Privacy Policy

Article 1 (What we collect and how)

1. At sign-up

• Required: email, password, name, mobile phone number, and mobile identity-verification data (date of birth, sex, CI/DI)
• When signing up or signing in with a Kakao account (required): the phone number and name registered on the Kakao account
• When registering a business: business registration number, representative name, business address, business type and item, and a copy of the business registration certificate

2. Collected automatically while using the Service

• Call records (CDR: calling number, called number, time, duration, and status)
• Call-recording files (if the user has turned recording on)
• Outbound audio on a line suspected of spam (deleted immediately after review)
• Access logs, cookies, connecting IP address, and User-Agent

3. At payment

• Payment-method details (card issuer name, approval number, and similar — we do not store full card numbers), amount, and time of payment

Article 2 (Purpose of collection and use)

1. Providing the Service: AI call answering, assignment and activation of a 070 number, and account management
2. Billing: calculating fees, processing payments, and issuing tax invoices
3. Support and notices: answering inquiries, sending notices, sending sign-up and service notices and alerts (SMS / Alimtalk) to the mobile phone number, and identity verification
4. Preventing unlawful use: monitoring spam and voice phishing, preventing caller-ID spoofing, and checking for duplicate accounts
5. Legal duties: complying with the Telecommunications Business Act, the Network Act, and other applicable laws

Article 3 (Retention period)

We destroy personal information without delay after the purpose of processing is fulfilled. We retain the following for the periods required by law.

• Communications confirmation data (CDR and access logs): 12 months (Protection of Communications Secrets Act)
• Records of contracts and withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods: 5 years (Electronic Commerce Act)
• Records of consumer complaints and dispute handling: 3 years (Electronic Commerce Act)
• Website visit records: 3 months (Protection of Communications Secrets Act)
• Identity-verification CI: until the member withdraws (to prevent duplicate accounts)
• Account information (email, name, mobile number, and similar): until the member withdraws (destroyed without delay after withdrawal, except where a statute requires a longer period)

Article 4 (Provision to third parties)

As a rule, the Company does not provide personal information to a third party without the user's consent. The following is an exception.

We may also provide personal information where a statute requires it, or where an investigative or supervisory authority requests it through the procedure set by law.

Article 5 (Processors)

Article 6 (Your rights)

You may exercise the following rights at any time in Service settings or by email at hello@koreaaitel.com.

1. Request to access, correct, or delete personal information
2. Request that processing be suspended
3. Close the account

Article 7 (Security measures)

• Technical: TLS in transit, AES-256 encryption at rest, CI encrypted with AES-256-GCM (GCP KMS), and access control
• Administrative: minimizing staff who handle personal information, regular security training, and access audit logs
• Physical: GCP Seoul region and access control

Article 8 (Destruction)

We destroy personal information without delay when the retention period ends or the purpose of processing is fulfilled. Electronic files are deleted so they cannot be recovered. Paper printouts are shredded. Call recordings are deleted immediately when the retention period ends or when the user requests deletion.

Article 9 (Cookies)

The Company uses cookies to improve the Service. You may refuse cookies in your browser settings. Some parts of the Service may then be limited.

Article 10 (Privacy officer)

• Privacy officer: Seungjin Jeong (CEO)
• Phone: 070-5235-8010
• Email: hello@koreaaitel.com

You may also report or seek advice on a personal-information incident from the following bodies.

• Personal Information Dispute Mediation Committee — 1833-6972 (kopico.go.kr)
• Personal Information Infringement Report Center — 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cyber Investigation Division — 1301 (spo.go.kr)
• National Police Agency Cyber Bureau — 182 (ecrm.police.go.kr)

Article 11 (Changes to this Policy)

This Policy may be updated when laws, policies, or internal rules change. We will announce changes in the Service. A changed Policy takes effect 7 days after the announcement.