Privacy Policy
This policy explains how Vispo collects, uses, stores, and protects guardian, student, and staff data.
- Effective date
- September 10, 2026
- Service provider
- 智加雲科技有限公司（Vispo）
01Scope
This policy applies to the Vispo LINE MINI App, student arrival and departure, class attendance, journals, guardian leave and replies, staff timekeeping, payroll estimates, and related administration. LY Corporation's policies separately govern LINE's own processing.
02Data we collect
- LINE identity: LINE user ID, display name, avatar, and official-account friendship status.
- Guardian contacts: name, phone number, email, and relationship to the student.
- Student and class data: name, internal ID, organization, campus, class, attendance, journals, guardian replies, and leave requests.
- Staff and HR data: profile, class assignments, work and break time, leave, payroll rules, estimates, adjustments, and review status.
- Face enrollment and recognition: When face attendance is used, we process camera images, face embeddings, image-quality and liveness results, model versions, and verification audit records for enrollment and identity matching. Enrollment images are sent to the recognition service for processing; the database stores embeddings and necessary records, not the original enrollment images. This is separate from a phone's Face ID.
- System data: technical records needed for sign-in, invitations, notifications, changes, and security audits.
We do not ask guardians for LINE passwords or retain LINE access or ID tokens long term. Do not enter unnecessary sensitive data in journals.
03How we use data
We use data to verify identity and access, link students, manage attendance and journals, process leave and replies, send notifications, review time and payroll, provide support, prevent misuse, maintain security, and meet legal or dispute-resolution duties.
04Third-party services
Except for service providers, consent, or legal requirements, Vispo does not sell personal data or provide it for third-party marketing.
05Retention and security
We retain data until the service relationship ends, its purpose is fulfilled, or the legal retention period expires. Safeguards include role and organization isolation, row-level access controls, one-time invitations, session controls, platform two-factor authentication, encryption in transit, and audit logs. No online service can guarantee zero risk.
05AFace data and alternatives
Face recognition is not the only attendance method; the organization can arrange card or staff-assisted attendance. Before enrollment, the organization must explain the purpose and obtain required consent from the individual and the legal representative of a minor. Embeddings are retained for subsequent matching, and re-enrollment replaces that enrollment's templates. Disabling an account or deleting a parent App account does not itself delete the organization's face data. To withdraw consent, ask your organization to select “Delete face data” at the enrollment entry. This deletes the person’s profiles and embeddings across that organization’s campuses. Necessary consent, deletion and operation audit metadata is retained without captures or embeddings; ordinary attendance records remain. You can also contact Vispo.
06Your rights
Where permitted by law, you may request access, a copy, supplementation, correction, restriction of collection, processing, or use, or deletion. Requests about student data should generally come from a legal representative or authorized organization contact.
07Contact and updates
To exercise data rights or raise privacy concerns, contact the Vispo official account or your classroom's usual contact. We update this page when the policy changes and provide appropriate notice for material changes.