隐私政策Privacy Policy

VJO Studio (Vision Journey), business name registration pending, trading as VJO ("VJO", "we", "us") is a Melbourne-based studio that designs and builds websites and sets up bilingual (English and Chinese) AI reception assistants, automation and training for small and medium businesses across Australia. [Insert ABN/ACN once the VJO Studio business name is registered.]需律师确认

This Privacy Policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs) in Schedule 1 of that Act. It covers personal information we collect through this website (including the contact form and the AI chat), by email, phone or messaging apps, and in the course of delivering our services to clients.

Where we build a website or an AI assistant for a client and that system collects personal information from the client's own customers, the client is responsible for that information and for its own privacy policy. We only handle such information on the client's instructions, as described in our Terms of Service.

Note on the small business exemption. Some small businesses with annual turnover under 3 million Australian dollars are not covered by the Privacy Act. We have chosen to apply the APPs to our handling of personal information regardless, because we ask people to trust us with their website and customer-facing AI. 需律师确认

VJO Studio（Vision Journey，商业名称待注册；对外品牌 VJO 唯简，下称"VJO""我们"）是一家总部位于墨尔本、服务全澳的工作室，为中小企业设计和开发网站，并搭建中英双语 AI 接待、自动化流程与培训。[VJO Studio 商业名称注册后在此填入 ABN/ACN。]需律师确认

本隐私政策说明我们如何依据《1988 年隐私法（联邦）》（Privacy Act 1988 (Cth)）及其附表 1 的 13 条《澳大利亚隐私原则》（APPs）处理个人信息。它覆盖我们通过本网站（包括联系表单和 AI 聊天）、邮件、电话或即时通讯工具，以及在为客户提供服务过程中收集的个人信息。

当我们为客户搭建网站或 AI 助手、且该系统从客户自己的顾客处收集个人信息时，这些信息由客户负责，并适用客户自己的隐私政策。我们只按客户的指示处理这些信息，具体见服务条款。

关于小企业豁免。年营业额低于 300 万澳元的部分小企业不受《隐私法》约束。但因为我们请大家把网站和面向顾客的 AI 交给我们，我们选择不论是否豁免，一律按 APPs 处理个人信息。需律师确认

We only collect personal information that is reasonably necessary for our functions and activities (APP 3), and we collect it directly from you unless it is unreasonable or impracticable to do so. We do not collect sensitive information (such as health, racial or ethnic origin, or political opinions) unless you choose to give it to us, and we ask you not to include it in forms or chat messages.

Unsolicited information (APP 4). If we receive personal information we did not ask for and could not have collected under APP 3, we will destroy or de-identify it as soon as practicable, provided it is lawful and reasonable to do so.

我们只收集对开展业务合理必要的个人信息（APP 3），并且除非不合理或不可行，都直接向你本人收集。我们不收集敏感信息（如健康状况、种族或民族、政治观点等），除非你主动提供；也请你不要在表单或聊天里填写这类信息。

未经请求的信息（APP 4）。如果我们收到并非主动索取、且按 APP 3 本不该收集的个人信息，只要合法且合理，我们会尽快销毁或去标识化。

The chat bubble on this website runs in one of two modes. The chat window tells you which mode is active.

Demo mode

In demo mode the assistant is a small script that runs entirely in your browser. Nothing you type is sent to us or to any AI provider. The conversation disappears when you close or reload the page. If the demo asks for your name or contact details, it only shows them back to you; it does not transmit them.

Live mode

In live mode your messages are sent to our server and then to a third-party large-language-model provider so that a reply can be generated. At the time of writing that provider is Anthropic, PBC (the maker of Claude), whose API is hosted in the United States. 需律师确认

• We send the current conversation (up to the last 20 messages, each capped in length) together with a fixed system instruction. We do not send your IP address or browser details to the AI provider.
• Our understanding is that Anthropic does not use API inputs and outputs to train its models by default, and retains API data for a limited period for abuse monitoring. The exact terms are set by Anthropic's own commercial terms and privacy policy, which may change; please check them directly. 需律师确认
• Our server does not keep a database of chat transcripts. Short-lived technical logs (errors, timestamps, status codes) are kept by our hosting provider as described in section 7.
• If you choose to leave your name and contact details in the live chat so that we can follow up, we treat them the same way as a contact-form enquiry.

Data residency

The AI provider's servers are located outside Australia (United States). By using the live chat you acknowledge that your messages will be processed overseas. See section 5 for what this means under APP 8.

本网站右下角的聊天气泡有两种模式，聊天窗口会标明当前是哪一种。

演示模式

演示模式下，助手只是一段在你浏览器里运行的小脚本。你输入的任何内容都不会发送给我们，也不会发送给任何 AI 服务商。关闭或刷新页面后对话即消失。如果演示问你姓名或联系方式，它只是把内容显示回给你，不会传输。

真实模式

真实模式下，你的消息会先发到我们的服务器，再发给第三方大语言模型服务商生成回复。撰写本政策时，该服务商为 Anthropic, PBC（Claude 的开发者），其 API 托管在美国。需律师确认

• 我们发送的是当前对话（最多最近 20 条消息，每条有长度上限）加一段固定的系统指令。我们不会把你的 IP 地址或浏览器信息发给 AI 服务商。
• 据我们了解，Anthropic 默认不使用 API 的输入输出训练模型，并会为滥用监控目的在有限期限内保留 API 数据。具体以 Anthropic 自己的商业条款和隐私政策为准，这些条款可能变化，请直接查阅。需律师确认
• 我们的服务器不保存聊天记录数据库。短期技术日志（错误、时间戳、状态码）由托管商按第 7 节所述保存。
• 如果你在真实模式的聊天里留下姓名和联系方式以便我们跟进，我们会按联系表单咨询同样处理。

数据驻留

AI 服务商的服务器位于澳大利亚境外（美国）。使用真实模式聊天即表示你知悉消息将在境外处理。这在 APP 8 下意味着什么，见第 5 节。

We collect, hold and use personal information for the primary purposes below, and for related secondary purposes you would reasonably expect (APP 6). We do not sell personal information.

• To respond to you — answering enquiries from the contact form, chat, email or phone, and arranging a consultation.
• To deliver our services — scoping, quoting, designing, building, launching and supporting your website, AI assistant or automation, and training your team.
• To run our business — invoicing, record keeping, tax and accounting, insurance, and resolving disputes.
• To improve the website and the AI assistant — using aggregated or de-identified usage data to see which pages are visited and which questions the assistant handles poorly.
• To keep our systems safe — detecting abuse and rate-limiting requests.
• To comply with the law — where an Australian law or court order requires or authorises us to.

We will only use personal information for a different purpose if you consent, or if an exception in APP 6 applies.

Automated decisions

From 10 December 2026, amendments to APP 1 made by the Privacy and Other Legislation Amendment Act 2024 require privacy policies to explain where a computer program uses personal information to make, or substantially and directly help make, a decision that could reasonably be expected to significantly affect an individual's rights or interests. The AI chat on this website answers questions, but it does not make decisions of that kind about you: any quote, engagement or refusal of work is decided by a person at VJO. If this changes, we will update this section to describe the kinds of personal information used and the kinds of decisions involved. 需律师确认

我们出于以下主要目的收集、保存和使用个人信息，以及你合理可预期的相关次要目的（APP 6）。我们不出售个人信息。

• 回复你——回答来自联系表单、聊天、邮件或电话的咨询，并安排沟通。
• 交付服务——评估范围、报价、设计、开发、上线、维护你的网站、AI 助手或自动化，并培训你的团队。
• 运营业务——开票、留存记录、税务与会计、保险、处理争议。
• 改进网站和 AI 助手——使用汇总或去标识化的使用数据，了解哪些页面被访问、助手哪些问题答得不好。
• 保障系统安全——识别滥用并限制请求频率。
• 遵守法律——澳大利亚法律或法院命令要求或授权时。

除非你同意，或适用 APP 6 的例外情形，我们不会把个人信息用于其他目的。

自动化决策

自 2026 年 12 月 10 日起，《2024 年隐私及其他立法修正法》（Privacy and Other Legislation Amendment Act 2024）对 APP 1 的修订要求：如果计算机程序使用个人信息作出、或实质且直接地协助作出可合理预期会对个人权利或利益产生重大影响的决定，隐私政策必须加以说明。本网站的 AI 聊天只是回答问题，不会对你作出这类决定：是否报价、是否承接项目，都由 VJO 的人来决定。如情况变化，我们会更新本节，说明涉及的个人信息种类和决定种类。需律师确认

We share personal information only with service providers who help us run this website and deliver our work, and only to the extent needed. We do not share it with advertisers or data brokers. Our current categories of provider are:

Cross-border disclosure (APP 8)

Some of these providers store or process information outside Australia, in particular in the United States. Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs — generally by relying on the provider's contractual commitments on data protection, confidentiality and security. Where we instead rely on your consent (for example, when you choose to use the live AI chat after reading this policy), we tell you so at the point of collection. Overseas recipients are not bound by the Australian Privacy Act, and you may not be able to seek redress against them under Australian law.

Other disclosures

• Professional advisers (accountant, lawyer, insurer) under confidentiality obligations.
• Government bodies, regulators or courts where required or authorised by Australian law.
• A successor entity if VJO is restructured (for example, a company formed to operate VJO Studio) or sold, on the same terms as this policy. 需律师确认

We do not adopt, use or disclose government related identifiers such as tax file numbers or Medicare numbers (APP 9).

我们只会把个人信息提供给帮助我们运营本网站和交付工作的服务商，且仅限必要范围。我们不会提供给广告商或数据经纪商。目前的服务商类别如下：

跨境披露（APP 8）

上述部分服务商会在澳大利亚境外、尤其是美国存储或处理信息。在向境外披露个人信息前，我们会采取合理措施确保接收方以符合 APPs 的方式处理——通常依赖服务商在数据保护、保密与安全方面的合同承诺。若我们改为依赖你的同意（例如你在阅读本政策后选择使用真实模式的 AI 聊天），我们会在收集时告知你。境外接收方不受澳大利亚《隐私法》约束，你可能无法依据澳大利亚法律向其寻求救济。

其他披露

• 受保密义务约束的专业顾问（会计师、律师、保险公司）。
• 澳大利亚法律要求或授权时，向政府机构、监管部门或法院披露。
• VJO 重组（例如成立公司承接 VJO Studio 的业务）或出售时，按本政策同样条款转给承继实体。需律师确认

我们不采用、使用或披露政府相关识别码，例如税号（TFN）或 Medicare 号（APP 9）。

This website is designed to work with very few cookies.

• Strictly necessary storage. We use your browser's local storage to remember your language choice (Chinese or English) and, in demo mode, to keep the chat open while you move around the page. This data never leaves your device.
• Analytics. [Choose one and delete the other.] (a) We do not currently run any analytics or tracking scripts. (b) We use [provider] to count page views in aggregate; it sets [no cookies / a first-party cookie named …] and does not track you across other websites. 需律师确认
• Embedded content. Pages that embed third-party content (for example Google Maps or a video) may set that provider's cookies. We will keep such embeds to a minimum.
• No advertising cookies. We do not use advertising pixels or remarketing tags on this website.

You can clear or block cookies and local storage in your browser settings. The site will still work, but it will forget your language choice.

本网站的设计尽量少用 Cookie。

• 严格必要的存储。我们用浏览器本地存储记住你的语言选择（中文或英文），并在演示模式下让你在页面间移动时聊天窗口保持打开。这些数据不会离开你的设备。
• 分析工具。[二选一，删掉另一项。]（a）我们目前不运行任何分析或跟踪脚本。（b）我们使用 [服务商] 做汇总的页面访问统计；它[不设置 Cookie / 设置一个名为 …… 的第一方 Cookie]，不会跨其他网站跟踪你。需律师确认
• 嵌入内容。嵌入第三方内容的页面（例如 Google 地图或视频）可能会设置该服务商的 Cookie。我们会尽量少用这类嵌入。
• 无广告 Cookie。我们不在本网站使用广告像素或再营销标签。

你可以在浏览器设置里清除或屏蔽 Cookie 与本地存储。网站仍能正常使用，只是会忘记你的语言选择。

We keep personal information only as long as we need it for the purposes above, or as required by law, and then take reasonable steps to destroy or de-identify it (APP 11.2). Our indicative periods are: 需律师确认

• Enquiries that do not become a project — up to 12 months after our last contact, then deleted.
• Live AI chat — we keep no transcript. Technical logs at our hosting provider are retained for a short period (typically days to a few weeks). The AI provider's retention is governed by its own policy (see section 3).
• Client records (contracts, invoices, correspondence, project files) — 7 years after the end of the engagement, to meet Australian tax and record-keeping obligations.
• Client account credentials — deleted from our systems at handover or when access is no longer needed, whichever is earlier.
• Server logs — as set by our hosting provider, typically 30 days or less.

我们只在实现上述目的所需的期限内、或法律要求的期限内保存个人信息，之后采取合理措施销毁或去标识化（APP 11.2）。参考期限如下：需律师确认

• 未转化为项目的咨询——最后一次联系后最多 12 个月，然后删除。
• 真实模式 AI 聊天——我们不保存聊天记录。托管商的技术日志保存期较短（通常几天到几周）。AI 服务商的保存期按其自身政策（见第 3 节）。
• 客户记录（合同、发票、往来、项目文件）——合作结束后 7 年，以满足澳大利亚税务与记录保存义务。
• 客户账号凭据——交付时或不再需要访问时（以较早者为准）从我们的系统删除。
• 服务器日志——按托管商设定，通常不超过 30 天。

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure (APP 11.1), including:

• Serving this website and its forms over HTTPS only.
• Keeping API keys and credentials in server-side environment variables, never in page code.
• Validating and rate-limiting requests to the chat endpoint.
• Using two-factor authentication on our own accounts and asking clients to do the same.
• Limiting access to client information to the people working on that project.

No method of transmission or storage is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.

我们采取合理措施保护个人信息，防止其被滥用、干扰、丢失、未经授权访问、修改或披露（APP 11.1），包括：

• 本网站及其表单仅通过 HTTPS 提供。
• API 密钥和凭据只保存在服务器端环境变量，绝不写在页面代码里。
• 对聊天接口的请求做校验和频率限制。
• 我们自己的账号启用双重验证，并建议客户同样启用。
• 客户信息只限参与该项目的人员访问。

没有任何传输或存储方式是绝对安全的。如果我们发现可能造成严重损害的数据泄露，将按《隐私法》第 IIIC 部分的"可通报数据泄露"（Notifiable Data Breaches）制度通知受影响的个人和 OAIC。

Anonymity and pseudonymity (APP 2)

You can browse this website, read about our services and use the AI chat without telling us who you are. You can also use a pseudonym when you contact us. We do need real contact details to reply to an enquiry, and to quote for and deliver a project.

Direct marketing (APP 7)

We do not send marketing emails or newsletters at this time. If we start, we will only email people who have asked for it, every message will include an unsubscribe link, and we will comply with the Spam Act 2003 (Cth). We will never use the details you give us in an enquiry to add you to a marketing list without asking. You can opt out at any time by using the unsubscribe link or contacting us (section 13).

匿名与化名（APP 2）

你可以在不告知身份的情况下浏览本网站、了解我们的服务和使用 AI 聊天，也可以用化名与我们联系。但我们需要真实的联系方式才能回复咨询，以及为项目报价和交付。

直接营销（APP 7）

我们目前不发送营销邮件或通讯。如果将来发送，只会发给主动订阅的人，每封邮件都附退订链接，并遵守《2003 年反垃圾邮件法（联邦）》（Spam Act 2003 (Cth)）。我们绝不会在未征询你的情况下，把你在咨询中提供的信息加入营销列表。你可以随时通过退订链接或联系我们（第 13 节）退出。

You have the right to ask for access to the personal information we hold about you (APP 12) and to ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13). We also take reasonable steps on our own initiative to keep the information we use accurate and up to date (APP 10).

To make a request, contact us using the details in section 13. We will:

• respond within a reasonable period, normally 30 days;
• verify your identity before releasing information;
• give you access in the form you ask for where reasonable, free of charge for straightforward requests (we may charge a reasonable fee for unusually large or complex requests, and will tell you first); 需律师确认
• if we refuse access or correction in whole or part, give you written reasons and tell you how to complain.

If we correct your information after you ask, and we have previously disclosed it to a third party, we will take reasonable steps to notify that third party if you ask us to.

你有权要求访问我们持有的你的个人信息（APP 12），并在信息不准确、过时、不完整、无关或有误导性时要求更正（APP 13）。我们也会主动采取合理措施保持所用信息的准确与及时（APP 10）。

请通过第 13 节的联系方式提出请求。我们将：

• 在合理期限内回复，通常为 30 天；
• 在提供信息前核实你的身份；
• 在合理范围内按你要求的形式提供访问；一般请求免费（对特别大量或复杂的请求我们可能收取合理费用，并会提前告知）；需律师确认
• 如果全部或部分拒绝访问或更正，书面说明理由，并告知如何投诉。

如果我们应你的要求更正了信息，且此前已向第三方披露过，在你要求时我们会采取合理措施通知该第三方。

If you think we have breached the Australian Privacy Principles or mishandled your personal information, we want to hear about it.

1. Contact us first. Write to us using the details in section 13, with "Privacy complaint" in the subject line. Tell us what happened and what outcome you want. We will acknowledge your complaint promptly, investigate it, and aim to give you a written response within 30 days.
2. If you are not satisfied, or you do not hear from us within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC). The OAIC requires you to complain to the organisation first and to give it 30 days to respond before lodging with the OAIC (it will only waive this in exceptional circumstances). Under the Privacy Act, complaints to the OAIC must be made in writing, and it is helpful to include a copy of your complaint to us and our response:
   • Online complaint form: oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us
   • Email: [email protected], attaching the OAIC's downloadable complaint form
   • Post: a printed copy of the form to GPO Box 5288, Sydney NSW 2001
   • Enquiries line (general help only — complaints cannot be lodged by phone): 1300 363 992

如果你认为我们违反了《澳大利亚隐私原则》或不当处理了你的个人信息，请一定告诉我们。

1. 先联系我们。通过第 13 节的联系方式写信给我们，主题注明"Privacy complaint / 隐私投诉"，说明发生了什么、希望怎样解决。我们会尽快确认收到、展开调查，并争取在 30 天内给你书面答复。
2. 如果你不满意我们的答复，或 30 天内没有收到答复，可以向澳大利亚信息专员办公室（OAIC）投诉。OAIC 要求你先向该机构投诉，并给它 30 天时间回复，然后再向 OAIC 提交（只有特殊情况才会例外）。依据《隐私法》，向 OAIC 投诉必须以书面形式，最好附上你给我们的投诉和我们的回复：
   • 在线投诉表：oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us
   • 邮件：[email protected]，附上 OAIC 可下载的投诉表格
   • 邮寄：把打印好的表格寄到 GPO Box 5288, Sydney NSW 2001
   • 咨询电话（仅一般咨询，不能电话投诉）：1300 363 992

We may update this policy when our services, providers or the law change — for example when the live AI chat is switched on, when the VJO Studio business name is registered, or when the reforms to the Privacy Act now being phased in come into effect. The current version is always published on this page with its version number and effective date. For material changes we will add a notice on the home page for at least 30 days. Continued use of the website after a change means you accept the updated policy; the version that applies to a particular interaction is the one in force at that time.

当我们的服务、服务商或法律发生变化时，我们可能更新本政策——例如开启真实模式 AI 聊天、VJO Studio 商业名称完成注册，或正在分阶段实施的《隐私法》改革生效时。最新版本始终发布在本页，并标注版本号和生效日期。重大变更时，我们会在首页放置至少 30 天的提示。变更后继续使用本网站即表示你接受更新后的政策；具体某次互动适用当时有效的版本。

Questions, access or correction requests and complaints about privacy can be sent to our privacy contact. We respond in English or Chinese, whichever you prefer.

Privacy contact

[Name / role, e.g. Director]

Email

[[email protected]]

Phone

[+61 4xx xxx xxx]

Post

[Street address or PO Box], Melbourne VIC [postcode], Australia

Entity

VJO Studio (Vision Journey), business name registration pending [ACN … / ABN …] 需律师确认

关于隐私的问题、访问或更正请求以及投诉，请发送至我们的隐私联系人。我们可用中文或英文回复，看你方便。

隐私联系人

[姓名 / 职务，例如 Director]

邮箱

[[email protected]]

电话

[+61 4xx xxx xxx]

邮寄

[街道地址或邮政信箱], Melbourne VIC [邮编], Australia

主体

VJO Studio（Vision Journey，商业名称待注册）[ACN … / ABN …] 需律师确认