Ourealife International Limited 皇極道集團有限公司（以分行名稱「心樂音樂 HMCHK Music」經營）（商業登記號碼：77029697-001-09-26-3；營業地址：香港旺角登打士街同珍商業大廈19樓1904室；下稱「HMC」或「我們」）營運 HMC Civilization OS，是你個人資料的「資料使用者」（data user）。根據《個人資料（私隱）條例》（第 486 章）附表 1 保障資料第 1(3) 原則，我們在收集資料時告知你以下事項：
本政策由 Ourealife International Limited 皇極道集團有限公司（以分行名稱「心樂音樂 HMCHK Music」經營）作為「資料使用者」發出。商業登記號碼：77029697-001-09-26-3。營業地址：香港旺角登打士街同珍商業大廈19樓1904室。品牌：HMC Music Group、HMCHK Music、HMC Civilization OS。
處理私隱事宜及查閱、更正要求的人員：合規經理（Compliance Manager）。地址見上文。電郵：info@h-m-c-musicgroup.com。
本政策獨立於《服務條款》及《退款政策》。
| 類別 | 資料 | 必須／自願 | 不提供的後果 |
|---|---|---|---|
| 帳戶（Google 登入） | 名稱、電郵、個人檔案相片、Google／Firebase 識別碼 | 必須 | 不能使用服務 |
| 年齡確認 | 你在註冊時勾選確認已年滿 18 歲的紀錄及時間 | 必須 | 不能使用服務 |
| 個人檔案 | 藝名、自我介紹、風格 | 自願 | 顯示預設名稱 |
| 交易 | 訂單編號、產品、金額、付款狀態、退款紀錄、付款渠道 | 購買時必須 | 不能購買 |
| 卡資料 | 由 KPay 或 Stripe 直接收集；我們不保存完整卡號 | — | — |
| 商業授權 | 獲授權人全名、公司名稱（如有）、曲目識別碼、授權等級、SHA-256 檔案指紋、簽發時間 | 購買授權時必須 | 不能購買該授權 |
| 創作內容 | 提示詞、你輸入的歌詞、生成紀錄、草稿、生成音軌、典藏 | 使用生成功能時必須 | 不能生成 |
| AI Coach | 你的提問及 AI 回覆 | 自願 | 不能使用 AI Coach |
| 樂手公會 | 公會檔案、城市、樂器或風格、上載錄音（.mp3／.m4a／.aac／.wav，每個不超過 20MB） | 自願 | 不能使用公會 |
| 演出、血脈印記、通訊、同意紀錄 | 演出資料；印記代碼；你寄來的電郵及版權通知；條款版本及勾選時間 | 演出及印記自願；同意紀錄必須 | 見各功能；無同意紀錄則不能使用服務 |
| 裝置及日誌 | IP 地址、瀏覽器、裝置類型、時間戳、錯誤紀錄 | 自動收集 | 服務可能不能正常運作 |
我們只收集與上述用途直接有關、足夠而不過多的資料，並以合法及公平的方式收集（保障資料第 1(1) 及 1(2) 原則）。
如要把資料用於新用途，我們會先取得你明確及自願的同意（「訂明同意」）。
錄音可能包含可識別的人聲。上載前，你必須確認錄音中每位可識別的人士（包括每位表演者）都已同意上載及公開。你可隨時刪除自己上載的錄音。刪除後，我們會從正在使用的系統移除該錄音。
| 位置 | 誰看到 | 如何退出 |
|---|---|---|
| 作品頁／典藏 | 本服務的使用者 | 電郵 info@h-m-c-musicgroup.com |
| 排行榜 | 本服務的使用者 | 電郵 info@h-m-c-musicgroup.com |
| 文明地圖（只到城市，沒有 GPS） | 本服務的使用者 | 電郵 info@h-m-c-musicgroup.com |
| 樂手公會 | 本服務的使用者 | 刪除或隱藏檔案 |
| 演出頁 | 公眾 | 刪除演出 |
| 授權公開驗證頁（QR） | 任何持有連結的人 | 電郵 info@h-m-c-musicgroup.com |
你退出後，我們會把相關資料從公開位置移除。未經同意披露他人個人資料（「起底」）可構成《私隱條例》第 64 條的罪行。請勿在社群內這樣做。
我們不出售你的個人資料。轉移類別：Google LLC（Firebase、Cloud Functions、Cloud Storage；美國 us-central1，亦可能在香港以外）；Google Lyria 及 Google Gemini（透過 Google Cloud Vertex AI；可在 Google 或其代理設有設施的任何國家處理、暫存或快取）；KPay 及 Stripe；電郵發送服務商；律師、會計師及核數師；執法、監管機構及法庭；業務承讓人；其他用戶（見 B6）。我們以合約要求資料處理者只按我們的指示處理資料。
你的資料會在香港以外儲存或處理：主要在美國（us-central1）。Google Lyria 及 AI Coach 的提示詞、提問及生成結果亦可能在 Google 或其代理設有設施的任何國家暫存或快取。這些地方的私隱法例保障程度未必與香港相同。《私隱條例》第 33 條現時仍未生效。Google Lyria 及 Google Gemini 透過 Google Cloud Vertex AI 使用，適用 Google Cloud 資料處理者《資料處理附錄》（Cloud Data Processing Addendum）。
| 資料 | 保留期 |
|---|---|
| 未完成草稿 | 30 日後自動刪除 |
| 帳戶資料及個人檔案 | 帳戶存續期間 |
| 生成音軌、典藏、上載錄音 | 直至你刪除 |
| 已簽發商業授權紀錄（含 SHA-256 指紋） | 簽發後 7 年 |
| 交易及退款紀錄 | 交易完成後 7 年（《稅務條例》第 51C 條） |
| 版權通知及反通知 | 最少 18 個月 |
| 同意紀錄、直接促銷同意或拒絕紀錄 | 使用期間，加 7 年 |
| 備份 | 循環覆蓋 |
請聯絡合規經理（地址見 B1；電郵 info@h-m-c-musicgroup.com）。我們可能要求你由帳戶電郵發出要求，以核實身份。
本服務只供年滿 18 歲的人士使用。註冊及付款時須勾選確認。我們不會在知情下收集未滿 18 歲人士的個人資料。如發現意外收集了未滿 18 歲人士的資料，我們會關閉該帳戶，並刪除其個人資料（法律要求保留的交易紀錄除外）；已付款項按《退款政策》第 10 條處理。不設家長、監護人或學校同意的註冊途徑。
必要 Cookie 及本機儲存用於 Firebase 登入、語言，以及深色或淺色模式。便利儲存可記住你最近使用的獲授權人名稱，你可在瀏覽器刪除。
我們現時不使用網站分析服務。日後如開始使用，我們會先更新本政策；如有關 Cookie 並非絕對必要，我們會在使用前徵求你的同意，你亦可拒絕。我們不使用第三方廣告 Cookie。你可在瀏覽器設定管理或刪除 Cookie。為防濫用，我們使用 Google reCAPTCHA Enterprise（Firebase App Check），亦從 Google Fonts 及 cdnjs 載入字型和程式庫，這些服務會收到你的 IP 及裝置資料。
我們只會在你勾選同意後，才用你的姓名或藝名及電郵，推廣 HMC 自家的服務、優惠及音樂活動。該方格預設不勾選。第一次發送時，我們會告知你可免費要求停止（第 35F 條）。你可電郵 info@h-m-c-musicgroup.com 或按「取消訂閱」要求停止（第 35G 條）。我們不會在未取得書面同意前，把你的個人資料提供給其他人作他們的直接促銷（第 35J 條）。交易、退款、保安及條款更新不屬直接促銷。
全站使用 HTTPS。我們以存取權限限制只有你本人或獲授權人員可存取資料。我們不保存完整信用卡號碼。沒有任何系統可以保證百分之百安全。
如發生資料外洩，我們會盡快控制事故、評估風險，並在有真實傷害風險時，於切實可行範圍內盡快通知受影響用戶及私隱專員公署。香港法例現時未強制通報。我們按私隱專員公署的資料外洩指引處理。
我們會在本頁公布新版本及生效日期。重大改動會在本頁公布，並以應用內通知或電郵告知你。新用途會先取得你的同意。
中文版本與英文版本具同等效力。如兩者有歧義，以對你較有利的解釋為準。
Ourealife International Limited 皇極道集團有限公司, trading as 心樂音樂 HMCHK Music (a branch of Ourealife International Limited) (Business Registration No. 77029697-001-09-26-3; business address Room 1904, 19/F, Tong Chun Commercial Building, Dundas Street, Mong Kok, Hong Kong; "HMC" or "we") operates HMC Civilization OS and is the data user of your personal data. Under Data Protection Principle 1(3) of Schedule 1 to the Personal Data (Privacy) Ordinance (Cap. 486), we tell you the following when we collect data:
This policy is issued by Ourealife International Limited 皇極道集團有限公司, trading as 心樂音樂 HMCHK Music (a branch of Ourealife International Limited), as data user. Business Registration No. 77029697-001-09-26-3. Business address: Room 1904, 19/F, Tong Chun Commercial Building, Dundas Street, Mong Kok, Hong Kong. Brands: HMC Music Group, HMCHK Music, HMC Civilization OS.
The person who handles privacy, access and correction requests is the Compliance Manager, at the address above. Email info@h-m-c-musicgroup.com.
This policy is separate from the Terms of Service and the Refund Policy.
Account data from Google sign-in, your confirmation that you are 18 or over, and consent records are mandatory. Card numbers are collected by KPay or Stripe; we do not store the full number. A commercial licence needs the licensee's full name, and we keep a SHA-256 file fingerprint of the licensed file. Guild uploads are voluntary and are limited to .mp3, .m4a, .aac or .wav, up to 20MB each. If you do not give voluntary data, the related feature is simply unavailable.
We use data to run the service, take payment, issue and check licences, give support, handle copyright notices, keep the service secure, and meet legal, tax and accounting duties. A new purpose needs your express voluntary consent.
Music is generated by Google Lyria, and AI Coach by Google Gemini, both via Google Cloud Vertex AI (Generative AI) under HMC's Google Cloud project. Under the Google Cloud terms, Google does not use customer data (including prompts or outputs) to train or improve its models, and it acts as a processor under its Cloud Data Processing Addendum. Google may keep prompts and responses for a limited period for abuse, security, and legally required logs, and may cache them in any country where Google or its agents have facilities. Safety filters may block a request to imitate a named singer or to generate copyrighted lyrics. SynthID is embedded by Google, is controlled by Google, and is not proof of copyright. We do not promise that SynthID remains detectable after mixing. We do not train AI on your recordings, and we do not make voiceprints, biometrics or voice models.
Before you upload, every identifiable person in the recording, including every performer, must have agreed to the upload and to it being shown. After you delete a recording, we remove it from the live system.
Work pages, leaderboards, the map, the Guild and show pages can be seen by people using the service. Show pages are public. The map is city level only. We never show GPS. To opt out, email info@h-m-c-musicgroup.com. After you opt out, we remove the information from public places. Disclosing someone's personal data without consent can be an offence under section 64.
We do not sell personal data. Classes: Google LLC (United States, us-central1, and possibly elsewhere outside Hong Kong); Google Lyria and Google Gemini; KPay and Stripe; an email provider; professional advisers; law enforcement, regulators and courts; a business transferee; other users. Contracts require processors to follow our instructions.
Data is stored or processed outside Hong Kong, mainly in the United States (us-central1). Lyria and AI Coach prompts and results may also be cached in any country where Google or its agents have facilities. Section 33 of the Ordinance is not in force. Google Cloud's Data Processing Addendum covers Vertex AI use.
Account data and profile: for as long as the account exists. Generated tracks, collection items and uploaded recordings: until you delete them. Unfinished drafts: 30 days. Backups: overwritten in rotation. Issued licence records: 7 years. Transaction and accounting records: 7 years (Inland Revenue Ordinance section 51C). Copyright notices and counter notices: at least 18 months. Consent and direct-marketing records: the period of use plus 7 years.
Access within 40 days of a written request (sections 18 and 19). Correction within 40 days (sections 22 and 23). To delete an account, email info@h-m-c-musicgroup.com. What happens to unused paid ⚡ if you ask us to close the account is in section 11 of the Refund Policy. You may stop direct marketing free of charge (section 35G). You may also complain to the PCPD: https://www.pcpd.org.hk/.
The service is only for people aged 18 or over. You confirm this when you register and when you pay. If we find data of someone under 18, we close the account and delete the personal data, except transaction records the law requires us to keep. Payments are handled under section 10 of the Refund Policy. There is no parent, guardian or school consent path.
Essential cookies and local storage keep you signed in and remember language and light or dark mode. A convenience store may remember the last licensee name; you can clear it in the browser.
We do not use a website analytics service at present. If we start using one, we will update this policy first. If the cookies are not strictly necessary, we will ask for your consent before using them, and you may refuse. We do not use third-party advertising cookies. You can manage or delete cookies in your browser. To limit abuse we use Google reCAPTCHA Enterprise (Firebase App Check), and we load typefaces and libraries from Google Fonts and cdnjs. Those services receive your IP address and device data.
Only if you tick the box do we use your name or artist name and your email to tell you about HMC's own services, offers and music events. The box starts unticked. The first message tells you that you can stop, free of charge (section 35F). Stop by email or by unsubscribe (section 35G). We do not give your data to anyone else for their own direct marketing without written consent (section 35J). Transaction, refund, security and terms messages are not direct marketing.
The site uses HTTPS. Access controls limit who can read data. We do not store full card numbers. No system can promise complete security.
If a breach happens we contain it, assess the risk, and where there is a real risk of harm we notify affected users and the PCPD as soon as practicable. Notification is not yet mandatory in Hong Kong. We follow the PCPD breach guidance.
We post the new version and its effective date here. For a material change we post it on this page and tell you in the app or by email. A new purpose needs your consent first.
The Chinese and English versions have equal effect. If they differ, the meaning more favourable to you applies.