PRIVACY.md

# Privacy Policy / 隱私權政策 — EW AI Flowchart

Effective date / 生效日期：2026-10-09  
Provider / 提供者：具象職人股份有限公司（Embodied Worker Co., Ltd.）  
Contact / 聯絡信箱：pohsun@embodiedworker.com

## 1. Scope / 適用範圍

**中文：**本政策說明 EW AI Flowchart 純 Skill 外掛的資料處理方式。外掛協助使用者將其提供的 ISO／SOP、流程說明、會議紀錄與其他文件轉換為可驗證的 EFD JSON；規劃中的知識結構化功能可能處理技術文件、論文及其來源資料。外掛本身不提供開發者營運的遠端 MCP 或其他資料收集伺服器。

**English:** This policy covers the EW AI Flowchart Skills-only plugin. It assists users with converting user-supplied SOPs, workflow descriptions, meeting notes, and related documents into validated EFD JSON. Planned Knowledge Structuring functionality may process technical references, research papers, and source information. The plugin itself does not provide a developer-operated remote MCP or data-collection server.

## 2. Categories of information / 處理資料類別

**中文：**依使用者主動提供的內容，可能包含文字、上傳文件、組織與職務名稱、工作流程、RACI 權責、設備資訊、技術參數、文件來源與引文，以及文件內附帶的個人資料。請勿提供非必要的個人資料、密碼、API Key 或客戶機密。

**English:** Depending on what users voluntarily provide, information may include text, uploaded documents, organizational and job-role details, workflows, RACI assignments, equipment information, technical parameters, citations, and personal data appearing within source documents. Do not provide unnecessary personal data, passwords, API keys, or confidential customer information.

## 3. Purposes / 使用目的

**中文：**資料僅用於使用者要求的文件解析、流程與知識結構化、JSON 生成、格式驗證、錯誤診斷及交付成果。輸入資料不應被外掛視為可執行指令；外掛不會自行執行來源文件內的程式碼。

**English:** Information is used to perform user-requested document analysis, workflow and knowledge structuring, JSON generation, validation, diagnostics, and deliverable creation. Source content is not treated as executable instructions, and the plugin does not execute code embedded in source documents.

## 4. Recipients and sharing / 資料接收者與分享

**中文：**依目前純 Skill 套件設計，具象職人不因使用者安裝或使用外掛而自動取得其對話、上傳文件或產出 JSON。處理過程可能由使用者所使用的 ChatGPT、Codex 或其他經其選擇的服務提供，並受相應服務政策及設定約束。只有使用者主動上傳、寄送、發布或連接其他服務時，資料才可能進一步分享給該服務或接收者。

**English:** Under the current Skills-only package design, Embodied Worker does not automatically receive conversations, uploaded documents, or generated JSON merely because the plugin is installed or used. Processing may occur within ChatGPT, Codex, or other services selected by the user, subject to their respective policies and settings. Further disclosure may occur when the user chooses to upload, send, publish, or connect content to another service.

## 5. Storage and retention / 儲存與保存期限

**中文：**本外掛未設置開發者端的獨立資料庫、分析追蹤服務或使用者內容儲存系統，因此沒有外掛開發者端的獨立保存期限。ChatGPT／Codex 的對話、上傳檔案與執行環境資料保存方式，依相關平台政策、帳號及工作區設定；使用者自行下載的 JSON 由其自行決定保存及刪除方式。若未來增加開發者端收集或儲存，應先更新本政策。

**English:** The plugin does not operate an independent developer-side database, analytics tracker, or user-content storage system; therefore no separate developer-side retention period applies. Retention of conversations, uploads, and execution-environment data in ChatGPT or Codex follows the applicable platform policies and account/workspace settings. Users control retention and deletion of JSON files they download. Any future developer-side collection or storage requires a policy update.

## 6. User choices and controls / 使用者選擇與控制

**中文：**使用者可以決定提供哪些文件、先行遮蔽不必要的個人或機密資訊、審閱及刪除自行保存的成果，並依所使用平台的設定管理對話與檔案。外掛無法代替使用者刪除 OpenAI 或其他第三方服務保存的資料。關於本公司是否持有透過其他直接聯絡管道提供的資料，可寄信詢問。

**English:** Users may choose which documents to provide, redact unnecessary personal or confidential information, review or delete their locally retained outputs, and use platform settings to manage conversations and files. The plugin cannot delete data retained by OpenAI or other third-party providers on a user's behalf. Contact us to ask about information you have separately submitted through our direct support channels.

## 7. Security and limitations / 安全與限制

**中文：**外掛不要求提供密碼或 API Key，不包含開發者營運的外部資料傳輸端點。使用者應確認具備處理企業文件的合法權限，並於公開分享前完成必要的審核與脫敏。JSON 驗證不代表企業流程或技術內容已獲得專業批准。

**English:** The plugin does not request passwords or API keys and contains no developer-operated data transmission endpoint. Users must have authority to process their business documents and should review and redact content before external disclosure. JSON validation does not constitute professional approval of business processes or technical claims.

## 8. Changes and contact / 政策變更與聯絡

**中文：**如資料處理方式發生重大變更，本公司將更新政策日期與內容。隱私相關問題請聯絡：pohsun@embodiedworker.com。

**English:** Material changes to data-handling practices will be reflected in a dated policy update. Privacy inquiries: pohsun@embodiedworker.com.

Website / 官網：https://www.embodiedworker.com