私隱政策
Play Lazy Limited（下稱「本公司」、「我哋」）營運 InvoTask 這個線上任務管理、開單及記帳平台（下稱「本服務」）。本政策說明我哋會收集甚麼資料、點樣使用、同誰共享、保存幾耐，以及你有甚麼權利。
如果你唔同意本政策，請停止使用本服務。
1. 我哋喺資料保障上嘅角色
本服務有兩類資料，處理方式唔同，請留意分別：
- 你嘅帳戶資料（例如你嘅帳號、電郵、訂閱狀態）—— 就呢部分資料，本公司係《個人資料（私隱）條例》（香港法例第486章）下嘅資料使用者。
- 你放入工作區嘅業務資料（例如你自己客戶嘅姓名、聯絡方式、發票內容、你員工嘅打卡紀錄）—— 呢啲資料屬於你，本公司只係按你嘅指示代你儲存及處理。你有責任確保你有合法權利收集及上載呢啲資料，並已向相關人士作出所需通知或取得同意。
2. 我哋收集嘅資料
2.1 帳戶及工作區資料
- 帳號、顯示名稱、角色（管理員／員工／成員）、所屬工作區及權限
- 密碼（以單向雜湊儲存，本公司唔會、亦冇能力還原你嘅原文密碼）
- 工作區設定：公司名稱、地址、標誌、發票編號規則、銀行收款戶口資料
2.2 你輸入嘅業務資料
- 任務、分類、標籤、行事曆事件
- 聯絡人／客戶資料：姓名、公司、電郵、電話、地址
- 報價單、發票、項目明細、金額、貨幣、付款狀態
- 會計對帳資料：你上載嘅銀行月結單檔案、收據及單據圖片或 PDF
2.3 考勤打卡資料（如你嘅工作區啟用）
- 打卡時間紀錄
- 地理位置座標（經緯度及定位精確度）—— 只喺你喺瀏覽器授權定位權限時，喺打卡嗰一刻收集
- IP 位址，以及由該 IP 推算出嚟嘅 VPN／代理伺服器／資料中心判斷結果
- 由伺服器按座標比對得出嘅地點名稱
2.4 訂閱及付款資料
- 訂閱層級、狀態、生效期限
- Stripe 客戶編號及訂閱編號
2.5 Google 帳戶資料（只喺你主動連結時）
詳見下文第 3 節。
2.6 技術資料
- Cookie：登入工作階段 Cookie（
PHPSESSID）；如你選擇「保持登入」，另設一個有效期 30 日嘅記住登入 Cookie。呢兩個都係必要功能性 Cookie，本服務唔使用任何廣告或第三方追蹤 Cookie。 - 伺服器存取日誌：IP 位址、瀏覽器類型、存取時間及路徑
3. Google 使用者資料（Google User Data）
本服務提供選用嘅 Google Calendar 連結功能。呢個功能完全自願，唔連結唔會影響本服務其他任何功能。
3.1 我哋申請嘅權限範圍
| 權限範圍 | 用途 |
|---|---|
https://www.googleapis.com/auth/calendar |
讀取你 Google 帳戶下嘅日曆清單，等你揀邊個日曆同 InvoTask 行事曆對接；並喺你日後啟用同步功能時讀取及寫入該日曆嘅活動。 |
https://www.googleapis.com/auth/userinfo.email |
讀取你嘅 Google 帳戶電郵地址，喺設定頁顯示「而家連結緊邊個帳戶」，避免你接錯帳戶。 |
3.2 我哋點樣使用同儲存
- 授權後取得嘅 access token 及 refresh token、你嘅 Google 電郵地址、以及你揀咗嘅日曆名稱，會儲存喺本公司伺服器嘅資料庫，並按工作區隔離，只供該工作區使用。
- 存取只會經 HTTPS 進行。
- 呢啲資料只會用嚟提供你所要求嘅日曆整合功能。
3.3 我哋唔會做嘅事
- 唔會將 Google 使用者資料出售、出租或以任何形式變賣畀第三方。
- 唔會將 Google 使用者資料用於廣告投放、廣告定向或再營銷。
- 唔會將 Google 使用者資料用嚟開發、改進或訓練通用人工智能／機器學習模型。
- 唔會將 Google 使用者資料轉移畀日曆整合功能以外嘅任何第三方，除非係取得你明確同意、為咗安全目的、遵守適用法律，或屬於合併／收購而事先向你通知並取得同意。
- 唔會有人手翻閱你嘅日曆內容，除非取得你明示同意（例如你報障要求協助）、為咗安全目的、遵守適用法律，或資料已聚合／匿名化。
3.4 Limited Use 聲明
3.5 點樣撤銷授權
- 喺 InvoTask 內：行事曆 → Google 日曆設定 → 「斷開連結」。斷開時本公司會向 Google 撤銷該 token，並即時喺資料庫刪除已儲存嘅 token。
- 喺 Google 一方：前往 Google 帳戶 → 第三方應用程式存取權 移除 InvoTask。
4. 我哋點樣使用你嘅資料
- 提供、維護及改善本服務嘅各項功能
- 驗證身分、維持登入狀態、按角色控制存取權限
- 產生你要求嘅報價單、發票 PDF 及對帳結果
- 處理訂閱、收費、續期及發出相關通知
- 防範濫用、偵測異常及保障系統安全
- 遵守適用法律及監管要求
本公司唔會出售你嘅個人資料，亦唔會將你嘅資料用作直接促銷而事先冇取得你嘅同意。
5. 第三方服務
為咗提供本服務，以下第三方會處理部分資料。請注意佢哋各自嘅私隱政策同樣適用。
| 服務 | 會接觸到嘅資料 | 目的 |
|---|---|---|
| Amazon Web Services（Lightsail，新加坡） | 全部服務資料 | 伺服器及資料庫寄存 |
| Stripe | 付款卡資料、帳單資料、電郵 | 處理 Pro 訂閱收費 |
| Google LLC（Calendar API） | 你授權嘅 Google 日曆資料 | 日曆整合（選用） |
| Google LLC（Gemini API） | 你上載嘅銀行月結單及單據內容 | 自動分類及對帳分析（選用功能） |
| ip-api.com | 打卡當刻嘅 IP 位址 | 偵測 VPN／代理伺服器／資料中心出口 |
| jsDelivr CDN | 你嘅 IP 位址及瀏覽器資料 | 載入前端樣式資源 |
除上述情況外，我哋只會喺以下情況披露你嘅資料：得到你嘅同意；法律、法院命令或執法機關依法要求；或為咗保障本公司或他人嘅合法權益、防止欺詐或人身安全風險。
6. 資料存放地點及跨境轉移
本服務嘅伺服器及資料庫設於新加坡（AWS ap-southeast-1）。如果你身處香港或其他地區，你嘅資料會轉移到香港以外處理及儲存。使用本服務即表示你明白並同意此項跨境轉移。上述部分第三方（例如 Stripe、Google）亦可能喺其全球基礎設施上處理資料。
7. 保安措施
- 全站以 HTTPS 加密傳輸
- 密碼以單向雜湊演算法儲存，唔以明文保存
- 資料庫憑證存放於網站根目錄以外可讀範圍受限嘅設定檔，唔隨程式碼發佈
- 多工作區資料隔離，查詢層面限制跨工作區存取
- 付款卡資料由 Stripe 處理，唔經本公司系統
8. 資料保留
- 刪除嘅任務會先進入回收筒，你可以喺該處還原或永久刪除。
- 你可以隨時喺服務內刪除聯絡人、發票、報價單等紀錄。
- 帳戶終止或訂閱取消後，我哋一般會喺 90 日內刪除或匿名化你嘅工作區資料。喺呢段期間內你可以要求匯出。
- 因應法律或稅務要求（例如香港《稅務條例》對業務紀錄嘅保存規定），部分交易紀錄可能需要保留較長時間。
- Google 授權 token 喺你斷開連結時即時刪除，唔受上述保留期影響。
9. 你嘅權利
根據《個人資料（私隱）條例》，你有權：
- 查閱本公司持有關於你嘅個人資料
- 要求更正不準確嘅資料
- 要求刪除唔再需要嘅資料
- 要求以通用格式匯出你嘅資料
- 撤回你先前給予嘅同意（例如撤銷 Google 授權）
請電郵 info@invotask.com 提出要求。我哋會喺收到要求後 40 日內回覆。如你嘅要求涉及由其他 InvoTask 用戶上載嘅資料（例如你係某公司嘅客戶或員工），請直接向該公司提出，我哋只係代其儲存。
如果你對本公司嘅回應唔滿意，你可以向香港個人資料私隱專員公署（PCPD）投訴。
10. 兒童
本服務係商業用途工具，唔以未滿 18 歲人士為對象。我哋唔會故意收集兒童嘅個人資料。如發現有此情況，我哋會盡快刪除。
11. 本政策嘅修訂
本公司可能不時修訂本政策。修訂後嘅版本會喺本頁公佈，並更新頁頂嘅生效日期。如屬重大變更，我哋會喺服務內或以電郵另行通知。
12. 聯絡我哋
Play Lazy Limited
電郵：info@invotask.com
網站：www.invotask.com
Privacy Policy
Play Lazy Limited ("we", "us", "our") operates InvoTask, an online task management, invoicing and bookkeeping platform (the "Service"). This policy explains what information we collect, how we use it, who we share it with, how long we keep it, and what rights you have.
If you do not agree with this policy, please stop using the Service.
1. Our role in relation to your data
The Service involves two distinct categories of data, handled differently:
- Your account data (such as your username, email and subscription status). For this data we act as the data user under the Personal Data (Privacy) Ordinance (Cap. 486, Laws of Hong Kong).
- Business data you place in your workspace (such as your own customers' names and contact details, invoice contents, and your employees' attendance records). This data belongs to you; we merely store and process it on your behalf and on your instructions. You are responsible for ensuring you have a lawful basis to collect and upload it, and that any required notices or consents have been given or obtained.
2. Information we collect
2.1 Account and workspace information
- Username, display name, role (admin / staff / member), workspace membership and permissions
- Password, stored as a one-way hash. We cannot recover your plaintext password.
- Workspace settings: company name, address, logo, document numbering rules, and bank account details used on invoices
2.2 Business data you enter
- Tasks, categories, tabs and calendar events
- Contacts / customers: name, company, email, phone, address
- Quotations, invoices, line items, amounts, currencies and payment status
- Bookkeeping data: bank statement files you upload, plus receipt and invoice images or PDFs
2.3 Attendance data (only where your workspace enables it)
- Clock-in and clock-out timestamps
- Geolocation coordinates (latitude, longitude and accuracy), collected only at the moment you clock in or out, and only if you grant your browser's location permission
- IP address, and the VPN / proxy / data-centre determination derived from it
- A location name resolved server-side from those coordinates
2.4 Subscription and payment information
- Subscription tier, status and expiry
- Stripe customer and subscription identifiers
2.5 Google account data (only if you choose to connect)
See section 3 below.
2.6 Technical information
- Cookies: a session cookie (
PHPSESSID) and, if you select "keep me signed in", a persistent login cookie valid for 30 days. Both are strictly necessary functional cookies. The Service uses no advertising or third-party tracking cookies. - Server access logs: IP address, browser type, timestamp and requested path
3. Google User Data
The Service offers an optional Google Calendar connection. This feature is entirely voluntary; declining it does not affect any other part of the Service.
3.1 Scopes we request
| Scope | Why we need it |
|---|---|
https://www.googleapis.com/auth/calendar |
To list the calendars in your Google account so you can choose which one to pair with your InvoTask calendar, and to read and write events on that calendar once you enable synchronisation. |
https://www.googleapis.com/auth/userinfo.email |
To display the email address of the connected Google account on the settings page, so you can confirm you connected the intended account. |
3.2 How we use and store it
- The access token and refresh token issued after authorisation, your Google email address, and the name of the calendar you selected are stored in our database on our servers, isolated per workspace and available only to that workspace.
- All access takes place over HTTPS.
- This data is used solely to provide the calendar integration you requested.
3.3 What we do not do
- We do not sell, rent or otherwise trade Google user data to any third party.
- We do not use Google user data for advertising, ad targeting or remarketing.
- We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
- We do not transfer Google user data to any third party other than as necessary to provide the calendar integration, and otherwise only with your explicit consent, for security purposes, to comply with applicable law, or as part of a merger or acquisition following prior notice and consent.
- No human at Play Lazy Limited reads your calendar content, except with your explicit consent (for example when you request support), for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised.
3.4 Limited Use disclosure
3.5 How to revoke access
- In InvoTask: Calendar → Google Calendar settings → "Disconnect". On disconnection we revoke the token with Google and immediately delete the stored tokens from our database.
- With Google: visit Google Account → Third-party apps with account access and remove InvoTask.
4. How we use your information
- To provide, maintain and improve the features of the Service
- To authenticate you, keep you signed in, and enforce role-based access control
- To generate the quotations, invoice PDFs and reconciliation results you request
- To process subscriptions, billing and renewals, and to send related notices
- To prevent abuse, detect anomalies and protect the security of the Service
- To comply with applicable laws and regulatory requirements
We do not sell your personal data, and we do not use it for direct marketing without your prior consent.
5. Third-party services
The following third parties process some of your data in order for the Service to function. Their own privacy policies also apply.
| Service | Data it can access | Purpose |
|---|---|---|
| Amazon Web Services (Lightsail, Singapore) | All Service data | Server and database hosting |
| Stripe | Card details, billing information, email | Processing Pro subscription payments |
| Google LLC (Calendar API) | The Google Calendar data you authorise | Calendar integration (optional) |
| Google LLC (Gemini API) | Contents of bank statements and documents you upload | Automatic categorisation and reconciliation analysis (optional) |
| ip-api.com | Your IP address at the moment of clocking in or out | Detection of VPN, proxy and data-centre egress |
| jsDelivr CDN | Your IP address and browser information | Delivery of front-end stylesheet assets |
Apart from the above, we disclose your data only where you have consented; where required by law, court order or a lawful request from a law enforcement authority; or where necessary to protect the legitimate rights of Play Lazy Limited or others, prevent fraud, or address a risk to personal safety.
6. Where your data is held, and cross-border transfer
The Service's servers and database are located in Singapore (AWS ap-southeast-1). If you are in Hong Kong or elsewhere, your data will be transferred outside your jurisdiction for processing and storage. By using the Service you acknowledge and agree to this transfer. Certain third parties named above (such as Stripe and Google) may also process data across their global infrastructure.
7. Security
- All traffic is encrypted with HTTPS
- Passwords are stored as one-way hashes, never in plaintext
- Database credentials are kept in access-restricted configuration files outside the published codebase
- Workspace data is isolated, with cross-workspace access restricted at the query level
- Card data is handled by Stripe and does not touch our systems
8. Data retention
- Deleted tasks move to the recycle bin, where you can restore or permanently delete them.
- You may delete contacts, invoices, quotations and other records within the Service at any time.
- Following account termination or subscription cancellation, we will generally delete or anonymise your workspace data within 90 days. You may request an export during that period.
- Some transaction records may need to be retained longer to meet legal or tax obligations, such as business record-keeping requirements under the Hong Kong Inland Revenue Ordinance.
- Google authorisation tokens are deleted immediately upon disconnection, irrespective of the above retention period.
9. Your rights
Under the Personal Data (Privacy) Ordinance, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of data no longer required
- Request an export of your data in a commonly used format
- Withdraw consent previously given (for example, by revoking Google authorisation)
Please email info@invotask.com. We will respond within 40 days of receiving your request. If your request concerns data uploaded by another InvoTask user (for example, if you are a customer or employee of a business using InvoTask), please direct it to that business; we hold the data only on their behalf.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).
10. Children
The Service is a business tool and is not directed at persons under 18. We do not knowingly collect personal data from children. If we become aware that we have, we will delete it promptly.
11. Changes to this policy
We may revise this policy from time to time. The revised version will be posted on this page with an updated effective date. For material changes we will give additional notice within the Service or by email.
12. Contact us
Play Lazy Limited
Email: info@invotask.com
Website: www.invotask.com