From Tang Chi-wen (Data Protection Officer, BeatBird) to the Mistport Privacy Aid    2026-12-09

1. On 24 November, under our partnership contracts, we put three pilot files on our file-sharing system:
   F-01 for Hengzhun Actuarial (outside actuarial consultants hired by Dingyue Insurance)
   F-02 for Langhua Marketing (the BeatBird Plus campaign)
   F-03 for Yunshan Data (app usage analytics)
   The fields in each file are listed in data-provided.csv.

2. Since I took up the post, every download plants one extra "canary" record in that copy of the file.
   A canary is a fake user that appears only in the copy from that one download.
   For canaries with an email address, we watch the mailbox ourselves. If a canary's mailbox gets mail, the copy from that download has been used.
   Which canary belongs to which download is in canaries.csv; who downloaded each copy, and when, is in downloads.csv.

3. On 28 November Langhua Marketing sent the BeatBird Plus trial email, as the contract allows, using the project manager's copy. That email was normal use under the contract.

4. Please do not mention anyone's name in public until the evidence is solid.