Effective Date: October 22, 2026
Last Updated: October 22, 2026
SmartCore AI™ values the privacy and data security of its users and enterprise customers. This Privacy Policy explains how the SmartCore AI™ services and website collect, process, use, transmit, store, and protect personal data and customer-authorized data, as well as the rights that users and enterprise customers may exercise.
This Policy is provided by Da Shiang Technology Co., Ltd. (達詳科技股份有限公司, Unified Business No.: 90114216) (hereinafter the "Company") and applies to the SmartCore AI™ website, accounts, subscription services, AI features, and related services.
Manufacturing, equipment, work order, scheduling, quality, material, tooling, automation, and other enterprise operational data processed by SmartCore AI™ that does not constitute personal data of an identifiable natural person is, in principle, handled in accordance with the customer's service agreement, the Terms of Service, authorization settings, this Policy, and the SmartCore AI™ data security requirements.
Depending on how the services are used, the Company may collect or process the following information:
Including name, company name, department, job title, email address, phone number, login account, and other account identification information.
Including company tax ID, invoice information, subscription plan, payment status, transaction records, and billing contact information. Credit card information is processed by third-party payment service providers, and SmartCore AI™ does not directly store full credit card numbers.
Including login times, IP addresses, browser and device information, system operation logs, Token usage, error logs, information security records, and service usage records.
Including questions entered by users, AI responses, query times, data sources, models used, Token usage, Web Search usage, and related operation records.
Based on the products the customer has deployed, the modules enabled, user roles, and authorization scope, SmartCore AI™ may access SmartCore AI™ | MES, SmartCore AI™ | FMS, SmartTool AI™, and other data sources separately agreed upon by both parties. The actual data that can be accessed, queried, and analyzed depends on the customer's authorization settings.
Including support requests, technical support records, email correspondence, and other information voluntarily provided by users.
The Company collects, processes, and uses data as necessary to provide the services and on the legal bases permitted by applicable law, including but not limited to:
Data is primarily used to:
Except where appropriate authorization has been obtained, where otherwise required by law, or where necessary to provide the services, the Company will not use personal data for purposes not reasonably related to the original purpose of collection.
When the customer enables SmartCore AI™ or connects SmartCore AI™ | MES, SmartCore AI™ | FMS, SmartTool AI™, or other data sources agreed upon by both parties, the customer authorizes the Company, to the extent necessary to provide the SmartCore AI™ services and in accordance with the customer's settings, user permissions, and operating instructions, to:
The Company will not, on account of the use of AI, unilaterally expand the scope of data access granted by the customer.
The customer confirms and represents that the data it provides, connects, or authorizes SmartCore AI™ to process:
The customer shall not provide, connect, or authorize SmartCore AI™ to process any data that it has no right to provide under law, contract, or the rights of third parties.
System connections, module activations, data scope settings, user permission settings, Web Search activation, and other data usage settings performed by system administrators, account administrators, IT personnel, and other users with corresponding administrative privileges designated by the customer shall be deemed formal operating instructions given by the customer within the scope of its authorization.
The customer shall manage administrator privileges on its own and ensure that personnel with administrative privileges have been properly authorized.
Except where otherwise required by law, expressly stated in this Policy, or necessary to maintain service security, the Company processes customer data only to the extent necessary to:
If the Company reasonably believes that a customer's processing instructions may violate applicable law, third-party rights, or information security requirements, the Company may notify the customer and suspend the relevant processing until the matter has been confirmed or resolved.
SmartCore AI™ accesses data in accordance with the user roles, data permissions, and authorization scope of the connected manufacturing systems.
SmartCore AI™ is primarily used for queries, analysis, and decision support, and uses authorized data on a read-only basis. It does not directly modify:
AI queries are performed within the scope of authorized data required to complete each task, in order to reduce unnecessary bulk transmission of enterprise data.
SmartCore AI™ uses the OpenAI API to provide certain AI inference and Web Search capabilities.
Under OpenAI's current API business data policy, inputs and outputs sent through the API are not used to train or improve OpenAI models by default, unless the customer explicitly opts in to data sharing.
Standard API usage may generate Abuse Monitoring Logs, which are retained for up to 30 days by default. Certain API features may also store Application State, the storage method and duration of which vary depending on the API endpoint, feature, and account settings used. Eligible API customers may apply for stricter data retention controls such as Zero Data Retention (ZDR) on supported API features.
OpenAI's models, APIs, data retention mechanisms, and related policies may change over time. The terms that actually apply are governed by OpenAI's latest official policies, account settings, and related contractual terms.
Only connected and authorized SmartCore AI™ | MES, SmartCore AI™ | FMS, SmartTool AI™, and other authorized enterprise data sources are used for queries and analysis. External web search is not enabled.
Web Search is enabled based on the subscription plan, user permissions, and customer settings to obtain public web information. Technical specifications, material information, standards, public industry information, and other public data can then be compared against the enterprise's internal manufacturing data and manufacturing capabilities.
Enabling Web Search does not mean that complete internal enterprise data should be used as search content.
SmartCore AI™ shall use only the information necessary to complete external queries.
When unpublished drawings, customer confidential information, personal data, national defense／export-controlled information, or other sensitive data are involved, the customer shall decide whether to allow the use of Web Search or other external data services in accordance with its internal information security policies and legal requirements.
The customer understands and agrees that, in order to provide the SmartCore AI™ services, the Company may use third-party service providers to the extent necessary, including:
The Company requires such service providers to process data only to the extent necessary to provide their services and to be bound by applicable contractual, confidentiality, and information security obligations.
The Company does not sell personal data to other customers or third parties. The Company may provide relevant data in accordance with the law where required by law, upon lawful request by a judicial or competent authority, or where necessary to protect the legitimate rights and interests of the Company, its customers, and users.
The customer is responsible for the source, legality, content, and authorization scope of the data it provides, connects, or authorizes SmartCore AI™ to process.
The customer shall ensure that:
Where a dispute arises because the customer lacks lawful authority, has not completed the necessary notices or consents, has exceeded the authorization granted by a third party, or has given processing instructions that violate applicable law or contractual obligations, liability shall be borne by the responsible party based on attributable cause and applicable law.
The Company shall process data in accordance with the customer's authorization and operating instructions, the SmartCore AI™ Terms of Service, this Privacy Policy, other agreements between the parties, and applicable law, and shall take reasonable information security and data protection measures.
The customer authorization set out in this Policy does not mean that the customer waives any rights that cannot be waived in advance under the law, nor does it exempt the Company from liability arising from its own violations of law, processing beyond the customer's authorization, or failure to fulfill obligations required by law.
Some of the cloud, AI, or other third-party service providers used by SmartCore AI™ may process or store data outside Taiwan. As a result, the use of the services may involve cross-border data processing or transfers.
The Company will handle such processing in accordance with applicable law, the data protection mechanisms of its service providers, and related contractual arrangements. The actual regions where data is processed may vary depending on the services, features, and provider infrastructure used.
The Company retains data only for the period necessary to:
When the services end, the relevant processing purpose no longer exists, or lawful instructions are received from the customer, the Company will delete, anonymize, stop processing, or otherwise appropriately handle the relevant data in accordance with applicable law, contractual terms, its data retention policy, and technical feasibility.
This does not apply to data that must be retained by law or for accounting, information security, dispute resolution, or other lawful reasons.
When the SmartCore AI™ services or the related data processing engagement ends, the Company will handle customer data in accordance with the agreements between the parties, the customer's lawful instructions, and applicable law. Upon the customer's request, and to the extent legally and technically feasible, the Company may, as agreed:
Data retention and deletion by third-party service providers are handled in accordance with their service settings, contracts, and related policies.
The Company takes reasonable and appropriate technical and administrative measures to protect data, including, depending on the actual system configuration:
No network, information system, or data transmission method can guarantee absolute security. The Company will continue to review and improve its security measures according to the level of risk.
In the event of a security incident involving personal data, the Company will take the necessary response, recording, and notification measures in accordance with applicable law and contractual requirements.
Under applicable personal data protection laws, data subjects may make the following requests regarding personal data held by the Company:
Upon receiving a request, the Company will verify the applicant's identity and handle the request in accordance with applicable law.
If the relevant data must be retained due to legal obligations, contract performance, information security, dispute resolution, or other lawful reasons, the Company may be unable to delete it immediately and will handle it in accordance with the law.
Certain data is required for the following services:
If the customer or user chooses not to provide the necessary data, they may be unable to complete registration, subscription, payment, or enterprise verification, or to use certain service features.
The SmartCore AI™ website may use cookies or other similar technologies to:
If non-essential website analytics, marketing, or third-party tracking tools are used in the future, the Company will provide the necessary explanations and choice mechanisms in accordance with applicable law.
The AI responses, analyses, summaries, risk alerts, and recommendations provided by SmartCore AI™ are primarily intended for manufacturing information queries and decision support. AI analysis results should not be directly treated as:
Users should perform the necessary verification based on data sources, actual shop floor conditions, engineering judgment, and internal enterprise procedures.
Before registering for, subscribing to, activating, or using SmartCore AI™, users shall read and accept this Privacy Policy and the related Terms of Service.
Personnel who perform activation, system connection, or data authorization on behalf of an enterprise shall confirm that they have the authority to make such settings and authorizations on behalf of that enterprise. The Company may retain necessary records related to the acceptance of the terms, including company account, user account, time of acceptance, terms version, IP address, and system operation records, as the basis for service management, security audits, and dispute resolution.
The Company may update this Policy due to changes in service features, technical architecture, laws and regulations, third-party services, or data processing methods.
In the event of material changes, the Company will notify users through the website, the system, email, or other appropriate means. The latest version and its effective date will be published on the official SmartCore AI™ website.
If you have any questions about this Privacy Policy, how personal data is processed, customer data authorization, or wish to exercise related rights, please contact us. The Company will handle your request in accordance with applicable law and related procedures.