ALEAPAU NGĀUE ʻETA
Ko e Aleapau Ngāue ʻEta, ʻi he lau māmā.
v1.2.1 · Ngāue mei he ʻaho pulusi
Tohi koeʻuhí ke lava ʻe hoʻo DPO ʻo fakangofua ia ʻi he nofoʻanga ʻe taha. Ko e tuʻutuʻuni, kau ngāue-tomui, mo e maluʻi taki taha kuo fakamatala kakato. ʻOku ʻave ʻe he PDF kuo fakamoʻoni ʻa e kongokonga tatau.
NGĀUEʻANGA & LAKANGA
Ko hai ʻoku ne fai ʻa e hā, mo e ʻeta ʻa hai.
ʻI he malumalu ʻo e DPA ko ʻeni, ko e Kasitomā ko e tokotaha pule ʻeta pea ʻoku ngāue ʻa Sageio ko ha tokotaha ngāueʻi ʻi he fofonga ʻo e Kasitomā. ʻOku ngāueʻi pē ʻe Sageio ʻa e ʻeta fakatautaha ke ʻoatu ʻa e ngaahi sēvesi kuo aleapau — liliu fakataha ʻi he taimi totonu, hiki tohi, mo e fakamatala — pea ʻi he malumalu pē ʻo e ngaahi fakahinohino kuo tohi ʻa e Kasitomā. ʻOku hoko ʻa e DPA ko ʻeni ko ha konga ʻo e Aleapau Lesisita ʻi he vahaʻa ʻo Sageio mo e Kasitomā; ʻi ha taimi fepaki, ʻoku mālohi ʻa e DPA ki he ngaahi meʻa ʻo e ngāueʻi ʻo e ʻeta fakatautaha. ʻOku ngāue ia ki he ngaahi ngāue ngāueʻi kotoa pē ʻoku fakahoko fekauʻaki mo e tuʻunga Sageio.
ʻETA NGĀUEʻI
Ko e hā ʻoku mau ngāueʻi, mo e ʻuhinga ʻe lava.
| Faʻahinga ʻeta | ʻUhinga ʻo e ngāueʻi | Makatuʻunga fakalao (GDPR Art. 6) | Tauhi |
|---|---|---|---|
| Ongo fakataha | Hiki tohi lea-ki-he-tohi mo e liliu lolotonga ʻa e fakatahá. | Art. 6(1)(b) — fakahoko ʻo e aleapau. | Tafe ki he hiki tohi moʻui pea ngāueʻi ʻi he mānava pē; ʻoku ʻikai ʻaupito tohi ki he tukungaʻanga. ʻOku ʻikai ngāueʻaki ki he ako mōtolo. |
| Hiki tohi & liliu fakataha | Tauhi mo e toʻo ʻe he kau mēmipa ʻo e feituʻu ngāue ʻa e Kasitomā. | Art. 6(1)(b) — fakahoko ʻo e aleapau. | Tauhi kae ʻoua kuo tāmateʻi ʻe he Kasitomā pe ko e tāmateʻi ʻakauni. |
| Ngaahi fakamatala & ngāue ke fai | Ola fakataha kuo ngaohi ʻe he ʻAI mei he hiki tohi. | Art. 6(1)(b) — fakahoko ʻo e aleapau. | Muimui ki he tauhi hiki tohi. |
| Fakaʻilonga ʻakauni (hingoa, ʻīmeili, lakanga) | Fakamoʻoni, aʻusia feituʻu ngāue, mo e lekooti ʻekiti. | Art. 6(1)(b) — fakahoko ʻo e aleapau. | Vahaʻa-taimi ʻo e ʻakauni mo e ʻaho ʻe 30 hili hono tāpuni. |
| ʻEta feituʻu ngāue & ngāueʻaki | Ngāue sēvesi, fakatatau totongi, mo e taʻofi faihalaʻaki. | Art. 6(1)(b) mo e Art. 6(1)(f) — tokanga totonu ki he tonuhia ʻo e sēvesi. | Māhina ʻe 12 mei hono ngaohi. |
| Ngaahi lekooti ʻekiti | Siofi malu mo e vakaiʻi aʻusia ʻa e Kasitomā. | Art. 6(1)(f) — tokanga totonu ki he malu. | Māhina ʻe 12 mei hono ngaohi. |
| Fakaʻilonga totongi | Pule lesisita. ʻOku ngāueʻi ʻa e ʻeta kāti totongi ʻe LemonSqueezy ko e Merchant of Record pea ʻoku ʻikai tauhi ʻe Sageio. | Art. 6(1)(b) — fakahoko ʻo e aleapau. | Vahaʻa-taimi ʻo e ʻakauni mo e taʻu ʻe 7 ki he lekooti tukuhau. |
KAU NGĀUE-TOMUI
Ko e seini kakato ʻo e tauhi.
| Ngāue-tomui | ʻUhinga | Feituʻu ngāueʻi |
|---|---|---|
| Amazon Web Services | Tukungaʻanga ʻao, tukungaʻanga meʻa, pule kī fakapuli. | Vahefonua kuo fili ʻe he Kasitomā (anga-maheni: Singapore, ʻEsia-Pasifika). EU mo ʻAmelika ʻi he palani Pisinisi Lahi. |
| Neon | Tukungaʻanga PostgreSQL kuo pule ki he ʻeta ʻepelikeisini. | Vahefonua fakatatau ki he vahefonua AWS tefitoʻi ʻa e Kasitomā. |
| Vercel | Tukungaʻanga ki he uepisaiti maketi mo e ʻepelikeisini uepi ki he kasitomā. | Hala-tafataha māmani. Tupuʻanga: vahefonua kuo fili ʻe he kasitomā. |
| Clerk | Fakamoʻoni, hū-tuʻo-taha, mo e pule fakaʻilonga. | ʻAmelika. |
| Deepgram | Hiki tohi lea-ki-he-tohi ʻo e ongo fakataha. | ʻAmelika. |
| OpenAI | Hiki tohi lea-ki-he-tohi ʻi he taimi totonu ʻo e ongo fakataha (mīsini anga-maheni ki he ngaahi feituʻu ngāue foʻou) mo e hiki tohi ʻo e ngaahi faile ongo kuo ʻutusi. | ʻAmelika. |
| DeepL | Liliu ʻo e ngaahi kongokonga hiki tohi vahaʻa-taimi mo e liliu fakaʻosi ki he ngaahi lea kuo fili. | Siamane (EU). |
| Google (Gemini API) | Fakalelei liliu ʻo e ngaahi kongokonga hiki tohi kuo fakaʻosi; ngaahi fakamatala mo e ngāue ke fai kuo ngaohi ʻe he ʻAI. | United States. Data not used to train Google models per paid-tier Gemini API terms. |
| Resend | ʻOatu ʻīmeili fakangāue (fakatokanga ʻakauni mo e sēvesi; ʻīmeili fakamatala-fakataha ʻoku ʻave ʻi he kole ʻa e ngāue ngāueʻaki). | ʻAmelika. |
Lemon Squeezy (a Stripe company) is not a sub-processor: as Merchant of Record it determines its own purposes for payment, tax, and invoicing, and acts as an independent data controller under its own privacy policy.
Plausible (cookieless website analytics) operates only on our marketing site and does not process platform personal data under this DPA; it is disclosed in the Privacy Policy.
TUKUPĀ NGĀUEʻI
Article 28, kuo tohi ki he aleapau.
These commitments form part of the DPA. The English text is the authoritative version; localized translations will follow the signed-off text.
- Ngaahi liliu kau ngāue-tomui
- Sageio maintains the current sub-processor list at sageio.net/subprocessors. Sageio will give Customer at least 30 days' notice (by email or in-app notice) before adding or replacing a sub-processor. Customer may object on reasonable data-protection grounds within the notice period; if the parties cannot resolve the objection, Customer may terminate the affected services and receive a pro-rata refund of prepaid fees for the unused period. Sageio imposes data-protection obligations equivalent to this DPA on each sub-processor and remains liable for their performance.
- Fakatokanga maumau ʻeta-fakatautaha
- Sageio will notify Customer without undue delay, and in any event within 24 hours of confirming a personal-data breach affecting Customer personal data, and will provide the information reasonably required for Customer's obligations under Articles 33–34 GDPR, with updates as the investigation proceeds.
- Tāmateʻi mo e fakafoki
- Upon termination or expiry of the services, Sageio will, at Customer's choice, delete or return all Customer personal data within 30 days, and delete remaining copies, except where applicable law requires retention. Personal data in encrypted backups is purged on the standard 30-day backup rotation cycle.
- Tokoni mo e ngaahi ʻekiti
- Taking into account the nature of the processing, Sageio will assist Customer with appropriate technical and organizational measures in responding to data-subject requests, and with Customer's obligations under Articles 32–36 GDPR, including data-protection impact assessments and prior consultations. Sageio will make available information reasonably necessary to demonstrate compliance with Article 28 — including summaries of penetration tests and, when available, audit reports — and will allow audits, including inspections, by Customer or its mandated auditor, no more than once per twelve months, on 30 days' notice, at Customer's expense and subject to confidentiality.
- Fakapulipuli mo e ngaahi fakahinohino
- Sageio ensures that persons authorized to process personal data are committed to confidentiality. Sageio will inform Customer without undue delay if, in its opinion, an instruction infringes applicable data-protection law.
- Ngaahi fakapapau ʻa e Kasitomā
- Customer warrants that it has established a lawful basis for the processing it instructs under this DPA, including any notices to and consents from meeting participants required by applicable law and — where meeting content incidentally contains special categories of personal data — a condition under Article 9(2) GDPR. Sageio does not use meeting content to identify any person by voice and creates no biometric templates.
- Vahaʻa-taimi, lao puleʻi, mo e haʻisia
- This DPA takes effect with, and lasts for the duration of, the Subscription Agreement; it is governed by the same law, and the limitations of liability in the Terms of Service apply to it, except where mandatory data-protection law provides otherwise.
NGAAHI FOUNGA MALU
ʻOku fetaulaki ʻa e ʻenisinia mo e tukupā.
ʻOku fakahoko ʻe Sageio ʻa e ngaahi founga fakatekinikale mo fakakautaha ʻoku fe ʻunga mo e tuʻutāmaki ʻo e ngāueʻi, kau ai ʻa e fakapuli ʻi he fefononga (TLS 1.3) mo e mālōlō (AES-256-GCM), pule aʻusia makatuʻunga-he-lakanga, lekooti ʻekiti, ʻahiʻahi tuʻu-loto fakapulipuli maheni, mo ha founga tali meʻa fakatupu kuo tohi. ʻOku fie maʻu ʻe he aʻusia tukungaʻanga ha fakatonuhia pisinisi pau, ʻoku fakangatangata-taimi, pea ʻoku lekooti. Ko e lisi kakato ʻo e ngaahi founga, kau ai ʻa e tuʻunga lolotonga ʻo e palani fakahoko tuʻutuʻuni, ʻoku pulusi ʻi he peesi Malu pea fakafoʻou ʻi he tupulaki ʻa e palani.
HIKI FAKAVAHAʻA-PULEʻANGA
ʻEta fakavahaʻa-kauʻā, hiki fakalao.
ʻI he feituʻu ʻoku hiki ai ʻa e ʻeta fakatautaha ki tuʻa mei he ʻEulope ʻo e Maʻuʻanga Faʻa ʻAuhā, ʻIunaiteti Kingitomu, pe ko ha puleʻanga kehe ʻoku tatau ʻa e ngaahi fakangatangata, ʻoku falala ʻa Sageio ki he Standard Contractual Clauses ʻa e Komisoni ʻEulope (Module Two: Controller-to-Processor) pea, ʻi he taimi totonu, ki he UK International Data Transfer Addendum. Ki he ngaahi hiki ki he ngaahi puleʻanga ʻoku kāpui ʻe ha fakamaau feʻunga, ʻoku falala ʻa Sageio ki he fakamaau ko ia. ʻOku haʻisia ʻa e kau ngāue-tomui ki he ngaahi fatongia tatau ʻi he tafe-hifo fakaaleapau. ʻOku fakahoko ʻa e vakaiʻi uesia hiki ki he kau ngāue-tomui taki taha ʻoku ngāueʻi ʻa e ʻeta fakatautaha ʻi tuʻa mei he puleʻanga ʻo e tokotaha ʻave-ʻetá.
The SCCs (Module Two: Controller-to-Processor) and the UK International Data Transfer Addendum are incorporated into this DPA by reference. Annex I (parties; description of processing) is constituted by the parties' details and the "Data processed" table above, which may incidentally include special categories of data contained in meeting content; Annex II (technical and organizational measures) by the "Security measures" section; Annex III (authorized sub-processors) by the "Sub-processors" table. In case of conflict, the SCCs prevail.
NGAAHI TOTONU ʻO E TOKOTAHA-ʻETA
Ko e ngaahi totonu ʻo hoʻo kau ngāueʻaki, ko ʻemau fatongia.
- Totonu aʻusia — fakapapau mo ha tatau ʻo e ʻeta fakatautaha kuo ngāueʻi.
- Totonu fakatonutonu — fakatonutonu ʻo e ʻeta hala pe taʻe-kakato.
- Totonu tāmateʻi — tāmateʻi ʻi loto ʻi he ʻaho ʻe 30 ʻo ha kole ʻoku totonu, kae fakatatau ki he fie maʻu tauhi fakalao.
- Totonu fakangatangata — fakangatangata ʻo e ngāueʻi ʻi he ngaahi tuʻunga kuo fakapapauʻi.
- Totonu hiki ʻeta — ʻave ʻi ha foomate kuo fokotuʻutuʻu, lava-lau-ʻe-he-mīsini.
- Totonu fakafepaki — kau ai ki he ngāueʻi makatuʻunga ʻi he tokanga totonu.
- Totonu fai ha lāunga ki he maʻuʻanga mafai siofi feʻunga.
FETUʻUTAKI
Kakai moʻoni, puha tohi fakahingoa.
- Privacy: privacy@sageio.net
- Security: security@sageio.net
Sageio is operated by 好客網路股份有限公司 (Unified Business No. 29041135), a company registered in Taiwan. Registered address: No. 205, Hulin Street, Xinyi District, Taipei City, Taiwan (臺北市信義區虎林街205號). Privacy contact: privacy@sageio.net.
Hisitōlia vēsini
- v1.2.1June 14, 2026Gemini paid-tier confirmation completed (interim note removed); sub-processor commitment now points to the live /subprocessors page; Traditional Chinese translation of the processor commitments and SCC incorporation added.
- v1.2June 13, 2026Sub-processor table correction: OpenAI added (real-time speech-to-text, default engine for new workspaces); DeepL purpose extended to final translation for selected languages; Resend purpose includes meeting-summary emails; Gemini terms basis corrected to paid-tier API (confirmation in progress). Configurable-retention-window statements removed to match current system behavior.
- v1.1June 13, 2026Article 28 processor commitments added; sub-processor table expanded (DeepL, Resend); retention entries corrected to match system behavior; SCCs and UK Addendum incorporated with Annex mapping.
- v1.0Effective from publicationInitial publication.