Privacy Policy
This policy is provided in Chinese, English, and Japanese. If there is any discrepancy, the Chinese version prevails.
Chang Ruei Science Co., Ltd. (the “Company”) takes the protection of your personal data seriously. This policy explains how the Company collects, processes, and uses your personal data on the website crsc.com.tw, and the rights you have under Taiwan's Personal Data Protection Act. The Company's core principle is that data never leaves your facility: all AI inference is performed in a local, private environment, and your data is never sent to any third-party cloud service for inference.
1 What we collect, why, and how long we keep it
| Collection context | Personal-data categories | Purpose | Retention period |
|---|---|---|---|
| Contact form / LINE inquiry | Name, organization or company, phone, email, and the details of your request | Replying to your inquiry and follow-up business contact | For inquiries that don't lead to a contract: deleted 2 years after last contact. For contracted clients: per contract and tax law. |
| AI customer-service chat | The messages you type into the chat window | Answering your questions in real time (processed by a local private LLM) | Conversations are not retained and are deleted immediately after processing. If you volunteer contact details, that message is emailed to us for follow-up. |
| Website traffic analytics | De-identified browsing statistics (pages, referrers, device type, etc.) | Understanding site usage and improving the service | Cloudflare: anonymous, aggregated, no personal data. GA4: 14 months. |
| Server access logs | IP address, browser/device info, visit time | Maintaining information security and detecting anomalies and abuse | 6 months (aligned with Cybersecurity Management Act log standards) |
About AI customer service and minors: Chat replies on this site are generated in real time by AI and are for reference only; they do not make any binding automated decision affecting your rights. For a formal assessment or quote, a member of our team will contact you. This site is a business-to-business (B2B) service, is not aimed primarily at minors, and does not proactively collect special categories of personal data (such as medical records, health check-ups, or criminal history).
2 Use of cookies
- Necessary cookies: used only to remember your cookie-consent choice; no tracking.
- Analytics cookies (Google Analytics): off by default, enabled only after you choose “Accept.” You can change your choice anytime via “Cookie settings” in the footer.
- Cloudflare Web Analytics: uses no cookies and estimates traffic anonymously.
3 Retention period, region, recipients, and method
- Period: until the collection purpose ends, or the retention period required by law (see Section 1).
- Region: AI inference and primary data processing take place in the Company's on-premises environment in Taiwan and are not sent abroad. However, contact-form notification emails, LINE message notifications (via Google Workspace), website traffic (Cloudflare), and — after your consent — Google Analytics statistics may be processed outside Taiwan.
- Recipients: the Company's internal staff. To provide the service, the following third parties are entrusted with processing necessary data:
- Google Workspace (receives contact forms and notification emails containing contact details)
- Cloudflare (website hosting, connection transport, and anonymous traffic analytics)
- Google Analytics (only after your consent; de-identified statistics)
- Method: stored as electronic files/databases, with appropriate technical and organizational safeguards.
4 Your rights
Under Article 3 of the Personal Data Protection Act, you may exercise the following rights:
- Inquire about or review your data, and obtain a copy;
- Request supplementation or correction;
- Request that collection, processing, or use stop;
- Request deletion;
- Lodge a complaint or report about the Company's handling of your personal data with the competent authority (the Personal Data Protection Commission).
How to exercise: email privacy@crsc.com.tw or call (02) 2947-5586. Providing personal data is your choice; but if you do not provide the necessary data, we may be unable to deliver the corresponding service (for example, replying to your inquiry).
5 Data security and breach notification
The Company takes reasonable technical and organizational measures to protect your personal data, with the core principle of on-premises deployment and data never leaving your facility. If a personal-data incident (theft, alteration, damage, loss, or leakage) occurs, the Company will, upon becoming aware, ascertain the facts, promptly notify affected data subjects, and — where the reporting threshold is met — report to the competent authority (the Personal Data Protection Commission) within 72 hours of becoming aware, while taking immediate and effective remedial measures. In addition, when deleting personal data, the Company retains a record of the deletion method, time, and scope for at least five years to evidence proper destruction.
6 Policy revisions
This policy may be updated in response to legal changes or service adjustments. Revisions are posted on this page and the “Last updated” date is refreshed.
7 Contact us
Chang Ruei Science Co., Ltd.
1F, No. 14, Lane 1, Minquan Rd., Yonghe Dist., New Taipei City 234, Taiwan
Phone: (02) 2947-5586
Data-protection contact: privacy@crsc.com.tw
General contact: service@crsc.com.tw