隱私權政策

最後更新日期：2026 年 10 月 25 日

維斯托有限公司（VSTREL CO., LTD.，統一編號 62050829，下稱「本公司」）重視您的個人資料保護。本政策依據《個人資料保護法》（下稱「個資法」）第八條之規定，向您說明本公司蒐集、處理及利用個人資料之情形。

一、適用範圍

本政策適用於本公司所經營之網站 vstrel.com 及其子網域，以及本公司提供之各項產品與服務。

本公司之貨運媒合服務 Palvoo 另訂有《Palvoo 隱私權政策》（與 Palvoo App 內所載者相同），就 Palvoo 之個人資料蒐集、處理及利用為更詳細之規定；本政策與《Palvoo 隱私權政策》不一致者，就 Palvoo 服務以《Palvoo 隱私權政策》為準。

本政策不適用於本服務所連結之第三方網站或服務。您於該等第三方網站所提供之個人資料，適用該第三方之隱私權政策。

二、蒐集之個人資料類別

本公司視您所使用之服務內容，可能蒐集下列類別之個人資料：

• 識別與聯絡資料：姓名、公司或商號名稱、電子郵件地址、電話號碼、通訊地址。
• 帳號資料：帳號名稱、密碼（以不可逆方式加密儲存）、註冊與登入紀錄。
• 第三方帳號登入（選用）：您選擇以 LINE、Google 或 Apple 帳號登入 Palvoo 時，該服務提供之使用者識別碼、名稱、電子郵件（LINE 另含大頭貼網址；Apple 另含授權權杖，僅用於您刪除帳號時通知 Apple 撤銷授權）。本公司不會取得您於該等服務之密碼。
• 業務往來資料：您於使用服務時所提供之訂單、貨物、行程、交易與往來紀錄。
• 資格驗證資料（僅於特定服務中，且經您主動提供）：駕駛執照、車輛行照、營業登記或其他為確認資格所必要之證明文件；Palvoo 承運人之職業駕照、行照及強制汽車責任保險之到期日（由本公司於審核時依證件登錄，用於到期前通知更新）。
• 帳號終止紀錄（僅限依 Palvoo 平台服務條款終止之帳號）：終止之時間與原因，以及手機號碼、統一編號（貨主）與身分證字號（承運人）之雜湊值（不保存號碼本身）。
• 位置資料（僅於您授權後）：行動裝置之定位資訊。
• 技術與使用資料：IP 位址、瀏覽器與裝置類型、作業系統、造訪時間與頁面瀏覽紀錄，以及應用程式或網頁發生錯誤時之錯誤紀錄（不記錄您的帳號）。
• 推廣來源：您經由推廣連結（例如廣告活動，或本公司合作推廣者、推薦連結）進入本網站或註冊時，該連結之推廣代碼。
• 大頭照（選填）：您自行上傳之大頭照。於 Palvoo 媒合成立後，貨主得查看承運人之大頭照。
• 通知設定（選用）：您開啟瀏覽器推播通知時，您的瀏覽器提供之推播端點位址與加密金鑰；您允許 Palvoo App 通知時，App 之推播識別碼；Palvoo 承運人選擇綁定 LINE 接收媒合通知時，本公司 LINE 官方帳號對您之使用者識別碼（不含 LINE 顯示名稱、大頭貼及好友名單）。

本公司不會主動蒐集個資法第六條所定之特種個人資料（如病歷、醫療、基因、性生活、健康檢查及犯罪前科）。

二之一、位置資料與背景定位之特別說明

本公司之貨運媒合服務 Palvoo，於承運人（司機）端應用程式中會蒐集您行動裝置之位置資訊，且包含應用程式於背景執行期間之位置。特此明確說明如下：

• 蒐集目的：（一）於您上線等候訂單期間，依您目前位置媒合附近之訂單並估算空車距離；（二）使該筆訂單之貨主得即時追蹤車輛位置與預計到達時間；（三）記錄抵達及離開裝卸地點之時間與位置，作為等候費與準時與否之依據；（四）於運送爭議發生時作為運送過程之紀錄。里程與運費於下單時依路線服務計算，不以您的實際行駛軌跡計算。
• 蒐集期間：您於應用程式中上線期間取得目前位置（僅保留最新一筆，不留軌跡）；自您接受訂單時起至該趟運送完成或取消時止，另記錄行駛軌跡。您下線或關閉應用程式時，本公司不會蒐集您的位置資訊。
• 貨主端應用程式：僅於您主動使用地址搜尋或檢視進行中訂單時取用位置，不會於背景蒐集。
• 您的控制權：您得隨時於行動裝置之系統設定中撤回位置權限；惟撤回後將無法接收訂單或完成運送流程。

本公司不會將位置資料用於前述目的以外之任何用途，不會用於廣告或行銷，亦不會出售或提供予資料仲介或廣告商。 位置紀錄自該趟運送完成之日起保存六個月，供對帳與爭議處理之用；該趟運送有爭議者，保存至爭議處理完畢為止。逾保存期間或經您請求後刪除（法令另有規定者除外）。

三、蒐集之目的

• 提供、維護、驗證及改善本公司之產品與服務。
• 建立與管理使用者帳號，並確認使用者身分與資格。
• 處理訂單、媒合、付款、對帳、開立憑證及客戶服務。
• 進行服務通知、系統公告及必要之聯繫。
• 維護服務安全，防範詐欺、濫用與違法行為，並防止依條款終止之帳號以其他帳號重新註冊。
• 履行法令所定之義務，或配合主管機關之要求。
• 衡量各推廣管道之成效，並計算本公司應給付合作推廣者之推廣費用。
• 經您同意時，寄送產品資訊或行銷訊息（您可隨時取消訂閱）。

四、個人資料之利用期間、地區、對象及方式

本公司不會將您的個人資料出售、出租或以營利為目的提供予第三人。

Palvoo 承運人之資格驗證資料（證件影像），於帳號存續期間保存；曾承運訂單者，於帳號刪除或終止後保存一年，用以證明本公司已盡形式審核義務（貨物毀損、滅失或遲到之賠償請求權，自運送終了起一年間不行使而消滅），屆期刪除；未曾承運訂單者之證件影像，以及撥款帳戶之存摺封面影像，於帳號刪除時刪除。

依 Palvoo 平台服務條款終止之帳號（例如繞過平台私下交易經查證屬實達第二次），其帳號終止紀錄及前述雜湊值保存至終止處分撤銷為止，不因刪除帳號而刪除，且僅用於防止以其他帳號重新註冊；Palvoo 承運人資格審核時，本公司將比對申請人之身分證字號是否屬曾依條款終止者，比對後不保存。

五、您得行使之權利

依個資法第三條規定，您就本公司保有之個人資料得行使下列權利：

1. 查詢或請求閱覽。
2. 請求製給複製本。
3. 請求補充或更正。
4. 請求停止蒐集、處理或利用。
5. 請求刪除。

行使方式：請以註冊時之電子郵件地址來信至 service@vstrel.com，本公司將於確認身分後儘速處理。本公司依法得酌收查詢、閱覽或製給複製本之必要成本費用。

您得自由選擇是否提供個人資料；惟若您拒絕提供服務所必要之個人資料，可能導致本公司無法提供完整之服務，或您無法完成註冊或使用特定功能。

六、Cookie 與類似技術

本網站可能使用 Cookie 或瀏覽器本機儲存（localStorage）以記錄您的語言偏好及維持登入狀態，以提升使用體驗；您經由推廣連結進入本網站時，該連結之推廣代碼亦暫存於您的瀏覽器 30 日，於您填寫預先登記或註冊時一併送出，用於衡量推廣成效。您可透過瀏覽器設定拒絕或刪除 Cookie，惟部分功能可能因此無法正常運作。

七、資料安全

本公司採取合理之技術與管理措施保護個人資料，包括傳輸過程之加密（HTTPS/TLS）、密碼之不可逆加密儲存、資料庫存取權限控管，以及僅由有處理必要之人員接觸個人資料。惟網際網路傳輸無法保證絕對安全，本公司無法擔保資料傳輸之絕對無虞。

八、委外與第三方服務

本公司為提供服務，可能委由第三方服務商處理部分作業（例如雲端代管與資料庫、金流服務、電子發票之開立、地圖與定位服務、推播通知、電子郵件寄送、LINE 訊息傳送（僅限選擇綁定 LINE 之 Palvoo 承運人），以及以 LINE、Google、Apple 帳號登入（僅限選擇以其帳號登入者））。本公司將要求受託者採取與本政策相當之保護措施，並依個資法規定進行適當監督。

九、未成年人

本服務主要提供予企業與成年使用者。未滿十八歲者使用本服務，應由法定代理人或監護人閱讀、瞭解並同意本政策之全部內容後，始得使用。

十、政策之修訂

本公司得因法令變更、技術更新或服務調整而修訂本政策，並於本頁面公告修訂後之內容及生效日期。建議您不定期查閱本頁面。

十一、聯絡方式

個人資料保護相關事宜聯絡窗口：service@vstrel.com

Privacy Policy

Last updated: 25 October 2026

VSTREL CO., LTD. (維斯托有限公司, company registration no. 62050829; "we", "us") takes the protection of your personal data seriously. This policy explains how we collect, process and use personal data, in accordance with Article 8 of Taiwan's Personal Data Protection Act (the "PDPA").

1. Scope

This policy applies to the website vstrel.com and its subdomains, and to the products and services we provide. It does not apply to third-party sites or services linked from ours, which are governed by their own privacy policies.

Palvoo, our freight matching service, has its own Palvoo Privacy Policy (identical to the one shown in the Palvoo apps), which sets out in more detail how personal data is collected, processed and used in Palvoo. Where this policy and the Palvoo Privacy Policy differ, the Palvoo Privacy Policy prevails for Palvoo.

2. Categories of personal data collected

Depending on the service you use, we may collect:

• Identity and contact data: name, company or business name, email address, telephone number, postal address.
• Account data: username, password (stored using irreversible hashing), registration and login records.
• Third-party sign-in (optional): if you choose to sign in to Palvoo with LINE, Google or Apple, the user identifier, name and email address provided by that service (for LINE, also the profile picture URL; for Apple, also an authorisation token used only to ask Apple to revoke the authorisation when you delete your account). We never receive your password for those services.
• Transaction data: orders, cargo details, journeys, transactions and related correspondence you provide when using the Services.
• Verification data (only for specific services, and only where you provide it): driving licence, vehicle registration, business registration or other documents necessary to verify eligibility; for Palvoo carriers, the expiry dates of the professional driving licence, vehicle registration and compulsory motor liability insurance (recorded by us from the documents during review, and used to remind you before they expire).
• Account termination records (only for accounts terminated under the Palvoo Platform Terms): the time of and reason for termination, and hashes of the mobile number, tax ID number (shippers) and national ID number (carriers); the numbers themselves are not kept.
• Location data (only with your permission): device location information.
• Technical and usage data: IP address, browser and device type, operating system, visit times and page views, and error reports when an app or web page encounters an error (which do not record your account).
• Referral source: the promotional code in the link you used to reach our website or to register (for example an advertising campaign, one of our promotional partners, or a referral link).
• Profile photo (optional): a photo you upload yourself. Once a Palvoo order is matched, the shipper can see the carrier's profile photo.
• Notification settings (optional): if you turn on browser push notifications, the push endpoint address and encryption keys provided by your browser; if you allow Palvoo app notifications, the app’s push token; if a Palvoo carrier chooses to link LINE for order notifications, the user identifier that LINE assigns to our LINE Official Account (not your LINE display name, profile picture or friends list).

We do not actively collect the special categories of personal data defined in Article 6 of the PDPA (such as medical records, healthcare, genetic data, sex life, health examination results or criminal records).

2A. Location data and background location — specific disclosure

Palvoo, our freight matching service, collects location data from your mobile device in the carrier (driver) application, including while the app is running in the background. Specifically:

• Purpose: (i) while you are online and waiting for orders, to match you with nearby orders and estimate the empty-running distance; (ii) to let the shipper on that order track the vehicle's position and estimated time of arrival; (iii) to record when you arrive at and leave pick-up and drop-off points, as the basis for waiting fees and punctuality; (iv) to serve as a record of the journey if a dispute arises. Distance and fares are calculated by a routing service when the order is placed, not from your actual track.
• Period: while you are online in the app we obtain your current position (only the latest position is kept, no track); from the moment you accept an order until you mark that journey complete or cancelled we also record your route. We do not collect your location when you are offline or have closed the app.
• Shipper application: accesses location only when you actively search an address or view an order in progress. It does not collect location in the background.
• Your control: you may withdraw location permission at any time in your device settings; you will then be unable to receive orders or complete a journey.

We do not use location data for any purpose beyond those above, do not use it for advertising or marketing, and do not sell or provide it to data brokers or advertisers. Location records are retained for six months after a journey is completed, for reconciliation and dispute handling (or, where the journey is subject to a dispute, until the dispute is resolved), and are deleted at the end of that period or on your request, save where the law requires otherwise.

3. Purposes of collection

• To provide, maintain, verify and improve our products and services.
• To create and manage user accounts and verify identity and eligibility.
• To process orders, matching, payment, reconciliation, invoicing and customer support.
• To send service notifications, system announcements and necessary communications.
• To maintain the security of the Services, prevent fraud, abuse and unlawful conduct, and prevent accounts terminated under our terms from registering again under another account.
• To comply with legal obligations or requests from competent authorities.
• To measure the effectiveness of our promotional channels and calculate the fees we owe to our promotional partners.
• With your consent, to send product information or marketing messages (you may unsubscribe at any time).

4. Period, territory, recipients and means of use

We do not sell, rent or provide your personal data to third parties for profit.

Verification documents of Palvoo carriers are kept while the account exists. For carriers who have carried at least one order, they are kept for one year after the account is deleted or terminated, to show that we performed the formal eligibility review (a claim for loss, damage or delay of goods lapses one year after the end of carriage), and are then deleted. Documents of carriers who have never carried an order, and images of payout bank passbooks, are deleted when the account is deleted.

For accounts terminated under the Palvoo Platform Terms (for example, a second substantiated case of dealing off the platform), the termination record and the hashes described above are kept until the termination is revoked, are not deleted when the account is deleted, and are used only to prevent registration under another account. When reviewing a Palvoo carrier application, we check the applicant's national ID number against terminated accounts; the number is not kept after the check.

5. Your rights

Under Article 3 of the PDPA you may, in respect of personal data we hold about you:

1. enquire about or request to review it;
2. request a copy;
3. request supplementation or correction;
4. request that we cease collecting, processing or using it;
5. request deletion.

To exercise these rights, email service@vstrel.com from your registered email address. We will act promptly once your identity is confirmed. We may charge the necessary cost of an enquiry, review or copy as permitted by law.

You are free to decide whether to provide personal data. If you decline to provide data that is necessary for a service, we may be unable to provide that service in full, or you may be unable to register or use certain features.

6. Cookies and similar technologies

We may use cookies or browser localStorage to remember your language preference and keep you signed in. If you arrive through a promotional link, its promotional code is also kept in your browser for 30 days and sent with your pre-registration or sign-up, to measure the effectiveness of our promotions. You can refuse or delete cookies in your browser settings, though some features may then not work correctly.

7. Data security

We apply reasonable technical and organisational measures, including encryption in transit (HTTPS/TLS), irreversible password hashing, database access controls, and restricting access to personnel who need it. No transmission over the internet can be guaranteed to be completely secure.

8. Processors and third-party services

We may engage third-party providers to carry out parts of the Services (cloud hosting and databases, payment gateways, electronic invoicing, mapping and location services, push notifications, email delivery, LINE message delivery — only for Palvoo carriers who choose to link LINE — and sign-in with LINE, Google or Apple — only if you choose to sign in with them). We require them to apply protection comparable to this policy and supervise them as required by the PDPA.

9. Minors

The Services are intended primarily for businesses and adult users. Anyone under 18 may use the Services only after their legal representative or guardian has read, understood and agreed to this policy.

10. Changes to this policy

We may revise this policy following changes in law, technology or our services, and will publish the revised version and its effective date on this page.

11. Contact

Data protection contact: service@vstrel.com