Privacy Policy

At sign-up (required):

• Email address, password (stored as a one-way hash), name

When using social login (Google, Kakao):

• Email, name or nickname, profile image URL, social provider identifiers (provider, uid). Where a Kakao account does not supply an email address, the Company automatically generates and stores a placeholder email for identification purposes.

When paying for courses, membership, consulting, or sprint:

• Payment authorization result, card brand, masked card number (e.g., 1234-****-****-1234), payment identifiers (orderId, paymentKey), and billing key for membership recurring payments. Full card numbers, CVC, and passwords are not stored by the Company and are processed by Toss Payments.

When using the Self-Serve Estimate (/scoping):

• The service description and conversation entered by the user, reference images attached by the user, audio files recorded when voice input is used, and the feature list, screen layout, estimated number of sessions, and estimated price produced by the AI. If the session is started while logged in, the account's name, email, and phone number are stored with that estimate record. Conversation content and attachments are transmitted to external AI APIs (Anthropic, OpenAI) to generate responses; audio files are transmitted to OpenAI for transcription and are deleted from the Company's servers immediately after conversion.

When taking part in a live session (video meeting):

• Video meeting access records, audio and video transmitted during the session, recording files where the Company records the session, live captions and transcripts converted from speech together with their translations, and chat messages exchanged during the session. Recording and transcription are carried out only after prior notice, and the Member may decline.

When using the AI chatbot or the KakaoTalk channel:

• Text entered by the user (questions/prompts), session identifiers, response output, and the sender identifier assigned by Kakao when the KakaoTalk channel is used. Conversation content is transmitted to external AI APIs (Anthropic, OpenAI) to generate responses.

When contacting support or applying for 1:1 consulting:

• Name, email, phone (optional), inquiry content, desired completion timeline (optional), budget range (optional), referral source (optional), pre-consulting Q&A responses (qa_history), and business idea description (for sprint applications)

When requesting and carrying out a build project:

• Name, email, phone number, the verification code where phone verification is used (discarded immediately after verification), the description of the service to be built and any additional requests, reference images and documents attached, and the feature specification and change request history

When issuing tax invoices and confirming payments:

• Business name, business registration number, representative's name, business address, business type and category, contact email, and depositor name and payment records. Where a copy of a business registration certificate is uploaded to use the automatic input feature, that image or PDF file is transmitted to an external AI API (Anthropic) for reading.

When applying as a sub-merchant (/toss):

• Business name, business registration number, contact name, contact email, contact phone, website URL, monthly transaction volume, payment methods

When completing the post-signup survey (optional):

• Age range, current status/role, experience level, technical background, learning goals, income preferences, pain points, referral source

Automatically collected during service use:

• IP address, User-Agent (browser/OS), cookies and visitor identifiers, visit timestamps, pages visited, referrer, service usage records, records related to fraud or abuse, and behavioural data used to measure advertising performance (conversion events such as visits, views, applications, and payments)

A. Performance of the Service Contract

• Course access, members-only content delivery, consulting booking and meeting link delivery, sprint program operation
• Payment processing, issuance of receipts/tax invoices, refund processing
• Learning progress tracking, enrollment and completion management, reviews and practice submissions
• Generating AI chatbot responses, automated comment bot responses, and consulting briefs
• Calculating the estimated number of sessions and price in the Self-Serve Estimate, providing recording, captions, and transcripts for live sessions, recording and drawing down Credit, and issuing tax invoices

B. Member Management

• Identity verification for membership service use
• Prevention of fraudulent or unauthorized use
• Verifying age 14+ eligibility and registration intent
• Handling customer inquiries, retaining records for dispute resolution, delivering notices
• Managing points, coupons, and referral codes

C. Marketing and Statistics (with separate consent)

• Delivering announcements about new services, events, and promotions via email or notifications
• Analyzing service usage statistics, developing and improving new features
• Personalized recommendations of courses and content

A. Retention under Company Internal Policy

• Member account information: until withdrawal (destroyed upon withdrawal)
• AI chatbot conversation logs: up to 6 months (for service quality and abuse prevention)
• Fraud-prevention records: 1 year
• Self-Serve Estimate conversations, attached images, and generated quotes: up to 1 year (to preserve the basis of the quote and carry it into consultation). Where the estimate leads to a booking or contract, the retention period for that contract record applies.
• Live session recordings and transcripts: up to 6 months after the session ends (for user review and dispute handling). Destroyed immediately upon a user's deletion request.
• Audio files uploaded through voice input: destroyed immediately after transcription (not retained separately)

B. Retention under Applicable Laws

• Records on contract or withdrawal: 5 years (E-Commerce Act)
• Records on payment and supply of goods: 5 years (E-Commerce Act)
• Records on consumer complaints or disputes: 3 years (E-Commerce Act)
• Records on advertising and labeling: 6 months (E-Commerce Act)
• Website visit logs (IP, etc.): 3 months (Protection of Communications Secrets Act)

A. Destruction Procedure

User-entered information is transferred to a separate database (or physical storage for paper records) after the purpose is fulfilled and is destroyed after the retention period or immediately, in accordance with internal policies and applicable laws.

B. Destruction Methods

• Electronic files are deleted via technical methods that prevent reproduction (soft delete followed by permanent deletion, column anonymization).
• Printed personal information is shredded or incinerated.

A. Purposes of Cookies

• Maintaining login state (session cookies)
• Analyzing visit frequency and navigation paths
• Identifying user interests to recommend courses and content
• Measuring advertising performance and serving personalised advertising (Meta Pixel), and analysing service usage behaviour (PostHog)

B. Behavioural Data and Personalised Advertising

The Company collects behavioural data (conversion events such as visits, views, applications, and payments) through the Meta Pixel in order to measure advertising performance and serve personalised advertising, and analyses usage behaviour through PostHog in order to improve the Service. For these purposes the Company does not transmit information that directly identifies a user, such as name or contact details; only cookie- and visitor-identifier-level information is transmitted. Users may refuse this through browser cookie-blocking settings, ad-blocking extensions, or the ad settings of their Meta account (www.facebook.com/adpreferences), and refusing does not restrict use of the Service.

C. How to Refuse Cookies

Users may refuse cookie storage through their browser settings (e.g., Chrome > Settings > Privacy and security > Cookies and other site data). Refusing cookies may affect certain service features such as maintaining login.