隱私權政策

波波注音編輯器（BopoDoc）的注音標注與破音字校正，都在您的瀏覽器中執行。本政策說明我們如何處理您的資料。

1. 存取的資料（Data Accessed）

文件內容：您輸入的文字在瀏覽器中處理，不會傳送到我們的伺服器。

Google 帳號（只有您選擇登入雲端同步時）：登入後，本服務會取得以下資料：

• 您的 Google 帳號名稱、電子郵件地址、大頭照與帳號識別碼
• 您的 Google 雲端硬碟中，由本服務建立的檔案

本服務使用 Google 的 drive.file 權限，只能存取本服務自己建立的檔案，看不到您雲端硬碟裡的其他檔案。

2. 資料使用方式（Data Usage）

• 文件內容只用於在瀏覽器中標注注音、校正破音字。
• Google 帳號名稱、電子郵件與大頭照，只用於在畫面上顯示目前登入的是哪個帳號。
• 雲端硬碟權限只用於把您的文件存到您自己的雲端硬碟「波波注音文件」資料夾，以及在您的其他裝置上讀回這些文件。

文件內容與 Google 帳號資料不會用於廣告、不會出售，也不會用於訓練 AI 或機器學習模型。

本服務對 Google API 所取得資料的使用與傳輸，遵守 Google API 服務使用者資料政策，包括其中的「有限使用」規定。

3. 資料分享（Data Sharing）

我們不會出售，也不會與任何第三方分享您的資料。

本服務可能連線至以下外部服務：

• Google 雲端硬碟：只有登入雲端同步時。文件從您的瀏覽器直接傳到您自己的 Google 雲端硬碟，不經過我們的伺服器。
• Google 登入：只有登入雲端同步時。登入過程會經過本服務的伺服器（Cloudflare），用來向 Google 換取登入憑證，伺服器不留存任何資料。
• Cloudflare R2、Hugging Face：首次使用時下載自動校正模型（只下載，不上傳任何資料）
• Google Fonts：選用 Google 字型時下載字型檔（只下載，不上傳任何資料）
• jsDelivr CDN：載入 ONNX Runtime WASM 執行環境
• Google Analytics：收集匿名使用統計（頁面瀏覽、功能使用次數、上傳檔案大小），不收集文字內容、電子郵件或其他個人識別資訊

4. 資料儲存與保護（Data Storage & Protection）

本機儲存：文件與設定使用瀏覽器的 IndexedDB 儲存在您的裝置上。登入雲端同步時，帳號名稱、電子郵件與大頭照網址也存在這裡，用來顯示登入狀態。

Google 雲端硬碟：登入雲端同步後，文件存在您自己的 Google 雲端硬碟，由 Google 保管，我們看不到內容。

登入憑證：登入憑證加密後存在您瀏覽器的 Cookie 中，只有本服務的登入伺服器能解開。存取雲端硬碟用的短期憑證只放在記憶體中，關閉網頁即消失。

伺服器端：我們不在伺服器上儲存任何文件內容或 Google 帳號資料。

所有連線都經過 HTTPS 加密。

5. 資料保留與刪除（Data Retention & Deletion）

這台裝置上的資料可隨時透過以下方式刪除：

• 在文件庫中刪除文件
• 登出雲端同步：這個帳號的文件、帳號資料與登入 Cookie 會從這台裝置清除
• 在瀏覽器設定中清除網站資料

Google 雲端硬碟上的檔案屬於您，登出後仍會保留。您可以到 Google 雲端硬碟的「波波注音文件」資料夾自行刪除。在本服務中刪除的文件會移到雲端硬碟的垃圾桶，30 天後由 Google 永久刪除。

取消授權：到 Google 帳戶的「第三方應用程式和服務」移除波波注音，本服務就無法再存取您的雲端硬碟。

我們的伺服器不保存您的文件或帳號資料，因此沒有需要從伺服器端刪除的資料。如有任何疑問，請透過下方聯絡方式與我們聯繫。

Cookie

只有登入雲端同步時，本服務才會設定以下 Cookie：

• bopo_cloud：加密後的登入憑證，讓您不用每次重新登入，最長保留 400 天，登出時清除
• bopo_cloud_state：登入過程中防止偽造請求，10 分鐘後失效

這兩個 Cookie 不用於追蹤或廣告。若啟用 Google Analytics，Google 可能設置分析用 Cookie。

服務條款

本服務為免費軟體，按「現狀」提供，不附帶任何明示或暗示的保證。

使用限制

• 自動正音為輔助功能，結果可能不完全正確，請自行確認
• 不保證服務持續可用性或資料保存，請自行備份重要文件
• 使用者應確保內容不侵犯他人著作權
• 未經授權不得複製、修改或散布本軟體

雲端同步

• 雲端同步是選用功能，需要 Google 帳號，並須同時遵守 Google 服務條款
• 文件存在您自己的 Google 雲端硬碟，佔用您的雲端硬碟空間
• 沒網路時的修改會留在這台裝置，連上網路後才會存到雲端；還沒存到雲端的文件，登出後會遺失
• 雲端同步的可用性也取決於 Google 的服務

免責聲明

在法律允許的最大範圍內，本服務的開發者不對因使用或無法使用本服務而產生的任何直接、間接、附帶或衍生性損害承擔責任。

使用本服務即表示您同意以上條款。

聯絡方式

如有任何問題或疑慮，請透過意見回饋表單與我們聯繫。您主動送出的意見回饋，我們只用來改進波波注音。

Privacy Policy & Terms of Service

BopoDoc - Bopomofo (Zhuyin) Annotation Editor

Privacy Policy

BopoDoc adds Bopomofo (Zhuyin) annotations and corrects polyphonic characters entirely in your browser. This policy describes how we handle your data.

1. Data Accessed

Document content: Text you enter is processed in your browser and is never sent to our servers.

Google account (only if you choose to sign in for Cloud Sync): When you sign in with Google, BopoDoc accesses:

• Your Google account name, email address, profile picture, and account identifier
• Files in your Google Drive that were created by BopoDoc

BopoDoc requests only the drive.file scope. It can access only the files it created and cannot see any other files in your Google Drive.

2. Data Usage

• Document content is used only to add Bopomofo annotations and correct polyphonic characters in your browser.
• Your Google account name, email address, and profile picture are used only to show which account is signed in.
• Google Drive access is used only to save your documents to the "波波注音文件" (BopoDoc Documents) folder in your own Google Drive, and to load them back on your other devices.

Document content and Google user data are never used for advertising, never sold, and never used to train AI or machine learning models.

BopoDoc's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Data Sharing

We do not sell your data or share it with any third parties.

The service may connect to the following external services:

• Google Drive: only when signed in to Cloud Sync. Documents are sent directly from your browser to your own Google Drive and do not pass through our servers.
• Google Sign-In: only when signed in to Cloud Sync. Sign-in passes through our server (Cloudflare) to obtain credentials from Google. The server does not retain any data.
• Cloudflare R2, Hugging Face: Download the pronunciation model on first use (download only, no data is uploaded)
• Google Fonts: Downloads font files when you choose a Google font (download only, no data is uploaded)
• jsDelivr CDN: Loads the ONNX Runtime WASM execution environment
• Google Analytics: Collects anonymous usage statistics (page views, feature usage counts, upload file sizes). No text content, email addresses, or other personally identifiable information is collected

4. Data Storage & Protection

Local storage: Documents and settings are stored on your device using the browser's IndexedDB. When signed in to Cloud Sync, your account name, email address, and profile picture URL are also stored here to show the sign-in status.

Google Drive: When signed in to Cloud Sync, your documents are stored in your own Google Drive, protected by Google. We cannot see their content.

Sign-in credentials: Your sign-in credential is encrypted and stored in a cookie in your browser; only our sign-in server can decrypt it. The short-lived token used to access Google Drive is kept only in memory and is discarded when you close the page.

Server-side: We do not store any document content or Google user data on our servers.

All connections are encrypted with HTTPS.

5. Data Retention & Deletion

Data on this device can be deleted at any time by:

• Deleting documents in the document library
• Signing out of Cloud Sync: that account's documents, account information, and sign-in cookie are removed from this device
• Clearing site data in your browser settings

Files in your Google Drive belong to you and remain after you sign out. You can delete them yourself in the "波波注音文件" folder in Google Drive. Documents you delete in BopoDoc are moved to your Google Drive trash and permanently deleted by Google after 30 days.

Revoking access: Remove BopoDoc under "Third-party apps & services" in your Google Account. BopoDoc will then no longer be able to access your Google Drive.

Since we do not store your documents or account data on our servers, there is no server-side data to delete. If you have any questions, please contact us using the information below.

Cookies

BopoDoc sets the following cookies only when you sign in to Cloud Sync:

• bopo_cloud: your encrypted sign-in credential, so you do not need to sign in every time. Kept for up to 400 days and removed when you sign out
• bopo_cloud_state: protects the sign-in process against forged requests. Expires after 10 minutes

These cookies are not used for tracking or advertising. If Google Analytics is enabled, Google may set analytics cookies.

Terms of Service

This service is provided as free software, "as is", without any express or implied warranties.

Usage Restrictions

• Auto-correction is an assistive feature; results may not be completely accurate, please verify
• Service availability and data preservation are not guaranteed; please back up important documents
• Users are responsible for ensuring content does not infringe on copyrights
• Unauthorized copying, modification, or distribution of this software is prohibited

Cloud Sync

• Cloud Sync is optional and requires a Google account. You must also comply with the Google Terms of Service
• Documents are stored in your own Google Drive and use your Google Drive storage
• Changes made while offline stay on the device until it is back online. Documents not yet saved to the cloud are lost if you sign out
• Cloud Sync availability also depends on Google's services

Disclaimer

To the maximum extent permitted by law, the developers of this service shall not be liable for any direct, indirect, incidental, or consequential damages arising from the use or inability to use this service.

By using this service, you agree to the above terms.

Contact

If you have any questions or concerns, please contact us through our feedback form. Feedback you choose to send us is used only to improve BopoDoc.