日由系統自動刪除 |
| 已提交但未獲評分之任務及其聊天記錄 | 約 90 日後由系統自動刪除 |
| 賞金人取消之任務及其聊天記錄 | 取消時即時刪除（聊天記錄摘要會留在雙方之通知內） |
| 被下架（審核中）任務之內容、聊天記錄及舉報 | 下架後 3 年（《用戶守則》第 30 條）；個案仍在處理時可延長 |
| 催款備忘錄 | 提交後 1 年（相關任務被鎖定保留者除外） |
| 站內通知 | 已讀者 30 日；未讀者 90 日 |
| 其他舉報紀錄 | 目前沒有自動刪除期限 |
| 被平台封鎖帳號之電話號碼（封鎖名單） | 直至解除封鎖 |
| 法律 / 合規必須保留之資料(稅務、AML、執法請求) | 依相關法定保留期 |
| GM 審計日誌 | 依內部合規政策保留（目前沒有自動刪除期限） |
6.4 反對 AI 自動化決策權
詳見第 10 節 AI 透明度與 appeal 權。
7. 個人資料之儲存地點與跨境傳輸
本平台採用 Google Cloud 平台之雲端基建。閣下之個人資料儲存及處理於以下區域:
| 用途 | 儲存 / 處理區域 |
|---|
| 資料庫 | 亞洲區(以台灣機房為主) |
| 相片及其他上載檔案（雲端儲存） | 美洲區（美國） |
| 後台處理服務（包括 AI 功能之請求處理） | 美洲區（以美國機房為主） |
| 登入服務（Firebase Authentication，包括短訊驗證） | Google 之全球基建 |
| AI 處理（Google Gemini） | 由 Google 處理，處理地點由 Google 決定，不限於香港 |
| 推送通知、跨平台服務 | 第三方提供商(Apple、Google)之全球網絡 |
閣下使用本平台即代表同意:
- 個人資料跨境傳輸至上述區域及第三方服務供應商
- 上述地點之資料保護法律標準可能與香港不同
- 本平台已盡商業合理努力選擇符合業界加密及保護標準之服務供應商
- 除上述服務供應商之處理地點外，本平台不會將閣下個人資料主動傳輸至中國內地或其他司法管轄區（除非該用戶身處該地）
PCPD 提醒:PDPO Section 33(跨境資料傳輸限制條款)目前尚未啟用,但本平台主動以透明度原則披露上述資訊。
8. 第三方服務披露
本平台之運作依賴以下第三方服務,各自有獨立之私隱政策:
| 服務 | 提供者 | 收集 / 處理之資料 | 用途 | 傳輸加密 | 是否分享可識別資料 |
|---|
| Firebase（Authentication、Cloud Firestore、Cloud Storage、Cloud Functions、Cloud Messaging） | Google LLC | 帳號資料（包括電郵、電話號碼及經單向加密之密碼）、短訊驗證、資料庫內容、相片、推送權杖、IP 位址及裝置資料 | 平台核心基建 | 是(TLS) | 否(僅作平台運營處理) |
| Firebase App Check（iOS 經 Apple App Attest；Android 經 Google Play Integrity；網頁版經 Google reCAPTCHA） | Google LLC、Apple Inc. | 裝置及 App 完整性驗證資料 | 確認請求來自正版 App，防濫用 | 是(TLS) | 否 |
| Gemini API | Google LLC | 第 10.1 節所列之任務資料及舉報補充說明 | AI 助手、AI 違規評估、任務分類 | 是(TLS) | App 不會主動附上閣下之姓名、電話、電郵、相片或聊天訊息；惟用戶自行輸入之內容如含個人資料，會一併傳送 |
| ML Kit Face Detection | Google LLC | 鏡頭畫面（只在裝置上處理）；另會向 Google 傳送 API 使用及效能指標、裝置及 App 資料 | 活體驗證；診斷 | 鏡頭畫面不上傳；其他資料以 TLS 傳送 | 否 |
| Apple 推送通知服務 | Apple Inc. | Push token、通知標題（任務名稱） | iOS 通知傳送 | 是(TLS) | 否 |
| Google Play Services | Google LLC | Push token、SDK runtime | Android 通知 + 安裝環境 | 是(TLS) | 否 |
| Google Fonts | Google LLC | 下載介面字型時之 IP 位址等連線資料 | App 介面字型 | 是(TLS) | 否 |
| 香港天文台開放數據 | 香港天文台 | 讀取天氣預報時之 IP 位址等連線資料（不傳送個人資料） | AI 助手之天氣參考 | 是(TLS) | 否 |
閣下可透過以下連結查閱該等第三方之私隱政策:
如將來引入其他第三方(如分析平台、支付網關等),本政策將相應更新並通知用戶。
9. Cookie / Analytics / Tracking 聲明
本平台不使用任何分析、效能監測、崩潰報告或廣告追蹤工具（包括 Firebase Analytics、Firebase Performance Monitoring 及 Crashlytics），亦不會跨應用程式或跨網站追蹤用戶。
- 第三方 SDK 為保安、防濫用及診斷而自動處理之資料，見第 2.5 及第 8 節
- App 會在裝置上儲存少量設定（例如登入狀態、介面語言，以及單一裝置登入所用之裝置識別碼）
- 網頁版使用瀏覽器本機儲存保存登入狀態及設定，並以 Google reCAPTCHA 作防濫用驗證；reCAPTCHA 可能設定 Cookie 及收集裝置與瀏覽器資料，受 Google 私隱政策規管
由於本平台不作跨應用程式追蹤，iOS App 不會要求「追蹤」授權（Apple ATT）。
10. AI 透明度與決策 appeal 權
依 PCPD AI Guidance 2021 之透明度、人手覆核、appeal 原則:
10.1 AI 使用披露
本平台採用之 AI 系統:
- Google Gemini — AI 助手（由賞金人在刊登頁自行啟動，每日設使用上限）：把任務名稱、描述、地點、開始時間、賞金及獎賞類型、挑戰準則及是否跨區，連同平台近 30 日已完成任務之名稱及賞金（不含用戶身份資料）及天氣預報，送交 Gemini，以提供合規提示、撰寫建議、參考賞金及任務類別。
- Google Gemini — AI 違規評估（自動）：任務收到第 3 次舉報時，把任務名稱、描述、要求、地點及第 2、第 3 名舉報者之補充說明送交 Gemini 評估。如 AI 判斷涉及違規而可信度達 0.8 或以上，任務會被自動暫時下架，交由管理員人手覆核。
- Google Gemini — 任務分類（自動）：合資格任務完成後，如仍未有類別，會把任務名稱及描述送交 Gemini 分類，用於計算各類任務之平台參考價；賞金人如曾使用 AI 助手，其推斷之類別亦可能於刊登時記錄。
- Google ML Kit on-device Face Detection — 活體驗證之眨眼 / 張口偵測（只在裝置上處理）
- 將來如引入 AI 信用度評估等新用途，屆時另行公告
其他自動化措施：任務刊登時，系統會以關鍵詞掃描招聘或僱傭類字眼，命中之任務會被自動暫時下架，交由管理員覆核；同一任務累積 10 次舉報亦會被自動暫時下架。上述措施不涉及 AI，但同樣適用第 10.2 節之覆核權利。
送交 Gemini 之資料不包括閣下之姓名、電話、電郵、相片、臉部影像或聊天訊息；惟用戶自行輸入之任務內容或舉報補充說明如含個人資料（例如地址或姓名），會一併傳送。請避免在任務描述或舉報補充說明中填寫可識別個人之資料。
10.2 用戶之 appeal 權
任何受 AI 或系統自動化決策負面影響之用戶（包括但不限於：任務被自動暫時下架、身份驗證未獲通過等）享有以下權利：
- 透過 App 內「申訴中心」（會開啟電郵並附上閣下之用戶代碼）或電郵至 wecangotask@gmail.com 提出 appeal，並列明受影響事件及申訴理由
- GM 會於收到電郵後 5 個工作天內以電郵回覆，並：
- 進行人手覆核(不能單純機械重跑 AI)
- 如認定屬誤判，酌情作出補救（例如補回刊登配額）；已下架之任務不會自動恢復刊登（見《用戶守則》第 59 條）
- 如不成立則列明理由
10.3 反對全自動化決策
本平台自願給予用戶反對僅依賴自動化處理所作決定之權利：本平台不會只依賴自動化處理，就對用戶有重大影響之事項作出最終決定。AI 或系統自動下架任務屬暫時措施，最終由管理員人手覆核後決定。如閣下對任何自動化處理有異議，可按第 10.2 節要求人手覆核。
11. DOB(出生日期)專用聲明
依資料最小化原則:
- 閣下之出生日期僅用於確認年齡是否滿足 18+ 門檻，並以年齡形式顯示於閣下本人之「個人資料及設定」頁
- App 介面不會向其他用戶顯示閣下之出生日期或年齡（技術存取範圍見第 5.4 節）
- DOB 不會用於行銷生日推廣等用途(除非另獲明確同意)
12. 未成年人(18 歲以下)
本平台不向 18 歲以下任何人提供服務,並透過:
- 註冊時須自行聲明已年滿 18 歲,系統就出生日期(DOB)作驗證(< 18 即拒絕)
- 如管理員(GM)其後發現用戶未滿 18 歲,有權即時終止其帳號並刪除相關資料
如本平台意外收集到 18 歲以下用戶之資料,將:
- 立即關閉該帳號
- 30 日內從系統中刪除其個人資料(除依法須保留之必要識別碼)
- 通知該用戶(如可聯絡)
如閣下發現有未成年人冒用本平台,請即時聯絡 wecangotask@gmail.com。
13. 隱私政策修訂
本平台保留修訂本政策之權利。重大修訂(包括但不限於變更收集目的、跨境地點、第三方服務、用戶權利等)時:
- 將提前 30 日透過 in-app 公告及 email 通知用戶
- 用戶按「重新同意」按鈕方可繼續使用 — 否則只能行使第 6.3 條「資料刪除權」並退出平台
- 非重大修訂(錯字、表述優化等)將直接於本政策內更新,並同步更新文件頂部之版本號與生效日期
14. 通知與聯絡渠道
對於本政策、個人資料處理或 PDPO 相關之任何疑問、要求或投訴:
接受聲明 / 用戶確認
點擊「我已閱讀及同意《Go Task 隱私政策》全部條款」,即代表閣下:
- ☑ 同意本平台依本政策收集、使用、儲存、跨境傳輸閣下之個人資料;
- ☑ 理解閣下之法定權利(存取、修正、刪除、AI appeal 等);
- ☑ 同意本政策之中文版本為正式約束版本,英文及其他譯本僅供參考,如有歧義以中文為準;
- ☑ 同意接受日後依第 13 條進行之合理修訂(重大修訂另需重新確認)。
Go Task 隱私政策
© 2026 WECAN DESIGN COLLECTIVE LIMITED
保留一切權利。
聯絡電郵: wecangotask@gmail.com
Go Task Privacy Policy
Version: 1.1
Effective date: 2026-10-06
Last updated: 2026-10-06 (this version replaces version 1.0, effective 2026-09-15)
Governing Language: Chinese (Traditional)
Governing law: the Personal Data (Privacy) Ordinance, Cap. 486 (the "PDPO"), and the laws of the Hong Kong Special Administrative Region
Language versions: This document is provided in both Chinese and English. In the event of any discrepancy or inconsistency between the Chinese and English versions, the Chinese version shall prevail; the English version is provided for reference and convenience only.
Summary of changes in version 1.1: This version corrects and supplements the following: the data collected at registration and during identity verification (Section 2); the data visible to other users (Section 4.1); current limitations of our security measures (Section 5.4); how to correct your data (Section 6.2); what is deleted and what is retained after account deletion (Section 6.3); data storage locations (Section 7); third-party services, AI features and the data sent to Google Gemini (Sections 8 and 10); the appeal process (Section 10.2); and the fact that the Platform uses no analytics tools (Section 9).
Preamble
This Go Task Privacy Policy (the "Policy") explains how the Go Task task-bounty matchmaking platform (the "Platform", "Go Task") collects, uses, stores, shares and protects your personal data.
This Policy should be read together with the Go Task Platform User Rules & Disclaimer; together they constitute the entire agreement between you and the Platform.
This Policy is drafted in accordance with the requirements of the PDPO Data Protection Principles (DPP) 1–6, and with reference to the principles of transparency, the right to explanation and the right of appeal set out in the PCPD AI Guidance 2021 (the Guidance on the Ethical Development and Use of Artificial Intelligence issued by the Office of the Privacy Commissioner for Personal Data).
1. Platform Operator (Data Controller / Data User) Statement
Operating entity: WECAN DESIGN COLLECTIVE LIMITED (a Hong Kong registered limited company)
Contact email: wecangotask@gmail.com
Scope of use: data access, correction, deletion, customer service, AI appeals
If you have any questions about the Platform's handling of personal data, you may enquire with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD):
2. Categories of Personal Data Collected
The personal data collected by the Platform falls into the following categories:
2.1 Data provided at registration
- Email address (required; used to sign in)
- Password (required; stored with one-way encryption; the Platform cannot read the plaintext directly)
- Mobile phone number (required; must include the country or region code, e.g. +852 for Hong Kong; verified by SMS code at registration; cannot be changed by yourself after registration — see Article 27 of the User Rules)
- Date of birth (required; used for the 18+ age check)
- Display name (shown as "Name" in the App; optional; a pseudonym is allowed, but you must not impersonate others; cannot be changed by yourself after registration)
- Gender (optional)
- Skills & certificates (a self-description; optional; shown to the Poster once you accept their task)
No front-facing photo is required at registration; a front-facing photo is collected only during identity verification (see Section 2.2).
2.2 Identity (liveness) verification data
- When it is needed: not at registration. You must complete identity verification before accepting a task whose bounty reaches the threshold set by the Platform (currently HK$80, adjustable by the Platform).
- Mobile app: using the front camera, you follow on-screen prompts to blink and to open your mouth. The camera feed is analysed in real time on your device only, by Google ML Kit, and is not stored or uploaded. No audio is recorded.
- Front-facing photo: after you complete the prompts, the App takes one front-facing photo and uploads it to the Platform's cloud storage for review by the system or an administrator. A photo that passes review becomes your profile picture and is also used for identity checks and dispute handling (see Article 25 of the User Rules).
- Web version: you take or select a photo in your browser and upload it; every web submission is reviewed manually by an administrator.
- Every submitted photo is kept: photos that are rejected, retaken or not approved, together with the review records, are currently not deleted automatically (see Section 6.3 for retention).
- The Platform does not extract or store any facial template from photos, and does not use face matching to detect duplicate accounts; duplicate accounts are prevented mainly through phone numbers.
2.3 System-generated identifiers
- User code (format: "USER-registration date-four random characters", e.g. USER-20260915-AB12): shown together with your masked display name on task details and record pages; other users can also block a user by entering a user code or phone number (see Section 4.1)
- Internal user identifier: a unique identifier used internally by the Platform
- Device identifier: generated randomly by the App on your device and used for single-device sign-in (see Section 2.5)
2.4 Task and behavioural data
- Content of tasks posted / accepted (name, description, requirements, location, start time, bounty, payment methods, challenge criteria, task photos, etc.)
- Task chat logs (between the two parties to a task only)
- Completion photos, handover notes and payment-demand memos (a memo contains both parties' names, phone numbers and user codes, task details, photos and the last 10 chat messages; the memo record also stores both parties' email addresses)
- Ratings and rating history (rolling over the last 5 ratings)
- Credit score
- Violation records (including cumulative violation count, warning count, block flags, freeze periods, etc.)
- Reports (of tasks, chat rooms and sponsored content) and their supplementary notes
- Your blocklist (the user codes and phone numbers of the users you block, and your reasons)
- In-app notifications (some notifications include an extract of the task chat, e.g. when a task is cancelled or a Hunter withdraws)
- Usage records: daily posting and acceptance counts, daily AI Advisor usage count, and the reason you select when deleting your account (if any)
2.5 Technical / device data
- A device identifier generated randomly by the App, your device model (e.g. the iPhone model code; not the name you have given your device) and your latest sign-in time: used for single-device sign-in, which prevents an account from being used on several devices at the same time
- Push notification token and interface language: used to deliver notifications; you can turn off push notifications in the App's "Notification settings" or in your device settings
- Firebase (including sign-in, database, push messaging and App Check device verification) and Google ML Kit automatically process IP addresses, device data (such as model and operating-system version), app version and installation identifiers for security, abuse prevention and diagnostics; see Section 8
- The App asks for the following permissions only when you use the related features: camera (identity verification and task photos), photos (selecting task photos and saving payment-demand memo images) and notifications (push notifications)
- The Platform does not use any analytics, advertising or crash-reporting tools (such as Firebase Analytics, Performance Monitoring or Crashlytics), does not access your device location and does not record audio
2.6 GM audit records
- Actions performed by administrators in the admin panel, and certain actions performed automatically by the system (such as identity-verification results and automatic task suspension), are written to the administrator audit log (including the identity of the actor, the affected user and, in some records, that user's email address, the action type, reason, timestamp, etc.)
3. DPP1 — Purpose of Collection of Personal Data
Under PDPO DPP1 (Purpose & Collection), the Platform collects personal data only for the following five purposes:
- Identity verification: SMS phone verification and a date-of-birth declaration to ensure that users are aged 18 or above; before a user accepts a task whose bounty reaches the threshold, liveness verification to ensure that the user is a real person
- Task matchmaking: matching of Posters and Hunters, chat communication, settlement flow and notifications; and the AI Advisor's posting suggestions and reference bounties, task classification and the Platform's reference-price statistics
- Credit assessment: ratings, abandonment detection, newcomer protection, sliding-window calculation
- Safety and anti-fraud: anti-fraud, anti-spam, anti-brigade, single-device sign-in, report handling and AI violation assessment
- Legal compliance: compliance with the PDPO, the PCPD AI Guidance, other Hong Kong laws and law-enforcement requests
The data collected does not exceed what is necessary to achieve the above purposes (the data-minimisation principle).
4. DPP3 — Restriction on Use of Personal Data
Under PDPO DPP3 (Use of Personal Data), the Platform:
- Will not use your personal data for any purpose other than those disclosed at the time of collection;
- Will not sell, rent or exchange your personal data to any third party;
- Will not upload your facial images or chat messages to any third-party LLM; the data sent to Google Gemini is limited to that listed in Section 10.1.
4.1 Data visible to other users
To enable task matchmaking, the App displays the following data to other users:
- All signed-in users: the content of tasks you post (name, description, requirements, location, time, bounty and task photo), and the Poster's masked display name (only the first character is shown) and user code.
- The other party after matching (after a Hunter accepts a task, while the task is in progress): your display name (if you have not set a display name, your email address is shown instead), profile picture (i.e. your approved front-facing photo), verification badge and phone number; the Poster can also see the Hunter's skills & certificates, and the Hunter can also see the Poster's number of successful posts; both parties can see the task chat and completion photos.
- Payment-demand memos: once a Hunter submits a payment-demand memo, both parties can view and download it; it contains both parties' names, phone numbers and user codes, task details, photos and the last 10 chat messages.
- Record pages: users who have worked with you can see your masked display name and user code on their record page.
- Blocklists: if another user adds you to their "Blocklist" using your phone number or user code, their Blocklist page shows your user code and phone number.
- Notifications: when a task is cancelled or a Hunter withdraws, the notifications received by both parties include up to 10 messages from that task's chat.
Apart from the above and the technical access described in Section 5.4, the Platform does not disclose your personal data to other users.
5. DPP4 — Security Measures for Personal Data
Under PDPO DPP4 (Security), the Platform undertakes to adopt reasonable and industry-recognised security measures to protect your personal data against unauthorised access, processing, deletion, loss or use.
5.1 Technical measures (overview)
- Uses industry-standard transport-layer encryption (TLS) to protect communications between the user and the Platform
- User passwords are stored with one-way encryption; the Platform cannot read plaintext passwords
- Data is stored on Google Cloud / Firebase infrastructure and is encrypted at rest by the service provider in accordance with its standards
- The database and cloud storage are protected by access rules; for example, task chats can be read only by the two parties and administrators; payment-demand memos only by the parties concerned and administrators; and the data copies kept after account deletion, the administrator audit log and the phone blocklist only by administrators. The admin panel also requires a second authentication factor.
5.2 Procedural measures
- System administrators (GMs) must have a reasonable ground to access user data (dispute mediation, compliance checks, security response)
- Actions performed by administrators in the admin panel are logged for audit and reviewable when necessary
- GMs will not access the content of users' private communications without a reasonable need
5.3 Limitation statement
Internet transmission cannot be guaranteed to be 100% absolutely secure. The Platform has adopted protective measures meeting reasonable industry standards, but cannot guarantee absolute prevention of all unauthorised intrusion.
If the Platform discovers a serious data breach:
- It will notify affected users within a reasonable time via in-app notification and email
- It will, where necessary, report to the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD) or law-enforcement agencies as required by law
- It will activate internal data-breach response procedures
5.4 Current limitations
The App shows your data to other users only as described in Section 4.1. However, the Platform cannot currently guarantee that other signed-in users will be unable to obtain account data and photos by technical means. The Platform is tightening these settings and will update this Policy once that has been done.
6. DPP6 — User Data Rights (Access, Correction, Deletion)
Under PDPO DPP6 (Access & Correction), you have the following statutory rights over the personal data held by the Platform about you:
6.1 Right of Data Access
You may:
- Review most of your personal data at any time under "Profile & Settings" in the App
- Submit a full Data Access Request by email to wecangotask@gmail.com
- The Platform must respond within the statutory 40 days or a reasonable shorter period
6.2 Right of Data Correction
If you find that the personal data held by the Platform is inaccurate or out of date:
- In the App, "Profile & Settings" lets you view your account data, reset your password, complete identity verification, and manage your Blocklist and notification settings
- Your display name, date of birth, gender, phone number, skills & certificates, email address and profile picture cannot currently be changed in the App. To correct them, please email us with your reasons; after verification, a GM will handle the request manually (a change of phone number is also subject to Article 27 of the User Rules)
- SLA: we will reply and act within 40 days of receiving your request (the statutory period under the PDPO)
6.3 Right of Data Erasure (Right to Be Forgotten)
You have the right to:
- Initiate deletion via "USER → Account Settings → Delete Account" in the App (if your account still has a task that is awaiting acceptance, in progress, awaiting rating, subject to a payment-demand memo or under review, you must resolve it first; see our account deletion page)
- Or request deletion by email to wecangotask@gmail.com
What happens immediately upon deletion:
- The display name in your account record is changed to "[已刪除用戶]" ("deleted user"), and your email address, date of birth and the links to your profile picture and verification photo are removed; your push notification token is cleared; you are signed out immediately, and the App will no longer allow the account to sign in.
What is retained after deletion (how the system currently works):
- A copy of your personal data (display name, phone number, email address, date of birth, photo links and user code) is kept in a record that only administrators can read, normally for 30 days (during which you may ask us to restore the account); if, at the time of deletion, your account is linked to a payment-demand memo (whether as the submitting or the receiving party) or has a violation record, the copy is kept for 3 years. It is erased automatically by the system when the period ends.
- Your phone number and sign-in records (including the email address, phone number and one-way-encrypted password held in the sign-in system) are currently not deleted when your account is deleted, in order to prevent circumvention of blocking and to ensure that each phone number is linked to only one account (Articles 27 and 56 of the User Rules).
- Other data in your account record (gender, skills & certificates, user code, registration time, credit score and rating history, violation and warning records, verification status, the model of the device last used to sign in, and the deletion reason) continues to be kept, with no automatic deletion period at present.
- Photo files (identity-verification photos, task photos and completion photos) are currently not deleted when an account or a task is deleted.
- Tasks, chat logs, payment-demand memos, notifications and reports follow the general retention periods in the table below and are not deleted earlier because of account deletion.
- Evidence of unlawful / violating tasks is retained for 3 years under Article 30 of the User Rules; data that must be retained for legal / compliance reasons (tax, AML, law-enforcement requests, etc.) is retained for the relevant statutory retention period.
Data Retention Overview:
| Data category | Retention period |
|---|
| Account data | Duration of the account; for treatment after account deletion, see above |
| Copy of personal data kept at account deletion | 30 days; 3 years where a payment-demand memo or violation record is involved; erased automatically when the period ends |
| Phone number, sign-in records and other data in the account record (see above) | No automatic deletion period at present |
| Camera feed during liveness verification | Processed in real time on the device only; never stored or uploaded |
| Identity-verification photos (including rejected or retaken photos) and review records | No automatic deletion period at present |
| Task photos and completion photos | No automatic deletion period at present (photo files remain after the task record is deleted) |
| Completed or expired tasks, and tasks subject to a payment-demand memo, with their chat logs | Deleted automatically about 30 days after completion, expiry or submission of the memo |
| Tasks submitted but not rated, with their chat logs | Deleted automatically after about 90 days |
| Tasks cancelled by the Poster, with their chat logs | Deleted on cancellation (a chat extract remains in both parties' notifications) |
| Content, chat logs and reports of tasks taken down (under review) | 3 years after takedown (Article 30 of the User Rules); may be extended while a case is ongoing |
| Payment-demand memos | 1 year after submission (except where the related task is locked for retention) |
| In-app notifications | 30 days if read; 90 days if unread |
| Other report records | No automatic deletion period at present |
| Phone numbers of accounts blocked by the Platform (blocklist) | Until the block is lifted |
| Data required for legal / compliance reasons (tax, AML, law-enforcement requests) | The relevant statutory retention period |
| GM audit logs | Retained in accordance with internal compliance policy (no automatic deletion period at present) |
6.4 Right to Object to Automated AI Decision-Making
See Section 10 on AI transparency and the right of appeal.
7. Storage Location and Cross-Border Transfer of Personal Data
The Platform uses the cloud infrastructure of the Google Cloud Platform. Your personal data is stored and processed in the following regions:
| Purpose | Storage / processing region |
|---|
| Database | Asia region (primarily Taiwan data centres) |
| Photos and other uploaded files (cloud storage) | Americas region (United States) |
| Backend processing services (including handling of AI feature requests) | Americas region (primarily US data centres) |
| Sign-in service (Firebase Authentication, including SMS verification) | Google's global infrastructure |
| AI processing (Google Gemini) | Processed by Google; processing locations are determined by Google and are not limited to Hong Kong |
| Push notifications, cross-platform services | The global networks of third-party providers (Apple, Google) |
By using the Platform you consent to:
- Cross-border transfer of your personal data to the above regions and third-party service providers
- The data-protection legal standards of the above locations may differ from those of Hong Kong
- The Platform has made commercially reasonable efforts to select service providers meeting industry encryption and protection standards
- Apart from the processing locations of the above service providers, the Platform will not proactively transfer your personal data to mainland China or other jurisdictions (unless the user is physically located there)
PCPD reminder: PDPO Section 33 (the cross-border data transfer restriction provision) is currently not yet in force, but the Platform proactively discloses the above information in the spirit of the transparency principle.
8. Third-Party Service Disclosure
The Platform's operation relies on the following third-party services, each with its own privacy policy:
| Service | Provider | Data collected / processed | Purpose | Encrypted in transit | Shares identifiable data? |
|---|
| Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging) | Google LLC | Account data (including email, phone number and one-way-encrypted password), SMS verification, database content, photos, push tokens, IP addresses and device data | Core platform infrastructure | Yes (TLS) | No (processed only to operate the Platform) |
| Firebase App Check (via Apple App Attest on iOS, Google Play Integrity on Android and Google reCAPTCHA on the web) | Google LLC, Apple Inc. | Device and app integrity attestation data | Confirming that requests come from the genuine App; abuse prevention | Yes (TLS) | No |
| Gemini API | Google LLC | The task data and report notes listed in Section 10.1 | AI Advisor, AI violation assessment, task classification | Yes (TLS) | The App does not attach your name, phone number, email address, photos or chat messages; however, any personal data contained in content entered by users will be sent as well |
| ML Kit Face Detection | Google LLC | Camera feed (processed on the device only); ML Kit also sends API usage and performance metrics, device and app data to Google | Liveness verification; diagnostics | Camera feed is not uploaded; other data is sent over TLS | No |
| Apple Push Notification Service | Apple Inc. | Push token, notification title (task name) | iOS notification delivery | Yes (TLS) | No |
| Google Play Services | Google LLC | Push token, SDK runtime | Android notifications + install environment | Yes (TLS) | No |
| Google Fonts | Google LLC | Connection data such as IP address when interface fonts are downloaded | App interface fonts | Yes (TLS) | No |
| Hong Kong Observatory open data | Hong Kong Observatory | Connection data such as IP address when weather forecasts are retrieved (no personal data is sent) | Weather reference for the AI Advisor | Yes (TLS) | No |
You may review these third parties' privacy policies via the following links:
If other third parties (such as analytics platforms, payment gateways, etc.) are introduced in future, this Policy will be updated accordingly and users will be notified.
9. Cookie / Analytics / Tracking Statement
The Platform does not use any analytics, performance-monitoring, crash-reporting or advertising-tracking tools (including Firebase Analytics, Firebase Performance Monitoring and Crashlytics), and does not track users across apps or websites.
- For data processed automatically by third-party SDKs for security, abuse prevention and diagnostics, see Sections 2.5 and 8
- The App stores a small amount of settings on your device (such as sign-in status, interface language and the device identifier used for single-device sign-in)
- The web version uses browser local storage to keep your sign-in status and settings, and uses Google reCAPTCHA for abuse prevention; reCAPTCHA may set cookies and collect device and browser information, and is governed by Google's privacy policy
As the Platform does not track users across apps, the iOS App does not ask for "Tracking" permission (Apple ATT).
10. AI Transparency and the Right to Appeal Decisions
In line with the principles of transparency, human review and appeal in the PCPD AI Guidance 2021:
10.1 AI Use Disclosure
The AI systems used by the Platform:
- Google Gemini — AI Advisor (started by the Poster on the posting page; subject to a daily usage limit): sends the task name, description, location, start time, bounty and reward type, challenge criteria and cross-district setting, together with the names and bounties of tasks completed on the Platform in the past 30 days (without any user identity data) and weather forecasts, to Gemini to provide compliance reminders, writing tips, a reference bounty and a task category.
- Google Gemini — AI violation assessment (automatic): when a task receives its 3rd report, sends the task name, description, requirements and location, together with the supplementary notes of the 2nd and 3rd reporters, to Gemini for assessment. If the AI judges that a violation is involved with a confidence of 0.8 or above, the task is automatically suspended and passed to an administrator for human review.
- Google Gemini — task classification (automatic): after an eligible task is completed, if it does not yet have a category, sends the task name and description to Gemini for classification, which is used to calculate the Platform's reference prices for each task type; where the Poster has used the AI Advisor, the category it inferred may also be recorded when the task is posted.
- Google ML Kit on-device Face Detection — blink / mouth-open detection for liveness verification (processed on the device only)
- Any new uses, such as AI credit assessment, will be announced separately if introduced in future
Other automated measures: when a task is posted, the system scans it for recruitment or employment keywords, and a matching task is automatically suspended for administrator review; a task that accumulates 10 reports is also automatically suspended. These measures do not involve AI, but the review rights in Section 10.2 apply equally.
The data sent to Gemini does not include your name, phone number, email address, photos, facial images or chat messages. However, if the task content or report notes that users enter contain personal data (such as an address or a name), that data will be sent as well. Please avoid including personally identifiable information in task descriptions or report notes.
10.2 The User's Right to Appeal
Any user adversely affected by an AI or automated system decision (including but not limited to: a task being automatically suspended, or identity verification not being approved) has the following rights:
- To file an appeal via the in-app "Appeal Center" (which opens an email pre-filled with your user code) or by email to wecangotask@gmail.com, stating the affected event and the reasons for the appeal
- The GM will reply by email within 5 business days of receiving the email, and will:
- Conduct a human review (not simply re-run the AI mechanically)
- If the decision is found to be a misjudgment, provide an appropriate remedy at their discretion (for example, restoring posting quota); a task that has been taken down is not automatically re-listed (see Article 59 of the User Rules)
- If not upheld, state the reasons
10.3 Objection to Fully Automated Decisions
The Platform voluntarily gives users the right to object to decisions based solely on automated processing: the Platform does not rely solely on automated processing to make final decisions that significantly affect users. Automatic suspension of a task by AI or by the system is a temporary measure, and the final decision is made by an administrator after human review. If you disagree with any automated processing, you may request a human review under Section 10.2.
11. Special Statement on Date of Birth (DOB)
In line with the data-minimisation principle:
- Your date of birth is used only to confirm whether your age meets the 18+ threshold, and is shown, as your age, on your own "Profile & Settings" page
- The App does not display your date of birth or age to other users (for the scope of technical access, see Section 5.4)
- DOB will not be used for marketing such as birthday promotions (unless separate explicit consent is obtained)
12. Minors (Under 18)
The Platform does not provide services to anyone under 18, and does so by:
- Requiring users to declare at registration that they are at least 18, with the system verifying against the date of birth (DOB) (< 18 is rejected)
- If a GM subsequently discovers that a user is under 18, the Platform has the right to immediately terminate the account and delete the relevant data
If the Platform accidentally collects data of a user under 18, it will:
- Immediately close the account
- Delete the personal data from its systems within 30 days (except identifiers that must be retained by law)
- Notify the user (if contactable)
If you discover that a minor is using the Platform under a false identity, please contact wecangotask@gmail.com immediately.
13. Amendments to the Privacy Policy
The Platform reserves the right to amend this Policy. In the event of a material amendment (including but not limited to changes to collection purposes, cross-border locations, third-party services, user rights, etc.):
- Users will be notified 30 days in advance via in-app announcement and email
- Users must press the "Re-consent" button before they can continue using the Platform — otherwise they may only exercise the "Right of Data Erasure" under Section 6.3 and leave the Platform
- Non-material amendments (typos, wording improvements, etc.) will be updated directly in this Policy, with the version number and effective date at the top of the document updated accordingly
14. Notices and Contact Channels
For any questions, requests or complaints regarding this Policy, personal-data handling or the PDPO:
- Preferred: email to wecangotask@gmail.com
- Third-party complaint channel: Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD)
Acceptance Statement / User Confirmation
By clicking "I have read and agree to all terms of the Go Task Privacy Policy", you:
- ☑ Agree that the Platform may collect, use, store and transfer across borders your personal data in accordance with this Policy;
- ☑ Understand your statutory rights (access, correction, deletion, AI appeal, etc.);
- ☑ Agree that the Chinese version of this Policy is the formal binding version, and that the English and other translations are for reference only; in case of ambiguity, the Chinese version prevails;
- ☑ Agree to accept reasonable future amendments made under Section 13 (material amendments require separate re-confirmation).
Go Task Privacy Policy
© 2026 WECAN DESIGN COLLECTIVE LIMITED
All rights reserved.
Contact email: wecangotask@gmail.com