帳單捕手 BillCatch資料管理與刪除說明
本頁逐步說明如何管理、匯出與刪除您在 BillCatch 的資料。本頁內容依據隱私權政策撰寫；如有出入，以隱私權政策為準。
1. 在 App 中斷 Gmail 連結
- 開啟 BillCatch App。
- 進入「設定」→「中斷 Gmail」。
中斷後，我們會：
- 向 Google 撤銷 BillCatch 的 Gmail 授權；
- 立即刪除 Gmail refresh token；
- 於中斷連結後 30 天內刪除 Gmail 衍生資料，包括對帳單 PDF、郵件識別資訊與解析後的交易資料（見隱私權政策第 6 節）。
2. 從 Google 帳號移除存取權
您也可以不經由 App，直接在 Google 帳號的第三方存取權頁面移除 BillCatch：
- 前往 https://myaccount.google.com/linkedapps（登入您連結 BillCatch 的 Google 帳號）。
- 選擇「Access to your Google Account」類別。
- 選擇 BillCatch。
- 選擇「See details」。
- 選擇「Remove access」，再選擇「Confirm」。
移除後，BillCatch 即無法再以該授權讀取您的 Gmail。若您也要刪除已匯入的資料，請在 App 內刪除帳號，或依第 7 點寄信請求刪除。
3. 匯出資料（CSV）
- 開啟 BillCatch App。
- 進入「設定」→「匯出」。
- 取得解析後交易資料的 CSV 檔。
4. 刪除帳號
- 開啟 BillCatch App。
- 進入「設定」→「刪除帳號」。
刪除帳號會刪除您的全部資料，包含對帳單、交易、PDF 與 token。
5. 刪除記住的對帳單密碼
部分發卡機構的對帳單 PDF 設有開啟密碼。您輸入密碼時可選擇只用於本次解析（不保存），或選擇「記住密碼」；記住的密碼以 AES-256-GCM 於應用層加密後保存，僅用於自動開啟同一張卡日後的對帳單。
您可隨時在 App 內刪除記住的對帳單密碼。您於 App 內刪除該密碼或刪除帳號時，我們會立即刪除（見隱私權政策第 2.4 節與第 6 節）。
6. 備份與保存期間
已刪除的資料，自刪除日起最多 30 天後自備份輪替中移除。各類資料的保存期間如下（摘自隱私權政策第 6 節）：
| 資料 | 保存期間 |
|---|---|
| Gmail refresh token | 至您中斷 Gmail 連結或刪除帳號時立即刪除 |
| 記住的對帳單開啟密碼 | 至您於 App 內刪除該密碼或刪除帳號時立即刪除 |
| 對帳單 PDF、郵件識別資訊 | Gmail 連線有效期間；中斷連結後 30 天內刪除 |
| 解析後的交易資料 | 至您刪除帳號；或中斷連結後 30 天內刪除 |
| 帳號資料 | 至您刪除帳號 |
| 備份 | 自刪除日起最多 30 天後自備份輪替中移除 |
7. 寄信行使個人資料保護法權利
依個人資料保護法第 3 條，您得就您的個人資料行使下列權利，且不得預先拋棄或以特約限制：查詢或請求閱覽、請求製給複製本、請求補充或更正、請求停止蒐集／處理／利用、請求刪除。
App 內功能以外的請求，請寄信至 wadeyeh@apgo.com.tw，並說明您的請求內容。
依個人資料保護法第 13 條，查詢、閱覽或製給複製本之請求，我們於 15 日內為准駁決定；補充、更正、停止蒐集處理利用或刪除之請求，於 30 日內為准駁決定；必要時得延長一次（分別不逾 15 日、30 日），並以書面通知您延長原因。
8. 撤回 AI 解析同意
對帳單內容只會在您於 App 內明確同意後才送交 Google Gemini API 處理。您可隨時於設定中撤回同意，撤回後我們停止送交新資料。
若您不提供 Gmail 授權，仍可手動上傳 PDF 使用部分功能。
9. 聯絡我們
瑋瑄科技有限公司（統一編號 94071421）
地址：新北市新莊區龍安路66之28號10樓
客服與隱私聯絡信箱：wadeyeh@apgo.com.tw
Managing and deleting your data
This page explains, step by step, how to manage, export and delete your data in BillCatch. It is based on our Privacy Policy; if anything here differs, the Privacy Policy prevails.
1. Disconnect Gmail in the app
- Open the BillCatch app.
- Go to Settings → Disconnect Gmail.
When you disconnect, we:
- revoke BillCatch's Gmail grant with Google;
- delete the Gmail refresh token immediately;
- delete Gmail-derived data, namely statement PDFs, message identifiers and parsed transactions, within 30 days after disconnection (see Privacy Policy, Section 6).
2. Remove access from your Google Account
You can also remove BillCatch directly from your Google Account's third-party access page, without using the app:
- Go to https://myaccount.google.com/linkedapps (signed in to the Google Account you connected to BillCatch).
- Select the "Access to your Google Account" category.
- Select BillCatch.
- Select "See details".
- Select "Remove access", then "Confirm".
After removal, BillCatch can no longer use that grant to read your Gmail. If you also want the data already imported to be deleted, delete your account in the app or email us to request deletion.
3. Export your data (CSV)
- Open the BillCatch app.
- Go to Settings → Export.
- Download your parsed transactions as a CSV file.
4. Delete your account
- Open the BillCatch app.
- Go to Settings → Delete account.
Deleting your account erases all of your data, including statements, transactions, PDFs and tokens.
5. Delete remembered statement passwords
Some card issuers protect statement PDFs with an opening password. When you enter it you can choose to use it for this parse only (not stored) or to have us remember it; a remembered password is encrypted at the application layer with AES-256-GCM and is used only to open future statements for the same card.
You can delete a remembered statement password in the app at any time. It is deleted immediately when you delete the password in the app or delete your account (see Privacy Policy, Sections 2.4 and 6).
6. Backups and retention
Deleted data is removed from backup rotation within 30 days after deletion. Retention by data type (from Privacy Policy, Section 6):
| Data | Retention |
|---|---|
| Gmail refresh token | Deleted immediately when you disconnect Gmail or delete your account |
| Remembered statement PDF passwords | Deleted immediately when you delete the password in the app or delete your account |
| Statement PDFs and message identifiers | While the Gmail connection is active; deleted within 30 days after disconnection |
| Parsed transactions | Until you delete your account, or within 30 days after disconnection |
| Account data | Until you delete your account |
| Backups | Removed from backup rotation within 30 days after deletion |
7. Exercise your rights by email
Under Taiwan's Personal Data Protection Act (Article 3) you may, and cannot waive the right to: inquire about or access your data; obtain a copy; supplement or correct it; demand that collection, processing or use cease; and demand deletion.
For requests beyond the in-app features, write to wadeyeh@apgo.com.tw and describe your request.
As required by Article 13 of the Personal Data Protection Act, we decide on requests to access or copy your data within 15 days, and on requests to supplement, correct, stop processing or delete your data within 30 days; where necessary we may extend each period once (by up to 15 and 30 days respectively) and will tell you the reason in writing.
8. Withdraw consent to AI parsing
Statement content is sent to Google Gemini API only after you give explicit consent in the app. You can withdraw consent in Settings at any time, after which no new data is sent.
If you choose not to connect Gmail you can still use part of the app by uploading PDFs manually.
9. Contact us
瑋瑄科技有限公司 (Taiwan business registration no. 94071421)
10F., No. 66-28, Long'an Rd., Xinzhuang Dist., New Taipei City, Taiwan (新北市新莊區龍安路66之28號10樓)
Support and privacy contact: wadeyeh@apgo.com.tw