PayHelpers HK 私隱政策 / Privacy Policy

中文版（香港）

版本：1.2｜生效日期：2026-10-03

1. 我們是誰

PayHelpers HK（「本服務」，網址 https://payhelpers.com）是一個網頁應用程式／漸進式網頁應用程式（PWA），供香港僱主為其外籍家庭傭工（「外傭」）計算工資、管理休息日、法定假日及補假、製作工資單及保存紀錄。

本服務由 Digital Vision Brands Holdings Limited（「我們」）營運。

我們遵守香港《個人資料（私隱）條例》（第486章）（「私隱條例」）及其六項保障資料原則（見附錄）。

2. 本政策適用於誰

• 僱主（「你」）：登記及使用本服務的人士。
• 外傭：外傭不是本服務的帳戶用戶，但你輸入或上載的外傭個人資料同樣受本政策保障。外傭使用電子簽收連結時，本政策亦適用。

3. 收集個人資料聲明

在你登記帳戶或向本服務提供任何個人資料之前，請細閱本聲明。

1. 收集目的：見第5節。
2. 必須或自願提供：帳戶電郵，以及計算工資所需的資料（例如外傭姓名、每月工資、合約日期）是必須提供的；如不提供，我們無法為你提供服務。護照號碼、國籍、地址及合約檔案屬自願提供。
3. 資料可能轉移給：（a）第9節所列、代我們處理資料的服務供應商；（b）法律要求時的執法、規管或政府機構；（c）如我們的業務全部或部分轉讓，承讓人（須繼續按本政策保障資料）。
4. 查閱及改正：你有權要求查閱及改正我們持有關於你的個人資料（見第14節）。
5. 聯絡：資料保障主任（見第18節）。

4. 我們收集甚麼資料

外傭資料沒有身分證號碼欄位。OCR 預填時會遮蓋身分證及護照號碼，不會把這些號碼填入外傭資料。

5. 我們如何使用資料

我們只會為以下目的或與其直接相關的目的使用個人資料：

1. 提供、維持及改善本服務的功能；
2. 計算工資、假期、補假及顯示相關提示；
3. 產生、儲存及讓你下載工資單及其他紀錄；
4. 處理外傭電子簽收；
5. 以 OCR 預填外傭表格，以及（付費方案）為你保存合約原件；
6. 客戶支援及回覆查詢；
7. 收費、發出收據及處理退款；
8. 保安、防止濫用及欺詐、排解故障；
9. 遵守法律及規管要求。

如要把資料用於新目的，我們會先取得相關人士的明確同意。

6. 我們不會做的事

• 我們不會出售或出租任何個人資料。
• 未經你另行明確同意，我們不會把你的資料用於直接促銷（私隱條例第6A部）。收據、方案到期提醒及政策更新等服務通知，不屬直接促銷。
• 你上載的合約只用於為你預填表格及（如適用）為你保存，不會用於訓練人工智能或機器學習模型，亦不會提供給其他用戶。
• 我們的員工不會查看你的外傭資料或合約，除非是應你要求提供支援、處理保安事故或遵守法律。

7. 僱主的責任（外傭資料）

當你輸入或上載外傭的個人資料時，你須：

1. 有合法及適當的理由收集及使用該等資料（例如履行僱傭合約及備存法例要求的紀錄）；
2. 告知外傭其資料會儲存於 PayHelpers HK 及其用途（你可向外傭出示本政策）；
3. 只輸入所需資料——非必要的選填欄位（例如護照號碼）可以留空；
4. 確保資料準確，並在有變更時更新。

就外傭資料而言，你決定收集及使用的目的；我們代你處理資料以提供服務，同時履行我們在私隱條例下的責任。

8. 外傭電子簽收連結

• 付費方案用戶可為每份工資單產生電子簽收連結，傳送給外傭。
• 連結只會顯示該份工資單及簽收所需內容，不會顯示僱傭合約、其他工資單或你帳戶內的任何其他資料。
• 外傭簽收時，我們會記錄簽名影像、簽收時間、IP 位址及裝置資料，作為雙方的紀錄。
• 請只把連結直接傳送給外傭本人。

9. 資料處理者

我們委託以下服務供應商代我們處理資料：

合約 OCR 由我們自行運行的開源軟件處理，不會把合約交給第三方 OCR 服務。我們不使用其他第三方服務（字型亦由我們自行寄存）。

我們以合約或其他方法要求上述供應商只按我們的指示處理資料、保障資料安全、不作其他用途，並在不再需要時刪除資料。

10. 跨境轉移

你的資料可能在香港以外地方儲存或處理，包括上述供應商伺服器所在的地方。我們的主要資料庫及檔案儲存地區為新加坡（Supabase 資料庫及檔案、Vercel 伺服器功能）；網站靜態內容經全球內容傳遞網絡提供。我們會採取合理措施，確保資料在香港以外地方獲得與本政策相若的保障。

11. 資料保安

• 所有傳輸均經 HTTPS（TLS）加密；儲存的資料亦經加密。
• 每個帳戶的資料互相隔離，你只能存取自己帳戶內的資料。
• 合約及文件存放於非公開儲存空間，只能經已登入帳戶的伺服器存取，不設公開連結。
• 員工存取權限只限於工作需要，並有紀錄。
• 付款由 Stripe 處理，我們不會接觸完整卡號。

任何系統均無法保證絕對安全。請妥善保管你的登入資料。如發生可能對你造成實際損害的資料外洩事故，我們會按適用法律及個人資料私隱專員公署（「私隱專員公署」）的指引，通知受影響人士及相關機構。

12. 資料保留期

1. 帳戶存在期間：保留你的資料。
2. 付費方案到期後：資料保留但鎖定（不能查看或下載已存檔紀錄，亦不能使用付費功能）；購買新方案後即可恢復存取全部資料；你亦可在鎖定畫面自行免費下載一次已鎖定的紀錄（ZIP），毋須續購。下載連結有效 10 分鐘；匯出檔案建立後 30 分鐘內可以重新下載，之後檔案不能再下載，並會在 48 小時內從我們的伺服器刪除；此刪除只適用於匯出檔案，原有資料繼續按本政策保留（詳見《服務條款》）。免費工資計算功能照常可用。
3. 免費用戶上載的合約原件：在你確認預填表格後不會保留；OCR 抽取的文字亦一併刪除，只保留你確認的表格欄位。
4. 付費用戶的合約原件：保留至你刪除該外傭或你的帳戶（刪除外傭時，其合約原件會一併刪除）。付費方案到期後，合約原件按第 2 項保留但鎖定，並包括在你可免費下載一次的已鎖定紀錄內。
5. 未儲存的合約上載：如你影低或上載合約後沒有確認儲存便離開，該合約圖片或檔案及預填資料會自動刪除，一般在 48 小時內完成。
6. 你刪除外傭或帳戶：相關資料會在30日內從系統刪除，並在90日內從備份刪除。
7. 不活躍帳戶：從未購買付費方案及連續24個月沒有登入的帳戶（曾經付費的帳戶不受此規則影響），我們可在以電郵通知30日後刪除。
8. 法律要求保留的紀錄：交易及會計紀錄會按法例要求保留（一般為7年），只作該用途。
9. 保安及系統紀錄：一般保留不超過12個月。

13. 請自行保存僱傭紀錄

《僱傭條例》（第57章）第49A條要求僱主備存僱員最近12個月的工資及僱傭紀錄，並在僱傭關係終止後保存最少6個月。本服務可協助你整理紀錄，但不能代替你履行法定責任。請定期下載工資單及紀錄副本自行保存，特別是在方案到期或刪除帳戶之前。

14. 查閱及改正資料

1. 你可隨時在應用程式內直接查看及更正大部分資料。
2. 你亦可向資料保障主任（第18節）以電郵書面提出查閱資料要求或改正資料要求（可使用私隱專員公署的「查閱資料要求表格」）。
3. 我們會在收到要求後40日內回覆，並可能先核實你的身分。
4. 處理查閱資料要求可收取費用，但不會超乎適度；改正資料不收費。
5. 即使你的方案已到期而資料被鎖定，你仍可提出查閱資料要求。
6. 外傭亦可就其本人的資料提出要求。我們可能需要與相關僱主協調，但會按私隱條例處理。

15. Cookies

• 必要 cookies：用於保持登入狀態、保安及記住語言偏好。停用這些 cookies 會令本服務無法正常運作。
• 分析工具：我們不使用任何第三方網站分析工具（例如 Google Analytics）。
• 市場來源 cookie（ph_attr）：在你首次進入本網站時設定，有效期 90 日，其後到訪不會覆寫。只記錄：(1) 連結帶有的推廣參數（UTM：utm_source／medium／campaign／content／term；如來源或媒介不在我們的清單內，會另記其整理後的原值；任何推廣參數如看似電郵地址或電話號碼，一律不會記錄；如屬我們尚未啟用的保留值，會加上「保留」標記（utm_reserved））；(2) 你首個到訪頁面的路徑（不含網址參數）；只有公開頁面（例如首頁、價錢、常見問題、工具及指南頁）會記錄完整路徑，私人或含連結碼的頁面（例如簽收連結、應用程式內頁、推薦連結）只記錄所屬部分（例如 /sign、/app、/r），其他未能辨認的頁面一律記為 /other；(3) 帶你進入本網站的網站網域名稱（例如 google.com，不含完整網址）；及 (4) 首次到訪時間。當中不包含訪客識別碼、IP 位址、完整網址，亦不包含上述 UTM 以外的任何網址參數。如你其後付款，這些資料會附於你的付款紀錄，並作為付款資料（metadata）傳送給我們的付款處理商 Stripe，只用於計算推廣成效；我們不會用作廣告追蹤，亦不會交給任何第三方分析工具。
• 我們不使用廣告 cookies 或跨網站追蹤 cookies，只使用登入 cookie、語言設定 cookie 及上述市場來源 cookie。付款時 Stripe 會在 checkout.stripe.com 使用其自身的 cookies。

16. 未滿18歲人士

本服務只供18歲或以上人士使用。我們不會故意收集未滿18歲用戶的資料。

17. 政策修訂

如本政策有修訂，我們會在修訂生效時或之前以電郵及／或應用程式內通知你；如修訂會減少你的權利，我們會最少提前 14 日通知。最新版本及生效日期會刊登於本頁。

• 1.2 版更改：加入未儲存的合約上載會自動刪除（一般在 48 小時內）的說明（見第 12 節第 5 項）。
• 1.1 版更改：加入首次到訪時設定的市場來源 cookie（ph_attr）的詳情（見第 15 節）。

18. 聯絡我們

• 私隱事務（包括查閱及改正資料要求）：資料保障主任，電郵 privacy@payhelpers.com
• 一般查詢：support@payhelpers.com

私隱事務請以電郵聯絡。

如你對我們的回覆不滿意，可向個人資料私隱專員公署（https://www.pcpd.org.hk）查詢或投訴。

附錄：六項保障資料原則如何應用

如本政策中英文版本有歧異，以中文版本為準。

English Version

Version: 1.2 | Effective date: 2026-10-03

1. Who we are

PayHelpers HK (the "Service", https://payhelpers.com) is a web app / progressive web app (PWA) that Hong Kong employers use to calculate wages for their foreign domestic helpers ("helpers"), manage rest days, statutory holidays and makeup leave, create payslips and keep records.

The Service is operated by Digital Vision Brands Holdings Limited ("we", "us").

We comply with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (the "PDPO") and its six Data Protection Principles (see the Appendix).

2. Who this policy covers

• Employers ("you"): people who register for and use the Service.
• Helpers: helpers do not hold accounts, but the helper personal data you enter or upload is protected by this policy. It also applies when a helper uses an e-sign link.

3. Personal Information Collection Statement

Please read this statement before you register or give us any personal data.

1. Purposes: see section 5.
2. Obligatory or voluntary: your account email and the data needed to calculate wages (for example the helper's name, monthly wage and contract dates) are obligatory. Without them we cannot provide the Service. Passport number, nationality, address and contract files are voluntary.
3. Who we may transfer data to: (a) the service providers listed in section 9 that process data for us; (b) law enforcement, regulatory or government bodies where the law requires; (c) a buyer of all or part of our business, who must continue to protect the data under this policy.
4. Access and correction: you have the right to request access to and correction of personal data we hold about you (see section 14).
5. Contact: our Data Protection Officer (see section 18).

4. What we collect

The helper profile has no identity card number field. OCR prefill masks identity card and passport numbers and never copies them into the helper profile.

5. How we use data

We use personal data only for the following purposes, or purposes directly related to them:

1. Providing, maintaining and improving the Service;
2. Calculating wages, holidays and makeup leave, and showing related hints;
3. Creating, storing and letting you download payslips and other records;
4. Handling helper e-sign;
5. Prefilling the helper form by OCR and, on a paid plan, keeping the contract original for you;
6. Customer support and replying to enquiries;
7. Billing, receipts and refunds;
8. Security, preventing abuse and fraud, and fixing faults;
9. Complying with legal and regulatory requirements.

If we want to use data for a new purpose, we will first get the express consent of the person concerned.

6. What we will not do

• We do not sell or rent personal data.
• We do not use your data for direct marketing without your separate, express consent (PDPO Part 6A). Service notices such as receipts, plan-expiry reminders and policy updates are not direct marketing.
• Contracts you upload are used only to prefill your form and, where applicable, to store for you. They are not used to train AI or machine-learning models and are not shown to anyone else.
• Our staff do not look at your helper data or contracts except to give support you ask for, handle a security incident, or comply with the law.

7. Your responsibilities as employer (helper data)

When you enter or upload a helper's personal data, you must:

1. Have a lawful and proper reason to collect and use it (for example, performing the employment contract and keeping records the law requires);
2. Tell your helper that their data is stored on PayHelpers HK and what it is used for (you may show them this policy);
3. Enter only what is needed — optional fields that are not necessary (such as passport number) can be left blank;
4. Keep the data accurate and update it when it changes.

For helper data, you decide the purposes of collection and use; we process the data on your behalf to provide the Service and also meet our own duties under the PDPO.

8. Helper e-sign links

• On a paid plan you can create an e-sign link for each payslip and send it to your helper.
• The link shows only that payslip and what is needed to sign it. It never shows the employment contract, other payslips or anything else in your account.
• When the helper signs, we record the signature image, time, IP address and device information as a record for both parties.
• Please send the link only to the helper directly.

9. Data processors

We use these service providers to process data on our behalf:

Contract OCR runs on open-source software that we operate ourselves. Contracts are never sent to a third-party OCR service. We use no other third parties (fonts are self-hosted too).

We require these providers, by contract or other means, to process data only on our instructions, keep it secure, not use it for other purposes, and delete it when no longer needed.

10. Cross-border transfer

Your data may be stored or processed outside Hong Kong, including where the providers above have servers. Our main database and file storage region is Singapore (Supabase database and files, Vercel server functions). Static website content is served through a global content delivery network. We take reasonable steps to make sure data outside Hong Kong is protected to a standard similar to this policy.

11. Security

• All traffic is encrypted with HTTPS (TLS); stored data is encrypted at rest.
• Each account's data is isolated; you can only access your own account's data.
• Contracts and documents are kept in private storage and served only through our server to signed-in account holders, never through public links.
• Staff access is limited to what their work needs and is logged.
• Payments are handled by Stripe; we never see full card numbers.

No system is completely secure. Please keep your sign-in details safe. If a data breach is likely to cause you real harm, we will notify affected people and relevant bodies in line with applicable law and the guidance of the Privacy Commissioner for Personal Data ("PCPD").

12. Retention

1. While your account exists: we keep your data.
2. After a paid plan expires: your data is kept but locked (you cannot view or download archived records or use paid features). Buying a new plan restores access to everything, and you can also download your locked records yourself once, free, as a ZIP from the locked screen, without buying a new plan. The download link lasts 10 minutes. You can download the export file again for 30 minutes after it is created; after that the file can no longer be downloaded and is deleted from our servers within 48 hours. This applies only to the export file; the original data stays under the retention rules in this policy (see the Terms of Service). Free payroll calculation keeps working.
3. Contract originals uploaded on the free tier: not kept after you confirm the prefilled form. The OCR-extracted text is deleted too; only the form fields you confirmed are kept.
4. Contract originals on a paid plan: kept until you delete the helper or your account (deleting a helper also deletes that helper's contract originals). After a paid plan expires, contract originals are kept but locked under item 2 and are included in the locked records you can download once, free.
5. Unsaved contract uploads: if you photograph or upload a contract and leave without confirming and saving it, the image or file and the prefilled data are deleted automatically, normally within 48 hours.
6. If you delete a helper or your account: the related data is deleted from our systems within 30 days and from backups within 90 days.
7. Inactive accounts: accounts that have never bought a paid plan and have not signed in for 24 months (accounts that have ever paid are not affected) may be deleted after 30 days' notice by email.
8. Records the law requires us to keep: transaction and accounting records are kept as the law requires (usually 7 years), for that purpose only.
9. Security and system logs: usually kept for no more than 12 months.

13. Keep your own employment records

Section 49A of the Employment Ordinance (Cap. 57) requires employers to keep wage and employment records for each employee covering the most recent 12 months, and to keep them for at least 6 months after the employment ends. The Service helps you organise records but does not replace your legal duty. Please download and keep your own copies of payslips and records regularly, especially before a plan expires or before you delete your account.

14. Access and correction

1. You can view and correct most of your data yourself in the app at any time.
2. You can also make a written data access request or data correction request by email to our Data Protection Officer (section 18). You may use the PCPD's Data Access Request Form.
3. We will reply within 40 days of receiving your request and may first verify your identity.
4. We may charge a fee for a data access request, but it will not be excessive. Correction is free.
5. You can make a data access request even if your plan has expired and your data is locked.
6. Helpers may also make requests about their own data. We may need to coordinate with the employer concerned but will handle the request as the PDPO requires.

15. Cookies

• Essential cookies: keep you signed in, protect your account, and remember your language preference. The Service will not work properly without them.
• Analytics: we do not use any third-party website analytics tools (such as Google Analytics).
• Marketing-source cookie (ph_attr): set on your first visit to the site; it lasts 90 days and is not overwritten by later visits. It records only: (1) any campaign (UTM) parameters on the link (utm_source/medium/campaign/content/term; if the source or medium is not on our list, its cleaned original value is kept alongside, and any campaign (UTM) parameter value that looks like an email address or phone number is not recorded at all; a value we have reserved but not yet launched is kept with a "reserved" flag (utm_reserved)); (2) the path of the first page you visited (without URL parameters); the full path is kept only for public pages (such as the home, pricing, FAQ, tool and guide pages), while private or link-code pages (such as signing links, in-app pages and referral links) are recorded only as their section (for example /sign, /app or /r), and any other unrecognised page is recorded as /other; (3) the domain name of the site that sent you (for example google.com, not the full address); and (4) the time of that first visit. It contains no visitor ID, IP address or full URL, and no URL parameters other than the UTM parameters above. If you later pay, these details are attached to your payment record and sent to our payment processor, Stripe, as payment metadata, and are used only to measure our marketing. We do not use them for ad tracking or share them with any third-party analytics tool.
• We do not use advertising cookies or cross-site tracking cookies. We use only a sign-in cookie, a language cookie and the marketing-source cookie above. During payment, Stripe uses its own cookies on checkout.stripe.com.

16. Under 18s

The Service is only for people aged 18 or over. We do not knowingly collect data from users under 18.

17. Changes to this policy

If we change this policy, we will tell you by email and/or in the app when or before the change takes effect; if a change reduces your rights, we will give you at least 14 days' notice. The latest version and its effective date are always on this page.

• Changes in version 1.2: adds that unsaved contract uploads are deleted automatically, normally within 48 hours (see section 12, item 5).
• Changes in version 1.1: adds details of the marketing-source cookie (ph_attr) set on your first visit (see section 15).

18. Contact us

• Privacy matters (including data access and correction requests): Data Protection Officer, email privacy@payhelpers.com
• General enquiries: support@payhelpers.com

Please contact us about privacy matters by email.

If you are not satisfied with our reply, you may contact or complain to the PCPD (https://www.pcpd.org.hk).

Appendix: How we apply the six Data Protection Principles

If the Chinese and English versions differ, the Chinese version prevails.