BeeMatch Terms of Service

BeeMatch 智蜂尋源 · 服務條款

Last Updated: September 5, 2026

最後更新日期：2026 年 9 月 5 日

Structure of This Document

本文檔結構

This document consists of three parts:

本文檔由三個部分組成：

• Part I — BeeMatch Platform Terms of Service (applicable to all users)
• Part I — BeeMatch 智蜂尋源平台服務條款（適用所有用戶）
• Part II — Promotion Service Framework Agreement (applicable to advertiser contracting scenarios)
• Part II — 推廣服務框架協議（適用廣告主簽約場景）
• Part III — Data Processing Agreement and Cross-Border Transfer Mechanisms (applicable to services involving personal data processing)
• Part III — 資料處理協議與跨境傳輸機制（適用涉及個人資料處理的服務）

Part I — BeeMatch Platform Terms of Service

Part I — BeeMatch 智蜂尋源平台服務條款

1. Welcome to BeeMatch

1. 歡迎使用 BeeMatch 智蜂尋源

BeeMatch (hereinafter referred to as "BeeMatch" or the "Platform") is operated by BeeMatch AI Technology Limited (a company incorporated under the laws of the Hong Kong Special Administrative Region, collectively referred to as "BeeMatch", "we" or "our"), and provides advertising matching, content collaboration, and campaign management services to advertisers and social media influencers. "BeeMatch" is the Platform brand name; the legal contracting entity is BeeMatch AI Technology Limited.

BeeMatch 智蜂尋源（以下簡稱「智蜂尋源」或「平台」）由 BeeMatch AI Technology Limited（一家依據香港特別行政區法律設立的公司，以下合稱「BeeMatch」、「我們」或「我們的」）營運，為廣告主與社交媒體達人提供營銷配對、內容協作與投放管理服務。「BeeMatch 智蜂尋源」為平台品牌名，法律簽約主體為 BeeMatch AI Technology Limited。

These Terms of Service (hereinafter referred to as "Terms") govern your access to and use of: (i) the official website https://beematchai.com (the "Website"); (ii) the BeeMatch online Platform; and (iii) all related services and content provided by us through the Website or the Platform (collectively, the "Services").

本服務條款（以下簡稱「本條款」）規範您對以下內容的存取與使用：（一）官方網站 https://beematchai.com（以下簡稱「網站」）；（二）智蜂尋源線上平台；（三）我們透過網站或平台提供的全部相關服務與內容（以下合稱「服務」）。

Please read these Terms carefully. By accessing, registering an account, browsing, or otherwise using our Services, you confirm that you have read, understood, and agreed to be bound by these Terms; if you do not agree, please do not use our Services.

請仔細閱讀本條款。一旦您存取、註冊帳戶、瀏覽或以其他方式使用我們的服務，即表示您已閱讀、理解並同意受本條款約束；如您不同意，請勿使用我們的服務。

These Terms apply only to the influencer marketing platform business. They do not apply to any email-broadcasting tools, affiliate marketing systems, or stand-alone AI agent products; if such businesses have separate terms, those terms shall govern.

本條款僅適用於達人營銷平台業務。本條款不適用於任何電郵群發工具、聯盟營銷系統或獨立 AI 代理產品；此類業務如有獨立條款，應以對應條款為準。

BeeMatch's role in transactions is as follows: the Platform acts as a SaaS software service provider, providing advertisers and influencers with the technical infrastructure to support matching, communication, content collaboration, and campaign management; the Platform also acts as a matching service provider, providing recommendation, screening, and transaction-matching services to both parties. BeeMatch is not a Merchant of Record (MoR), does not undertake to collect, pay, or settle influencer compensation (such obligations are independently borne by licensed payment service providers such as Airwallex), and is not the influencer's employer or principal. The brand and the influencer establish an independent promotion cooperation relationship through the Platform, and BeeMatch bears no joint and several liability for the content quality, delivery timeliness, or performance of such cooperation; the specific scope of liability is governed by the relevant provisions of Part II of these Terms.

BeeMatch 智蜂尋源在交易中的角色定位如下：平台作為 SaaS 軟件服務商，為廣告主與達人提供技術基礎設施以支援配對、溝通、內容協作與 Campaign 管理；平台同時作為撮合服務方，為雙方提供推薦、篩選與交易撮合服務。BeeMatch 不構成 Merchant of Record（MoR），不對達人報酬承擔代收代付或資金結算義務（該等義務由 Airwallex 空中雲匯等持牌支付服務商獨立承擔），亦不構成達人僱主或委託人。品牌方與達人透過平台建立獨立的推廣合作關係，BeeMatch 對該合作的內容質量、交付時效與履約結果不承擔連帶責任，具體責任範圍以本協議 Part II 各項約定為準。

2. Account Registration and Eligibility

2. 帳戶註冊與使用資格

When you use the Platform on your own behalf, you represent and warrant to us that:

當您代表自己使用平台時，您向我們陳述並保證：

• You have reached the legal age of majority in your jurisdiction;
• 您已達到您所在司法管轄區的法定成年年齡；
• You have full civil capacity and are able to enter into legally binding contracts independently;
• 您具有完全民事行為能力，可獨立簽訂具有法律約束力的合約；
• You will comply with these Terms and all applicable laws and regulations;
• 您將遵守本條款及所有適用法律法規；
• The information you provide to us is true, accurate, complete, and kept up to date.
• 您向我們提供的資訊真實、準確、完整並保持更新。

When you use the Platform on behalf of a business, organization, or other legal entity, you further represent and warrant to us that you have obtained full authorization from that entity to accept these Terms on its behalf and to bind it to these Terms.

當您代表某一企業、機構或其他法律實體使用平台時，您進一步向我們陳述並保證：您已獲得該實體的充分授權，可代表其接受本條款並使其受本條款約束。

To access the Services, you must register an account (the "Account"). You agree: (a) to provide true, current, and complete registration information as required by the Platform; (b) to safeguard your account credentials and be responsible for all activities under your Account; and (c) to notify us immediately at yongpeng@beematchai.com upon discovering any unauthorized use of your Account, credential compromise, or any security incident.

為存取服務，您需要註冊一個帳戶（以下簡稱「帳戶」）。您承諾：（一）按平台要求提供真實、最新、完整的註冊資訊；（二）妥善保管帳戶憑證，對您帳戶下的所有活動負責；（三）一旦發現帳戶存在被未授權使用、憑證外洩或任何安全事件，立即透過 yongpeng@beematchai.com 通知我們。

3. Platform Use Rules

3. 平台使用規則

You must not use the Platform for any of the following activities:

您不得將平台用於以下任何活動：

• Circumventing, undermining, or interfering with the Platform's security mechanisms, access controls, or identity verification measures;
• 規避、破壞或干擾平台的安全機制、存取控制或身分驗證措施；
• Imposing undue load on, or otherwise interfering with the normal operation of, the Platform's systems;
• 對平台系統施加不當負載，或以其他方式干擾其正常運作；
• Infringing the intellectual property rights, personality rights, privacy rights, or other legitimate rights and interests of any third party;
• 侵犯任何第三方的知識產權、人格權、隱私權或其他合法權益；
• Submitting fraudulent, false, harmful, or misleading content, materials, or identity information;
• 提交欺詐性、虛假、有害或誤導性的內容、素材或身分資訊；
• Scraping, harvesting, or otherwise bulk-collecting Platform data without authorization;
• 未經授權抓取、採集或以其他方式批量獲取平台資料；
• Violating any social media platform, community rules, or advertising policies during the execution of a Campaign.
• 在 Campaign 執行過程中違反任何社交媒體平台、社區規則或廣告政策。

If we reasonably determine that you have violated any of the above rules, we may immediately suspend or terminate your access to the Platform and reserve the right to pursue liability in accordance with applicable law and Platform rules.

如我們合理認定您違反上述任一規則，可立即暫停或終止您對平台的存取，並依據適用法律與平台規則保留追究責任的權利。

4. Platform License

4. 平台授權許可

Subject to your continuing compliance with these Terms, BeeMatch AI Technology Limited grants you a personal, revocable, non-exclusive, non-transferable, limited license to access and use the Platform and Services solely for the purposes set forth in these Terms (i.e., matching advertisers with influencers and completing Campaign collaboration).

在您持續遵守本條款的前提下，BeeMatch AI Technology Limited 授予您一項個人的、可撤銷的、非獨佔的、不可轉讓的有限許可，允許您存取並使用平台與服務，僅用於本條款所載明的目的（即配對廣告主與達人並完成 Campaign 協作）。

As consideration for using the Platform, you grant BeeMatch AI Technology Limited a worldwide, royalty-free, sublicensable license to access, collect, store, and use the content and data you upload to the Platform (the "User Content") solely for: (A) providing the Services (including Campaign operations, data analysis, and report generation); (B) complying with applicable law; and (C) satisfying BeeMatch AI Technology Limited's reasonable audit and data retention policy requirements.

作為使用平台的對價，您授予 BeeMatch AI Technology Limited 一項全球性的、免特許權使用費的、可分許可的許可，允許其存取、收集、儲存並使用您上傳至平台的內容與資料（以下簡稱「用戶內容」），僅用於：（A）提供服務（包括 Campaign 營運、資料分析與報告生成）；（B）遵守適用法律；以及（C）滿足 BeeMatch AI Technology Limited 合理的審計與資料保留政策要求。

5. Intellectual Property

5. 知識產權

All content displayed or provided on the Platform, including designs, infrastructure, graphics, software, artwork, brand names, logos, and trademarks (the "Platform Content"), is owned by or duly licensed to BeeMatch AI Technology Limited and is protected by applicable intellectual property laws and regulations. Except for the limited license expressly granted herein, these Terms do not transfer any rights or licenses to you.

平台上展示或提供的全部內容，包括設計、基礎設施、圖形、軟件、藝術品、品牌名、標識與商標（以下簡稱「平台內容」），均由 BeeMatch AI Technology Limited 擁有或獲得合法授權，受相關知識產權法律法規保護。除本條款明確授予的有限許可外，本條款不向您轉讓任何權利或許可。

Without the prior written consent of BeeMatch AI Technology Limited, you may not copy, modify, distribute, publicly display, or commercially exploit any Platform Content in any manner.

未經 BeeMatch AI Technology Limited 事先書面同意，您不得以任何方式複製、修改、傳播、公開展示或商業利用任何平台內容。

6. Advertiser and Campaign Services

6. 廣告主與 Campaign 服務

6.1 What is a Campaign

6.1 什麼是 Campaign

A Campaign refers to a series of activities relating to content creation and publication, conducted through influencers matched by the Platform based on advertiser requirements. The specific scope, deliverables, schedule, and budget are those confirmed and accepted by you on the Platform in the Campaign information.

Campaign 是指基於廣告主需求，透過平台配對的達人進行的、與內容創作與發布相關的一系列活動。具體範圍、可交付物、時間安排與預算，以您在平台確認接受的 Campaign 資訊為準。

6.2 Advertiser Materials

6.2 廣告主素材

You shall provide us and the assigned influencers with accurate and complete promotional materials, including brand identifiers, brand assets, product information, marketing copy, and necessary samples. You grant BeeMatch AI Technology Limited and the assigned influencers a worldwide, non-exclusive, royalty-free license to use such materials solely for the purpose of completing the Campaign on the applicable channels and Services. You represent and warrant that you have full rights to grant the foregoing authorization, and that all materials and copy are lawful and compliant.

您應向我們及被指派的達人提供準確、完整的推廣素材，包括品牌標識、品牌資產、產品資訊、行銷話術與必要的樣品等。您授予 BeeMatch AI Technology Limited 及被指派達人一項全球性的、非獨佔的、免特許權使用費的許可，允許其僅為完成 Campaign 之目的在適用渠道與服務中使用該素材。您陳述並保證您擁有充分的權利進行上述授權，且所有素材與文案合法合規。

6.3 Initiating and Managing Services

6.3 服務的發起與管理

You may initiate and manage Campaigns through the Platform. The pricing, rules, and billing model for each Campaign will be displayed on the Platform interface and incorporated into these Terms by reference. Once you initiate a Campaign on the Platform, you are deemed to have agreed to that Campaign's specific terms and (where applicable) the Promotion Service Framework Agreement in Part II.

您可透過平台發起並管理 Campaign。每個 Campaign 的定價、規則與計費模型均會在平台介面顯示，並透過引用納入本條款。一旦您在平台發起 Campaign，即視為同意該 Campaign 的特定條款以及（如適用）Part II 中的《推廣服務框架協議》。

6.4 Fees and Payment

6.4 費用與支付

The Platform supports any one or combination of the following payment methods:

平台支援以下任一或組合支付方式：

• Prepaid Wallet Top-Up: You may top up the Platform wallet to pay Campaign fees;
• 預付錢包充值：您可向平台錢包充值後用於支付 Campaign 費用；
• Card Binding: You may bind a payment card on the Platform, from which the Platform will deduct charges at settlement milestones;
• 銀行卡綁定：透過平台綁定支付卡，由平台按結算節點代扣；
• Combined Payment: Wallet balance is applied first; any shortfall is deducted from the bound card. You may set the deduction order on the Platform.
• 組合支付：錢包餘額優先抵扣，不足部分從綁定卡扣除，您可在平台設定扣款順序。

Influencer marketing fees are charged based on accepted deliverables/milestones and/or the Campaign budget, as shown in the Campaign information on the Platform. You authorize BeeMatch AI Technology Limited and its payment service providers to collect the corresponding fees in accordance with Platform rules, and agree to comply with the terms of the relevant payment service provider. If payment fails or you do not update your payment method within the prescribed period, BeeMatch AI Technology Limited may suspend the relevant Services. For additional rules on taxes, refunds, reward points (if any), and balance withdrawal, please refer to the Platform pages or the Promotion Service Framework Agreement in Part II.

達人營銷費用按已驗收的可交付物／里程碑及／或 Campaign 預算收取，具體以平台展示的 Campaign 資訊為準。您授權 BeeMatch AI Technology Limited 及其支付服務商依據平台規則代為收取相應費用，並同意遵守相應支付服務商的使用條款。如發生支付失敗或您未在規定期限內更新支付方式，BeeMatch AI Technology Limited 有權暫停相關服務。有關稅務、退款、獎勵積分（如有）與餘額提取的額外規則，請參見平台頁面或 Part II 中的《推廣服務框架協議》。

Funds in the Platform wallet are held on a collection-and-payment basis only, representing amounts pre-deposited by brands to pay Campaign fees. Such funds are held in dedicated accounts of licensed payment service providers such as Airwallex, and are physically segregated from BeeMatch's own operating funds. BeeMatch does not treat wallet funds as its own funds or deposits, and does not pay interest on them. Brands reserve the right to withdraw wallet balances at any time, with specific rules set forth in Article 5 of Part II.

平台錢包中的資金僅以代收代付身份持有，係品牌方為支付 Campaign 費用而預先存入的款項。該等資金存放於 Airwallex 空中雲匯等持牌支付服務商的專用帳戶中，與 BeeMatch 的自有營運資金在物理上相互隔離。BeeMatch 不將錢包資金視為自有資金或存款，亦不就此支付利息。品牌方保留隨時提取錢包餘額的權利，具體規則見 Part II 第五條。

7. Third-Party Websites and Services

7. 第三方網站與服務

The Platform may contain links or integrations to third-party websites or tools (such as payment service providers, social media platforms, and data analytics services). BeeMatch AI Technology Limited assumes no responsibility for the availability, content, policies, or practices of such third-party resources. Transactions and legal relationships between you and any third party are solely between you and that third party, and BeeMatch AI Technology Limited shall not be liable for such transactions or any losses arising therefrom.

平台可能包含指向第三方網站或工具的連結或整合（如支付服務商、社交媒體平台、資料分析服務等）。BeeMatch AI Technology Limited 不對該等第三方資源的可用性、內容、政策或實務承擔任何責任。您與第三方之間的交易與法律關係，由您與該第三方自行約定，BeeMatch AI Technology Limited 不對此類交易或由此產生的任何損失承擔責任。

8. Privacy and Data Protection

8. 隱私與資料保護

BeeMatch AI Technology Limited attaches great importance to your privacy and personal data protection. For a complete description of how the Platform collects, uses, stores, shares, and protects your personal information, please refer to our Privacy Policy (at https://beematchai.com) and the Data Processing Agreement in Part III.

BeeMatch AI Technology Limited 極為重視您的隱私與個人資料保護。關於平台如何收集、使用、儲存、共用和保護您的個人資訊的完整說明，請參閱我們的《隱私政策》（見 https://beematchai.com）以及 Part III 的《資料處理協議》。

Please note: although BeeMatch AI Technology Limited will take reasonable protective measures with respect to any communications submitted through the Platform, it cannot guarantee absolute confidentiality. Except as expressly required by the Platform, please do not submit information that you consider highly sensitive through the Platform.

請注意：透過平台提交的任何通訊內容，BeeMatch AI Technology Limited 雖然會採取合理保護措施，但無法保證其絕對保密性。除平台明確要求外，請勿在平台提交您視為高度敏感的資訊。

### 8A. Direct Marketing Consent

In accordance with Part 6A of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486), the following provisions apply to the use of your personal data for direct marketing purposes:

(a) Right to Withdraw Consent

You may, at any time and without charge, require us to cease using your personal data for direct marketing purposes. To withdraw your consent, please contact us at support@beematchai.com. Any withdrawal of consent shall take effect without delay and shall not affect the lawfulness of any processing carried out before such withdrawal.

(b) First-Use Notification of Opt-Out Right

When we first use your personal data for direct marketing, we will inform you of your right to require us, without charge, to cease using your personal data in direct marketing.

(c) Oral Consent — Written Confirmation within 14 Days

Where we obtain your oral consent to the use of your personal data for direct marketing, we will send you a written confirmation within 14 days of such oral consent. The written confirmation will set out:

· The types of personal data to be used for direct marketing;

· The classes of marketing subjects; and

· The response channel through which you may withdraw your consent.

You may raise any objection to the written confirmation within a reasonable period, and we will not use your personal data for direct marketing until the objection (if any) is resolved.

(d) Compliance with Privacy Policy

For full details of our direct marketing practices, including the types of personal data used, the classes of marketing subjects, and the response channel, please refer to our Privacy Policy (Section 3.3 — Direct Marketing).

#### 8A. 直銷同意

根據香港《個人資料（私隱）條例》（第 486 章）第 6A 部，以下條款適用於將您的個人資料用於直接促銷用途：

（一）撤回同意權

您可隨時要求我們停止將您的個人資料用於直接促銷用途，且我們不得就此收費。如欲撤回同意，請透過 support@beematchai.com 聯絡我們。任何同意的撤回應即時生效，且不影響撤回前已進行的處理的合法性。

（二）首次使用時告知拒絕權

當我們首次將您的個人資料用於直接促銷時，我們將告知您有權要求我們在不向您收費的情況下停止如此使用您的個人資料。

（三）口頭同意——14 天內書面確認

如我們取得您就將個人資料用於直接促銷的口頭同意，我們將於口頭同意後 14 天內向您發送書面確認。書面確認將載明：

· 將用於直接促銷的個人資料種類；

· 促銷標的類別；及

· 您可撤回同意的回應途徑。

您可在合理期間內就該書面確認提出異議，在異議（如有）解決前，我們不會將您的個人資料用於直接促銷。

（四）遵守隱私政策

有關我們直接促銷做法的完整詳情，包括所使用的個人資料種類、促銷標的類別及回應途徑，請參閱我們的《隱私政策》（第 3.3 條——直銷）。

9. Term, Suspension, and Termination

9. 期限、暫停與終止

These Terms take effect on the date you first access or use the Platform. BeeMatch AI Technology Limited reserves the right to suspend or terminate your Account and/or access to the Services at any time in any of the following circumstances:

本條款自您首次存取或使用平台之日起生效。BeeMatch AI Technology Limited 保留在以下情形下隨時暫停或終止您帳戶及／或服務存取的權利：

• You materially breach these Terms or applicable laws and regulations;
• 您嚴重違反本條款或適用法律法規；
• Your Account or conduct poses a risk to the Platform, other users, or third parties;
• 您的帳戶或行為對平台、其他用戶或第三方造成風險；
• You engage in fraudulent, abusive, or unlawful activities;
• 您從事欺詐、濫用或非法活動；
• Required by laws, regulations, regulatory requirements, or lawful orders of judicial authorities.
• 依據法律法規、監管要求或司法機關的合法指令。

Termination does not affect rights and obligations that have already arisen prior to termination. If termination is due to your breach of these Terms, we may, to the extent permitted by applicable law and Platform rules, take corresponding action with respect to funds or points in your Account.

終止不影響終止前已產生的權利與義務。如終止係因您違反本條款，我們可在適用法律與平台規則允許的範圍內，對您帳戶中的資金或積分進行相應處理。

10. Disclaimer

10. 免責聲明

To the maximum extent permitted by applicable law, the Services are provided on an "as is" and "as available" basis. BeeMatch AI Technology Limited hereby expressly disclaims any express or implied warranties and conditions, including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted, error-free, virus-free, or harmful-component-free operation. We do not warrant that the Services will meet your specific needs, nor do we warrant any particular performance or result of any Campaign.

在適用法律允許的最大範圍內，服務按「現狀」與「可用」基礎提供。BeeMatch AI Technology Limited 在此明確否認任何明示或默示的保證與條件，包括但不限於對適銷性、特定用途適用性、未侵權，以及不中斷、不出錯、不含病毒或有害成分的保證。我們不保證服務一定滿足您的特定需求，亦不保證任何 Campaign 的具體表現或結果。

11. Limitation of Liability

11. 責任限制

To the maximum extent permitted by applicable law, BeeMatch AI Technology Limited shall not be liable to you for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or goodwill. In no event shall BeeMatch AI Technology Limited's total liability to you exceed the fees you actually paid to BeeMatch AI Technology Limited for the relevant Services in the three (3) months preceding the event giving rise to liability.

在適用法律允許的最大範圍內，BeeMatch AI Technology Limited 不就以下任何間接的、偶然的、特殊的、後果性的或懲罰性的損害，或任何利潤、收入、資料或商譽的損失，向您承擔任何責任。在任何情況下，BeeMatch AI Technology Limited 對您承擔的全部責任，不超過您在引發責任的事件發生前三個月內為相關服務向 BeeMatch AI Technology Limited 實際支付的費用。

12. Indemnification

12. 賠償

You agree to defend, indemnify, and hold harmless BeeMatch AI Technology Limited and its employees, agents, and affiliates from and against any claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from your use of the Services, your breach of these Terms, or your infringement of any third-party rights.

您同意就因您使用服務、違反本條款或侵犯任何第三方權利而產生的任何索賠、損害、責任、成本與費用（包括合理律師費），為 BeeMatch AI Technology Limited 及其員工、代理人、關聯方進行辯護、賠償並使其免受損害。

13. Governing Law and Dispute Resolution

13. 適用法律與爭議解決

The execution, validity, interpretation, and performance of these Terms shall be governed by the laws of the Hong Kong Special Administrative Region (excluding its conflict-of-laws rules). Any dispute arising from or related to these Terms shall be submitted to the courts of competent jurisdiction in the Hong Kong Special Administrative Region for resolution, unless otherwise mandatorily required by applicable law. The prevailing party shall be entitled to recover its reasonable attorneys' fees and related costs from the other party.

本條款的訂立、效力、解釋與履行，均適用香港特別行政區的法律（不含其衝突法規則）。因本條款引起的或與本條款相關的任何爭議，應提交至香港特別行政區有管轄權的法院解決，除非適用法律另有強制性規定。勝訴方有權要求對方賠償其合理律師費與相關費用。

14. General Provisions

14. 一般條款

14.1 Amendment and Replacement

14.1 條款變更與替代

Except as otherwise agreed in a written and signed agreement, these Terms supersede any prior online version. We may amend these Terms by posting an updated version on the Website; unless otherwise noted, the amended Terms shall take effect upon posting. Continued use of the Services constitutes acceptance of the amended Terms.

除另有書面簽署的協議外，本條款替代此前任何線上版本。我們可能透過在網站發布更新版本來修訂本條款，除非另有註明，修訂後的條款自發布之日起生效。繼續使用服務即視為接受修訂後的條款。

14.2 Entire Agreement

14.2 完整協議

These Terms constitute the entire agreement between you and BeeMatch AI Technology Limited with respect to the Services, and supersede any prior oral or written communications between you and BeeMatch AI Technology Limited on the same subject matter.

本條款構成您與 BeeMatch AI Technology Limited 之間就服務所達成的完整協議，取代您與 BeeMatch AI Technology Limited 之間此前就此事項達成的任何口頭或書面溝通。

14.3 Severability

14.3 可分割性

If any provision of these Terms is held invalid, illegal, or unenforceable by a court or authority of competent jurisdiction, such provision shall be modified or deleted to the minimum extent necessary so that the remaining provisions of these Terms continue in full force and effect.

如本條款中任何條款被有管轄權的法院或機構認定為無效、違法或不可執行，該條款應在必要的最小範圍內被修改或刪除，以使本條款其餘條款繼續具備完全效力。

14.4 No Waiver

14.4 未棄權

BeeMatch AI Technology Limited's failure to exercise, or delay in exercising, any right under these Terms shall not constitute a waiver of such right.

BeeMatch AI Technology Limited 未行使或延遲行使本條款下的任何權利，不構成對該等權利的放棄。

一般聯絡：yongpeng@beematchai.com

General Contact: yongpeng@beematchai.com

法律文書送達：legal@beematchai.com

Legal Notices: legal@beematchai.com

隱私專線：privacy@beematchai.com

Privacy Contact: privacy@beematchai.com

如您對本條款有任何疑問，請透過以下方式聯絡我們：

If you have any questions about these Terms, please contact us through the following channels:

15. 聯絡方式

15. Contact Information

— End of Part I —

— Part I 完 —

Part II — Promotion Service Framework Agreement

Part II — 推廣服務框架協議

(Applicable to Campaign cooperation between advertisers and BeeMatch AI Technology Limited)

（適用於廣告主與 BeeMatch AI Technology Limited 之間的 Campaign 合作）

Last Updated: September 5, 2026

最後更新日期：2026 年 9 月 5 日

Preamble · Parties

序言 · 當事人

This Promotion Service Framework Agreement (this "Agreement") is entered into as a written agreement between the principal engaging promotion services (the "Principal" or "Party A") and BeeMatch AI Technology Limited (the "Platform" or "Party B"; together with Party A, the "Parties"), and governs the rights and obligations of the Parties in connection with the provision of promotion services through the official website and/or mobile application designated by Party B (the "Platform").

本《推廣服務框架協議》（以下簡稱「本協議」）由接受推廣服務的委託方（以下簡稱「甲方」）與 BeeMatch AI Technology Limited（以下簡稱「乙方」，與甲方合稱「雙方」）作為書面協議訂立，規範雙方透過乙方指定的官方網站及／或移動應用程式（以下簡稱「平台」）提供推廣服務的相關權利與義務。

This Agreement shall take effect on the date of last signature by the Parties (the "Effective Date"). With respect to any similar agreement previously executed by the Parties but not fully performed, this Agreement shall, as of the Effective Date, supersede and replace such prior agreement, which shall thereafter have no further legal effect. For ease of reading, provisions of this Agreement that materially affect the rights and obligations of Party A have been bolded.

本協議自雙方最後簽署之日起生效（以下簡稱「生效日」）。就雙方此前簽署但未完全履行的任何同類協議，自本協議生效日起，本協議取代並替換該等既有協議，該等既有協議不再具有法律效力。為便於閱讀，本協議中涉及甲方重大權利義務的條款已做加粗提示。

Whereas

鑒於

• Whereas Party A wishes to expand the reach and awareness of its products, services, or content through lawful and compliant marketing activities;
• 鑒於甲方希望透過合法、合規的營銷活動擴大其產品、服務或內容的傳播範圍與認知度；
• Whereas Party B is a technology company focused on marketing and product promotion, capable of organizing, screening, and managing qualified social media content creators ("Influencers") based on Party A's needs to provide promotion services;
• 鑒於乙方為專注於營銷與產品推廣的科技公司，能夠基於甲方需求組織、篩選並管理合格的社交媒體內容創作者（以下簡稱「達人」）以提供推廣服務；
• Whereas the Parties wish to establish a long-term, stable, and compliant cooperation relationship under which Party B, or third parties designated by Party B, will promote Party A's products, services, or content on media channels owned or duly authorized by Party B to enhance brand exposure.
• 鑒於雙方希望建立長期、穩定、合規的合作關係，由乙方或其指定的第三方在乙方擁有或合法授權的媒體渠道上推廣甲方的產品、服務或內容，以提升品牌曝光。

Now therefore, in consideration of the mutual covenants contained in this Agreement, the Parties agree as follows:

因此，考慮到本協議所載的相互承諾，雙方達成如下條款：

Article 1 · Definitions

第一條 · 術語與定義

Except as the context otherwise requires, the following terms shall have the meanings set forth below:

除上下文另有所指外，本協議中下列術語具有如下含義：

1.1 Party A Products

1.1 甲方產品

Refers to the products, services, or content in respect of which Party A lawfully holds complete and valid rights (including but not limited to ownership and related intellectual property rights) or has lawfully obtained authorization to commission Party B to promote.

指甲方合法擁有完整有效權利（包括但不限於所有權及相關知識產權）或已合法獲得授權、可委託乙方進行推廣的產品、服務或內容。

1.2 Promotion Platforms

1.2 推廣平台

Refers to the media platforms/channels operated by Party B or by third parties in cooperation with Party B, on which Influencers may publish or distribute Creative Content.

指由乙方擁有或與乙方合作的第三方運營的、達人可發布或投放創意內容的媒體平台／渠道。

1.3 Creative Content

1.3 創意內容

Refers to videos, audio, text, images, and other works created for the promotion purposes of this Agreement, including but not limited to scripts, drafts, process files, final deliverables, project files, materials, subtitles, cover images, and related materials.

指為本協議推廣目的而創作的影片、音訊、文字、圖片等作品，包括但不限於腳本、草稿、過程檔案、最終可交付物、項目檔案、素材、字幕、封面圖及相關材料。

1.4 Campaign Report

1.4 Campaign 報告

Refers to the report generated by Party B for a specific Campaign, the content of which includes (a) data predicted based on Campaign information, and (b) actual performance data generated by the Influencer's execution; the scope and frequency of the report follow the Platform mechanism.

指乙方就特定 Campaign 生成的報告，內容包括（一）基於 Campaign 資訊預測的資料，以及（二）達人實際執行產生的真實表現資料；報告的範圍與頻率遵循平台機制。

1.5 Publication

1.5 發布

Refers to the act of an Influencer publishing Creative Content on the designated Promotion Platform through a social media service account held by the Influencer personally.

指達人透過其本人持有的社交媒體服務帳戶，在指定推廣平台上發布創意內容的行為。

1.6 Social Media Account (SNS Account)

1.6 社交媒體帳戶（SNS Account）

Refers to a social network service platform account, including but not limited to Facebook, TikTok, Instagram, X (Twitter), YouTube, and LinkedIn.

指社交網絡服務平台帳戶，包括但不限於 Facebook、TikTok、Instagram、X（Twitter）、YouTube、LinkedIn。

1.7 Promotional Materials

1.7 推廣素材

Refers to the materials and information provided by Party A to Party B for the creation of Creative Content, including brand names, logos, trademarks, product samples, image/portrait rights, technical materials, software, product introductions, and other related content.

指甲方為創意內容創作而向乙方提供的材料與資訊，包括品牌名、標識、商標、產品樣品、形象／肖像、技術資料、軟件、產品介紹及其他相關內容。

1.8 Campaign / Campaign Information

1.8 Campaign / Campaign 資訊

Refers to the specific activity, including its parameters, rules, and schedule, issued by Party B based on Party A's requirements regarding the creation and publication of Creative Content.

指乙方基於甲方需求發布的、關於創意內容創作與發布的特定活動及其參數、規則與時間表。

1.9 Party A Account

1.9 甲方帳戶

Refers to the dedicated account opened by Party A on the Platform or on a third-party payment platform designated by Party B, through which Party A may view top-up amounts, budgets, and balances.

指甲方在平台或乙方指定的第三方支付平台上開設的專門帳戶，透過該帳戶甲方可查看充值金額、預算與餘額。

1.10 Airwallex

1.10 Airwallex

Refers to Airwallex and its website/application, currently designated by Party B as the third-party payment platform. Party B reserves the right to change the third-party payment platform at its sole discretion.

指 Airwallex 及其網站／應用程式，目前由乙方指定為第三方支付平台。乙方保留自主決定更換第三方支付平台的權利。

1.11 Platform

1.11 平台

Refers to the official website and/or mobile application of Party B through which Party A initiates, manages, and settles Campaigns.

指甲方用以發起、管理並結算 Campaign 的乙方官方網站及／或移動應用程式。

1.12 Recommended Influencer

1.12 推薦達人

Refers to a social media content creator identified by Party B through the Platform's algorithms and management processes and recommended to Party A, who actually undertakes the promotional delivery. The Recommended Influencer is an independent third party and does not have a labor or employment relationship with either Party to this Agreement.

指經乙方透過平台演算法與管理流程識別並向甲方推薦的、實際承擔推廣交付的社交媒體內容創作者。推薦達人為獨立第三方，與本協議任一方均不構成勞動或僱傭關係。

1.12a Contractual Relationship

1.12a 合同關係

The brand and the Recommended Influencer establish an independent promotion cooperation relationship through the Platform; the Parties do not directly execute a separate contract, and their rights and obligations are governed by the Campaign information confirmed on the Platform and the terms of this Agreement. As the Platform operator, BeeMatch only provides matching, brokerage, and technical infrastructure services, and does not become a party to the contract between the brand and the Influencer, nor does it assume guarantee liability for the Influencer's performance in accordance with the Campaign information.

品牌方與推薦達人透過平台建立獨立的推廣合作關係，雙方不直接簽署獨立合約，其權利義務以平台確認的 Campaign 資訊及本協議條款為準。BeeMatch 作為平台方，僅提供配對、撮合與技術基礎設施服務，不成為品牌方與達人之間合約的當事方，亦不對達人是否按 Campaign 資訊履約承擔保證責任。

1.13 Credits

1.13 積分（Credits）

Refers to promotional non-cash value units that may be granted by Party B or the Platform in accordance with publicly published credit rules (the "Credit Rules"). Credits do not constitute consideration, do not bear interest, cannot be exchanged for cash, and are not transferable; they may only be used to offset qualifying payments in accordance with the rules permitted by the Platform from time to time.

指乙方或平台依據公開發布的積分規則（以下簡稱「積分規則」）可能授予的促銷性非現金價值單位。積分不構成對價、不計利息、不可兌換現金、不可轉讓，僅可按平台不時允許的規則抵減符合條件款項。

Article 2 · Scope of Cooperation

第二條 · 合作內容與範圍

The Parties may engage in multiple specific cooperations under this Agreement. The specific content, channels, budget, and schedule of each cooperation shall be as set forth in the Campaign information published by Party B on the Platform and confirmed by Party A. Matters not covered in the Campaign information shall be governed by this Agreement.

雙方可在本協議項下開展多次具體合作。每次合作的具體內容、渠道、預算與時間表，以乙方在平台發布並經甲方確認的 Campaign 資訊為準。Campaign 資訊未盡事宜，以本協議約定為準。

The Campaign information displayed on the Platform forms an integral part of this Agreement and has the same legal effect as this Agreement. For the avoidance of doubt, any content usage rights, advertising authorization rights, retention period requirements, Bio link obligations, exclusivity arrangements, collaborative posting requirements, adaptation rights, and other Campaign-specific deliverables or permissions shall be governed by the Campaign information or final order details published on the Platform and confirmed by Party A; in the event of any inconsistency, the Campaign information or final order details shall prevail.

平台展示的 Campaign 資訊構成本協議的組成部分，與本協議具有同等法律效力。為避免疑義，任何內容使用權、廣告授權權、留存期要求、Bio 連結義務、獨家安排、協作發文要求、改編權及其他 Campaign 特定的交付物或權限，均以平台展示並經甲方確認的 Campaign 資訊或最終訂單詳情為準；如發生任何不一致，以 Campaign 資訊或最終訂單詳情為準。

Article 3 · Term of Cooperation

第三條 · 合作期限

This Agreement is a long-term cooperation framework and shall remain in force from the Effective Date. The start and end dates of each Campaign shall be as specified in the corresponding Campaign information.

本協議為長期有效合作框架，自生效日起持續有效。各 Campaign 的起止日期以對應的 Campaign 資訊為準。

Article 4 · Campaign Collaboration Process and Delivery Requirements

第四條 · Campaign 協作流程與交付要求

During the performance of the Agreement, the Parties may communicate and negotiate through email or other written means regarding product selling points, promotion windows, strategies, and content specifications; the final terms shall be those of the Campaign information displayed on the Platform.

履約過程中，雙方可透過電郵或其他書面方式就產品賣點、推廣窗口、策略與內容規範進行溝通協商；最終以平台展示的 Campaign 資訊為準。

Party A shall confirm the Campaign information on the Platform, and Party B shall organize and implement the promotion accordingly. Matters not covered in the Campaign information shall be supplemented by this Agreement. The Campaign information displayed on the Platform forms an integral part of this Agreement and has the same legal effect as this Agreement.

甲方應在平台確認 Campaign 資訊，乙方據此組織與實施推廣。Campaign 資訊未盡事宜由本協議補充。平台展示的 Campaign 資訊構成本協議組成部分，與本協議具有同等法律效力。

For the avoidance of doubt, any content usage rights, advertising authorization rights, publication retention requirements, Bio link obligations, exclusivity arrangements, collaborative posting requirements, adaptation rights, and other Campaign-specific deliverables or permissions shall be governed by the Campaign information or final order details published on the Platform and confirmed by Party A; in the event of any inconsistency, the Campaign information or final order details shall prevail.

為避免疑義，任何內容使用權、廣告授權權、發布留存要求、Bio 連結義務、獨家安排、協作發文要求、改編權及其他 Campaign 特定交付物或權限，均以平台展示並經甲方確認的 Campaign 資訊或最終訂單詳情為準；如發生任何不一致，以 Campaign 資訊或最終訂單詳情為準。

Article 5 · Fees, Payment, and Credits

第五條 · 費用、支付與積分

Party A shall pay the price quoted by Party B on the Platform for each Recommended Influencer selected by Party A (the "Quotation"), as well as any transaction service fees and/or other applicable fees (if any). Party A may set promotion parameters (such as platform, influencer language, region, etc.) and budget for each Campaign on the Platform; Party B will identify and recommend suitable Influencers based on Party A's Campaign needs, budget, and preferences. The Platform may display a Quotation separately for each Recommended Influencer. Party A's selection or confirmation of cooperation with a Recommended Influencer on the Platform constitutes acceptance of the corresponding Quotation.

甲方應按乙方在平台針對每個甲方選定的推薦達人所報價格（以下簡稱「報價」），以及任何交易服務費及／或其他適用費用（如有）進行支付。甲方可在平台為每個 Campaign 設定推廣參數（如平台、達人語言、地區等）與預算；乙方將基於甲方的 Campaign 需求、預算與偏好，識別並推薦合適的達人。平台可能針對每個推薦達人單獨顯示報價。甲方在平台選擇或確認與某推薦達人合作，即視為已接受相應報價。

5.1 Payment Methods (any one or combination)

5.1 支付方式（可選其一或組合）

• Wallet Payment: Party A tops up the Platform wallet through the "Top-Up" function; the wallet balance may be used to pay the Quotation and other applicable fees. Once Party A selects or confirms cooperation with a Recommended Influencer, Party B is entitled to directly deduct the corresponding Quotation and fees from Party A's account, and the balance will be updated accordingly.
• 錢包支付：甲方透過「充值」功能向平台錢包充值；錢包餘額可用於支付報價及其他適用費用。甲方選擇或確認與推薦達人合作後，乙方有權直接從甲方帳戶中扣除相應報價及費用，餘額相應更新。
• Card Payment: Party A binds a payment card through "Set Up Payment Method". The corresponding Quotation and fees will be automatically deducted from the bound card; Party A may update the bound card on the Platform.
• 銀行卡支付：甲方透過「設定支付方式」綁定支付卡。相應報價及費用將自動從綁定卡扣除；甲方可在平台更新綁定卡。
• Combined Payment: Wallet balance is applied first; any shortfall is deducted from the bound card. Party A may set the deduction order on the Platform. Upon successful deduction, Party A may obtain a receipt via the email notice provided by the payment service provider. Party B issues the corresponding invoice for the order in accordance with the Platform's invoicing rules; the invoice is available for download on the Platform immediately upon issuance. For the avoidance of doubt, the portion of the order amount settled or offset by Credits will not be invoiced.
• 組合支付：錢包餘額優先抵扣，不足部分從綁定卡扣除。甲方可在平台設定扣款順序。扣款成功後，甲方可透過支付服務商提供的電郵通知取得收據。乙方按平台開票規則為訂單出具相應發票；發票出具後立即可在平台下載。為避免疑義，訂單金額中以積分結算或抵減的部分，不開具發票。

5.1a Payment Channels and Fund Segregation

5.1a 支付通道與資金隔離

Brand-side payments are processed through licensed payment service providers such as Airwallex, and Influencer-side compensation is transferred through licensed payment service providers such as Airwallex. BeeMatch itself does not hold or custody brand-side funds; wallet balances are held by the payment service provider in accordance with the relevant licensing requirements. The rights and obligations between the brand and payment service providers such as Airwallex shall be governed by the agreements signed by each with the payment service provider.

品牌方付款透過 Airwallex 空中雲匯等持牌支付服務商處理，達人側報酬透過 Airwallex 空中雲匯等持牌支付服務商轉付。BeeMatch 自身不持有、不託管品牌方資金，錢包餘額由支付服務商按相關持牌要求存管。品牌方與 Airwallex 空中雲匯等支付服務商之間的權利義務，以各自與支付服務商簽署的協議為準。

5.2 After Service Commencement

5.2 服務啟動後

After the service commences, Party B will periodically track performance and provide Campaign reports to Party A in accordance with Section 1.4.

服務啟動後，乙方將按 1.4 條定期追蹤表現並向甲方提供 Campaign 報告。

5.3 Taxes

5.3 稅務

All amounts under this Agreement are exclusive of taxes (including but not limited to value-added tax, goods and services tax, sales tax, and similar taxes). Each Party shall bear its own taxes payable in accordance with applicable law. Unless otherwise expressly agreed in writing, Party A shall not withhold or deduct any taxes from payments due to Party B.

本協議項下所有金額均不含稅（包括但不限於增值稅、商品與服務稅、銷售稅及類似稅種）。各方應根據適用法律各自承擔其應納稅費。除非另有明確書面約定，甲方不得自應付乙方的款項中預扣或扣除任何稅款。

5.4 Payment Failure

5.4 支付失敗處理

In the event of payment failure, Party B may suspend the relevant Services. If Party A does not update the payment method within the period prescribed by the Platform, Party B may terminate the relevant Campaign.

發生支付失敗時，乙方可暫停相關服務。如甲方未在平台規定期限內更新支付方式，乙方可終止相關 Campaign。

5.5 Balance Withdrawal

5.5 餘額提取

Party A may withdraw account balance at any time. The third-party payment platform may charge transaction service fees in accordance with its terms; cost sharing shall follow the Platform's publicly published rules.

甲方可隨時提取帳戶餘額。第三方支付平台可能依其條款收取交易服務費；成本分攤遵循平台公開規則。

5.5a Nature of BeeMatch Revenue

5.5a BeeMatch 收入性質

The fees charged by BeeMatch to brands include: (a) SaaS software service fees (Platform usage fees), and (b) matching service fees (a certain percentage of the actual transaction amount of the Campaign). The foregoing fees constitute consideration for the technical and matching services provided by BeeMatch, and do not constitute custody fees, commissions, or deductions from Influencer compensation.

BeeMatch 向品牌方收取的費用包括：（一）SaaS 軟件服務費（平台使用費），以及（二）撮合服務費（基於 Campaign 實際成交金額的一定比例）。上述費用均屬於 BeeMatch 提供技術與撮合服務的對價，不構成資金託管費、佣金或達人報酬的抽成。

5.6 Credit Rules

5.6 積分規則

Where Credits are granted, they shall be applied in accordance with the Credit Rules in effect at the time the relevant top-up is credited. Credits may only be used to offset qualifying payments, and cannot be withdrawn, exchanged for cash, or transferred. The maximum Credits usable for any single order shall not exceed 5% of that order's Quotation. Credits do not bear interest and do not constitute consideration. The granted amount will be displayed in Party A's account after crediting. If Party A cancels a Campaign or opts for a refund (in whole or in part), any previously granted, unlocked, matched, or used Credits will be automatically revoked, invalidated, or clawed back in accordance with the Credit Rules and Platform settings then in effect. The portion settled by Credits will not be invoiced; invoices will be issued only for the portion actually paid by Party A in cash, debit/credit card, or other cash-equivalent means.

如有積分授予，按相關充值到帳時點適用的積分規則執行。積分僅可用於抵減符合條件款項，不可提取、不可兌換現金、不可轉讓。任何單筆訂單可使用的積分上限為該筆報價的 5%。積分不計利息，不構成對價。授予金額將在入帳後顯示於甲方帳戶。如甲方取消 Campaign 或選擇退款（部分或全部），此前已授予、已解鎖、已配對或已使用的積分，將按屆時有效的積分規則與平台設定自動撤銷、失效或追回。以積分結算的部分不開具發票；發票僅就甲方以現金、扣／信用卡或其他現金等價支付方式實際支付的部分出具。

Article 6 · Rights and Obligations of Party A (the Principal)

第六條 · 委託方（甲方）的權利與義務

Party A may initiate Campaign orders on the Platform for products that Party A owns or for which Party A has obtained lawful authorization to promote. If Party A initiates an order for a product that Party A does not own or for which Party A has not obtained lawful authorization (including agency rights), all liability and losses arising from the order being invalid or infringing shall be borne by Party A; Party B reserves all rights and remedies.

甲方可在平台就其擁有或獲得合法授權推廣的產品發起 Campaign 訂單。如甲方就其不擁有或未獲得合法授權（包括代理權）的產品發起訂單，由此導致訂單無效或侵權的，所有責任與損失由甲方承擔；乙方保留一切權利與救濟。

Party A shall bear the fees payable in accordance with Article 5 of this Agreement; the allocation of transaction service fees shall follow the Platform's publicly published rules.

甲方應按本協議第五條承擔應付費用；交易服務費的分攤遵循平台公開規則。

Party A shall provide promotional materials in a timely and complete manner, and shall ensure that the materials are true, lawful, and compliant, do not infringe any third-party rights (including intellectual property rights, reputation rights, portrait rights, and privacy rights), and comply with applicable laws, industry standards, and Promotion Platform review requirements.

甲方應及時、完整地提供推廣素材，並保證素材真實、合法、合規，不侵犯任何第三方權利（包括知識產權、名譽權、肖像權、隱私權），符合適用法律、行業標準與推廣平台審核要求。

Party A shall ensure that the promotional materials do not contain viruses, trojans, malicious code, malicious redirects, hidden charges, or other factors that may cause privacy leakage or property damage. If any of the foregoing is found by the Platform during promotion, Party B may immediately suspend the Services and notify Party A; if the Platform asserts any claim against Party B as a result, all liability shall be borne by Party A, who shall compensate Party B for losses suffered as a result.

甲方應保證推廣素材不攜帶病毒、木馬、惡意程式、惡意跳轉、隱藏扣費或其他可能導致隱私外洩或財產損失的因素。如推廣過程中被平台發現存在上述問題，乙方可立即暫停服務並通知甲方；如平台因此向乙方主張權利，所有責任由甲方承擔，並應賠償乙方因此遭受的損失。

Party B shall ensure that Party A obtains the usage rights, advertising authorization rights, adaptation rights, and other content-related rights selected and displayed in the Platform Campaign information or final order details. The scope, term, territory, and licensed use of such rights shall be as specified in the Campaign information or final order details confirmed by Party A on the Platform. Party A assumes all risk for any modifications or derivative creations made by it, and Party B bears no responsibility for their legality.

乙方應確保甲方獲得平台 Campaign 資訊或最終訂單詳情中選定並展示的使用權、廣告授權權、改編權及其他內容相關權利。上述權利的範圍、期限、地域與許可用途，以甲方在平台確認的 Campaign 資訊或最終訂單詳情為準。甲方自行進行的任何修改或衍生創作風險自擔，乙方不對其合法性承擔責任。

If a Recommended Influencer fails to deliver Creative Content that meets the requirements as agreed (including but not limited to failing to publish on time or failing to submit necessary deliverables), Party A may, in respect of Creative Content already produced, obtain usage rights within the scope agreed in the corresponding Campaign information or final order details.

如推薦達人未按約定交付符合要求的創意內容（包括但不限於未按時發布、未提交必要可交付物），甲方可就已產出的創意內容，按相應 Campaign 資訊或最終訂單詳情中約定的範圍取得使用權。

Party B shall coordinate and ensure that the Recommended Influencer provides the advertising authorization, whitelist permissions, publication links, collaboration permissions, or other platform-specific rights selected in the Campaign information or final order details.

乙方應協調並確保推薦達人提供 Campaign 資訊或最終訂單詳情中選定的廣告授權、白名單權限、發布連結、協作權限或其他平台特定權利。

6.1 Compensation for Non-Delivery Caused by Party A

6.1 甲方原因導致未交付的補償

In order to maintain Platform order and transactional fairness, Party A agrees that the Platform may automatically settle the following compensation to the Recommended Influencer:

為維護平台秩序與交易公平，甲方同意平台可向推薦達人自動結算以下補償：

• If a script/draft has been uploaded but the final delivery cannot be completed due to Party A's failure to review in a timely manner or Party A's cancellation, the Platform may retain 30% of the corresponding Quotation as cancellation compensation;
• 若腳本／草稿已上傳但因甲方未及時審閱或甲方取消導致最終無法交付，平台可留存相應報價的 30% 作為取消補償；
• If the final link has been uploaded but Party A, without reasonable cause, does not use such deliverable, the Platform may retain 50% of the corresponding Quotation as cancellation compensation.
• 若最終連結已上傳但甲方無合理事由未使用該可交付物，平台可留存相應報價的 50% 作為取消補償。

The foregoing compensation shall be borne by Party A. The remaining amount after deducting compensation will be automatically refunded to Party A through the original payment channel.

上述補償由甲方承擔。扣除補償後的剩餘款項，將透過原支付渠道自動退回甲方。

6.2 Logistics and Samples

6.2 物流與樣品

Where samples are involved, Party A shall provide accurate and valid tracking numbers on the Platform. Party B and the Recommended Influencer shall not be liable for the loss of samples caused by Party A; if the logistics record shows delivery but the Recommended Influencer claims non-receipt, the Influencer shall cooperate in providing evidence to facilitate liability determination. If the Recommended Influencer has received the samples but refuses to deliver, delays delivery, or is unable to deliver content that meets the requirements, the Influencer shall return the samples to Party A and bear related costs (including sample loss, shipping, and handling fees), and Party B shall be responsible for coordination and supervision.

涉及樣品的，甲方應在平台提供準確有效的物流單號以便追蹤。因甲方原因導致樣品遺失的，乙方與推薦達人均不承擔責任；如物流記錄顯示已簽收但推薦達人主張未收到，達人應配合提供證據以便判定責任。如推薦達人已收到樣品但拒絕交付、延遲交付或無法交付符合要求的內容，達人應將樣品退回甲方並承擔相關成本（包括樣品損失、運費與處理費），乙方負責協調與監督。

Article 7 · Rights and Obligations of Party B (the Platform)

第七條 · 平台方（乙方）的權利與義務

Party B shall organize and implement promotions in accordance with the Campaign information confirmed by Party A, and shall retain overall management and final discretion over the promotion process and the Platform mechanism.

乙方應按甲方確認的 Campaign 資訊組織與實施推廣，並在推廣流程與平台機制方面保留整體管理與最終裁量權。

Party B shall ensure that the promotions it organizes are lawful and compliant. If, due to Party B's willful misconduct or gross negligence, the Creative Content is illegal or constitutes infringement (including infringement of intellectual property rights, personality rights, or property rights), Party B shall bear corresponding legal liability and compensate Party A for losses; Party A shall have the right to terminate this Agreement.

乙方應保證其組織的推廣合法合規。如因乙方的故意或重大過失，導致創意內容違法或構成侵權（包括侵犯知識產權、人格權或財產權），乙方應承擔相應法律責任並賠償甲方損失，甲方有權解除本協議。

Unless otherwise agreed, the Creative Content published by the Recommended Influencer shall remain continuously accessible on its platform interface during the retention period agreed in the Campaign information or final order details.

除非另有約定，推薦達人發布的創意內容應在其平台介面 Campaign 資訊或最終訂單詳情中約定的留存期內持續可存取。

If the Bio link service is selected in the Campaign information or final order details, the Recommended Influencer shall continuously retain the agreed promotion link in the designated social media Bio position for the selected period.

如 Campaign 資訊或最終訂單詳情中選定 Bio 連結服務，推薦達人應按選定期間在指定社交媒體 Bio 位持續保留約定推廣連結。

If service interruption is caused by scheduled/unscheduled maintenance or page adjustments of the Promotion Platform, Party B shall promptly notify Party A in writing and minimize adverse effects; where alternative solutions exist, Party B shall actively communicate and assist in adjustments; services shall be restored immediately upon completion of the maintenance/adjustment.

如因推廣平台計劃內／計劃外維護或頁面調整導致服務中斷，乙方應及時書面通知甲方並盡量降低不利影響；存在替代方案的，乙方應積極溝通並協助調整；維護／調整完成後立即恢復。

During the cooperation period, Party B may use the promotional materials provided by Party A solely for the purpose of performing this Agreement, and may grant necessary sublicenses to the Recommended Influencer or the Promotion Platform. Other than the foregoing, Party B shall not sublicense such materials to any third party.

合作期內，乙方僅為履行本協議之目的，有權使用甲方提供的推廣素材，並可向推薦達人或推廣平台進行必要的分許可。除此之外，乙方不得將該等素材分許可給任何第三方。

Party B will screen and match Influencers within the scope of parameters set by Party A through its algorithms and management processes; Party A may set a blacklist. The Platform mechanism falls within the scope of Party B's operating autonomy, and Party A has no right to require modifications thereto.

乙方將在甲方設定的參數範圍內，透過其演算法與管理流程篩選與配對達人；甲方可設定黑名單。平台機制屬於乙方經營自主權範圍，甲方無權要求修改。

Party B may display Party A's name and logo on its official website, customer list, and promotional materials, and may prepare case studies reflecting the cooperation under this Agreement; provided, however, that the use of Creative Content itself shall be subject to the scope of license granted by the Influencer and applicable law. Any press releases or case studies containing performance data or quotations shall be subject to Party A's prior written consent.

乙方可在其官方網站、客戶名單與宣傳材料中展示甲方名稱與標識，並可製作體現本協議項下合作的案例研究；但涉及創意內容本身的使用，應受限於達人授予的許可範圍與適用法律約束。任何含表現資料或引述的新聞稿、案例研究，均應事先取得甲方的書面同意。

7.1 Allocation of Responsibilities

7.1 責任分配

Article 8 · Confidentiality

第八條 · 保密義務

"Confidential Information" means all non-public information related to this Agreement that one party (the "Disclosing Party") discloses to the other party (the "Receiving Party") or that the Receiving Party otherwise obtains, including but not limited to: business plans, marketing strategies, pricing and settlement terms, unpublished products/features, customer/user/supplier information, organizational and personnel data, financial materials, technical materials, source files and project files, workflows and data sets, advertising accounts and assets, advertising authorization codes/whitelist permissions/account access rights, statistical data and logs, contracts and legal documents, and all notes, summaries, copies, excerpts, and derivatives thereof, whether or not marked as "confidential".

「保密資訊」指一方（「披露方」）向另一方（「接收方」）披露的或接收方以其他方式獲得的與本協議有關的全部非公開資訊，包括但不限於：商業計劃、行銷策略、定價與結算條款、未發布的產品／功能、客戶／用戶／供應商資訊、組織與人員資料、財務資料、技術資料、源檔案與項目檔案、工作流與資料集、廣告帳戶與資產、廣告授權碼／白名單權限／帳戶存取權限、統計資料與日誌、合約與法律文件，及其全部筆記、摘要、複製件、摘錄與衍生品，無論是否標註「保密」。

The following information does not constitute Confidential Information:

以下資訊不屬於保密資訊：

• Information lawfully held by the Receiving Party prior to disclosure;
• 在披露前已合法由接收方持有；
• Information that becomes public through no breach of the Receiving Party;
• 非因接收方違約而成為公開資訊；
• Information lawfully provided by a third party not subject to a confidentiality obligation;
• 由非負有保密義務的第三方合法提供；
• Information disclosed with the prior written consent of the Disclosing Party.
• 經披露方事先書面同意披露。

8.1 Use and "Need-to-Know"

8.1 使用與「知所必需」

The Receiving Party may use Confidential Information only for the purposes of this Agreement, and may disclose it only to its employees, consultants, and affiliates who need to know for such purposes and who have signed written confidentiality agreements affording no less protection than this Agreement. The Receiving Party shall not use Confidential Information for competitive or other improper purposes, and shall not reverse engineer, decompile, or otherwise copy or adapt it without authorization.

接收方僅可為本協議之目的使用保密資訊，且僅可向為該目的且已簽署不低於本協議保護水平的書面保密協議的員工、顧問、關聯方披露。接收方不得將保密資訊用於競爭或其他不當目的，不得反向工程、反編譯或擅自複製、改編。

8.2 Protective Measures

8.2 保護措施

The Receiving Party shall safeguard Confidential Information in accordance with standards no less protective than those it uses for its own similar information, including access controls, tiered permissions, encryption, logging and backup, data minimization, and appropriate physical and network security. Where personal data or regulated data is involved, the Receiving Party shall also comply with applicable data protection laws and Platform rules, and shall execute data processing terms where necessary.

接收方應按不低於其自有類似資訊的保護標準保管保密資訊，包括存取控制、權限分級、加密、日誌與備份、資料最小化及適當的物理與網絡安全。涉及個人資料或受監管資料時，接收方還應遵守適用的資料保護法律與平台規則，並在必要時簽署資料處理條款。

8.3 Compelled Disclosure

8.3 強制披露

If disclosure is required by law, a court, or a regulatory authority, the Receiving Party shall, to the extent permitted by law, promptly notify the Disclosing Party, and shall disclose only the minimum content required by law, taking reasonable efforts to seek confidential treatment or a protective order.

如依據法律、法院或監管機構要求必須披露，接收方應在法律允許的範圍內及時通知披露方，並僅披露法律要求的最小必要內容，採取合理努力爭取保密處理或保護令。

8.4 Return / Destruction

8.4 返還／銷毀

Upon the Disclosing Party's written request, completion of the cooperation, or termination of this Agreement (whichever is earlier), the Receiving Party shall cease using and return or destroy all Confidential Information (including backups, excerpts, and derivatives), and shall issue a written certification within a reasonable period. Where retention is required by law, the Receiving Party shall continue to be bound by confidentiality obligations during such retention period.

應披露方書面要求、合作完成或本協議終止（以孰早為準），接收方應停止使用並返還或銷毀全部保密資訊（包括備份、摘錄與衍生品），並在合理期限內出具書面證明。如法律要求保留的，接收方應在保留期間繼續承擔保密義務。

8.5 Breach and Remedies

8.5 違約與救濟

Any breach of this Article constitutes a material breach. In addition to damages (including reasonable attorneys' fees and costs), the Disclosing Party shall also be entitled to seek injunctive and equitable relief, without proof of insufficiency of monetary damages.

違反本條任何約定構成重大違約。除損害賠償（包括合理律師費與成本）外，披露方還有權尋求禁令與衡平法救濟，無需證明金錢損害賠償之不足。

8.6 Confidentiality Period

8.6 保密期

Confidentiality obligations shall take effect from the date of first disclosure and shall continue until the information lawfully enters the public domain. Where the time of public disclosure is difficult to determine, confidentiality obligations shall continue for at least five (5) years after the termination of this Agreement. Confidentiality obligations regarding trade secrets, personal data, advertising accounts, and authorization codes shall continue for the longest period permitted by law.

保密義務自首次披露起生效，直至資訊合法進入公知領域為止。如公開時間難以確定，保密義務應自本協議終止後繼續存續至少五（5）年。涉及商業秘密、個人資料、廣告帳戶與授權碼的保密義務，應在法律允許的最長期限內存續。

8.7 Limited Disclosure for Rights Protection

8.7 權利救濟為目的的有限披露

If Party A initiates an order for a product that Party A does not own or for which Party A has not obtained lawful authorization, and thereby infringes the rights of a legitimate brand owner, Party B may, to the minimum extent necessary for rights protection or compliance, disclose Party A's relevant information to that brand owner and competent authorities, and pursue damages.

如甲方就其不擁有或未獲合法授權的產品發起訂單，並因此侵犯合法品牌方權利，乙方可在為權利救濟或合規所必要的最小範圍內，向該品牌方與主管機關披露甲方相關資訊並追究損害賠償。

Article 9 · Breach of Contract and Indemnification

第九條 · 違約責任與賠償

The breaching Party shall, in addition to any other rights and remedies available to the non-breaching Party under law, indemnify the non-breaching Party for all losses, damages, costs, and expenses (including reasonable attorneys' fees, investigation costs, notarization fees, litigation/arbitration costs, and travel expenses) suffered as a result of the breach.

違反本協議的一方，除不影響守約方依法享有的其他權利與救濟外，應賠償守約方因違約而遭受的全部損失、損害、成本與費用（包括合理律師費、調查費、公證費、訴訟／仲裁費與差旅費）。

9.1 Special Provisions for Party A's Material Non-Compliance

9.1 甲方素材違規的特殊約定

If Party A's promotional materials are illegal, violate public order and good morals, infringe third-party rights, or contain false content:

如甲方的推廣素材違法、違反公序良俗、侵犯第三方權利或含有虛假內容：

• Party B may direct the recommended Influencer to modify, take down, or cease publication of the relevant Creative Content, and may report the matter to the Promotion Platform and regulatory authorities, taking reasonable measures to mitigate adverse effects;
• 乙方可指示推薦達人修改、下架或停止發布相關創意內容，並可向推廣平台、監管機構報告，採取合理措施降低不良影響；
• Party B may terminate cooperation with Party A, with paid amounts non-refundable;
• 乙方可終止與甲方的合作，已支付款項不予退還；
• Party A shall bear all losses suffered by Party B, including any direct, indirect, incidental, consequential, special, or punitive damages claimed by any third party (including recommended Influencers), loss of profits, use, or data, fines, penalties, and other liabilities.
• 甲方應承擔乙方因此遭受的全部損失，包括任何第三方（含推薦達人）主張的直接、間接、偶然、後果性、特殊、懲罰性損害賠償，利潤、使用或資料損失，罰款、罰金以及其他責任。

Article 10 · Term, Termination, and Post-Termination Matters

第十條 · 期限、終止與善後

This Agreement may be amended or terminated early by mutual written agreement of both Parties.

本協議經雙方書面協商一致，可予修訂或提前終止。

If performance of this Agreement becomes impossible in whole or in part due to force majeure or changes in applicable laws or regulatory policies, the Parties may negotiate termination of this Agreement.

如因不可抗力或適用法律、監管政策變化導致本協議全部或部分履行不能，雙方可協商終止本協議。

Unless otherwise expressly provided in this Agreement, the non-breaching Party may immediately terminate this Agreement upon the occurrence of any of the following circumstances:

除本協議另有明確相反約定外，發生下列情形之一的，守約方可立即解除本協議：

• the breaching Party violates laws and regulations, and thereby causes material harm to the legitimate rights and interests of the non-breaching Party;
• 違約方違反法律法規，並因此對守約方的合法權益造成重大損害；
• the breaching Party fails to remedy within a reasonable period after written notice from the non-breaching Party.
• 違約方經守約方書面通知後未在合理期限內補救。

The termination or expiration of this Agreement shall not affect any liabilities that have already accrued (including liability for breach) or the settlement of amounts then due.

本協議的終止或到期不影響已經產生的責任（包括違約責任）或屆時應付金額的結算。

Article 11 · Governing Law and Dispute Resolution

第十一條 · 適用法律與爭議解決

The conclusion, validity, performance, interpretation, and dispute resolution of this Agreement shall be governed by the laws of the Hong Kong Special Administrative Region (excluding its conflict-of-laws rules).

本協議的訂立、效力、履行、解釋與爭議解決均適用香港特別行政區的法律（不含其衝突法規則）。

Any dispute arising out of or in connection with this Agreement that cannot be resolved through negotiation shall be submitted to the courts of the Hong Kong Special Administrative Region with competent jurisdiction, which shall have exclusive jurisdiction. The prevailing Party shall be entitled to recover its reasonable attorneys' fees and related costs from the other Party.

因本協議產生的或與本協議相關的、經協商無法解決的任何爭議，應提交香港特別行政區有管轄權的法院排他性管轄。勝訴方有權要求對方賠償其合理律師費與相關費用。

Article 12 · Force Majeure

第十二條 · 不可抗力

If a Party is unable to perform this Agreement due to force majeure (including but not limited to natural disasters, epidemics, governmental acts, war, terrorist attacks, large-scale cyberattacks, and material adjustments to industry policies), it shall notify the other Party in writing within a reasonable time and provide relevant supporting documents. During the continuance of force majeure, the affected Party's performance obligations shall be suspended to the extent affected; the affected Party shall not be liable for breach to such extent.

如一方因不可抗力（包括但不限於自然災害、疫情、政府行為、戰爭、恐怖攻擊、大規模網絡攻擊、行業政策重大調整等）無法履行本協議，應在合理時間內書面通知另一方，並提供有關證明文件。在不可抗力存續期間，受影響一方的履行義務在受影響範圍內暫停，受影響一方就此範圍不承擔違約責任。

Article 13 · Miscellaneous Provisions

第十三條 · 其他約定

Annexes and Order of Precedence: Matters not addressed in this Agreement may be supplemented by written annexes signed by both Parties. In the event of any conflict between an annex and this Agreement, the annex shall prevail.

附件與優先順序：本協議未盡事宜可由雙方簽署書面附件加以約定。如附件與本協議發生衝突，以附件約定為準。

Severability: If any provision of this Agreement is held invalid or unenforceable, the remaining provisions shall continue in full force and effect.

可分割性：本協議任一條款被認定為無效或不可執行的，本協議其餘條款仍持續完全有效。

Execution and Counterparts: This Agreement shall be executed in written form and shall take effect from the Effective Date. It may be executed in counterparts, each of which shall be deemed an original, and all of which together shall constitute one and the same instrument. Handwritten signatures, company seals, or authorized electronic signatures (including PDF copies) shall be deemed valid and enforceable.

簽署與文本：本協議以書面協議形式簽署並自生效日起生效，可分若干簽署，每一份均視為正本，所有正本合為同一份協議。手寫簽名、公司印章或經授權的電子簽名（含 PDF 副本）均視為有效並具有強制執行力。

Amendment: No amendment, modification, or waiver of any provision shall be effective unless made in writing and signed by authorized representatives of both Parties. Updates to Platform terms, online policies, or product documentation shall not constitute amendments to this Agreement unless expressly incorporated by a written amendment signed by the Parties.

修訂：未經雙方授權代表書面簽署，任何條款的修訂、修改或棄權均不生效。平台條款、線上政策或產品文檔的更新不構成本協議的修訂，除非以書面簽署的修訂明確納入。

The headings of any provisions in this Agreement are for convenience of reference only and shall not affect the interpretation of the relevant provisions.

本協議任何條款的標題僅為閱讀便利，不影響相關條款的解釋。

一般聯絡：yongpeng@beematchai.com

General Contact: yongpeng@beematchai.com

法律文書送達：legal@beematchai.com

Legal Notices: legal@beematchai.com

隱私專線：privacy@beematchai.com

Privacy Contact: privacy@beematchai.com

如您對本協議有任何疑問，請透過以下方式聯絡我們：

If you have any questions about this Agreement, please contact us through the following channels:

第十四條 · 聯絡方式

Article 14 · Contact Information

— End of Part II —

— Part II 完 —

Part III — Data Processing Agreement

Part III — 數據處理協議

Data Processing Agreement (\"DPA\")

Data Processing Agreement（「DPA」）

Last Updated: September 5, 2026

最後更新日期：2026 年 9 月 5 日

Preamble

序言

This Data Processing Agreement (\"DPA\") is incorporated by reference into and forms part of each cooperation agreement (including any Promotion Service Framework Agreement or other master service agreement, hereinafter the \"Principal Agreement\") entered into between BeeMatch AI Technology Limited and the customer accepting the services (hereinafter the \"Customer\").

本《數據處理協議》（以下簡稱「本 DPA」）透過引用納入並構成 BeeMatch AI Technology Limited 與接受服務的客戶（以下簡稱「客戶」）之間簽署的每一份合作協議（包括任何《推廣服務框架協議》或其他主服務協議，以下簡稱「主協議」）的一部分。

When Party B processes Personal Data on behalf of the Customer, this DPA shall automatically apply as part of the Principal Agreement without requiring a separate signature. By signing the Principal Agreement that incorporates this DPA, or — in the case of services accepted through online terms — by accessing or using the services after this DPA has been made available to the Customer, the Customer agrees to the terms of this DPA.

當乙方代表客戶處理個人資料時，本 DPA 自動作為主協議的組成部分適用，無需另行簽署。客戶透過簽署納入本 DPA 的主協議，或對於透過線上條款接受服務的情形，客戶在本 DPA 向其提供後存取或使用服務，即同意本 DPA 的條款。

This DPA supplements the Principal Agreement. In the event of any conflict between this DPA and the Principal Agreement, this DPA shall prevail solely with respect to the data processing and data protection matters addressed herein. The \"Effective Date\" of this DPA shall be the effective date of the Principal Agreement; if the Principal Agreement provides otherwise or requires a separate effective date, that date shall apply.

本 DPA 是對主協議的補充。如本 DPA 與主協議存在任何衝突，僅就本 DPA 涉及的資料處理與資料保護事項，以本 DPA 約定為準。本 DPA 的「生效日」為主協議生效日；如主協議另有約定或要求另行生效日，則以該日期為準。

Chapter 1 · Terms and Definitions

第一章 · 術語與定義

Capitalized terms used but not defined in this DPA shall have the meanings given in the Principal Agreement. Unless the context requires otherwise, the following terms shall have the meanings set out below in this DPA:

本 DPA 中使用但未定義的、已大寫的術語，其含義以主協議約定為準。除上下文另有所指外，下列術語在本 DPA 項下具有如下含義：

\"Affiliate\" means any entity that directly or indirectly controls, is controlled by, or is under common control with the relevant entity. For the purposes of this definition, \"control\" means the direct or indirect ownership or control of more than 50% of the voting rights of such entity.

「關聯方」（Affiliate）：指直接或間接控制、被控制或與本主體共同受控的任何實體。「控制」就本定義而言指直接或間接擁有或控制該主體 50% 以上表決權。

\"Applicable Data Protection Law\" means: (a) all data protection laws and regulations applicable to the European Economic Area and Switzerland, including (i) Regulation (EU) 2016/679 (the \"GDPR\"), and (ii) the Swiss Federal Data Protection Act of 19 June 1992 (SR 235.1) and its revised version of 25 September 2020, as applicable; (b) all data protection laws and regulations applicable to the United Kingdom, including the UK GDPR and the Data Protection Act 2018; (c) the California Privacy Law, as defined herein; and (d) any other applicable data protection laws.

「適用資料保護法律」（Applicable Data Protection Law）：(a) 適用於歐洲經濟區與瑞士的所有資料保護法律法規，包括 (i)《通用資料保護條例》（歐盟 2016/679，即「GDPR」），以及 (ii) 1992 年 6 月 19 日《瑞士聯邦資料保護法》（SR 235.1）及其 2020 年 9 月 25 日修訂版（如適用）；(b) 適用於英國的所有資料保護法律法規，包括英國 GDPR 與《2018 年資料保護法》；(c) 加州隱私法律，如本 DPA 所定義；及 (d) 任何其他適用的資料保護法律。

\"Authorized Affiliate\" means an entity that has an ownership or control relationship with the Customer, or that is under common control with the Customer; \"control\" means the direct or indirect power to direct or influence the management and policies of such entity, whether through voting securities, contracts, or other means.

「授權關聯方」（Authorized Affiliate）：指與客戶存在所有權或控制關係、或共同受控的實體；「控制」指直接或間接擁有指導或影響該實體管理與政策的權力，無論透過有表決權證券、合同或其他方式。

\"California Privacy Law\" means the California Consumer Privacy Act (prior to January 1, 2023), and thereafter the California Privacy Rights Act.

「加州隱私法律」（California Privacy Law）：指《加州消費者隱私法》（2023 年 1 月 1 日之前），其後指《加州隱私權利法》。

\"Controller\" means, for the purposes of this DPA, the Customer.

「控制者」（Controller）：在本 DPA 中指客戶。

\"Controller Data\" means any Personal Data that the Processor processes on behalf of the Customer pursuant to or in connection with the Principal Agreement.

「控制者資料」（Controller Data）：指處理者根據主協議或與主協議相關地代表客戶處理的任何個人資料。

\"Customer\" means the entity that determines the purposes and means of the processing of Personal Data, including any of its Authorized Affiliates, and where applicable, the \"Business\" as defined in the California Privacy Law.

「客戶」（Customer）：指決定個人資料處理目的與方式的實體，包括其任何授權關聯方；如適用，亦包括加州隱私法律所定義的「企業」（Business）。

\"Data Breach\" means a security incident that violates security requirements and results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Controller Data.

「資料泄露」（Data Breach）：指違反安全要求，導致控制者資料被意外或非法銷毀、丟失、篡改、未授權披露或存取的安全事件。

\"Permitted Purpose\" means the scope necessary for the Processor to use Controller Data in providing services to the Controller, including but not limited to personalized content generation, automated marketing communications, integration with third-party products (as defined in the Principal Agreement) and/or the Controller's third-party systems, and any other purposes specified in this DPA or otherwise agreed by the Parties in writing.

「允許目的」（Permitted Purpose）：指處理者為向控制者提供服務而使用控制者資料的必要範圍，包括但不限於個性化內容生成、自動化行銷通訊、與第三方產品（如主協議所定義）及／或控制者的第三方系統整合，以及本 DPA 中另行指定或雙方另行書面約定的其他目的。

\"Personal Data\" means any information relating to an identified or identifiable natural person that can directly or indirectly identify such natural person.

「個人資料」（Personal Data）：指任何與已識別或可識別的自然人有關的、能够直接或間接識別該自然人的資訊。

\"Processing\" means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organization, sharing, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or restriction, erasure, or destruction.

「處理」（Processing）：指對個人資料進行的任何操作或一組操作，無論是否採用自動化手段，包括收集、記錄、組織、共用、結構化、儲存、改編或變更、檢索、諮詢、使用、透過傳輸披露、傳播或以其他方式提供、對齊或限制、刪除或銷毀。

\"Processor\" means BeeMatch AI Technology Limited and any of its Affiliates that process Personal Data on behalf of the Customer, and where applicable, the \"Service Provider\" as defined in the California Privacy Law.

「處理者」（Processor）：指 BeeMatch AI Technology Limited 及其任何代表客戶處理個人資料的關聯方，如適用，亦包括加州隱私法律所定義的「服務提供商」（Service Provider）。

\"Regulator\" means any regulatory authority with jurisdiction over the provision or receipt of the services or over the processing of Personal Data pursuant to Applicable Data Protection Law.

「監管機構」（Regulator）：指根據適用資料保護法律對服務提供或接受、或對個人資料處理擁有管轄權的任何監管機構。

\"Restricted Transfer\" means: (i) where the EU GDPR applies, the transfer of Personal Data from the European Economic Area to a third country not recognized by the European Commission as providing an adequate level of protection; (ii) where the UK GDPR applies, the transfer of Personal Data from the United Kingdom to a third country not recognized by the UK ICO as providing an adequate level of protection; and (iii) any other transfer of Personal Data that is subject to restrictions under Applicable Data Protection Law.

「受限傳輸」（Restricted Transfer）：(i) 適用歐盟 GDPR 時，將個人資料從歐洲經濟區傳輸至未獲歐盟委員會充分性認定的第三國；(ii) 適用英國 GDPR 時，將個人資料從英國傳輸至未獲英國 ICO 充分性認定的第三國；及 (iii) 根據適用資料保護法律受限制的任何其他個人資料傳輸。

\"Services\" means the products and services provided by the Processor to the Controller pursuant to the Principal Agreement through an order form or link.

「服務」（Services）：指處理者根據主協議透過訂單或連結向控制者提供的產品與服務。

\"Sub-processor\" means any third-party data processor engaged by the Processor to process Personal Data on behalf of the Controller in accordance with the Processor's instructions (consistent with the instructions given by the Controller to the Processor) and the written subcontract terms.

「分處理者」（Sub-processor）：指處理者委託的、代表控制者並按處理者傳達的指示（與控制者向處理者發出的指示一致）及書面分包條款處理個人資料的任何第三方資料處理者。

Terms such as \"Commission\", \"Data Subject\", \"Member State\", and \"Supervisory Authority\" shall have the meanings ascribed to them in Applicable Data Protection Law, and cognate terms shall be construed accordingly.

「委員會」、「資料主體」、「成員國」、「監管機構」等術語應具有適用資料保護法律所賦予的含義，其同源術語應作相應解釋。

Chapter 2 · Roles and Purposes of the Parties

第二章 · 雙方角色與目的

2.1 Background

2.1 背景

Pursuant to the Principal Agreement, the Controller obtains the right to access and use the Services. In the course of providing the Services, the Processor will process, on behalf of the Controller, Personal Data submitted by the Controller to the Services and stored therein.

控制者與處理者依據主協議，控制者獲得存取並使用服務的權利。在提供服務過程中，處理者將代表控制者處理由控制者提交至服務並儲存於服務中的個人資料。

The Parties enter into this DPA to ensure that the Processor's processing activities with respect to Controller Data comply with Applicable Data Protection Law and the requirements thereof regarding the collection, use, and retention of Personal Data of Data Subjects.

雙方簽署本 DPA，旨在確保處理者就「控制者資料」的處理活動符合適用資料保護法律及其關於資料主體個人資料收集、使用與保留的要求。

2.2 Roles of the Parties

2.2 雙方角色

To the extent that the GDPR or UK data protection law applies to Controller Data, the Parties confirm that the Customer is the Controller and Party B is the Processor acting on the Customer's behalf. Where the Customer is a Processor of Controller Data, Party B acts as a Sub-processor of the Customer. For the purposes of the California Privacy Law, in performing the Principal Agreement, Party B acts as a \"Service Provider\" to the Customer, processing Personal Data only on behalf of and in accordance with the Customer's instructions and the requirements of the California Privacy Law.

在 GDPR 或英國資料保護法律適用於控制者資料的範圍內，雙方確認客戶為控制者，乙方為受客戶委託的處理者。在客戶作為控制者資料的處理者時，乙方為客戶的分處理者。就加州隱私法律而言，乙方在履行主協議項下義務時，擔任客戶的「服務提供商」，僅按客戶的指示並依加州隱私法律的要求處理個人資料。

2.3 Controller's Instructions

2.3 控制者的指示

The Customer represents and warrants that: (i) with respect to the processing of Controller Data and any processing instructions given to the Processor, it has complied and will continue to comply with all applicable laws, including Applicable Data Protection Law; (ii) it has provided and will continue to provide all necessary notices to Data Subjects, and has obtained and will continue to obtain all necessary consents and authorizations, to enable the lawful processing of Controller Data by the Processor.

客戶陳述並保證：(i) 在涉及控制者資料處理及向處理者發出的任何處理指示方面，其已遵守並將持續遵守所有適用法律，包括適用資料保護法律；(ii) 已並將持續向資料主體提供所有必要通知，並已獲得或將持續獲得所有必要的同意與授權，以使處理者對控制者資料的處理合法。

2.4 Purpose Limitation

2.4 目的限制

The Processor shall process Controller Data only in accordance with the Controller's lawful instructions expressly set out in this DPA, for the Permitted Purpose, as necessary to comply with applicable law, or as otherwise agreed in writing by the Parties. The Parties confirm that the Principal Agreement and this DPA constitute the complete and final instructions of the Customer to the Processor with respect to the processing of Controller Data.

處理者僅按本 DPA 中明確列出的控制者合法指示、為實現允許目的、為遵守適用法律所需或雙方另行書面約定的事項處理控制者資料。雙方確認，主協議與本 DPA 構成客戶就控制者資料處理向處理者發出的完整且最終指示。

2.5 Data Subject and Regulator Requests

2.5 資料主體與監管機構請求

The Customer shall be responsible for communicating with, and leading responses to, all requests made by Data Subjects under Applicable Data Protection Law, and for all communications with Regulators relating to Controller Data.

客戶應負責與資料主體依據適用資料保護法律提出的所有請求的溝通，並主導其答覆工作；同時負責與監管機構就控制者資料相關的所有溝通。

Chapter 3 · Processor Obligations

第三章 · 處理者義務

3.1 Confidentiality

3.1 保密

The Processor shall grant access to Controller Data only to personnel who require such access to perform their obligations under the Principal Agreement, and shall take commercially reasonable measures to ensure the reliability of such personnel.

處理者將僅向為履行主協議項下義務而需存取控制者資料的人員開放存取權限，並採取商業上合理的措施確保相關人員的可靠性。

3.2 Disclosure to Third Parties

3.2 向第三方披露

Except as permitted by this DPA or the Principal Agreement, the Processor shall not disclose Controller Data to any third party. If disclosure of Controller Data is required by a competent governmental authority or is otherwise mandatory, the Processor shall, to the extent legally permissible and practicable, provide the Customer with reasonable prior written notice so that the Customer has the opportunity to object to such disclosure.

除本 DPA 或主協議允許外，處理者不得向任何第三方披露控制者資料。如應主管政府部門要求或被強制要求披露控制者資料，在法律允許且可行的範圍內，處理者應提前向客戶提供合理書面通知，以便客戶有機會反對該披露。

3.3 Data Retention

3.3 資料保留

The Processor shall retain Controller Data only for as long as necessary for the Customer to fulfill the Permitted Purpose, or as required by Applicable Data Protection Law. Upon termination of this DPA or upon written request from the Customer, the Processor shall delete or return Controller Data, unless retention is required by law.

處理者僅在客戶為允許目的所必需的期間內保留控制者資料，或按適用資料保護法律的要求保留。本 DPA 終止時或應客戶書面請求，處理者應銷毀或返還控制者資料，除非法律要求繼續儲存。

3.4 Assistance with Data Subject and Regulator Requests

3.4 資料主體與監管機構請求的協助

To the extent permitted by law, the Processor shall promptly notify the Customer in writing of any complaints, inquiries, or requests received from Data Subjects or Regulators relating to Controller Data. Considering the nature of the processing and to the extent reasonably practicable, the Processor shall provide the Customer with commercially reasonable assistance. The Processor shall not respond to such requests directly without the Customer's prior written consent, unless required to do so by law.

在法律允許的範圍內，處理者應及時以書面方式通知客戶其收到的、與控制者資料相關的來自資料主體或監管機構的任何投訴、詢問或請求。考慮到處理的性質並在合理可行的範圍內，處理者應向客戶提供商業上合理的協助。未經客戶事先書面同意，處理者不得直接回覆此類請求，除非法律要求其如此。

3.5 Data Protection Impact Assessments

3.5 資料保護影響評估

To the extent required by Applicable Data Protection Law and upon the Customer's request, the Processor shall provide the Customer with reasonable assistance necessary for the Customer to fulfill its data protection impact assessment obligations, provided that the Customer cannot obtain such information independently and such information is already in the Processor's possession.

在適用資料保護法律要求且應客戶請求的範圍內，處理者應向客戶提供客戶履行資料保護影響評估義務所必需的合理協助，前提是客戶無法自行獲得相關資訊，且該資訊已為處理者所掌握。

3.6 Security Measures

3.6 安全措施

The Processor shall implement and maintain appropriate technical, physical, and organizational measures to protect Controller Data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access (a \"Data Security Incident\"). Such measures shall take into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the risk to the rights and freedoms of Data Subjects.

處理者應實施並維持適當的技術、物理與管理措施，以保護控制者資料免遭意外或非法銷毀、意外丟失、篡改、未授權披露或存取（「資料安全事件」）。該等措施應考慮技術發展水準、實施成本以及處理的性質、範圍、背景與目的，以及對資料主體權利與自由的風險。

The Customer understands that security measures evolve with technological advances, and the Processor may update or modify such measures from time to time, provided that such updates and modifications do not reduce the overall level of security of the services purchased by the Customer. The Customer shall be responsible for reviewing the data security information provided by the Processor and independently determining whether the Services meet the Customer's requirements under Applicable Data Protection Law.

客戶理解安全措施隨技術進步而發展，處理者可不定時更新或修改安全措施，但前提是該等更新與修改不會降低客戶所購買服務的整體安全水準。客戶應負責審閱處理者提供的資料安全相關資訊，並獨立判斷服務是否符合客戶在適用資料保護法律下的要求。

Notwithstanding the foregoing, except as otherwise provided in this DPA, the Customer is responsible for its secure use of the Services, including protecting its account authentication credentials, ensuring the security of Controller Data before and after transmission, and taking appropriate steps to encrypt or back up Controller Data uploaded to the Services.

儘管有上述約定，除本 DPA 另有規定外，客戶對其安全使用服務承擔責任，包括保護其帳戶身分驗證憑證、保護控制者資料在傳輸前後的安全，並採取適當步驟加密或備份上傳至服務的控制者資料。

Chapter 4 · Data Security Incident Handling

第四章 · 資料安全事件處理

4.1 Notification

4.1 通知

Upon becoming aware of any Data Security Incident, the Processor shall promptly: (i) notify the Customer no later than 72 hours after the Processor confirms the occurrence of a Data Security Incident affecting Controller Data; (ii) investigate the incident and provide relevant information to the Customer; and (iii) take reasonable measures to mitigate the impact and reduce the risk of further harm.

如處理者知悉任何資料安全事件，應及時：(i) 通知客戶，最遲不超過處理者確認發生影響控制者資料的資料安全事件後 72 小時；(ii) 調查事件並向客戶提供相關資訊；(iii) 採取合理措施減輕影響並降低進一步損害的風險。

4.2 Coordination

4.2 協調

The Processor shall provide reasonable assistance to the Customer in fulfilling the Customer's obligations to notify Data Subjects and competent authorities of Data Security Incidents, provided that this Section shall not prevent either Party from complying with its obligations under Applicable Data Protection Law. The Parties agree to consult in good faith on the content of any related public statements.

處理者應向客戶提供合理協助，以履行客戶就資料安全事件通知資料主體與相關主管機構的義務，前提是本條不應妨礙任一方遵守適用資料保護法律下的義務。雙方同意就相關公開聲明的內容進行善意協商。

4.3 Customer-Caused Incidents

4.3 由客戶引起的事件

The obligations of this Chapter do not apply to Data Security Incidents caused by the Customer.

本章義務不適用於由客戶引起的資料安全事件。

Chapter 5 · Audits

第五章 · 審計

The Customer may audit the Processor's compliance with this DPA no more than once per year, unless otherwise required by a Regulator. Such audit shall be conducted by an independent third party reasonably acceptable to the Processor (the \"Auditor\"). At least 30 business days before the on-site audit begins, the Customer must provide the Processor with written notice of the audit and a detailed audit plan. The audit shall be conducted during normal business hours and in a manner that does not unreasonably interfere with the Processor's operations.

客戶可每年不超過一次審計處理者對本 DPA 的合規情況，除非監管機構另有要求。該審計應由經處理者合理接受的獨立第三方（以下簡稱「審計師」）進行。現場審計開始前，客戶必須至少提前 30 個工作日以書面形式通知處理者，並提供詳細的審計計畫。審計應在正常工作時間內進行，且以不不合理干擾處理者營運的方式進行。

Chapter 6 · Use of Sub-processors

第六章 · 分處理者的使用

6.1 General Authorization

6.1 一般同意

The Customer understands and agrees that the Processor may engage Sub-processors to assist in providing the Services and processing Controller Data, provided that such Sub-processors undertake: (a) to process Controller Data only in accordance with the Processor's instructions (which shall be consistent with the instructions given by the Customer to the Processor); (b) to protect Controller Data to a standard no less protective than that set out in this DPA; and (c) to comply with the obligations set out in this DPA to the extent applicable to the scope of their services.

客戶理解並同意，處理者可委任分處理者協助提供服務及處理控制者資料，前提是該等分處理者承諾：(a) 僅按處理者指示處理控制者資料（該指示應與客戶向處理者發出的指示一致）；(b) 保護控制者資料的標準不低於本 DPA 所載標準；及 (c) 在其服務範圍內遵守本 DPA 所載義務。

6.2 Sub-processor List

6.2 分處理者清單

As of the Effective Date, the names of all Sub-processors used by the Processor for the processing of Controller Data under this DPA are listed in Annex 3.

截至生效日，處理者就本 DPA 項下控制者資料處理所使用的全部分處理者名稱，列於附件 3。

6.3 Objection to New Sub-processors

6.3 對新增分處理者的異議

The Processor shall provide the Customer with 10 days' prior notice of any new Sub-processor. The Customer may object to the appointment or replacement of a new Sub-processor, provided that the objection is made in writing, is based on reasonable grounds related to data protection, and is raised within 10 days of the Processor's notice. Any written objection reasonably based on data protection grounds shall not be unreasonably withheld.

處理者應就新增分處理者向客戶提供 10 天的事先通知。客戶可在新增分處理者被委任或替換前提出異議，前提是異議以書面形式作出、基於與資料保護相關的合理理由，且在處理者發出通知後 10 天內提出。任何基於資料保護合理理由的書面異議不應被無理拒絕。

6.4 Liability

6.4 責任

The Processor shall be liable for the acts and omissions of its Sub-processors in the provision of the services to the same extent as if the Processor were performing such Sub-processor services directly under this DPA, unless otherwise provided in the Principal Agreement.

處理者應對其分處理者在提供服務過程中的作為與不作為承擔與處理者直接履行本 DPA 項下分處理者服務同等的責任，除非主協議另有規定。

Chapter 7 · Cross-Border Transfer Arrangements

第七章 · 跨境傳輸安排

Where the Processor processes Controller Data that originates from, and is protected by, Applicable Data Protection Law of a jurisdiction listed in Annex 4 (Cross-Border Transfer Mechanisms), the terms set out in Annex 5 for that jurisdiction shall apply in supplement to this DPA.

如處理者處理來自並受附件 4（跨境傳輸機制）所列司法管轄區適用資料保護法律保護的控制者資料，則附件 5 中針對該司法管轄區的條款應作為本 DPA 的補充適用。

Where the Customer's use of the Services involves \"Restricted Transfers\", the terms set out in Annex 4 (Cross-Border Transfer Mechanisms) shall apply. In the event of any conflict or inconsistency between this DPA and Annex 4, Annex 4 shall prevail.

如客戶使用服務涉及「受限傳輸」，附件 4（跨境傳輸機制）所列條款應予適用。如本 DPA 與附件 4 之間存在任何衝突或不一致，以附件 4 為準。

Chapter 8 · Limitation of Liability

第八章 · 責任限制

In no event shall either Party and its directors, officers, agents, or employees be liable for any claim or liability (whether in contract or tort) arising out of or based upon this DPA in excess of the amounts actually paid by the Customer to the Processor in the 12 months preceding the event giving rise to liability.

在任何情況下，任一方及其董事、高管、代理人或員工均不就因本 DPA 引起或基於本 DPA 的、超過導致責任的事件發生前 12 個月內客戶向處理者實際支付金額的索賠或責任（無論基於合同或侵權）承擔任何責任。

Chapter 9 · General Provisions

第九章 · 一般條款

9.1 Severability

9.1 可分割性

If any provision of this DPA is prohibited or unenforceable in any jurisdiction, it shall be deemed invalid, to the extent of such prohibition or unenforceability, in that jurisdiction, without affecting the validity of the remaining provisions of this DPA. The Parties shall negotiate in good faith to agree on a valid and enforceable replacement provision that achieves the intended effect.

本 DPA 中任何條款在任何司法管轄區被禁止或不可執行的，就該司法管轄區而言，在該禁止或不可執行範圍內視為無效，不影響本 DPA 其餘條款的效力。雙方應善意協商一項有效且可執行的、實現相同效果的替代條款。

9.2 Governing Law

9.2 適用法律

This DPA shall be construed and enforced in accordance with the governing law and jurisdiction clauses in the Principal Agreement, except as otherwise required by Applicable Data Protection Law.

本 DPA 應按主協議中適用法律與管轄條款進行解釋與執行，除非適用資料保護法律另有要求。

9.3 Customer's Undertaking on Behalf of Others

9.3 客戶代為承諾

The Customer accepts and agrees to this DPA on its own behalf and, to the extent required by Applicable Data Protection Law, on behalf of its Authorized Affiliates.

客戶代表自身，並在適用資料保護法律要求的範圍內，代表其授權關聯方接受並同意本 DPA。

9.4 Amendment

9.4 修訂

The Processor may amend this DPA from time to time by posting a revised version on its website and updating the \"Last Updated\" date. Where a change materially affects the Customer's rights or obligations with respect to the processing of Controller Data, the Processor shall provide reasonable advance notice through the Services, by email, or by other reasonable means, and where practicable at least 30 days prior to the effective date of such change.

處理者可透過在網站發布修訂版並更新「最後更新日期」不定時修訂本 DPA。如變更對客戶就控制者資料處理的權利或義務產生重大影響，處理者將透過服務、郵件或其他合理方式提供合理的提前通知，且在可行的情況下至少提前 30 天通知。

9.5 Assignment

9.5 轉讓

The Customer may not assign, in whole or in part, any of its rights or delegate the performance of its obligations under this DPA, directly or indirectly, by operation of law or otherwise, without the Processor's prior consent (such consent not to be unreasonably withheld). The Processor may assign this DPA, without the Customer's consent, to any of its Affiliates or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets.

未經處理者事先同意（該同意不得被無理拒絕），客戶不得直接或間接、依法律施行或其他方式轉讓本 DPA 項下權利的全部或部分，亦不得委託其義務的履行。處理者可在未經客戶同意的情況下，將本 DPA 轉讓給其任何關聯方，或在合併、收購、公司重組或全部或絕大部分資產出售時轉讓。

9.6 No Separate Signature Required

9.6 無需另行簽署

This DPA is intended to be provided electronically and is incorporated by reference into the Principal Agreement. Where the Principal Agreement has effectively incorporated this DPA, or where the Customer has accepted this DPA through the online contracting process described above, this DPA shall be effective without the need for a separate signature page, counterpart, seal, or handwritten signature.

本 DPA 旨在透過線上方式提供，並透過引用納入主協議。主協議已有效納入本 DPA 或客戶已透過上述線上合同流程接受本 DPA 的，本 DPA 不需要單獨的簽署頁、對本、印章或手寫簽名即可生效。

Annex 1 · Details of Processing

附件 1 · 處理詳情（Details of Processing）

I. Categories of Data Subjects

一、資料主體類別

The Personal Data transferred relates to the following categories of Data Subjects: the categories of Data Subjects are determined by the Controller and may include the Customer's clients, prospective clients, business contacts, employees, and other individuals whose Personal Data is provided to the Processor by or on behalf of the Controller in connection with this Agreement (including through integration with third-party products and/or third-party systems, or as part of the Controller's use of the Services).

所傳輸的個人資料涉及以下類別的資料主體：資料主體的類別由控制者決定，可能包括客戶、潛在客戶、業務聯絡人、員工及其他由控制者或按控制者指示提供給處理者的、與本協議（包括透過第三方產品及／或第三方系統整合，或作為控制者使用服務的一部分）相關的個人。

II. Categories of Personal Data Transferred

二、傳輸的個人資料類型

The Personal Data transferred relates to the following categories of data: the categories of Personal Data are determined by the Controller and may include contact information (such as name, email address, telephone number), professional information (such as job title, company, business role), business relationship data, communication preferences, and other data relating to individuals that is provided to the Processor by or on behalf of the Controller under the applicable terms of service of the Parties.

所傳輸的個人資料涉及以下類別的資料：個人資料的類別由控制者決定，可能包括聯絡資訊（如姓名、電子郵件地址、電話號碼）、職業資訊（如職位、公司、業務角色）、業務關係資料、溝通偏好，以及按雙方適用服務條款由控制者或按控制者指示提供給處理者的、與個人相關的其他資料。

III. Sensitive Data Transferred

三、傳輸的敏感資料

The Personal Data transferred relates to the following special categories of data: the categories of Personal Data are determined by the Controller and may include data relating to individuals that is provided to the Processor by or on behalf of the Controller under the applicable terms of service of the Parties.

所傳輸的個人資料涉及以下特殊類別的資料：個人資料的類別由控制者決定，可能包括按雙方適用服務條款由控制者或按控制者指示提供給處理者的、與個人相關的資料。

IV. Frequency of Transfer

四、傳輸頻率

Continuous transfer.

連續傳輸。

V. Nature of Processing

五、處理性質

The Personal Data transferred will be subject to the following basic processing activities: the Processor will process Controller Data for the purpose of providing the Services in accordance with the Principal Agreement and any further instructions given by the Customer in the course of using the Services. Processing operations include personalized service delivery, content generation, analysis and recommendations, integration with third-party products and/or third-party systems, and other operations necessary for the provision of the Services.

所傳輸的個人資料將受以下基本處理活動約束：處理者將根據主協議及客戶在使用服務時的進一步指示，為提供服務之目的處理控制者資料。處理操作包括個性化服務、內容生成、分析與推薦、與第三方產品及／或第三方系統整合，以及提供服務所必需的其他操作。

VI. Purpose of Processing

六、處理目的

The Processor processes Controller Data for the purpose of providing services to the Customer under the Principal Agreement, including personalized content creation, optimization of business communications, and other functionalities provided as part of the Services.

處理者處理控制者資料的目的，是為根據主協議向客戶提供服務，包括個性化內容創建、業務溝通優化，以及作為服務一部分提供的其他功能。

VII. Duration of Processing

七、處理持續時間

The term of the Principal Agreement, plus the period from the expiration of such term until the Processor deletes all Controller Data in accordance with this DPA.

主協議的有效期，加上自該期限屆滿至處理者根據本 DPA 刪除全部控制者資料的期間。

Annex 2 · Technical and Organizational Security Measures

附件 2 · 技術與組織安全措施（Technical and Organizational Security Measures）

I. Organizational Security

一、組織安全

Personnel Management

人員管理

The security of the BeeMatch environment is the shared responsibility of all employees, contractors, and temporary staff who have access to BeeMatch's information systems. All personnel are required to understand and comply with BeeMatch's policies and procedures.

BeeMatch 環境的安全由所有可存取 BeeMatch 資訊系統的員工、承包商和臨時工作人員共同負責。所有人員均需理解並遵守 BeeMatch 的政策與流程。

Before being granted access, all personnel are required to read the employee handbook, sign a confidentiality agreement, and complete security training. Training and agreements cover, but are not limited to, privacy, information security, physical security, acceptable use, and incident reporting. Upon termination of the employment or contractual relationship, all access rights will be promptly removed.

在授予存取權限之前，所有人員須閱讀員工手冊、簽署保密協議並接受安全培訓。培訓與協議涵蓋但不限於：隱私、資訊安全、實體安全、可接受使用以及事件報告。僱傭或合同關係終止時，所有存取權限將被及時移除。

Security and Awareness Training

安全與意識培訓

New employees receive information security and privacy training as part of their onboarding, and are required to complete such training annually and confirm that they have read and understood BeeMatch's information security policies.

新員工入職時即獲得資訊安全與隱私培訓，並要求每年接受一次培訓且確認已閱讀並理解 BeeMatch 的資訊安全政策。

Certain technical teams are granted elevated access rights to information systems as required by their roles. These teams receive annual specialized training tailored to their roles and responsibilities. All employees are required to report potential security and privacy issues to the relevant internal teams. Failure to report may result in disciplinary action, including but not limited to termination of employment.

部分技術團隊因工作需要被授予資訊系統的較高權限。這些團隊將接受針對其角色與責任的年度專項培訓。所有員工均須向相應內部團隊報告潛在的安全與隱私問題。未予報告可能導致紀律處分，包括但不限於解僱。

Regulatory Compliance

法律法規遵守

BeeMatch works with legal counsel to ensure that the company and its employees identify and comply with applicable laws, regulations, and contractual obligations, and requires all personnel to act in a manner that is both ethical and lawful.

BeeMatch 與法律顧問合作，確保公司及其員工識別並遵守適用的法律、法規和合同義務，並要求所有人員以合乎道德與法律的方式行事。

Secure Software Development Life Cycle (SDLC)

安全開發生命週期（SDLC）

BeeMatch maintains an effective Secure Software Development Life Cycle (SDLC), requiring that code be reviewed and approved before being pushed to production. This process covers feature enhancements, defect fixes, emergency changes, and issue and incident management. Agile processes allow each team to progress at its own release cadence, in continuous integration/continuous deployment (CI/CD) environments.

BeeMatch 採用有效的安全開發生命週期（SDLC），要求代碼在推送至生產環境前須經審核與批准。該流程涵蓋功能增強、缺陷修復、緊急變更、問題與事件管理。敏捷流程允許各團隊按自身發布節奏推進，在持續整合／持續部署（CI／CD）環境中運行。

All code is committed to a version control system with role-based access controls. BeeMatch's code repositories are protected by strong authentication measures, including multi-factor authentication.

所有代碼均提交至版本控制系統，並實施基於角色的存取控制。BeeMatch 代碼倉庫透過包括多因素認證在內的強身分驗證措施加以保護。

Penetration Testing

滲透測試

BeeMatch engages independent third parties to conduct annual penetration testing. Test results are reported to management and a summary of results may be made available to customers upon request. BeeMatch's information security team is responsible for reviewing and prioritizing findings and tracking them to resolution. Customers may not conduct their own penetration tests against BeeMatch.

BeeMatch 委託獨立第三方開展年度滲透測試。測試結果將向管理層彙報，並可應客戶請求提供結果概述。BeeMatch 的資訊安全團隊負責審閱與排序發現項，並跟踪至解決。客戶不得自行對 BeeMatch 進行滲透測試。

II. Technical Controls — Protecting BeeMatch Customer Data

二、技術控制 — 保護 BeeMatch 客戶資料

Data Encryption

資料加密

BeeMatch encrypts data at rest and in transit using industry best practices. All information transmitted to users is delivered over HTTPS, using TLS 1.2 or higher, with AES 256 SHA2 signatures (selected based on client capabilities by default).

BeeMatch 使用業界最佳實務對靜態與傳輸中的資料進行加密。向用戶傳輸的所有資訊均透過 HTTPS 完成，使用 TLS 1.2 或更高版本，配備 AES 256 SHA2 簽名（預設根據用戶端能力選擇）。

Password Security

密碼安全

BeeMatch uses industry-leading services to authenticate users securely. Passwords are hashed and salted using BCrypt or an equivalent scheme (a high-entropy one-way hash algorithm), designed to safeguard security and reduce risk in the event of a user database breach or theft. User passwords are never stored in plaintext.

BeeMatch 使用業界領先的服務安全地驗證用戶身分。密碼使用 BCrypt 或等效方案進行雜湊與加鹽（一種具有高熵的單向雜湊演算法），旨在保障安全並降低用戶資料庫泄露／被盜風險。用戶密碼絕不明文儲存。

Cloud Service Providers

雲服務提供商

BeeMatch uses a serverless architecture across multiple cloud service providers to ensure high availability of the services. Cloudflare CDN is used to provide faster access to BeeMatch's application and to assist in defending against DDoS attacks. Cloudflare is a global leader in content delivery network and DDoS protection services.

BeeMatch 在多個雲服務提供商上採用無伺服器架構，以確保服務的高可用性。使用 Cloudflare CDN 提供對 BeeMatch 應用的更快存取，並協助防範 DDOS 攻擊。Cloudflare 是全球領先的內容傳遞網路與 DDOS 防護服務提供商。

Authorization

授權

Access to all BeeMatch systems is governed by the principle of least privilege, meaning that employees are granted only the access necessary to perform their current duties. Access rights are reviewed at least annually. When an employee leaves, access rights are immediately removed.

BeeMatch 所有系統的存取均基於最小權限原則，即僅授予員工履行當前職責所需的存取權限。存取權限至少每年審閱一次。員工離職時，存取權限立即移除。

System Monitoring, Logging, and Alerting

系統監控、日誌與告警

BeeMatch maintains a centralized log management system that facilitates the recording, correlation, and monitoring of network, operating system, and database logs. Centralized logging is enabled across all production systems.

BeeMatch 擁有集中式日誌管理系統，便於對網絡、作業系統與資料庫日誌進行記錄、關聯與監控。集中式日誌在所有生產系統上啟用。

Such logs are reviewed for signs of intrusion, and alerts are triggered when preset thresholds are reached. The information security team is responsible for handling events when monitoring and alerting thresholds are reached, and tracks security incidents through to remediation or escalation. Production infrastructure is also monitored to ensure availability. BeeMatch maintains business continuity and disaster recovery plans and tests them periodically.

對上述日誌進行審查以發現入侵跡象，並在達到預設閾值時觸發告警。資訊安全團隊負責在達到監控與告警閾值時的事件處理，並將安全事件跟踪至整改或升級。生產基礎設施亦受到監控以保障可用性。BeeMatch 維護業務連續性與災難復原計畫並定期演練。

Endpoint Security

終端安全

BeeMatch endpoints are managed through industry-standard management tools to ensure that policies are followed and that systems receive all relevant security patches in a timely manner.

BeeMatch 終端透過符合業界標準的管理工具進行管理，以確保政策得到遵守，系統及時獲得所有相關的安全補丁。

Vulnerability Management

漏洞管理

Reported vulnerabilities are remediated in a timely manner in accordance with industry best practices. Production systems are subject to continuous vulnerability monitoring, and operating systems are refreshed on a regular basis to remain up to date.

已報告的漏洞按業界最佳實務及時修復。生產系統受到持續漏洞監控，作業系統亦會定期刷新以保持更新。

Annex 3 · Sub-processor List

附件 3 · 分處理者清單（Sub-processor List）

The Customer has authorized BeeMatch AI Technology Limited to engage the Sub-processors listed in this Annex 3 from time to time. This Annex sets out the Sub-processors used as of the Effective Date to process Controller Data under this DPA; in the event of any change in Sub-processors, the Processor will provide the Customer with prior notice in accordance with Section 6.3 of this DPA.

客戶已授權 BeeMatch AI Technology Limited 不時使用附件 3 中所列的分處理者。本附件列出了截至生效日為處理本 DPA 項下控制者資料而使用的分處理者；如分處理者發生變更，處理者將依本 DPA 第 6.3 條的規定向客戶提供事先通知。

Customers may contact us at yongpeng@beematchai.com to obtain the most current Sub-processor list, or view the public version at https://beematchai.com.

客戶可透過 yongpeng@beematchai.com 聯絡我們獲取當前最新的分處理者清單，或在網站 https://beematchai.com 查看公開版本。

Annex 4 · Cross-Border Transfer Mechanisms

附件 4 · 跨境傳輸機制（Cross Border Transfer Mechanisms）

I. Definitions

一、定義

\"EC\" means the European Commission.

「EC」指歐盟委員會。

\"EEA\" means the European Economic Area.

「EEA」指歐洲經濟區。

\"EEA Personal Data\" means Controller Data collected when the Data Subject is located in the European Economic Area.

「EEA 個人資料」指資料主體位於歐洲經濟區時收集的控制者資料。

\"Standard Contractual Clauses\" means: (i) where the EU GDPR applies, the standard contractual clauses adopted by the European Commission on 4 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, with the relevant modules applicable to the relevant transfer; and (ii) where the UK GDPR applies, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses issued by the UK ICO.

「標準合同條款」（Standard Contractual Clauses）指：(i) 適用歐盟 GDPR 時，歐盟委員會 2021 年 6 月 4 日就根據歐洲議會與歐盟理事會 2016/679 號條例所通過的標準合同條款，及其與相關傳輸相關的模組；及 (ii) 適用英國 GDPR 時，由英國 ICO 發布的國際資料傳輸協議（IDTA）或對歐盟標準合同條款的英國附件。

\"Swiss Personal Data\" means Controller Data collected when the Data Subject is located in Switzerland.

「瑞士個人資料」指資料主體位於瑞士時收集的控制者資料。

\"UK Personal Data\" means Controller Data collected when the Data Subject is located in the United Kingdom.

「英國個人資料」指資料主體位於英國時收集的控制者資料。

II. Cross-Border Data Transfer Mechanisms

二、跨境資料傳輸機制

2.1 EEA Personal Data

2.1 EEA 個人資料

The Parties agree that, with respect to Controller Data transferred through the Services from the European Economic Area or Switzerland to any country or recipient not recognized by the European Commission (or, for transfers from Switzerland, by the competent Swiss authority) as providing an adequate level of protection for Personal Data (whether direct or onward transfer), the Standard Contractual Clauses shall apply, with the following selections and additional terms:

雙方同意，對於透過服務從歐洲經濟區或瑞士傳輸至未被歐盟委員會（對於從瑞士傳輸的，則為瑞士主管機關）認定為對個人資料提供充分保護水平的任何國家或接收方的控制者資料（無論是直接傳輸還是後續傳輸），應適用標準合同條款，並作出以下選擇與附加約定：

• Where the Customer is a Controller of the Controller Data and BeeMatch AI Technology Limited processes the Controller Data, Module Two of the Standard Contractual Clauses (Controller-to-Processor) shall apply.
• 在客戶為控制者資料控制者且 BeeMatch AI Technology Limited 處理控制者資料的情況下，應適用標準合同條款的第二模組（控制者—處理者）。
• Where the Customer is a Processor of the Controller Data and BeeMatch AI Technology Limited processes the Controller Data, Module Three of the Standard Contractual Clauses (Processor-to-Processor) shall apply.
• 在客戶為控制者資料處理者且 BeeMatch AI Technology Limited 處理控制者資料的情況下，應適用標準合同條款的第三模組（處理者—處理者）。

For each module, where applicable:

對每個模組，在適用時：

• the optional docking clause in Clause 7 of the Standard Contractual Clauses shall not apply;
• 標準合同條款第 7 條中的可選擇的對接條款（optional docking clause）不適用；
• audits described in Clauses 8.9(c) and (d) of the SCCs shall be conducted in accordance with Chapter 5 of this DPA;
• SCC 第 8.9(c) 和 (d) 條所述的審計應按本 DPA 第五章進行；
• Option 2 shall be selected in Clause 9 of the Standard Contractual Clauses, and the advance notice period for Sub-processor changes shall be as provided in this DPA;
• 標準合同條款第 9 條中應選擇 Option 2，分處理者變更的提前通知期限以本 DPA 規定為準；
• the optional language in Clause 11 of the Standard Contractual Clauses shall not apply;
• 標準合同條款第 11 條中的可選擇語言不適用；
• the liability referred to in Clause 12 shall in no event exceed the limitation of liability set out in this DPA, and under contract, tort, negligence, or any other legal theory, neither Party to this DPA nor any of its Affiliates, directors, officers, employees, agents, service providers, suppliers, or licensors shall be liable to the other Party for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or goodwill;
• 第 12 條所述責任在任何情況下均不得超過本 DPA 中規定的責任限制，且在合同、侵權、疏忽或其他任何法律理論下，本 DPA 任一方或其關聯方、董事、高管、員工、代理人、服務提供商、供應商或許可方均不對另一方承擔任何間接、偶然、特殊、後果性或懲罰性損害賠償，或利潤、收入、資料或商譽損失；
• the certification of deletion of Controller Data referred to in Clause 16(d) of the SCCs shall be provided by the Processor to the Customer only upon the Customer's request;
• SCC 第 16(d) 條所述的控制者資料刪除證明，僅在客戶提出請求時由處理者向客戶提供；
• in Clause 17 (Option 1), the Standard Contractual Clauses shall be governed by the laws of Ireland;
• 第 17 條（Option 1）中，標準合同條款適用愛爾蘭法律；
• in Clause 18(b) of the Standard Contractual Clauses, disputes shall be resolved by the courts of Ireland;
• 標準合同條款第 18(b) 條中，爭議由愛爾蘭法院管轄；
• in Annex I Part A of the Standard Contractual Clauses:
• 在標準合同條款附件 I Part A 中：

1. Data Exporter: the Customer.
2. 資料輸出方：客戶。
3. Contact details: see the signature block of this DPA.
4. 聯絡方式：見本 DPA 簽署行。
5. Data Exporter's role: as set out in Chapter 3 (Roles and Purposes of the Parties) of this DPA.
6. 資料輸出方角色：在本 DPA 第三章（雙方角色與目的）規定。
7. Signature and date: by signing this DPA, the Data Exporter is deemed to have signed the Standard Contractual Clauses, including their annexes, incorporated herein, with effect from the effective date of the Principal Agreement.
8. 簽署與日期：透過簽署本 DPA，資料輸出方視為已簽署此處所納入的標準合同條款，包括其附件，自主協議生效日起生效。
9. Data Importer: the Processor (BeeMatch AI Technology Limited).
10. 資料輸入方：處理者（BeeMatch AI Technology Limited）。
11. Contact details: Yong Peng, yongpeng@beematchai.com.
12. 聯絡方式：Yong Peng，yongpeng@beematchai.com。
13. Data Importer's role: as set out in Chapter 3 (Roles and Purposes of the Parties) of this DPA.
14. 資料輸入方角色：在本 DPA 第三章（雙方角色與目的）規定。
15. Signature and date: by signing this DPA, the Data Importer is deemed to have signed the Standard Contractual Clauses, including their annexes, incorporated herein, with effect from the effective date of this DPA.
16. 簽署與日期：透過簽署本 DPA，資料輸入方視為已簽署此處所納入的標準合同條款，包括其附件，自本 DPA 生效日起生效。

• in Annex I Part B of the Standard Contractual Clauses:
• 在標準合同條款附件 I Part B 中：

1. Categories of Data Subjects: see Annex 1 (Details of Processing) of this DPA.
2. 資料主體類別：見本 DPA 附件 1（處理詳情）。
3. Sensitive Data transferred: see Annex 1 (Details of Processing) of this DPA.
4. 所傳輸的敏感資料：見本 DPA 附件 1（處理詳情）。
5. Frequency of transfer: continuous transfer for the term of this Agreement.
6. 傳輸頻率：自本協議有效期內持續傳輸。
7. Nature of Processing: see Annex 1 (Details of Processing) of this DPA.
8. 處理性質：見本 DPA 附件 1（處理詳情）。
9. Purpose of Processing: see Annex 1 (Details of Processing) of this DPA.
10. 處理目的：見本 DPA 附件 1（處理詳情）。
11. Personal Data retention period: see Annex 1 (Details of Processing) of this DPA.
12. 個人資料保留期限：見本 DPA 附件 1（處理詳情）。

• in Annex I Part C of the Standard Contractual Clauses: the Irish Data Protection Commission shall be the competent supervisory authority;
• 在標準合同條款附件 I Part C 中：愛爾蘭資料保護委員會（Irish Data Protection Commission）為主管監管機構；
• Annex 2 to this Annex (Technical and Organizational Security Measures) shall serve as Annex II to the Standard Contractual Clauses; and
• 本附件的附件 2（技術與組織安全措施）作為標準合同條款的附件 II；以及
• with respect to Swiss Personal Data:
• 關於瑞士個人資料：

1. for the purposes of Annex I.C of Clause 13 of the Standard Contractual Clauses, where a data transfer is governed by the Swiss Federal Data Protection Act of 19 June 1992 (SR 235.1; FADP) or its revised version of 25 September 2020, the competent supervisory authority shall be the Swiss Federal Data Protection and Information Commissioner (FDPIC);
2. 就標準合同條款第 13 條的附件 I.C 而言，在資料傳輸受 1992 年 6 月 19 日瑞士聯邦資料保護法（SR 235.1；FADP）或其 2020 年 9 月 25 日修訂版管轄的範圍內，主管監管機構應為瑞士聯邦資料保護與資訊委員會（FDPIC）；
3. the term \"Member State\" shall not be interpreted as excluding the possibility of Swiss Data Subjects bringing proceedings in Switzerland under Clause 18(c) of the Standard Contractual Clauses to enforce their rights. The Standard Contractual Clauses shall also protect the data of legal entities incorporated in Switzerland until the entry into force of the revised Federal Data Protection Act of 25 September 2020.
4. 「成員國」一詞不應被解釋為排除瑞士資料主體依據標準合同條款第 18(c) 條在瑞士提起訴訟以主張其權利的可能性。標準合同條款亦應保護瑞士法人資料，直至 2020 年 9 月 25 日修訂版聯邦資料保護法生效。

2.2 UK Personal Data

2.2 英國個人資料

The Parties agree that, with respect to UK Personal Data transferred through the Services from the United Kingdom to any country or recipient not recognized by the UK Information Commissioner's Office (ICO) as providing an adequate level of protection for Personal Data (whether direct or onward transfer), the International Data Transfer Agreement (IDTA) issued by the ICO shall apply, as set out in the IDTA Tables below.

雙方同意，對於透過服務從英國傳輸至未被英國資訊專員辦公室（ICO）認定為對個人資料提供充分保護水平的任何國家或接收方的英國個人資料（無論是直接傳輸還是後續傳輸），應適用 ICO 發布的國際資料傳輸協議（IDTA），具體見以下 IDTA 表格。

PART 1: TABLES

PART 1: TABLES

Table 1: Parties

Table 1: Parties

Start Date: see the Effective Date of this DPA.

Start Date: 見本 DPA 生效日。

The Parties:

The Parties:

• Data Exporter (Controller)
• Data Exporter (Controller)
• — Data Importer (Processor)
• — Data Importer (Processor)

Parties' details: see Section 2.1(c)(viii) of this DPA.

Parties' details: 見本 DPA 第 2.1(c)(viii) 節。

Key Contact: see Section 2.1(c)(viii) of this DPA.

Key Contact: 見本 DPA 第 2.1(c)(viii) 節。

Table 2: Transfer Details

Table 2: Transfer Details

UK country's law that governs the IDTA:

UK country's law that governs the IDTA:

• ☒ England and Wales
• ☒ England and Wales
• ☐ Northern Ireland
• ☐ Northern Ireland
• ☐ Scotland
• ☐ Scotland

Primary place for legal claims to be made by the Parties:

Primary place for legal claims to be made by the Parties:

• ☒ England and Wales
• ☒ England and Wales
• ☐ Northern Ireland
• ☐ Northern Ireland
• ☐ Scotland
• ☐ Scotland

The status of the Exporter — In relation to the Processing of the Transferred Data:

The status of the Exporter — In relation to the Processing of the Transferred Data:

• ☒ Exporter is a Controller
• ☒ Exporter is a Controller
• ☐ Exporter is a Processor or Sub-Processor
• ☐ Exporter is a Processor or Sub-Processor

The status of the Importer — In relation to the Processing of the Transferred Data:

The status of the Importer — In relation to the Processing of the Transferred Data:

• ☐ Importer is a Controller
• ☐ Importer is a Controller
• ☒ Importer is the Exporter's Processor or Sub-Processor
• ☒ Importer is the Exporter's Processor or Sub-Processor
• ☐ Importer is not the Exporter's Processor or Sub-Processor (and the Importer has been instructed by another person to act as Processor or Sub-Processor)
• ☐ Importer is not the Exporter's Processor or Sub-Processor (and the Importer has been instructed by another person to act as Processor or Sub-Processor)

Whether UK GDPR applies to the Importer:

Whether UK GDPR applies to the Importer:

• ☒ UK GDPR applies to the Importer's Processing of the Transferred Data
• ☒ UK GDPR applies to the Importer's Processing of the Transferred Data
• ☐ UK GDPR does not apply to the Importer's Processing of the Transferred Data
• ☐ UK GDPR does not apply to the Importer's Processing of the Transferred Data

Linked Agreement:

Linked Agreement:

If the Importer is the Exporter's Processor or Sub-Processor, the agreement between the Parties that sets out the Importer's instructions for Processing the Transferred Data:

如輸入方為輸出方的處理者或分處理者，雙方之間就處理者或分處理者對所傳輸資料的處理指示所達成的協議：

• Name of agreement: the DPA attached to this DPA.
• Name of agreement: 本 DPA 所附的 DPA。
• Date of agreement: same as above.
• Date of agreement: 同上。
• Parties to the agreement: same as above.
• Parties to the agreement: 同上。
• Reference (if any): none.
• Reference (if any): 無。

If the Exporter is a Processor or Sub-Processor, the agreement between the Exporter and the person that set out its Processing instructions (fill in if applicable, otherwise N/A):

如輸出方為處理者或分處理者，輸出方與約定其處理指示的對方之間的協議（若適用則填寫，否則填 N/A）：

• Name of agreement:
• Name of agreement:
• Date of agreement:
• Date of agreement:
• Parties to the agreement:
• Parties to the agreement:
• Reference (if any):
• Reference (if any):

Term — The Importer may Process the Transferred Data for the following time period:

Term — The Importer may Process the Transferred Data for the following time period:

• ☒ the period for which the Linked Agreement is in force
• ☒ the period for which the Linked Agreement is in force
• ☐ time period:
• ☐ time period:
• ☐ (only if the Importer is a Controller or not the Exporter's Processor or Sub-Processor) no longer than [period]
• ☐ (only if the Importer is a Controller or not the Exporter's Processor or Sub-Processor) no longer than [period]

Ending the IDTA before the end of the Term: see the termination provisions of this DPA.

Ending the IDTA before the end of the Term: 見本 DPA 的終止條款。

Ending the IDTA when the Approved IDTA changes: see the termination provisions of this DPA.

Ending the IDTA when the Approved IDTA changes: 見本 DPA 的終止條款。

Can the Importer make further transfers of the Transferred Data?

Can the Importer make further transfers of the Transferred Data?

• ☐ The Importer MAY transfer on the Transferred Data to another organisation or person (who is a different organisation or person from the Importer)
• ☐ The Importer MAY transfer on the Transferred Data to another organisation or person (who is a different organisation or person from the Importer)
• ☒ The Importer MAY NOT transfer on the Transferred Data to another organisation or person (who is a different organisation or person from the Importer)
• ☒ The Importer MAY NOT transfer on the Transferred Data to another organisation or person (who is a different organisation or person from the Importer)

Specific restrictions when the Importer may transfer on the Transferred Data — The Importer MAY ONLY:

Specific restrictions when the Importer may transfer on the Transferred Data — The Importer MAY ONLY:

• ☒ if the Exporter tells it in writing that it may do so.
• ☒ if the Exporter tells it in writing that it may do so.
• ☐ to:
• ☐ to:
• ☐ to the authorised receivers (or the categories of authorised receivers) set out in:
• ☐ to the authorised receivers (or the categories of authorised receivers) set out in:
• ☐ there are no specific restrictions.
• ☐ there are no specific restrictions.

Review Dates — ☐ No review is needed as this is a one-off transfer and the Importer does not retain the Transferred Data

Review Dates — ☐ No review is needed as this is a one-off transfer and the Importer does not retain the Transferred Data

First review date:

First review date:

The Parties must review the Security Requirements at least once:

The Parties must review the Security Requirements at least once:

• ☐ each month(s)
• ☐ each month(s)
• ☐ each quarter
• ☐ each quarter
• ☐ each 6 months
• ☐ each 6 months
• ☒ each year
• ☒ each year
• ☐ each year(s)
• ☐ each year(s)
• ☐ each time there is a change to the Transferred Data, Purposes, Importer Information, TRA or risk assessment
• ☐ each time there is a change to the Transferred Data, Purposes, Importer Information, TRA or risk assessment

Table 3: Transferred Data

Table 3: Transferred Data

Transferred Data: see Annex 1 of this DPA.

Transferred Data: 見本 DPA 附件 1。

Special Categories of Personal Data: see Annex 1 of this DPA.

Special Categories of Personal Data: 見本 DPA 附件 1。

Relevant Data Subjects: see Annex 1 of this DPA.

Relevant Data Subjects: 見本 DPA 附件 1。

Purpose: see Annex 1 of this DPA.

Purpose: 見本 DPA 附件 1。

Table 4: Security Requirements

Table 4: Security Requirements

Security of Transmission: see Annex 2 of this DPA.

Security of Transmission: 見本 DPA 附件 2。

Security of Storage: see Annex 2 of this DPA.

Security of Storage: 見本 DPA 附件 2。

Security of Processing: see Annex 2 of this DPA.

Security of Processing: 見本 DPA 附件 2。

Organisational security measures: see Annex 2 of this DPA.

Organisational security measures: 見本 DPA 附件 2。

Technical security minimum requirements: see Annex 2 of this DPA.

Technical security minimum requirements: 見本 DPA 附件 2。

Updates to the Security Requirements:

Updates to the Security Requirements:

• ☒ The Security Requirements will update automatically if the information is updated in the Linked Agreement
• ☒ The Security Requirements will update automatically if the information is updated in the Linked Agreement
• ☐ The Security Requirements will NOT update automatically if the information is updated in the Linked Agreement
• ☐ The Security Requirements will NOT update automatically if the information is updated in the Linked Agreement

PART 2: EXTRA PROTECTION CLAUSES

PART 2: EXTRA PROTECTION CLAUSES

Extra Protection Clauses:

Extra Protection Clauses:

• (i) Extra technical security protections: N/A
• (i) Extra technical security protections: N/A
• (ii) Extra organisational protections: N/A
• (ii) Extra organisational protections: N/A
• (iii) Extra contractual protections: N/A
• (iii) Extra contractual protections: N/A

PART 3: COMMERCIAL CLAUSES

PART 3: COMMERCIAL CLAUSES

Commercial Clauses: see the Principal Agreement attached to this DPA.

Commercial Clauses: 見本 DPA 所附主協議。

PART 4: MANDATORY CLAUSES

PART 4: MANDATORY CLAUSES

This IDTA A1.0 template was laid before Parliament by the ICO under section 119A of the Data Protection Act 2018 on 2 February 2022 and may be amended from time to time under section 5.4. By signing this DPA, the Parties are deemed to have signed the IDTA, including its annexes, incorporated herein by reference, with effect from the Effective Date of this DPA.

本 IDTA A1.0 模板由 ICO 依據《2018 年資料保護法》第 119A 節於 2022 年 2 月 2 日提交議會，並按第 5.4 節不定時修訂。透過簽署本 DPA，各方視為已簽署此處透過引用納入的 IDTA，包括其附件，自本 DPA 生效日起生效。

Annex 5 · Jurisdiction Specific Terms

附件 5 · 司法管轄區特定條款（Jurisdiction Specific Terms）

Australia

澳大利亞（Australia）

1.1 The definition of \"Applicable Data Protection Law\" includes the Australian Privacy Principles and the Australian Privacy Act 1988.

1.1 「適用資料保護法律」的定義包括《澳大利亞隱私原則》與《1988 年澳大利亞隱私法》。

1.2 The definition of \"Personal Data\" includes \"personal information\" as defined in Applicable Data Protection Law.

1.2 「個人資料」的定義包括適用資料保護法律所定義的「個人資訊」。

Brazil

巴西（Brazil）

2.1 The definition of \"Applicable Data Protection Law\" includes the General Data Protection Law (LGPD).

2.1 「適用資料保護法律」的定義包括《通用資料保護法》（LGPD）。

2.2 The definition of \"Data Breach\" includes security incidents that may pose any relevant risk or harm to Data Subjects.

2.2 「資料泄露」的定義包括可能導致資料主體任何相關風險或損害的安全事件。

2.3 The definition of \"Processor\" includes \"operator\" as defined in Applicable Data Protection Law.

2.3 「處理者」的定義包括適用資料保護法律所定義的「operator」。

Canada

加拿大（Canada）

3.1 The definition of \"Applicable Data Protection Law\" includes the Personal Information Protection and Electronic Documents Act (PIPEDA).

3.1 「適用資料保護法律」的定義包括《聯邦個人資訊保護與電子文檔法》（PIPEDA）。

European Economic Area (EEA)

歐洲經濟區（EEA）

4.1 The definition of \"Applicable Data Protection Law\" includes the General Data Protection Regulation (EU 2016/679) (the \"GDPR\").

4.1 「適用資料保護法律」的定義包括《通用資料保護條例》（歐盟 2016/679）（「GDPR」）。

4.2 Notwithstanding any contrary provision in this DPA or the Principal Agreement (including but not limited to either Party's indemnification obligations), neither Party shall be liable to any regulatory or governmental authority for any fines, penalties, or damages imposed on the other Party for the other Party's violation of the GDPR.

4.2 儘管本 DPA 或主協議有任何相反約定（包括但不限於任一方的賠償義務），任何一方均不對因另一方違反 GDPR 而被監管機構或政府部門依據 GDPR 處以罰款、罰金或損害賠償承擔任何責任。

Israel

以色列（Israel）

5.1 The definition of \"Applicable Data Protection Law\" includes the Privacy Protection Law (PPL).

5.1 「適用資料保護法律」的定義包括《隱私保護法》（PPL）。

5.2 The definition of \"Controller\" includes \"Database Owner\" as defined in Applicable Data Protection Law.

5.2 「控制者」的定義包括適用資料保護法律所定義的「Database Owner」。

5.3 The definition of \"Processor\" includes \"Holder\" as defined in Applicable Data Protection Law.

5.3 「處理者」的定義包括適用資料保護法律所定義的「Holder」。

Japan

日本（Japan）

6.1 The definition of \"Applicable Data Protection Law\" includes the Act on the Protection of Personal Information (APPI).

6.1 「適用資料保護法律」的定義包括《個人資訊保護法》（APPI）。

6.2 The definition of \"Personal Data\" includes \"personal information\" as defined in Applicable Data Protection Law.

6.2 「個人資料」的定義包括適用資料保護法律所定義的「個人資訊」。

6.3 The definition of \"Controller\" includes \"Business Operator\" as defined in Applicable Data Protection Law.

6.3 「控制者」的定義包括適用資料保護法律所定義的「Business Operator」。

6.4 The definition of \"Processor\" includes a Business Operator that, under Applicable Data Protection Law, is entrusted by a Business Operator to process all or part of the Controller's data (i.e., a \"trustee\"). As a trustee, such Processor shall process Personal Data only within the scope of the entrustment agreement with the Business Operator.

6.4 「處理者」的定義包括依據適用資料保護法律受 Business Operator 委託、全部或部分處理控制者資料的業務經營者（即「受託人」）。作為受託人，該處理者僅在與 Business Operator 之間的委託協議範圍內處理個人資料。

Singapore

新加坡（Singapore）

7.1 The definition of \"Applicable Data Protection Law\" includes the Personal Data Protection Act 2012 (PDPA).

7.1 「適用資料保護法律」的定義包括《2012 年個人資料保護法》（PDPA）。

Switzerland

瑞士（Switzerland）

8.1 The definition of \"Applicable Data Protection Law\" includes the Swiss Federal Data Protection Act.

8.1 「適用資料保護法律」的定義包括《瑞士聯邦資料保護法》。

United Kingdom (UK)

英國（United Kingdom, UK）

9.1 References in this Annex to the GDPR shall, to that extent, be construed as references to the corresponding laws of the United Kingdom (including the UK GDPR and the Data Protection Act 2018).

9.1 本附件中對 GDPR 的引用，在該範圍內應視為對英國相應法律（包括英國 GDPR 與《2018 年資料保護法》）的引用。

9.2 Notwithstanding any contrary provision in this Annex or the Principal Agreement (including but not limited to either Party's indemnification obligations), neither Party shall be liable to any regulatory or governmental authority for any fines, penalties, or damages imposed on the other Party for the other Party's violation of the UK GDPR.

9.2 儘管本附件或主協議有任何相反約定（包括但不限於任一方的賠償義務），任何一方均不對因另一方違反英國 GDPR 而被監管機構或政府部門依據英國 GDPR 處以罰款、罰金或損害賠償承擔任何責任。

Annex · Contact Information

附 · 聯絡資訊

If you have any questions about this DPA or Annexes 1–5, please contact us through the following channels:

如對本 DPA 或附件 1-5 有任何疑問，請透過以下方式聯絡我們：

• Operating Entity: BeeMatch AI Technology Limited (Processor)
• 營運主體：BeeMatch AI Technology Limited（處理者）
• Place of Incorporation: Hong Kong SAR
• 註冊地：Hong Kong SAR（香港特別行政區）

Privacy Contact: privacy@beematchai.com

Legal Notices: legal@beematchai.com

• Data Protection Contact Email: yongpeng@beematchai.com

法律文書送達：legal@beematchai.com

隱私專線：privacy@beematchai.com

• 資料保護聯絡郵箱：yongpeng@beematchai.com
• Official Website: https://beematchai.com
• 官方網址：https://beematchai.com

— End of Part III and All Annexes —

— Part III 及全部附件 完 —

BeeMatch AI Technology Limited

BeeMatch AI Technology Limited