隱私說明

私信翻譯與第三方服務

Direct messages are translated automatically to help people communicate across languages. Translations are currently generated by Google (Gemini), a third-party translation service on our paid tier, so message content leaves this site; that service is covered by the Google Data Processing Addendum (v10, effective 2026-05-07, incorporated by reference, so no separate signature is required). DeepL is currently disabled (no paid-tier attestation). You can turn off automatic translation in your settings; for confidential matters please use end-to-end encrypted messages (encrypted messages are never translated).

關閉自動翻譯後：你發出的明文私信不再發送給第三方翻譯服務；你收到的訊息也不再生成或展示譯文，只顯示原文。譯文僅用於展示，不改變內容稽核與先發後審、違規撤回的規則；群發私信按傳送者的設定決定是否翻譯。端到端加密私信在伺服器上只以密文儲存，伺服器無法解密，因此不會被翻譯，也不會發送給任何第三方。達人公開檔案的譯文同樣由上述第三方服務生成，且只翻譯本人已同意公開的欄位。

我們處理的資訊

賬戶建立時會處理郵箱地址、密碼強雜湊和年滿 18 歲的自我確認時間；新建立賬戶需要透過發往註冊郵箱的一次性連結後才能登入。提交達人資料時會處理你填寫的公開稱呼、介紹、位置描述、聯絡資訊、通知郵箱、分項同意記錄和 AI 稽核結果。

點選 GPS 功能後，瀏覽器會先將座標粗化到約 2 公里網格，再發送一次用於反查城市/區級名稱；服務不會儲存瀏覽器原始精確座標。

Team-visible conversations: conversations started from a team card are by default visible to that team’s owner and managers, so the team can follow up on enquiries. The counterpart (client) can switch the conversation to “send to that member only”, after which the team can no longer read it; a team can also switch off “member conversation visibility” entirely. Every team read is recorded in an audit log, and visibility changes appear as notices in the conversation timeline. End-to-end encrypted messages are not covered by this mechanism: the server stores only ciphertext, and neither the team nor our staff can decrypt or read them.

哪些資料會公開

透過稽核的達人檔案會面向訪問者展示。性別、年齡、粗略位置/常駐區域與直接聯絡方式只有在你逐項勾選同意後才會公開；這些同意預設關閉，可在編輯資料時撤回並重新稽核。通知郵箱不會公開。

若填寫直接聯絡方式但沒有勾選公開同意，系統不會把該聯絡方式保留在待稽核或公開檔案中。請勿在公開欄位填入門牌號、證件號、金融賬戶、他人資訊或不願公開的聯絡方式。地圖及位置僅用於大概區域展示，不代表實時位置、住址或見面地點。

未成年人

Muse Nearby is intended only for people aged 18 or over. You must confirm that you are at least 18 when registering and when submitting a public profile; we do not offer accounts, profiles, content publishing or offline contact features for minors. Any exception involving minors will only be considered after a separate legal and safety review; neither this page nor the Terms of Use is a commitment that such an exception is already available.

第三方與基礎設施

地圖圖層由 OpenFreeMap 提供；點選 GPS 反查時會請求 Nominatim/OpenStreetMap 服務。你的瀏覽器與這些服務建立連線時，相關服務可能按其自身規則處理網絡請求資訊。

Automatic review of the text of expert materials (applications and profiles) is performed by a local AI model running on our own servers; we do not send the text of your application materials to public large-model providers for review. Images in expert materials may be reviewed with the help of a third-party AI service on our paid tier covered by the Google Data Processing Addendum (v10, effective 2026-05-07) (currently Google Gemini); attachment images in direct messages are never sent to third parties. Automatic review of public articles (text content such as articles published by a team or its members) may use a third-party AI service on our paid tier covered by the Google Data Processing Addendum (v10, effective 2026-05-07) (currently Google Gemini). The names and current status of third-party services are set out in “Third-Party Services and Cross-Language Translation” above.

儲存、刪除與聯絡

運營資料會在保障服務、防濫用、處理舉報和恢復備份所需的期間內受限儲存。

Once signed in you can delete your account yourself from “My Profile”. This requires your current password and explicit confirmation, and immediately unpublishes and deletes your account, expert profile, favorites, login sessions and tokens, consent records, account avatar and the media you uploaded (the media files are deleted and are no longer served publicly). Direct messages you sent that remain in the other party’s conversation, and comments you posted, are retained in anonymised form (the sender is shown as “Deleted user”; the copy received by the other party is not deleted). Reports you filed have their contact email removed and only the necessary factual record is kept. Orders and payment records, platform audit records and the outbound email ledger are retained for legal, accounting and anti-fraud evidentiary needs (see “Retention Period” for the periods). After you delete a public profile or your account, restricted backups may persist until their rotation cycle completes. You can also write to Support@musenearby.com to request access, correction or deletion assistance.

我們是誰

Muse Nearby（musenearby.com，下稱“本平臺”）由 Muse Nearby 團隊運營。如有問題，或需瞭解運營者的完整登記資訊（名稱與地址），請聯絡：Support@musenearby.com，我們將在 5 個工作日內回覆。

法律依據

我們基於以下依據處理你的個人資訊：（1）履行與你之間的合同（提供賬號、公開檔案、私信與付費服務）；（2）你的同意（公開性別、年齡、位置與聯絡方式等可選欄位，以及自動翻譯；你可隨時撤回）；（3）我們的合法利益（安全、防濫用、防欺詐與服務質量），並已權衡你的權利；（4）履行法律義務（稅務、會計與配合主管機關）。涉及特殊類別資訊時，我們僅在你明確同意或法律另有要求時處理。

第三方服務與跨語言翻譯

• 機器翻譯：達人公開檔案的譯文可能由 Google（Gemini，付費檔；Google 資料處理附錄 v10 以併入方式適用，生效 2026-05-07）、NVIDIA NIM（nemotron 系列模型）或 DeepL 提供；DeepL 目前未啟用（未申報付費檔）。私信翻譯不含 NVIDIA NIM：一般私信（在你與對方均未關閉自動翻譯時）的譯文仍由 Google（Gemini，付費檔）與本機模型產生。你可在設定中關閉自動翻譯；關閉後，你送出的明文私信不再傳送給翻譯服務，你收到的訊息也不再產生或顯示譯文。
• End-to-end encrypted direct messages are not translated and are not sent to any third-party translation service.
• Payments: Stripe (payments and refunds).
• Email delivery: Resend (system notifications and verification emails).
• Geocoding: OpenStreetMap / Nominatim (resolving place names into coarse-grained coordinates).
• Search and indexing: Google, Bing (search engines crawl public pages).
• Review roles: text review of expert application materials runs on our own servers (text content is not sent externally); public articles and similar text content may be reviewed with the help of a third-party AI service on our paid tier (currently Google Gemini, covered by the Google Data Processing Addendum v10); images in expert materials may be reviewed by the same third-party AI service, and public voice messages may be transcribed into text by that service; voice messages in direct messages are not sent to third parties. Voice and video calls use our own relay service.
• 內容審核備援：當 Gemini 無法使用、逾時或達到額度上限時，公開檔案與公開內容（文章等）的文字可能改由 NVIDIA NIM（nemotron 系列模型）審核；此處理僅涉及公開檔案與公開內容的文字，不含私信，不含圖片，也不含語音。NVIDIA 依其公開服務條款處理這些文字。私信審核仍在本機模型上完成，內容不離開伺服器。
• The third parties above may process data in their own countries (including outside the EU); through contractual and compliance mechanisms we require a level of protection equivalent to that of the EU.

內容稽核與公開

Public content you submit is first reviewed automatically: text in expert materials (applications and profiles) is reviewed by a local AI model; public articles and similar text content may be reviewed with the help of a third-party AI service on our paid tier (currently Google Gemini, covered by the Google Data Processing Addendum v10, effective 2026-05-07); images (expert-profile images and public-article images) may be reviewed with the same third-party AI service (currently Google Gemini, covered by the Google Data Processing Addendum v10, effective 2026-05-07); video and voice are processed by cloud services when cloud moderation is enabled; public voice messages may be transcribed into text by the same third-party AI service (currently Google Gemini), and the transcript is reviewed and published only after the author confirms it; voice messages in direct messages are not sent to third parties. Human review follows where necessary. Content that does not pass review is not published. Publishing a public article also requires two independent declarations — a third-party rights and legality declaration, and a minors-content prohibition confirmation (see the Terms of Use, “Public Articles (Content Layer)”). You may withdraw your consent to publish any piece of content at any time; once withdrawn, that content is no longer publicly displayed. End-to-end encrypted direct messages are not subject to content review (we cannot read their contents), so users must assess the risks of that channel themselves.

此外，內容審核還會使用 NVIDIA NIM（nemotron 系列模型）作為第三方處理方：當 Gemini 無法使用、逾時或達到額度上限時，公開檔案與公開內容的文字可能改由 NVIDIA NIM 審核。此處理只涉及公開檔案與公開內容（文章等）的文字，不含私信，不含圖片，也不含語音；私信審核仍在本機模型上完成，私信內容不離開伺服器。NVIDIA 依其公開服務條款處理這些文字。

The byline of a public article shows only the “display name” you set, and not your avatar, team name, email, birthday or precise location; images in an article follow its publication state and are no longer served publicly once the content is taken down or the public surface is switched off. Published articles may be indexed, quoted and retrieved by search engines and AI systems.

儲存期限

• Public profiles and account information: retained until you delete them or delete your account.
• Media: free storage for 30 days; after expiry, access is restricted during a 14-day grace period, and storage can be extended for 90 days for a fee ($2.99); after expiry it is no longer served publicly.
• Direct messages and comments: retained until you or the other party deletes them. When an account is deleted, the direct messages you sent and the comments you posted are retained in anonymised form (the other party’s received copy and the discussion context are preserved, and the sender is shown as “Deleted user”), and are no longer linked to your account.
• Account deletion: the account, expert profile, favorites, login sessions and tokens, consent records, account avatar and media you uploaded are deleted immediately; orders and payment records, platform audit records and the outbound email ledger are retained for the periods below.
• Transaction and tax records (orders): retained for 10 years as required by Italian accounting and tax obligations.
• Platform audit records (administrative actions and account-deletion traces): 3 years.
• Complaint and report records: after 365 days the reporter’s identity and technical identifiers are removed, while the handling record is kept.
• Outbound email ledger (recipient, subject, body): recipient and body are removed after 90 days.
• Access statistics (per-day deduplicated visitor hashes): 400 days.
• Login and security event logs: about 24 hours.
• Server access logs: about 14 days.
• Mail delivery logs: about 8 weeks.
• Operations logs (journald): rotated by a size cap of about 200 MB.
• While a complaint, legal claim or investigation is pending, deletion or anonymisation of the relevant records may be suspended (litigation hold), recording who added the hold and why.

你的權利

你有權：訪問、更正、刪除你的個人資訊；撤回同意（不影響撤回前處理的合法性）；獲取資料副本；反對或限制特定處理；向監管機構投訴（運營地在義大利，主管機構為 Garante per la protezione dei dati personali）。行使方式：Support@musenearby.com。

Cookie 與本地儲存

• 會話 Cookie：維持登入狀態（必需）。
• 語言偏好 Cookie（muse_lang）：記住你選擇的語言，有效期 1 年。
• 瀏覽器本地儲存：在表單中暫存你未提交的草稿，避免內容丟失；提交成功或你主動放棄後清除。
• 我們不使用廣告追蹤 Cookie。

安全

我們採用傳輸加密（HTTPS）、密碼雜湊、訪問控制、限流與審計日誌等措施保護資料。端到端加密私信在設計上使伺服器只能儲存密文。但請理解：任何系統都無法保證絕對安全，請勿透過本平臺傳遞你無法承受洩露風險的敏感資訊。