개인정보처리방침

Onsimdang AI Company Co.,Ltd. (the “Company”) values the personal information of users of AI Sajangnote (the “Service”) and complies with applicable laws, including the Personal Information Protection Act of the Republic of Korea. This Policy explains the personal information processed to provide the Service, the purposes of processing, external AI processing, overseas transfers, retention, and deletion.

1. Personal information we process

We process the minimum information needed to provide the Service:

• Account information (required): email address, authentication hashes including a six-digit PIN hash, and registered-device identifier
• Business information (required): representative name, business registration number, opening date, business name, business category, and business type
• Employee-management information (optional/user-entered): employee name, start date, employment type, and duties
• Records and case information (optional/user-entered): attendance, work and incident records; customer-dispute facts; and optional customer name and contact details
• Uploaded files (optional): employment-contract images/PDFs and evidence photos, videos, audio, or documents
• Service and security data: session-token hash and temporary login-failure records used to prevent brute-force attacks

2. Purposes of processing

• Checking business registration status, PIN login, and email OTP verification for new-device registration or PIN recovery
• Storing and displaying employee records and contract analysis results saved by the user
• Keeping factual records concerning customer disputes and incidents
• Using AI to extract structured employment-contract fields and provide record-based response guidance
• Preventing account misuse and brute-force attacks and maintaining Service security

3. AI processing and external provision

The Company uses a third-party AI API only when a user requests employment-contract analysis or employee-record AI guidance.

Automated masking cannot guarantee detection and removal of every item of personal information. AI output is reference information and does not replace legal advice from an attorney or certified labor professional.

4. Overseas transfer

When a user requests an AI feature, personal information may be processed overseas as follows:

• Recipient: OpenAI OpCo, LLC
• Country: United States
• Contact: privacy@openai.com
• Data transferred: temporary contract copies, employee and related records, employment terms, and other AI-request data listed in Section 3
• Timing and method: transmitted over an encrypted network when the user requests the relevant AI feature
• Purpose: contract reading and structuring and generation of employee-record situation summaries and response guidance
• Retention: application-state storage is disabled using store: false; input and output may nevertheless be retained for up to 30 days under default abuse-monitoring rules, and longer where legally required or reasonably necessary to prevent harm

Users may refuse the overseas transfer by not uploading a contract and not requesting employee-record AI guidance. The relevant AI feature will then be unavailable, but non-AI functions such as account, employee, case, and ordinary record management remain available.

5. Retention and deletion

SajangNote is not a service for retaining legal original contracts. Users remain responsible for keeping their originals; the Company does not assume that legal responsibility.

New contract image/PDF uploads are temporary copies for AI analysis. They are deleted immediately after analysis as a rule, and automatically within 24 hours on the operational server if analysis fails or is interrupted. Saving results does not extend image retention. Unsaved results are temporary request-processing data, are not added to saved history, and expire with temporary processing data.

Only analysis results explicitly saved by the user are kept for later access. Saved results and ordinary business records remain until the user deletes them. Individual result deletion is supported. Account deletion removes the related account, business, employee, record and contract-result data and remaining files from active databases and storage.

Existing user-owned contract materials retained before this policy took effect are treated separately from new temporary uploads. They are not automatically expired merely because they came from an older version; they remain until the user deletes the material or the account. This exception does not extend the 24-hour limit for new uploads.

Necessary saved analysis results and business data are protected by a daily encrypted database backup, with automatic rolling deletion within a maximum of 14 days. Temporary contract originals are excluded; new backups contain no contract image files. Backups cannot be accessed through the normal Service.

Old protection backups with incomplete deletion history must not be used for production restoration. They are kept for emergency protection for only 14 days after the new safe backup system is verified, then disposed of. Deleted data must not be returned to the active Service from these backups.

A minimal deletion ledger is stored separately from the operational DB and backups for at most 30 days. It records target identifiers, action types and times, without contract contents, names, email addresses or unnecessary personal information. After identifier records expire, only integrity hashes without target identifiers remain.

Restoration must occur in isolation. The latest deletion ledger must be replayed, and zero remaining related DB references and files must be verified before production activation. Missing or incomplete history prohibits activation. The 24-hour, 14-day and 30-day limits apply to the Company's new temporary contract data, backups and deletion ledger respectively; the external AI provider's separate terms are described in Sections 3 and 4.

6. User rights

Users may view account and business information and edit it where the Service provides that function. Users may request withdrawal and deletion through Delete Account. If direct action is difficult, users may contact support@onsimdang.com to request access, correction, deletion, or restriction of processing. The Company may verify account ownership as reasonably necessary.

7. Security measures

• Hashed storage of authentication information including PINs and session tokens
• Authentication, PIN verification, access controls, and tenant separation
• HTTPS protection for data in transit
• Masking recognizable personal-information patterns immediately before employee-record AI transmission

8. Privacy inquiries

Operator: Onsimdang AI Company Co.,Ltd.
Support email: support@onsimdang.com
Website: https://onsimdang.com

9. Changes to this Policy

The Company may update this Policy when applicable law or the Service’s personal-information processing changes. Material changes will be announced through the Service or the official website.

Google Play subscriptions and AI usage data

If you choose a Pro subscription, the server associates the purchase token, subscription product and base-plan identifiers, subscription state, expiry time and verification time with your account. These data are used to verify subscriptions through the Google Play API, provide and restore access, and prevent a purchase from being claimed by another account. When you use AI features, the server records the month, feature category and usage count to enforce Free and Pro allowances. Google Play processes payments; the Company does not collect card numbers. The purchase token and app identifier are sent to the Google Play API for verification. Purchasing is optional and basic Free features remain available. Subscription and AI usage records held by the Company are deleted from the active database when the account is deleted; the existing backup and minimal deletion-history limits of up to 14 and 30 days apply. Purchase records held by Google Play are subject to Google’s policies.