Metaverse Fashion App Privacy Policy

Introduction

This Metaverse Fashion App Privacy Policy (the "Policy") is intended to protect the privacy rights of personal data subjects. Inventec Corporation (the "Company") is committed to protecting your privacy in accordance with applicable personal data protection laws and implementing appropriate safeguards. By accessing or using this application (the "App"), you acknowledge that you have read, understood, and agreed to this Policy. The Company may amend this Policy at any time. Revised content will be published on the VRSTATE Metaverse official website without individual notice; please review it regularly. If you do not agree to this Policy or any revision, please stop using the App immediately.

Article 1: Applicable Subjects

This Policy applies to users of the App ("you"). Users under 14 years of age must obtain consent from a legal guardian before using the App.

Article 2: Definition of Personal Data

Personal Data includes, without limitation, your email address, nickname, avatar, height, weight, personal photos, device information, and usage records that can directly or indirectly identify you.

Article 3: Collection, Processing, Retention, and Use of Personal Data

I. Scope of collection. For the specific purposes of providing the App, the Company may collect or obtain your Personal Data in the following circumstances:

1. Registration and information you provide: email address, nickname, avatar, height, weight, and personal photos you upload.
2. Location information: after obtaining your authorization, the Company may collect your device location or region in order to assess local weather, seasons, and temperature changes and provide more relevant outfit suggestions and personalized recommendations.
3. Device information and usage records: device model, operating system, unique device identifier, IP address, operation logs, access records, payment records, and related technical information.

II. Purposes of use. The Company collects, processes, and uses your Personal Data primarily for the following purposes:

1. Core features: AI styling, virtual try-on, personalized recommendations, virtual-person interactions, and, where authorized, weather-aware outfit recommendations based on your device location or region.
2. Operations and administration: wallet services, stored-value payments, and promotional gifts.
3. Service improvement and security: product-performance analysis, service improvement, security maintenance, troubleshooting, and monitoring abnormal activity.

III. Special handling of image and photo data.

1. Purpose limitation: personal photos you upload are used only to provide AI styling, virtual try-on, and related features.
2. Storage and deletion: photo data is temporarily stored on servers to complete AI processing. Unless you explicitly elect to retain generated history, it is protected by reasonable technical and administrative measures and deleted or anonymized when you close your account or withdraw consent, except where retention is required by law.
3. No secondary use: the Company does not perform image-content recognition, AI training, or commercial analysis, and does not use image data for other purposes or share it with third parties without your authorization.

IV. Retention. The Company retains Personal Data for the period necessary to fulfill the purpose for which it was collected. You may request deletion of your Personal Data under Article 6, Item VI of this Policy.

Article 4: Protection of Personal Data and Information Security

I. Security measures. The Company uses necessary technical and organizational safeguards, including encryption, firewalls, HTTPS-encrypted transmission, restricted server access, and operational-log controls, to prevent accidental or unlawful destruction, loss, alteration, or access to Personal Data. If you believe your Personal Data has been compromised, please contact the Company promptly.

II. Outsourced services. When the Company engages a third party to provide services for business needs, it will require that party to comply with this Policy and carry out necessary reviews to verify compliance.

III. Internal management and oversight. Only authorized personnel may access your Personal Data, and they must comply with the Company's relevant policies and requirements.

IV. Zero-tolerance policy. The Company has zero tolerance for conduct that infringes privacy rights or Personal Data protection. Where an investigation confirms a violation of applicable privacy or Personal Data protection laws, the Company will discipline the responsible person and pursue legal liability where necessary.

Article 5: Principles for Sharing Personal Data with Third Parties

I. Commitment. The Company will not arbitrarily provide, exchange, lease, or sell your Personal Data to third parties. Exceptions apply to recipients you have consented to, parties bound by confidentiality agreements with the Company, parties with legal grounds or contractual obligations, and sharing otherwise permitted by this Policy.

II. Third-party services.

1. To provide certain features, such as payment and social sharing, the App may need to share necessary, minimal data with third-party service providers. Your use of those services is subject to their respective privacy policies.
2. When you follow a link from the App to a third-party platform, such as a brand website, to make a purchase, that platform's processing of your data is governed by its own privacy policy. This App is not responsible for that platform's data protection practices.

Article 6: Your Rights

Subject to applicable law, you may exercise the following rights in relation to your Personal Data:

I. Right to decide. You may decide whether to provide Personal Data to the Company. You may refuse a request for Personal Data, but the Company may then be unable to provide all App features or services.

II. Right to withdraw consent. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of collection or processing performed before it.

III. Right to inquire about or access your Personal Data.

IV. Right to request a copy of your Personal Data.

V. Right to request supplementation or correction of your Personal Data.

VI. Right to request deletion of, or cessation of collection, processing, or use of, your Personal Data.

VII. Right to data portability. Where technically feasible and necessary to exercise your rights, you may request that your Personal Data be transferred to a designated third-party service provider in an electronic, machine-readable format.

Article 7: Cross-Border Transfers

As the Company is a multinational enterprise, Personal Data may be transferred across borders and used within the original purposes of collection, processing, and use and within the scope of this Policy. The Company will comply with this Policy and the data protection laws applicable in the relevant jurisdictions.

Article 8: Risk Management Policy and Procedures

I. Risk assessment. The Company regularly identifies and assesses privacy risks under its risk-management policies and procedures, including unauthorized access, data breaches, data destruction, and other cybersecurity threats.

II. Risk mitigation. The Company takes appropriate measures to address identified risks, including strengthening encryption, improving cybersecurity defenses, conducting regular security audits and penetration tests, and preparing and updating response plans.

III. Monitoring and audit. The Company continuously monitors and evaluates privacy risks and conducts periodic or ad hoc internal and external audits to ensure the security and integrity of Personal Data.

Article 9: Governing Law and Jurisdiction

The interpretation and application of this Policy, and disputes arising from it, are governed by the laws of Taiwan. Where litigation is necessary, the Shilin District Court of Taiwan shall be the court of first instance.

Article 10: Contact

To exercise your rights under Article 6, report an event that may affect your rights, or report a suspected violation of this Policy, contact the Company at:

• Email: [email protected]
• Address: Metaverse Technology Division, Inventec Corporation, No. 166, Section 4, Chengde Road, Shilin District, Taipei City 11167, Taiwan