Privacy Policy

GX Culture Media Co., Ltd.　Taiwan Business ID 62072247　Effective 2026-09-17c (previous versions 2026-09-17a/b, 2026-09-15)

1. Scope

This policy covers two services: the internal GX Culture Media Data Tool (Meta App ID 1055799074019255), used only by our own employees; and the GX Culture Media LINE Official Account (@851armis), a keyword auto-reply account which any LINE user who adds it — or any member of a group it has joined — can interact with. Sections 2-6 describe the Data Tool; section 6a describes the LINE account and takes precedence for it.

This policy describes how GX Culture Media Data Tool (Meta App ID 1055799074019255), an internal tool developed by GX Culture Media Co., Ltd. ("we"), collects, uses and retains data. The tool has no public sign-up and is not available to the general public; it is used only by our own employees.

2. What we collect and from where

The tool accesses only those Facebook Pages and Instagram professional accounts that a client has contracted us to operate and for which the client has appointed our staff as an administrator through Meta Business Suite. It does not and cannot access any account we have not been appointed to.

We collect: account profile and follower counts; the client's own posts, videos and stories; insights (reach, impressions, engagement, watch time, aggregated follower country and city distribution); comments left on the client's content and messages received by the client's account; and, where the client has separately granted access to their ad account, ad spend and delivery metrics.

Comments and messages may contain the name, username and message content of the person who wrote them. We treat these as third-party personal data and handle them under sections 4 and 5.

We do not collect passwords, financial account details or identity documents; we do not store the photo, video or audio attachments of messages (only whether an attachment was present); and we do not collect the client's personal browsing, search, like history or contact list.

3. How we use it

To produce the client's performance report and our internal dashboard; to let our community managers see new comments and messages promptly so they can reply during business hours; and to inform future content decisions.

We do not sell data, share it with third parties, publish it, or use it for advertising targeting.

On automated replies: we may reply to common enquiries with an automated message, limited to providing a download link, our official LINE account, or a standard description of a product or service. All other replies are written by a human. We do not use automated messages for marketing broadcasts.

4. Who can see it

Data is stored in our company Google Workspace shared drive and on the computer of the staff member who operates the pipeline (that machine requires a login password). It is rendered in an internal dashboard hosted on Cloudflare Pages, restricted by Cloudflare Access to accounts in our company Google Workspace domain (@gxcotw.com) — currently six employees. Each client receives only the report concerning their own accounts.

5. Retention and deletion

Performance data is retained for the duration of the engagement so that long-term trends remain visible. Within 90 days of an engagement ending we remove all of that client's data. The removal is carried out by a member of staff; when an account is marked as ended, our internal system raises a recurring reminder until the removal is completed, so that it is not overlooked. A client may request earlier deletion at any time — see Data Deletion Instructions.

6. Security

Access tokens are stored in owner-only local files and are never committed to source control. The internal dashboard requires Google authentication and is restricted to our company domain. Our webhook receiver verifies the signature of every incoming request and discards anything that does not match.

6a. LINE Official Account (@851armis)

Our LINE Official Account runs on the LINE Messaging API and answers keywords: a user sends a word such as "status" and it returns a work summary generated by our internal system that day.

We receive the user ID and group ID that LINE attaches to each message, and the text of the message sent to the account. Message text is handled in one of two ways. Work items logged by our own employees in our internal work group using commands such as #任務 are retained as company work records, stored in a Cloudflare database visible only to our six employees, kept for one year and then deleted automatically (an employee's records are deleted within 90 days of their leaving). All other messages — ordinary chat, non-command text, and anything sent by someone who is not our employee — are matched against our command list in memory and then discarded; they are not written to any database or file.

🔴 By default we do not download images, video, voice messages or files sent to the account. We read the content of such a message only when it is needed for a specific work purpose (for example, an employee submitting a work record as an image), and the file itself is not retained or written to any database. We do not collect, back up or compile these files, and we never read them when they are sent by someone who is not our employee. We do not read profile pictures, friend lists, contacts, or group member lists, and LINE Notes and Albums are technically inaccessible to the account.

The account operates on a whitelist: it responds only in conversations we have designated. In any other one-to-one chat or group it does not respond and retains nothing, so that our internal information cannot surface in a client's conversation.

Replies contain only aggregate figures produced by our internal system (for example, whether today's data collection completed, or how many comments and messages are awaiting a reply). Replies contain no names, usernames or message text of any third party. A reply sent in a group is visible to every member of that group, which is why only non-identifying aggregate figures are made available this way.

This account does not send marketing broadcasts. Users may block or delete the account at any time, which stops all data transmission; because message content is not retained, no separate deletion request is necessary.

7. Contact

GX Culture Media Co., Ltd.
30F-2, No. 3, Ziqiang 3rd Road, Lingya District, Kaohsiung City, Taiwan
Email: jixing@gxcotw.com