Privacy Policy

About TWMD

TWMD is a Taiwan market-data platform built for quantitative research, AI agents and automated workflows. It organises first-hand official disclosures from TWSE, TPEx, TAIFEX, TDCC, MOPS and open macroeconomic sources into a consistent, programmatically accessible API, bulk data and MCP.

Scope

This Policy describes how we handle personal information when you visit the Site; when you access or use the Services as a customer or authorised user; and when you otherwise interact with us (for example by contacting us or attending an event). TWMD is the data controller for the personal information processed under this Policy.

An important boundary — the market-data content delivered by the Services contains no personal data (PII). What we deliver is officially disclosed market, positioning and macroeconomic data (TDCC data is an aggregate shareholding distribution, not individual holders). The personal information covered by this Policy therefore relates principally to accounts, billing and use of the Site, not to the market-data content itself.

Information we collect

• Provided directly by you: contact and professional information (name, email, company, job title), account information (login identifier, username), transaction information (hashed payment identifiers, billing address), and the content you provide in support requests or enquiries.
• Collected automatically: usage information (page views, clicks, searches, errors, timestamps), device information (browser, operating system, language), service-generated information (logs, IP address, city- or country-level location inferred from IP — we do not collect precise location), aggregated and de-identified telemetry, and information collected through cookies according to your settings (see the Cookie Policy).
• From third parties: limited information from payment providers and partners, such as failed payments and risk indicators.

We do not actively collect special-category (sensitive) personal data for any purpose other than providing the Services.

How we use information

To provide, operate and maintain the Services (including troubleshooting and upgrades); for product development and improvement; to provide customer support; for account management and billing; to send necessary administrative and security notices; to detect, prevent and respond to fraud, abuse and security threats; to comply with applicable law; and for other purposes where you have consented. We do not use market-data content for any of the personal-information processing described above, because it contains no PII.

How we retain information

We retain personal information only for as long as is necessary to meet our legal and contractual obligations, for legitimate operational purposes (such as tax and accounting), to resolve disputes and to exercise our rights. When there is no longer a legitimate business need we delete or de-identify it; where immediate deletion is not possible, for example because of backups, we hold it securely until it can be deleted.

How we disclose information

We disclose information only where necessary and with appropriate safeguards: to service providers who help us operate (compute, CDN / edge security, backups, payments, sign-in / analytics — the full list is in the subprocessor table in the Trust Centre); to comply with a requirement of law or a competent authority; as part of a transaction in a corporate reorganisation, merger or transfer of assets (of which separate notice will be given); and to other third parties where you have consented. We may also disclose aggregated or de-identified information that cannot identify any individual.

How we protect information

We take reasonable and appropriate administrative, technical and physical measures to protect information against unauthorised access, use, alteration, destruction or disclosure (TLS in transit, edge protection, encrypted backups, least-privilege access). No method, however, can guarantee absolute security. We require third parties processing information on our behalf to take corresponding security measures in line with industry standards and their contractual obligations.

Third-party services

The Site or the Services may link to or integrate with third-party services not operated by TWMD, each with its own separate terms and privacy policy. We are not responsible for their content or practices, and we recommend that you review them yourself before use.

How we transfer information across borders

In order to provide the Services we may store, process or transfer your information outside your country of residence, for example where our compute providers are located; data-protection laws in those places may not provide the same level of protection. Where applicable law requires it, we take appropriate measures to protect information transferred across borders, such as standard contractual clauses or other lawful mechanisms.

Your privacy rights and choices

Depending on your jurisdiction and applicable law, you may have the following rights: to access and obtain a copy, to rectification, to restriction of processing, to erasure, to data portability, to withdraw consent, and to complain to a supervisory authority about our processing. You may also unsubscribe from marketing communications at any time (customers will still receive transactional and administrative notices relating to the Services). To exercise a right, please contact us through “Contact us” on the Site; to protect your information we may need to verify your identity before acting. We will respond within the period set by applicable law.

Minimum age

The Site and the Services are not intended for individuals under 16, and we do not knowingly collect their personal information. If you become aware that a minor has provided us with personal information, please contact us and we will take steps to remove it.

Changes to this Policy

We review and update this Policy from time to time to reflect new services or changes in practice. The “Last updated” date on this page tells you which version is current; we recommend that you check it periodically.

Governing law and regional application

This Policy is construed and applied under the laws of the Republic of China (Taiwan). If you are located in certain jurisdictions — for example under the EU/UK GDPR or a US state privacy law — you may have additional rights under that law, which we will honour as applicable law requires.

Contact

If you have questions about this Policy, please contact TW Market Data (TWMD) through “Contact us” on the Site.