This page is part of the Terms of Service. Text version v25, effective from 2026-10-14. Terms of Service
Pursuant to Article 8 of the Personal Data Protection Act, you are notified of the following.
I. Collector: Yi Gong Yan Chuang Co., Ltd.
II. Purposes: providing website fault diagnosis and repair, producing and delivering reports, case notifications, performance of the contract, refund handling, evidence for disputes and the exercise or defense of legal claims, service security and fraud prevention.
(3) Categories of personal data collected: what you provide yourself is your e-mail address (which must be verified) and your website address, and depending on the mode you choose may include host connection details, as well as the content of any e-mail you send to the Service's customer-support mailbox; what the system obtains automatically is your IP address, browser information and operation timestamps; what is touched in the course of diagnosis and repair is your website's program files and the database contents within the scope defined in Article 5. Payment data does not pass through the Company's systems: card numbers and the like are handled directly by the third-party payment provider used by the Company at the time, on that provider's own checkout page.
(4) Case communication channel: the Service requires you to verify an e-mail address. Important notices for a case — the health check report, the repair report, the location of the pre-repair backup, and the Data Access Certificate — are all sent to that address, and it is for you to keep them.
V. Period of use: until the retention periods set out in Article 8 expire.
(6) Territory of use: within the Republic of China, and the territories where the servers of the processors listed in Article 6 are located.
VII. Recipients and manner of use: the Company and the processors listed in Article 6, in electronic form, within the purposes stated in item II.
VIII. What the Company will never do: use your data or your website users' data for marketing, sell it, exchange it, provide it to third parties unrelated to the Service, or use it to train any AI model.
IX. Your rights: under Article 3 of the Personal Data Protection Act you may, regarding your personal data held by the Company, request access, review, a copy, supplementation or correction, cessation of collection, processing or use, and deletion. To exercise them, write to support@wp119.com; the Company will reply within three business days.
X. Consequence of not providing data: you may decline to provide the data above, but every step of the Service depends on it, so without it the Service cannot be used.
This is the main difference between the Service and ordinary website-repair services; please understand its scope and its limits.
(1) Tables from which only the structure, not the contents, is taken: when the Service obtains your website data, apart from the core content tables such as posts, pages, categories, site settings and URL rules, every other table has only its structure taken and not its contents. Those designated "protected tables" cover the tables that store the following: your website's user accounts and member data, comments, orders and transaction records, form submissions, newsletter subscriber lists, login and security logs, and visitor statistics. Orders and form submissions stored inside the posts table are likewise excluded row by row. The actual extent of the protected tables depends on the plugins installed on your website and changes as the Service is updated; the actual scope taken for each case is as stated in that case's Data Access Certificate.
(2) In-place execution: if a repair needs to change a protected table (for example clearing spam comments or correcting comment URLs), that action is carried out in place on your own host, and its contents do not enter the repair station. In-place work is done in batches and your website continues to operate during it; the items actually carried out are listed one by one in the repair report.
(3) Blocking at write-back: when the repair result is written back to your website, the system runs a blocking check on the protected tables. If the contents of a protected table appear in what is being written back, the system stops the write-back and your website is not changed.
IV. Media files: in all three modes, media files (images and uploads) stay on your original host and are not copied to the repair station.
(5) Data Access Certificate: for any case in which the repair station obtained data from your website, the Service attaches a "Data Access Certificate" when it sends that case's repair report or case-closure notice to your verified e-mail address. The certificate states, as conclusions: whether the contents of protected tables entered the repair station; the categories of tables whose contents entered the repair station and of those for which only the structure was obtained; the version and time of each document you agreed to; and the times at which the repair station and the host credentials were destroyed. Where any of these has not yet happened at the time of sending, cannot be confirmed, or does not apply to the case, the certificate says so.
(6) The boundary of this Article — please be sure to understand: what this Article protects is the protected tables described above. The repair station still obtains your website's content tables such as posts, pages, categories and settings, as well as its program files. Those contents may include personal data of your own (for example an administrator e-mail address, or contact details you have posted yourself in a post or page). The Company therefore does not claim that "no personal data is obtained", but that "the contents of protected tables are not obtained".
(7) Scope of application: the mechanism described in this Article applies to cases accepted after these Terms take effect.
(1) Legal position: as regards third parties' personal data contained in your website, you are the collecting party for that personal data and the Company is a processor commissioned by you. Under Article 4 of the Personal Data Protection Act, the Company is treated as the commissioning body within the commissioned scope, and processes the data solely for the purposes set out in these Terms and on your instructions, and may not go beyond them.
II. Your obligations: you represent and warrant that, for the third-party personal data contained in your website, you have given the notices and obtained the consents required by law, and are entitled to engage the Company for the processing described in these terms.
(3) Processors: the host and computing provider for the Service (including the Service's website, case records and the repair station; servers located outside the Republic of China), the provider of encrypted transmission and security protection for website connections, the third-party payment provider(s) used by the Company at the time (which may differ by currency or page language, and may be more than one), the e-mail delivery provider, and the customer-support mailbox provider. The name and location of each processor are published on the processors information page of the Service's website. For orders processed through Paddle.com, Paddle.com is the Merchant of Record under Article 3(6) and a recipient of your data for the purposes of this Article.
(4) Notice of international transfer: during processing and the retention periods set out in Article 8, your personal data and website data may be transferred to a region outside the Republic of China and processed or stored there. You consent to this transfer.
V. Change of processors: the Company may replace a processor within the categories listed in paragraph 3 without obtaining your consent again; when a replacement takes effect, the name and region of the new processor are published on the processor information page referred to in paragraph 3.
In these Terms, "repair station" means the cloud working environment that the Service sets up for each case alone, serving only that case and destroyed when the case ends; it is distinct from the name of the Service itself, "WP119 Auto Repair Station", which refers to the Service as a whole.
I. Case isolation: every case uses its own isolated repair station, separate from every other case and destroyed when the case ends.
(2) Sandbox work: all repair work is done on a copy, and is written back to your live site only after it passes re-verification. Before you agree to the Repair Authorization Consent Form, the Company makes no change whatsoever to your live site.
(3) Pre-repair backup: before the repair result is written back to your live site, the system creates a complete compressed backup (files and database) on your own host and notifies you of its location by e-mail. For users of WP-admin mode, the backup plugin produces the original compressed archive of your site at the same time as it builds the repair package, and asks you to download and keep it. That backup sits under your control, is not encrypted, and can be downloaded and restored by you. The Company will not delete it; please do not delete it yourself until you have confirmed that your website is working normally again.
(4) Protection of credentials: the host credentials you provide are encrypted and sealed the moment they reach the Company's systems, are unsealed only at the moment of an actual connection, and are destroyed at the end of the case with a destruction record produced.
(5) Please change your credentials after the case ends: as standard information-security practice, we strongly recommend that you change your host credentials immediately after the case ends. Although the Company has destroyed the copy it held, the continuing responsibility for managing those credentials remains yours.
(6) Each party's own security responsibility: the Company and you shall each ensure the security of their own information systems.
(7) Notification of a personal data incident: if a personal data incident occurs that affects your data, the Company will notify you within 72 hours of becoming aware of it, explaining the extent of the impact, the measures already taken and the action we suggest you take, and will report it to the competent authority as required by law. If the incident affects the personal data of your website's users, you are the collecting party under the Personal Data Protection Act and the duty to notify those individuals is yours to discharge; the Company will provide the necessary assistance.
(8) Security maintenance plan: the Company has established a security maintenance plan for personal data files and reviews its implementation regularly.
(1) Your website data: not retained. The data obtained is held in an isolated repair station dedicated to the case, and that repair station is destroyed automatically once the case ends. If you use WP admin mode, the repair package you upload (before the repair station is created) and the repaired package (during its download window) are held temporarily on the Service's control system and are destroyed when the window expires or the case ends.
(2) Host credentials: destroyed at the end of the case, with a destruction record produced.
(3) Service history records: in order to honor the refund undertakings, handle disputes, and exercise or defend legal claims, the Company retains service history records (the case timeline, inspection and re-verification results, the Data Access Certificate, consent records, and payment and refund records). These records do not contain the content of your website.
Technical records containing no personal data (row counts, hash values, timestamps, system events, document versions): retained permanently, as long-term evidence of the data access scope of the Service. Such records consist only of figures, hash values and event entries.
Fields containing personal data (your e-mail address, IP address, browser identification information and website address): retained for fifteen years from the end of the case, covering the expiry of the relevant limitation periods. After that period they are replaced by an irreversible salted hash, so that your personal data is no longer directly shown while the integrity and comparability of the record remain unchanged. You may still enquire with the Company about your case records using the original e-mail address.
System logs: up to five years from the date they are produced. Where the law requires retention, the statutory period applies.
Customer-support correspondence: e-mails you send to the Service's customer-support mailbox and the Company's replies are retained for fifteen years from the end of the case (or, where there is no corresponding case, from receipt of the e-mail) and deleted when that period expires.
(4) Early deletion: after a case ends you may ask for your case records to be deleted early, except for records the law requires to be kept and the service history records described in the preceding paragraph that are necessary for exercising or defending legal claims.
V. Evidential effect of the records (evidence agreement): unless there is an obvious error or you raise an objection with the Company under these terms, both parties agree that facts about the provision of the Service are determined by the service history record and its timestamps generated automatically by the Company's system; either party may rebut it with contrary evidence. You may ask the Company to provide the service history record of your case in the manner set out in paragraph 9 of Article 4; the pre-repair backup on your host may also be used for comparison.
The Service uses no analytics or advertising cookies. Customer-facing pages keep only the functional data that is necessary in the browser's local storage: the case token, the consent receipt, the language preference, and your choice on the cookie banner. That data is used only to provide the corresponding function and not for any cross-site tracking or behavioral analysis. The provider of encrypted transmission and security protection for website connections listed in Article 6 may, when it detects abnormal traffic, set in your browser the cookies necessary for it to perform that security protection. If analytics tools are introduced in future, these Terms will be revised accordingly and your consent obtained afresh, and the analytics tools will load only after you have consented.
This section is published under Section 6(3) of these Terms. It is not part of the Terms text and is not covered by the content hash of the text version.
Below are the processors the Service currently uses, within the categories listed in Section 6(3) of these Terms. Replacement of processors is governed by Section 6(5).
| Processor | Processing | Data processing location |
|---|---|---|
| DigitalOcean, LLC | Hosting and computing for the Service (including the Service's website, case records and the repair station) | Singapore |
| Cloudflare, Inc. | Encrypted transmission and security protection for website connections | Worldwide |
| Green World FinTech Service Co., Ltd. (ECPay) | Payment processing | Taiwan, Japan and other regions |
| Stripe, Inc. | Payment processing | United States |
| Plus Five Five, Inc. (Resend) | E-mail delivery (address verification, case notices and reports) | United States, Japan |
| Google Asia Pacific Pte. Ltd. (Google Workspace) | Customer-support mailbox (receives your e-mails and complaints) | Worldwide |