隐私与 Cookie

隐私声明

最后更新: 2026 年 9 月 25 日

关于我们

Andrii Co. 是华盛顿州的一家营利性公司,雇有一名或多名在美国华盛顿州持照的 Notary Public。我们在大西雅图地区提供上门公证及加签(apostille)服务,办公地点位于华盛顿州 Bothell 市,我们在此按预约接待客户。我们也以 Bellevue Notary(bellevuenotary.net,+1 425 800 8688)的名义经营,这是 Andrii Co. 已向 Washington State Department of Revenue(华盛顿州税务局)申报的商号;本声明同样适用于该商号,包括发往该号码及由该号码发出的短信。

就 GDPR 及成员国其他国家数据保护法律以及其他数据保护规定而言,本网站的负责人为:

Andrii Co.
邮寄地址(仅用于收取邮件,并非办公室或会面地点):
816 Evergreen Point Rd Unit 288
Medina, WA 98039-4780
UBI number: 604505773
D-U-N-S® Number: 117198250
Email: privacy@andrii.co

客户门户

If you create an account in our customer portal (hosted at andrii.net, separate from this marketing site), we process the personal data you enter there to schedule and deliver your services:

  • Account details — your name, email address, and phone number.
  • Passkey credentials — we use passkeys (WebAuthn) instead of passwords. Your device keeps the private key, and biometrics such as Face ID, Touch ID, or Windows Hello never leave your device; we store only the matching public key and a device label.
  • Appointment details — the service you book, the date and time, and any meeting address you enter (including a customer address for mobile signings).
  • Order, document, and shipment details — the documents you add to an order (type and apostille destination), any draft you upload, the resulting notarized or apostilled files, and the recipient name, address, phone, and email for any shipment.

We are the controller of this portal data. It is stored on our application backend at andrii.net, and a sign-in token is kept in your browser's localStorage (not a cookie) to keep you signed in. We use this data only to provide, schedule, perform, ship, and account for the services you request, and we do not sell it or share it with advertising networks.

Retention. We keep your account and order records for as long as your account is active and for as long as professional, tax, and legal recordkeeping requires. Entries in the notarial journal are kept for 10 years under RCW 42.45.180, and audio-video recordings of any remote online notarization are retained for the period required by Washington's notary rules (chapter 308-30 WAC).

身份核验

Notarial work requires us to establish who is signing, and the paperwork for a power of attorney, a consent, or an apostille has to repeat a person's details exactly as their identity documents show them — often in the destination country's own script. When the service you ask for needs them, we therefore record, in addition to the account details above:

  • Your name in full — both in its native script (for example Cyrillic) and in Latin letters, because the destination country's document usually requires a particular one of them.
  • Your date of birth.
  • Your taxpayer number, where the destination document requires one — for example a Ukrainian ІПН/РНОКПП or a Russian ИНН.
  • Your identity document — which kind it is, its number, the country that issued it, and when it expires (a passport, or a driver's licence or ID card).
  • Your registration (residence) address, where the document requires it.
  • Our own working notes about your matter.

Most of this you give us directly. Some of it we read from the document itself: rather than retype it, our notary may scan the machine-readable strip of a passport or the barcode on a driver's licence, which is quicker and avoids transcription mistakes. Documents you upload to an order — and the finished notarised or apostilled files — also routinely contain identity details, scans, and signatures.

If your passport has a chip. With your agreement, our app can read it on the device in front of you. The photograph and the signature held in the chip never leave that device and we never receive them. What reaches our server is only the chip's cryptographic security data, which lets the server check for itself that the passport is genuine and unaltered. We keep the result of that check — confirmed, or not proven, and why — not the data it was performed on.

How we protect it. This profile is encrypted in our database under a key kept apart from it. It is visible only to the notary: it never appears in your account pages, in any list, in a booking made through an AI assistant, or in anything a courier or other third party receives. The one exception is you — "Download my data" on the Account page includes your own profile (our internal working notes excepted).

Legal bases. Performing the service you asked for — Art. 6(1)(b) GDPR — and, for the notarial act itself, our legal obligation as a Washington notary — Art. 6(1)(c) GDPR, RCW 42.45.

How long we keep it. For as long as your account exists; it is erased when the account is deleted. The exception is the notarial journal: an entry already recorded there must be kept for 10 years under RCW 42.45.180 and cannot be deleted on request.

通过 AI 助手预约

We publish a connector that lets an AI assistant — ChatGPT, Claude, or another that supports one — look up our availability, quote a price, and send us a booking request on your behalf. Using it is entirely your choice, and nothing else in this notice depends on whether you do.

What reaches us. Only what you ask the assistant to send: the service you want, your full legal name, an email address and/or a phone number, the meeting address for a mobile signing, your preferred time, how many documents and of what kind, and any note you add. A booking made this way is a request, not a confirmed appointment — we follow up to confirm it.

What we send back. Availability, prices, turnaround estimates, and general apostille guidance carry no personal data. For a request you have already made, a status check returns only its reference, the service, its status and its times — deliberately never the meeting address, the names on the order, or our notes, so that none of those can be copied into a chat transcript. If you additionally sign in through the assistant, it can list, book, reschedule and cancel your own bookings, and that listing does include each booking's location.

No payment ever happens in the chat. We take no card or bank details through an assistant.

The assistant's provider sees your conversation. Whatever you type to ChatGPT, Claude, or any other assistant is processed by that provider under its own privacy policy and its own terms with you, before any of it reaches us. We are not the controller of that conversation and we cannot delete it for you — ask the provider. Once your request reaches us it becomes an ordinary booking record, covered by the rest of this notice.

短信(SMS)

We text a mobile number only as described in the “Text messages (SMS)” section of our Terms, from +1 833 876 5431, +1 877 987 7987, and +1 425 800 8688 (our Bellevue Notary line).

When we text you. Account texts — sign-in and verification codes, account and appointment notifications, and order status and delivery updates — go only to a number that has agreed to them: by ticking the account-texts box on our booking or sign-up form or on the customer portal's profile page, or by texting us from that number the verification code our website shows you, or START. When you text us, we reply in that conversation. The first time a number texts us or agrees to our texts we send it one welcome text, and never more than one in any 12 months for that number. Marketing texts go only to customers who separately opted in to them.

What we record. Your mobile number; each consent decision with the form or text it came from, the version of the wording you saw, and the time; the texts we send you and the texts you send us; and, if you reply STOP, the number and the time of the opt-out.

Legal bases. Your consent — Art. 6(1)(a) GDPR — for account and marketing texts; performance of a contract — Art. 6(1)(b) GDPR — for answering a text you send us about your booking or order; our legitimate interest — Art. 6(1)(f) GDPR — in keeping the record of each consent and of each opt-out, so that we can show why we texted a number and never text a number that said STOP.

Who receives it. Only the providers that carry our texts — Telnyx and, for texts to a number we used previously, Infobip — which receive your number and the messages only to deliver them and to register our numbers with the mobile carriers. We never sell, rent, or share your mobile number as a texting contact, or your text-messaging consent, with anyone else, for marketing or for any other purpose.

How long we keep it. The texts we send you and the texts you send us, 12 months; consent records, for as long as the account or booking they belong to exists; an opt-out, until you reply START.

Stopping. Reply STOP to any of our numbers to stop every text from all three, START to resume, HELP for help. A keyword is acted on automatically when it is the whole message; if you ask us in other words to stop texting you, a person reads it and we stop. To stop only marketing texts, use Communication preferences in the customer portal.

我们收集的数据

  • 请求日志。我们的托管服务商会记录每次页面请求的 IP 地址、user agent 和时间戳。保留 14 天,仅用于安全、防止滥用与调试。
  • 错误报告。当您的浏览器中出现故障时——脚本执行失败、文件无法加载——页面会向我们发送一段简短的技术描述:错误信息、文件与行号,以及您当时所在页面的地址。网址会在 ? 或 # 之前被截断,因此其中可能包含的标识符和一次性链接绝不会被发送,错误信息中任何类似电子邮件地址或安全令牌的内容都会被遮蔽。不会存储您的 IP 地址,也没有任何内容能识别您或您的会话;相同的报告会合并为一个计数。在我们自己的服务器上最多保留 30 天,仅用于发现和修复故障。法律依据:我们对服务正常运行的合法利益——GDPR 第 6(1)(f) 条。
  • Cookie 选择。一条 JSON 记录,存储在您浏览器的 localStorage 中,从不传给我们。详见下表。
  • 分析(仅在您同意后)。Google Analytics 4 以汇总方式衡量访问量与页面浏览。若您拒绝,GA 只接收一次不含 Cookie 与标识符的建模信号。
  • 您发送给我们的信息。姓名、文件正文、联系方式及附件 — 仅限您主动发到 notary@andrii.co 或以短信发送到我们号码的内容(参见“短信(SMS)”)。
  • 付款数据。当您点击 Stripe 的 "Buy" 按钮时,卡片信息直接发送给 Stripe — 我们从不见到。
  • 预约、身份与订单数据。如果您确实委托我们提供服务,我们处理的数据将不止上述内容 — 具体处理哪些数据、出于何种目的、保留多久,详见"客户门户"、"身份核验"与"通过 AI 助手预约"各节。

处理目的与法律依据

在 GDPR 或类似法律适用的情形下,我们仅在具备法律依据时处理个人数据。简要而言:

处理活动法律依据
账户、预约与订单数据 — 为您所请求的服务安排日程、履行、寄送并开具账单。履行合同 — GDPR 第 6(1)(b) 条。
确定签署人的身份,并记录公证行为、加签(apostille)或领事文件必须载明的身份信息。履行合同 — GDPR 第 6(1)(b) 条;就公证行为本身而言,还有法定义务 — GDPR 第 6(1)(c) 条,RCW 42.45。
保存公证日志以及远程在线公证的音视频录像。法定义务 — GDPR 第 6(1)(c) 条;RCW 42.45.180 及 308-30 WAC 章。
安全日志、登录 IP 与设备历史,以及欺诈防范。我们保障服务安全的正当利益 — GDPR 第 6(1)(f) 条。
分析类 Cookie,以及发送到您手机的短信 — 账户短信,以及仅在您选择接收时发送的营销短信。同意 — GDPR 第 6(1)(a) 条;默认关闭,可随时撤回。

Cookie 及类似技术

Cookie 是放置在您设备上的小文本文件,可由放置它们的域所属网页服务器读取。我们使用 Cookie — 以及等效的浏览器存储(localStorage)— 来保存并遵循您的偏好与设置,并在您同意后用于分析本网站的表现。我们不将 Cookie 用于广告、社交媒体定向或登录。我们独立的客户门户确实提供登录功能,但其登录令牌保存在您的浏览器中,而非 Cookie 中 — 详见下文“客户门户”一节。

本站仅使用下方列出的存储项。可选类别默认关闭;您可在首次访问时通过 Cookie 横幅启用,或随时通过任何页面页脚中的"Cookie 设置"链接修改。如有必要,我们会在放置或使用并非(i)严格必要以提供网站,或(ii)用于实现通信的可选 Cookie 之前,征得您的同意。

名称提供方用途保留期
consent_v1Andrii Co.(本站)将您的 Cookie 选择以单条 JSON 记录存入 localStorage。仅在您浏览器中保留 13 个月。
pap_langAndrii Co.(本站)记住您上次选择的语言,避免再次询问。直至您清除浏览器数据。
_ga、_ga_RS49EHPYXJGoogle Analytics 4(Google LLC)区分用户并保留会话状态,用于汇总流量衡量。2 年 — 仅在您同意后设置。
andrii_portal_tokenAndrii Co.(客户门户)让您在客户门户中保持登录 — 存放在 localStorage 中的登录令牌(并非 Cookie),仅在您登录时创建。直至您退出登录或令牌过期(14 天)。
andrii_apple_resume:bookingAndrii Co.(本站)短暂保存您填写中的预约表单,以便在登录跳转或刷新后恢复。绝不包含您的 Cookie 选择或登录令牌。仅在您浏览器中保留 15 分钟。

若您的浏览器发送 Global Privacy Control(GPC)信号,我们将其视为拒绝可选 Cookie — 会自动记录"全部拒绝",不再询问。

您还可以通过浏览器层级工具控制 Cookie 与类似技术。多数浏览器允许限制哪些站点可设置 Cookie、清除已设置的 Cookie 或完全屏蔽 Cookie;您可借此随时撤回同意。这样做可能破坏本站依赖于上文标记为"Always on"的存储所支持的功能(语言切换、付款处理)。

第三方

  • Google Analytics 4(Google LLC)。我们使用 Consent Mode v2:您拒绝分析时,GA 只接收一次不含 Cookie 与标识符的建模信号。Google 隐私政策。
  • Stripe(Stripe, Inc.)。如果您通过 Stripe 托管的结账页面在线付款,Stripe 将直接接收您的付款信息 — 我们从不见到您的卡片。Stripe 隐私声明。
  • CDN 提供方 — unpkg.com 提供 Phosphor 图标,fonts.googleapis.com 与 fonts.gstatic.com 提供字体。这些提供方在分发其文件时会看到您的 IP 地址。
  • Firebase Hosting(Google LLC)。承载本站并产生上文所述请求日志。
  • Google Maps Platform(Google LLC)。为预约提供地址查询与路线规划 — 当您输入会面或寄送地址时,我们的服务器会将其发送给 Google,用于地址联想与定位。
  • Google Cloud(Google LLC)。托管我们位于 andrii.net 的应用后端,并保存其加密备份。
  • Google Workspace / Gmail(Google LLC)。投递我们的事务性邮件 — 验证码、预约确认、收据。
  • Infobip(Infobip Ltd.)。不再发送我们的短信。发往曾用号码的入站短信仍可能经其网络传输。
  • Telnyx(Telnyx LLC)。收发我们的短信 — 用于登录和验证的验证码,您为确认号码而以短信发给我们的验证码,一次性欢迎短信,账户及预约通知,订单状态及配送更新,您发给我们的消息和我们的客服回复,对 STOP、HELP 和 START 的自动回复,以及仅向已选择接收的客户发送的营销短信 — 并负责我们号码的 toll-free 与 A2P 短信注册。接收您的手机号及这些消息的内容,我们提供这些内容仅为投递之用。
  • Apple(Apple Inc.)。您选择时的"通过 Apple 登录",以及我们 iOS 应用的推送通知。
  • AI 助手提供方(例如 OpenAI、Anthropic)。仅在您选择通过助手与我们联系时才涉及。该提供方会先依其自身隐私政策处理您的对话,其中的内容之后才会到达我们这里;我们不会主动向其发送任何内容,也无法访问您的聊天记录。详见上文"通过 AI 助手预约"一节。
  • MaxMind GeoLite2。访客 IP 地址的大致位置,在我们自己的服务器上本地解析 — 不向 MaxMind 发送任何数据。
  • Nova Poshta(含其乌克兰境内服务)。接收您所委托寄送的收件人姓名、电话与地址。
  • CDEK。同上,用于独联体地区的投递。
  • FedEx、DHL Express、UPS、USPS 与 Canada Post。同上,用于寄往其他目的地的邮件与快递投递。
  • 远程在线公证(RON)平台(Proof / BlueNotary)。远程在线公证上线后将在此列明 — 届时会话在该平台上进行,并适用其自身条款。
  • SANS Internet Storm Center / DShield(SANS Institute,美国)。我们的服务器上运行着一项诱捕(“蜜罐”)服务,任何客户都不会接触到它:它不对任何人进行身份验证,不保存任何数据,存在的唯一目的是观察针对我们的攻击。针对该服务的登录尝试会提交给 Internet Storm Center —— 一个供安全研究人员使用的公开攻击遥测数据集:时间、来源 IP 地址,以及攻击者提交的用户名和密码(这些往往是从他人处窃取并被重复使用的凭据)。ISC 会公开其收到的内容,并声明已提交的数据无法删除,因此提交是永久且公开的,我们也无力撤回。其中不涉及任何客户数据:您的账户、您的文件以及您发送给我们的任何内容都不会被提交。法律依据:我们在网络与信息安全方面的合法利益(GDPR 第 6(1)(f) 条)。ISC 隐私政策。
  • AbuseIPDB(AbuseIPDB LLC,美国宾夕法尼亚州有限责任公司)。这是一个公开的 IP 信誉数据库,网络运营者在决定是否封禁某个地址前会查询它。当某个地址攻击我们时,我们可能就该地址提交举报:地址、时间,以及一段依据固定用语撰写的简短说明,说明其尝试了什么。任何查询该地址的人都可以读到该举报,AbuseIPDB 的条款允许其重新发布举报,且举报不会失效 —— 随时间衰减的只是其权重。我们的举报刻意不含任何凭据、输入内容或被举报方提供的其他内容。对于您认为系误报的举报,AbuseIPDB 设有撤下申请流程。法律依据:我们在网络与信息安全方面的合法利益(GDPR 第 6(1)(f) 条)。AbuseIPDB 隐私政策。

我们不出售您的个人数据,也不与广告网络共享。我们不会出于推广或营销目的向第三方或关联方出售或共享您的任何手机信息。短信订阅数据与同意记录(您的手机号码及您同意接收短信)绝不会出于任何目的出售、出租或与任何第三方或关联方共享。唯一的例外是为我们投递的承运方:传送我们短信的服务商(Telnyx,以及针对发往我们以前所用号码的来信的 Infobip)仅为传送而接收这些短信;对于您要求寄送的货件,负责投递的快递公司会连同地址一起收到收件人的电话号码 — 但绝不会收到您对短信的同意。营销短信仅发送给已另行选择接收的客户(通过我们预约表单中的营销选项,或客户门户中的“通讯偏好”);该同意记录会保存在您的账户中,您可随时在账户中撤回,或回复 STOP 退订。

如果有人向您寄送文件

客户可能委托我们将经公证或加签的文件寄送给您。在这种情况下,您的姓名、收件地址、电话号码乃至电子邮箱是我们从该客户处获得的 — 并非来自您本人。我们仅将这些信息用于投递该件包裹:它们会交给承运方(例如 FedEx、DHL Express、UPS、USPS、Canada Post、Nova Poshta 或 CDEK),并作为订单记录的一部分保存。

对于这些信息,您享有与我们的客户相同的权利 — 访问、更正、删除、反对 — 详见下文"您的权利"。如需行使,请发邮件至 privacy@andrii.co。

您的权利

视所在地区,您可能有权:

  • 访问我们持有的关于您的个人数据;
  • 更正或删除这些数据;
  • 反对基于我们正当利益的处理,并要求在您的请求处理期间限制处理;
  • 随时撤回同意 — 请使用任何页面页脚中的"Cookie 设置"链接;对于短信,请回复 STOP 或使用客户门户中的“通讯偏好”;
  • 以可移植格式获取您的数据副本;
  • 向监管机构投诉 — 例如华盛顿州总检察长、美国联邦贸易委员会(FTC),或您所在欧盟/英国的本地数据保护机构。

如果您拥有门户账户,最常见的两项请求可自助完成:账户页面上的"下载我的数据"可获取您的数据副本,"删除我的账户"可删除您的账户。

如需行使任何权利,请发邮件至 privacy@andrii.co。我们力争在 14 天内回复。

跨境数据传输

我们位于美国华盛顿州。若您从美国境外与我们联系,您的个人数据将传输至美国。我们依赖您的同意以及与子处理方签署的合同保障(例如 Google 用于 Analytics 与 Firebase Hosting 的标准合同条款)。

保留期

  • Cookie 记录:仅在您浏览器中保留 13 个月。
  • 请求日志:14 天。
  • 登录 IP 与设备历史:180 天。
  • API 请求日志:以按大小轮换的文件保存在我们自己的服务器上 — 固定空间写满后,最旧的记录会被覆盖。
  • 身份档案(姓名、出生日期、纳税人识别号、身份证件信息、登记住址):在您的账户存续期间保留,账户被删除时一并删除 — 已记入公证日志的内容除外。
  • 公证日志条目:10 年,按 Revised Code of Washington 42.45.180 的要求。
  • 邮件往来:事项结束后 18 个月内删除,除非另有保留义务。
  • 短信:我们发给您的短信和您发给我们的短信保留 12 个月;同意与退订记录见“短信(SMS)”一节。

儿童

本站不面向 13 岁以下儿童,我们也不会有意收集其数据。

本声明的变更

当我们的做法发生变化时,我们会更新本声明。上方的"最后更新"日期始终对应当前版本。

← 返回首页