Privacy Policy

Effective Date: March 22, 2026

autome (hereinafter "the Service") values the personal information of its users and complies with applicable laws, including the Personal Information Protection Act. This policy describes the types of personal information collected by the Service, the purposes of collection, and the retention periods.

1. Types of Personal Information Collected

A. Upon Registration (Google OAuth)

Email address
Name (as registered in your Google account)
Profile image URL

B. During Service Use

Conversation data: text entered for analysis, exported chat files, email content (a summary of the first 500 characters of input is stored)
Analysis results: personality and work analysis generated by AI
Chat history: conversations with the AI assistant (roles and message content)

C. During Payment

Payment method information (processed through Toss Payments or Polar; sensitive data such as card numbers is not stored by the Service)
Payment amount, payment date, subscription expiration date
Payment transaction ID

D. Automatically Collected Information

Session ID (an anonymous identifier stored in browser localStorage)
Pages visited, event logs (page views, button clicks, etc.)
Country of access (cookie-based)
HTTP referrer

2. Purposes of Collecting and Using Personal Information

Service Delivery: conversation analysis, AI assistant creation and operation, channel integration
User Management: identity verification, usage record management, paid service eligibility verification
Payment Processing: subscription payment confirmation and subscription period management
Service Improvement: usage pattern analysis, feature improvement, error diagnosis

3. Disclosure of Personal Information to Third Parties

Personal information is shared with the following third parties to provide the Service.

Recipient	Data	Purpose
Google (Gemini API)	Conversation data (text for analysis)	AI analysis
Toss Payments	Payment information	Domestic payment processing
Polar	Payment information	International payment processing
Supabase	All service data	Database hosting
Hetzner	AI assistant configuration	Server infrastructure

4. Retention and Destruction of Personal Information

User Information: Retained until account deletion; destroyed without delay upon request.
Analysis Data: Destroyed when a user requests deletion or deletes their account.
Payment Records: Retained for 5 years in accordance with the Act on Consumer Protection in Electronic Commerce.
Access Logs: Retained for 3 months in accordance with the Protection of Communications Secrets Act.

5. User Rights

Users may exercise the following rights at any time.

Request to access, correct, or delete personal information
Request to suspend processing of personal information
Account deletion (unlinking Google account)

These requests can be made through the in-app settings or by emailing the.autome.app@gmail.com, and will be processed within 10 days of receipt.

6. Cookies and Behavioral Analytics

The Service uses cookies for session management.
Anonymous session IDs are used to collect usage behavior such as page views and button clicks, solely for the purpose of improving the Service.
Users may refuse cookie storage through browser settings, but some features may be limited.

7. Security Measures

The Service implements the following measures to ensure the safety of personal information.

Encrypted storage of server access credentials
Data transmission encryption via SSL/TLS
Minimized database access permissions
Payment information processed by payment gateway providers (sensitive data such as card numbers is not stored)

8. Privacy Officer

Email: the.autome.app@gmail.com

If you need to report or consult about a privacy breach, you may contact the following organizations.

Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)

Inquiries about this policy: the.autome.app@gmail.com