e首發票 隱私權與資訊安全政策

e-Invoice Privacy and Information Security Policy

一、政策聲明

Policy Statement

e首發票致力於保護您的個人資料與資訊安全。本政策說明我們如何蒐集、利用、保護與管理您在使用本服務時所提供或產生的資料。

e-Invoice is committed to protecting your personal information and information security. This policy describes how we collect, use, protect, and manage data you provide or generate when using our services.

二、資料蒐集與利用

Data Collection and Use

1. 蒐集項目 What We Collect

   我們可能蒐集以下資訊：姓名、公司資訊、聯絡方式、統一編號、發票資料、會員載具資訊、付款及交易紀錄、登入識別資料（如LINE或Azure AD帳號識別碼）、服務使用紀錄等。

   We may collect the following information: name, company information, contact details, tax ID, invoice data, carrier information, payment and transaction records, login identifiers (such as LINE or Azure AD account IDs), and service usage logs.

2. 利用目的 Purpose of Use

   這些資料僅用於：

   • 提供電子發票申請、開立、查詢、媒體申報、兌獎、會員載具、客服聯絡及其他本服務功能

   • 合法性審核與身分驗證

   • 稅務申報、法定資料保存及主管機關合規查核

   • 系統安全、服務分析與改進

   Your data is used only for:

   • Providing e-invoice application, issuance, queries, reporting, prize claiming, carrier services, customer support, and other service functions

   • Legal review and identity verification

   • Tax reporting, legal data retention, and compliance checks by authorities

   • System security, analytics, and service improvement

三、身分認證方式與安全

Authentication Methods and Security

1. LINE 無密碼登入（現行）LINE Passwordless Login (Current)

   目前本網站全面採用LINE登入驗證，不使用傳統帳密。您必須以個人LINE帳號進行註冊/登入，系統僅取得LINE授權公開資料（如暱稱、頭像、識別碼），不儲存LINE密碼或私人通訊資料。請妥善保管LINE帳號與裝置安全，避免他人盜用。

   The website currently uses passwordless LINE login for all users. No traditional username/password is required. You must register/login with your LINE account; the system only accesses LINE-authorized public data (e.g., nickname, avatar, ID) and never stores your LINE password or private communications. Please keep your LINE account and device secure.

2. Microsoft Azure AD 登入（預計年底上線）Microsoft Azure AD Login (Planned for End of Year)

   年底起，營業人用戶可選擇以Microsoft Azure AD進行企業級身分認證（支援FIDO無密碼、MFA、多元驗證）。Azure AD登入時，本平台僅接收由Azure AD授權的公開身分資訊（如姓名、Email、職稱等）與驗證結果，無法取得或保存您的AD帳號密碼、生物特徵等。所有認證過程、金鑰及生物資料均由Azure AD負責安全管理。

   By the end of the year, business users may choose Microsoft Azure AD for enterprise-grade authentication (supporting FIDO passwordless login, MFA, and multiple authentication methods). When logging in with Azure AD, the platform only receives Azure AD-authorized public identity information (e.g., name, email, job title) and authentication results. No AD password or biometric data is accessed or stored by us. All authentication processes and data are managed securely by Azure AD.

3. 多元認證安全提醒 Security Notice for Multi-factor Authentication

   請依照各自服務平台（LINE、Azure AD）指引啟用二階段認證（MFA）、生物辨識或安全金鑰保護，並勿於非官方網站進行授權登入，以防止釣魚詐騙。若發現帳號異常，請立即依原服務平台流程申訴，並聯絡我們協助停權。

   Please enable multi-factor authentication (MFA), biometrics, or security keys on each authentication platform (LINE, Azure AD) as recommended, and avoid logging in via unofficial sites to prevent phishing. If your account is compromised, follow the provider's procedures and contact us for account suspension.