1. Scope and who we are
Functional AI Solutions is operated by 致用軟體有限公司 (Functional AI Solutions Co., Ltd.; Taiwan Uniform Business Number 61986053), a company registered in Taiwan. This policy explains how we handle personal information when you visit functionalaisolutions.com, contact us about our products or partnerships, apply to work with us, or use our internal marketing tool.
This policy covers our public corporate website and the YouTube and LinkedIn integrations of our internal FAIS Marketing Machine, described in sections 12 and 13. A customer product or service may have additional privacy terms, a data-processing agreement, or a product-specific notice.
2. Information we collect
Information you send us
When you contact us, we receive the details you provide, including your name, email, company, role, message and phone number. We group repeat enquiries by email and use phone calling codes for country/region summaries; this does not identify nationality or current location. If you choose our newsletter, we store your consent separately and ask you to confirm your email before activating a new subscription. You can unsubscribe from any newsletter.
Recruitment information
If you apply for a role, we may receive your CV, work history, portfolio, contact details, interview notes, and other information you provide during the recruitment process. Please do not send sensitive personal information unless it is necessary for your application.
Technical information
Our hosting and security providers may automatically process limited technical information, including IP address, browser and device information, requested pages, timestamps, and security events. We use this information to deliver, secure, and troubleshoot the website.
Local storage and external links
The website stores your language preference in your browser's local storage. For first-party website analytics, it uses a random identifier in temporary tab session storage, renewed after 30 minutes of inactivity. This is not a persistent visitor identity. An analytics opt-out preference, if selected, is stored in local storage. We do not use advertising cookies or cross-site tracking. External sites receive information when you choose to follow their links.
Website measurement
We measure page views, referring website domains, campaign labels, landing pages, language, broad device type, application email clicks and business enquiry interactions to understand how visitors find and use our website. Analytics is processed on our existing website hosting and is available only through the authorized owner dashboard. The analytics database does not store contact names, email addresses, phone numbers, message contents, raw IP addresses, full referrer URLs or URL query strings. Event records are retained for up to 365 days. We respect browser Do Not Track and Global Privacy Control signals. Sources that cannot be identified are reported as direct or unknown. An application email click indicates interest; it does not confirm that an application was sent.
3. How and why we use information
We use personal information to respond to enquiries, discuss and provide our services, assess applications, communicate with candidates, operate and secure the website, maintain appropriate business records, and comply with legal obligations.
Where applicable law requires a legal basis, we rely on steps requested before entering a contract, performance of a contract, our legitimate interests in operating and protecting our business, compliance with legal obligations, or consent where we specifically request it.
5. International processing
We operate from Taiwan and use providers that may process information in other countries. Where required, we use appropriate contractual or legal safeguards for international transfers.
6. Retention
We generally retain business enquiries for up to 24 months after the last meaningful contact. We generally retain information about unsuccessful job applicants for up to 12 months after the hiring decision. We will ask for permission before keeping an unsuccessful applicant's information longer for future opportunities.
We may retain information for a different period where reasonably necessary for an ongoing customer or candidate relationship, security investigation, legal claim, accounting requirement, or other legal obligation. When retention is no longer necessary, we delete or anonymize the information.
7. Security
We use reasonable technical and organizational measures designed to protect personal information, including access controls and protection of data in transit. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.
If we become aware of a personal-data incident, we will investigate, take reasonable steps to contain and address it, notify affected individuals, and report it to the Personal Data Protection Commission or another competent authority when required by applicable law.
8. Your rights
Depending on applicable law, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, and to object to or restrict certain processing. You may also withdraw consent where processing is based on consent and lodge a complaint with the Personal Data Protection Commission or another competent authority.
Under Taiwan's Personal Data Protection Act, applicable rights may include inquiry and review, obtaining a copy, supplementation or correction, and requesting that collection, processing, or use cease or that data be deleted, subject to legal exceptions.
9. Children's privacy
This website is intended for businesses and job candidates and is not directed to children. We do not knowingly collect personal information from children through this website.
10. Changes to this policy
We may update this policy when our website, practices, or legal obligations change. The date above shows the latest revision.
This notice is available in English and Traditional Chinese. If the versions differ, the English version controls unless applicable law requires otherwise.
11. Contact us
For privacy questions or to exercise your rights, contact legal@functionalaisolutions.com.
12. YouTube API Services
We use YouTube API Services to publish our own videos, titles and descriptions to the YouTube channel operated by Functional AI Solutions (致用軟體有限公司). By using these features, our internal marketing tool is bound by the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy.
What we access. Through the authorization given by an authorized company account holder, the tool can upload videos to our own YouTube channel and read basic details of that channel (its name and identifier). We do not access, collect, store or share data about viewers, subscribers, commenters or any other YouTube users.
What we store. We store the OAuth authorization (access and refresh tokens) needed to keep the connection working, and the identifiers and publication status of the videos we upload. This data is kept on our own servers, is not sold, is not shared with third parties, and is not used for advertising.
Retention and deletion. Authorization data is kept only while the connection is active and is deleted when the connection is removed. Upload records are kept for up to 24 months. You can ask us to delete any data we hold at legal@functionalaisolutions.com.
Revoking access. You can revoke our app's access to your Google account at any time at https://myaccount.google.com/permissions. Revoking access also stops our collection of any data through YouTube API Services. More information: YouTube API Services Terms.
13. LinkedIn company Page integration
Purpose, access and development status
FAIS Community Management is the LinkedIn application used by our internal FAIS Marketing Machine. It is intended for authorized staff managing Functional AI Solutions' own company Page. The new integration is in development, and API functions depend on LinkedIn approval and permissions granted by an authorized Page administrator. We do not offer this integration to manage client Pages or personal profiles.
Information and collection frequency
When a Page administrator connects the tool using LinkedIn OAuth, we process the authorization credentials and expiry information needed for the connection, Page identifiers and permitted Page details, and the administrator's access role where supplied by LinkedIn. Publishing functions process company-supplied text and media, publication identifiers, links and status. Analytics functions retrieve company Page posts and aggregate reporting, such as follower totals, impressions, reach, clicks, and counts of reactions, comments and shares.
Collection occurs when authorized staff connect or use a function and during configured reporting refreshes, normally every six hours, subject to LinkedIn's access and rate limits. Additional functions for comments, replies, reactions and mentions are planned. If approved and enabled, these may process interaction text, author identifiers, limited profile fields and timestamps supplied by LinkedIn solely to display and manage those interactions in the internal tool. These additional community features are not represented as already available.
Use, access and service providers
We use this information to operate our own Page, publish or manage company content, display and respond to permitted community interactions, and report on that Page's performance. Access is limited to authorized company staff and service providers needed to host, secure or support the integration. LinkedIn receives the content and API requests necessary to perform the actions staff choose. Company-configured operational notifications and internal reports sent through selected messaging or email services may contain our own post title, publication link, status and aggregate Page reporting metrics.
We do not sell LinkedIn data, use it for advertising targeting, prospecting, recruitment or unrelated profiling, or use LinkedIn API data to provide a social feed on a public website or intranet. LinkedIn API-derived posts, profile information, interactions and analytics are excluded from AI writing and content-generation prompts and from model training. Original material supplied independently by our staff may be used for AI-assisted drafting. Staff can edit original drafts and choose manual or scheduled publication in the tool.
Storage, retention and deletion
We encrypt stored OAuth credentials and restrict access to the tool's storage. In the tool's storage, we keep cached API-retrieved Page profile information for no longer than 56 days, fetched post content and related metadata for no longer than 48 hours, and aggregate Page reporting observations for no longer than 365 days. An actual successful API retrieval is required to renew a cache timestamp. Where another member's profile fields are needed for an enabled community feature, they may be cached for no more than 24 hours; member activity content may be kept for no more than 48 hours. Shorter applicable LinkedIn requirements take precedence.
Locally generated internal report files containing LinkedIn API-derived data are kept for no more than 30 days. Disconnecting the LinkedIn connection removes access and refresh tokens, OAuth state, granted permissions, cached Page identity, and API-derived Page caches and reporting data. Encrypted app configuration, such as the client ID and secret, redirect URI and requested permissions, remains to support reconnection and can be removed on request. Expired or removed LinkedIn data must not be reintroduced through backups or restoration. Independently supplied company drafts and original publishing records are separate from API-retrieved caches; disconnecting does not delete content already published on LinkedIn. Disconnecting also removes local rendered reports containing this data, but cannot automatically retract previously delivered email or messaging copies. Contact us to request deletion of copies under company control; copies in a recipient's account also require that account's deletion controls.
Your control and contact
An authorized administrator can disconnect the integration in Marketing Machine or revoke authorization through LinkedIn's account settings. Revocation stops authorized API collection once the tool detects that access is no longer valid. To request access, correction, deletion, or cessation of processing of information held in the tool, contact legal@functionalaisolutions.com. We verify the requester's authority before acting and apply LinkedIn's deletion requirements. Requests to delete our stored copies do not automatically remove posts from LinkedIn.
LinkedIn processes information under its Privacy Policy. Our use of the APIs is subject to the LinkedIn API Terms of Use and the applicable Marketing API Program Terms. This section governs LinkedIn API data where the general retention statements elsewhere in this policy would allow a longer period.