Privacy Policy

The Company uses collected personal information only for the following purposes.

• Member identification and account management
• Service provision and stable operation
• Customer inquiry response and technical support
• Service quality improvement and statistical analysis
• Security, prevention of unauthorized use, and log analysis
• Providing optional LLM integration, Google Sheets, and other external integrations selected by users

The Company does not indiscriminately use personal information for advertising purposes, and provides marketing information only with prior consent. LLM and external integration processing is for service provision based on user settings and use; the Company does not separately use it for marketing or profiling.

The Company destroys the information without delay once the purpose of collecting and using personal information is achieved. However, it may be retained as follows where there are legitimate reasons such as applicable laws, dispute handling, or service stability.

• Contract or usage records: 5 years (retention under applicable laws such as the Act on Consumer Protection in Electronic Commerce, etc.)
• Customer complaints and dispute handling records: 3 years
• Access logs (IP, access records): 3 months (Communications Secrets Protection Act)
• After account termination or withdrawal: member identification information and service data are deleted or deactivated within a reasonable period, but immediate complete destruction may not be possible due to legal retention, dispute handling, security, backups, caches, or log remnants.

Even if a data subject requests deletion or suspension of processing, items subject to legal retention obligations may be retained for the required period, and users bear primary responsibility for personal information included in uploaded data.

The Company does not provide users' personal information to third parties in principle (including sale or arbitrary sharing).

However, the following cases are exceptions.

• When the user has given prior consent
• When there is a legal basis or a legitimate request from an investigative agency

LLM API calls, Google Sheets, Firebase, and similar infrastructure or integration processing for service provision, and entrustment under Section 5, are regarded as processing or entrustment based on user choice or service operation, not third-party "provision." Users bear primary responsibility for third-party provision and overseas transfer of personal information included in uploaded data.

The Company may entrust or integrate personal information and service processing tasks as follows for service provision. If users use optional features such as LLMs or Google Sheets, such processing is regarded as based on user settings and use.

The Company reasonably manages and supervises consignees and integration providers to comply with personal information protection laws. However, the Company is not liable for consignees' or integration providers' independent policies, failures, or processing results unless caused by the Company's willful misconduct or gross negligence.

Users may exercise the following rights at any time.

• Request to access personal information
• Request to correct personal information
• Request to delete or suspend processing of personal information

Rights can be exercised through email or customer support channels. However, information subject to legal retention obligations, data needed for disputes or security, backup or technically residual data, and personal information included in user-uploaded data (where users must respond in the first instance) may be processed or retained to the extent permitted by applicable laws and the Terms of Service.

When the retention period of personal information expires or the purpose of processing is achieved, the Company destroys the information without delay. However, data may remain for a period due to backups, caches, logs, or other technical reasons, and immediate or complete destruction is not guaranteed.

• Electronic files: Deletion by methods that make recovery impossible
• Printed materials and documents: Shredding or incineration

The Company implements the following measures to protect personal information.

• Administrative measures: Establishment of internal management plans, access rights management
• Technical measures: Encryption, access control, security log management
• Physical measures: Access control for servers and infrastructure

The Company designates a person in charge of overseeing personal information protection tasks.

• Personal Information Protection Officer: Seungho Chi
• Email: [email protected]

For service provision, infrastructure operation, and optional LLM or Google Sheets integration selected by users, personal information and service data may be transferred to, stored on, and processed on servers of consignees or integration providers located overseas (e.g., the United States).

• Items transferred: member information, service usage records, logs, and data uploaded, connected, or queried by users to the extent necessary for processing
• Countries of transfer: locations of consignee or integration provider servers (e.g., the United States)
• Timing and method of transfer: transmission over networks when signing up for, using, or enabling LLMs or external integrations
• Retention and use period: as permitted under Section 3 and consignee or integration provider policies

Users are deemed to consent to the above overseas transfer when signing up for, using, or enabling optional features. If users do not wish overseas transfer, they may stop using the relevant features or service, but the Company is not liable for resulting service limitations or unavailable features. Users bear primary responsibility for overseas transfer of personal information included in uploaded data and responses to data subject rights.

This privacy policy may be modified in accordance with changes in laws or company policies, and users will be notified in advance through website announcements or email when changes are made.

• Announcement date: March 1, 2026
• Effective date: March 1, 2026