LUXOR Digital ← Back to the website

Privacy Policy

LUXOR Digital Co., Ltd. · Last updated: October 13, 2026

This English version is provided for reference only. If the English and Chinese versions differ, the Chinese version prevails.

LUXOR Digital Co., Ltd. (the "Company") takes the protection of your personal data seriously. This Privacy Policy (the "Policy") explains how the Company collects, processes, uses, and protects personal data on its website (www.luxor.com.tw) and in IPCS Smart Construction Site, IPCS Smart BIM, and related services (collectively, the "Services"). For accounts, fees, and usage rules, please see the Terms of Use; this Policy covers personal data only.

Article 1. Scope of Application

  1. This Policy applies to the Company's website and the Services.
  2. This Policy does not apply to other websites linked from the Company's website, or to the systems of third parties such as access control and face recognition device vendors. Please refer to their own privacy notices.

Article 2. Data We Collect and Purposes

The Company collects personal data directly for the following purposes:

  1. Website contact form: your name, company or organization, email address, phone number, inquiry topic, and the description of your needs. The Company uses this data to reply to your inquiry, arrange consultations, and provide quotations. Your name, company or organization, email address, and description of your needs are required to submit the form. Your phone number and inquiry topic are optional and do not affect the Company's ability to reply by email.
  2. Browsing the website: the website server records your IP address, browser type, time of visit, and the pages you visit. This data is used to operate the website, maintain information security, and investigate abnormal incidents. It is not used for advertising or for analyzing browsing behavior.
  3. Registering for and using the Services: your name, email address, phone number, company, job title, department, and login and activity records (including login time, device, and connection address). The Company uses this data to provide the Services, verify identity, manage permissions, handle billing, provide customer support, maintain information security, confirm plan usage, and prevent accounts from being impersonated, shared, or otherwise misused. If registration information is incomplete, the Company cannot provide the Services.
  4. AI Assistant: the questions you enter in the Services' AI Assistant, and the AI Assistant's answers, are recorded together with your account. The Company uses these records to answer your questions, improve its FAQs and operating instructions, maintain information security, and prevent misuse. Please do not enter your own or anyone else's personal data in your questions, such as a national ID number, phone number, home address, date of birth, salary, medical records, or passwords. The AI Assistant does not answer questions about the system's technical details or about other people's personal data. Any such question is specially flagged, and the account that asked it is added to the Company's watch list.

The corresponding specific purposes under Taiwan's Personal Data Protection Act are: contract, contract-like, or other legal relationship matters (Code 069); consumer and customer management and services (Code 090); information (communications) services (Code 135); information (communications) and database management (Code 136); and information and communications security and management (Code 137).

Data that customers create in the Services, such as site personnel rosters, entry and exit records, and images of people in photos, is handled in accordance with Article 4.

Article 3. Period, Area, Recipients, and Method of Use

  1. Period:
    1. Contact form and correspondence: retained until the inquiry has been handled and further contact is no longer needed.
    2. Connection records: retained for a period determined by information security needs, then deleted.
    3. Account data and data in the Services: retained during the contract term. After the contract ends, retained for the period specified in the contract and deleted when that period expires.
    4. Where a law or regulation specifies a retention period, that period applies.
  2. Area: for the Company's website and the Services provided in Taiwan, data is processed mainly in Taiwan.
  3. Recipients: the Company, and the vendors it engages to process data on its behalf, such as cloud hosting and email delivery providers. The Company agrees with each such vendor on the scope of processing, security measures, conditions for subcontracting, return or deletion of data, and incident notification, and conducts necessary oversight.
  4. Method: by electronic or written means, within the scope of the purposes in Article 2.

Article 4. Personal Data Within Customer-Created Data

  1. Data that a customer (for example, a general contractor) creates in the Services, such as personnel rosters, entry and exit records, and photos, is collected by the customer for its own business. The Company processes this data on the customer's behalf under the contract, solely to provide and maintain the agreed Services, and does not use it for the Company's own product development, model training, or marketing.
  2. Customers must confirm that they have a lawful basis for collecting and using the data, and must give the notices and obtain the consents that the law requires. See Article 8 of the Terms of Use.
  3. When integrating with access control devices, the Services receive only entry and exit records. They do not receive the face recognition feature data that the devices generate. Rosters and photos that a customer uploads separately are handled in accordance with this Policy.
  4. When a data subject exercises the rights described in Article 6 with the Company, the Company will accept the request and assist in accordance with law. For matters that are the customer's to decide, the Company will forward the request to the customer and coordinate the handling.

Article 5. Cookies and Browser Storage

  1. The website does not use cookies or other browser storage, and does not use website analytics tools.
  2. The website loads fonts from Google Fonts. When the fonts load, your browser sends Google your IP address, browser information, and, depending on your browser settings, referring-page information.
  3. The cookies used after you log in to the Services, and their purposes, are described separately within the Services.

Article 6. Your Rights

Under Taiwan's Personal Data Protection Act, you may, with respect to your personal data held by the Company:

  1. Inquire about it or request to review it.
  2. Request a copy of it.
  3. Request that it be supplemented or corrected.
  4. Request that the Company stop collecting, processing, or using it.
  5. Request that it be deleted.

Please send your request to info@luxor.com.tw, and the Company will reply after verifying your identity. For inquiries, review, or copies, the Company may charge a fee limited to necessary costs, as permitted by law; other requests are free of charge. In principle, the Company will decide requests to inquire, review, or obtain a copy within 15 days, extendable by up to 15 days where necessary, and requests for supplementation, correction, cessation of processing or use, or deletion within 30 days, extendable by up to 30 days where necessary. If a deadline is extended, the Company will notify you of the reason in writing.

Article 7. Data Security

  1. Both the website and the Services transmit data over encrypted connections.
  2. The Services restrict data access by role and project, and keep activity logs.
  3. If personal data is stolen, disclosed, or tampered with, the Company will investigate and take remedial measures, notify you as required by law, and review how to prevent a recurrence.

Article 8. Disclosure to Third Parties

The Company does not sell, rent, or exchange personal data. It makes any other disclosure, or uses personal data beyond its original purpose, only to the extent necessary and with a legal basis, for example:

  1. With your consent.
  2. Where the law expressly provides for it.
  3. Processing by vendors engaged as described in Article 3.
  4. To avert danger to your life, body, freedom, or property, or to prevent serious harm to the rights and interests of others.
  5. Where judicial or competent authorities require it in accordance with law.

Article 9. Policy Revisions

The Company may revise this Policy and will post revisions on its website. Revisions do not affect your statutory rights. If a revision adds new collection or use of personal data, the Company will first give the necessary notice; where the law requires consent, the revision will take effect only after consent is obtained.

Article 10. Contact Us

If you have any questions about this Policy, or wish to exercise your rights under Article 6, please write to info@luxor.com.tw.