INNOIP (the "Company") values your personal data and complies with the Personal Information Protection Act of the Republic of Korea (PIPA) and other applicable laws. This policy applies to the TALK TAK and UTTA AI services (the "Service").

1. Purposes of Processing

• Service provision — creating and joining conversation rooms, agreement ledger records, agreement PDF generation
• AI analysis and mediation — operation of Toktaki (AI mediator), conversation structuring and translation via the Anthropic AI API
• Account authentication — Kakao/Google social login, TalkTak ID issuance, session maintenance
• Connections management — automatic mutual saving of conversation partners to each user's connections list
• Notifications — push notifications for new messages and agreement progress (only where you have allowed them)
• Service improvement — access log analysis, error detection
• Legal compliance — retention required by law, responses to lawful requests from authorities

2. Personal Data We Process

① Provided by you or via social login

• Name or nickname (when entering a room)
• From Kakao/Google upon social login: nickname, email address, in-service member identifier
• One-line profile bio (optional)
• Conversation content you enter, including negotiation topics and terms

② Generated by the Service

• TalkTak ID — an in-service identifier automatically issued on sign-up (e.g., @talktak-xxxxx)
• Connections list — when logged-in users join the same room, each is automatically saved to the other's connections list; you may delete any connection at any time within the Service
• Push notification tokens (only on devices where you allowed notifications)

③ Collected automatically

• IP address (including for abuse prevention), browser and device information
• Service usage records and access timestamps; error logs and usage statistics
• Browser local storage — for name/conversation-ID autofill and profile image (your profile image is stored only on your device and is not transmitted to our servers)

④ Passed to the AI engine

Conversation content you enter may be processed by an AI analysis engine to provide the Service.

3. Retention Periods

Item	Retention	Basis
Account data (nickname, email, TalkTak ID)	Until account deletion	Member management
Connections list	Until deleted by you or account deletion	Service provision
Room conversations and agreement ledger	1 year after agreement completion	Service purpose
Agreement PDFs and SHA-256 seal records	3 years	Dispute response, evidence preservation
Access logs	3 months	Protection of Communications Secrets Act
Payment records (paid services)	5 years	E-Commerce Act
Consumer complaint/dispute records	3 years	E-Commerce Act

4. Provision to Third Parties

We do not provide your personal data to third parties, except where you have given prior consent, where required by law, upon lawful requests from investigative agencies or courts, or where necessary to protect life, body, or property.

5. Processing Delegation

Processor	Delegated work	Retention
Railway Inc. (USA)	Server hosting and database operation	Service period
Anthropic PBC (USA)	AI conversation analysis, translation, and mediation (Toktaki)	Destroyed immediately after API processing (per Anthropic policy)
GitHub Inc. (USA)	Source code management	Service period

6. Cross-Border Transfers

Recipient	Country	Items	Purpose	Retention
Anthropic PBC	USA	Text entered while using the Service	AI-based service functions	Destroyed immediately after processing
Railway Inc.	USA	Access logs, usage records, negotiation data	Server operation and data storage	Until withdrawal or end of retention period
Google LLC	USA	Account identifiers upon Google login	Social login authentication	At the time of authentication

Data protection standards in the recipient countries may differ from those in Korea; the Company ensures equivalent protection through contractual safeguards.

7. Destruction

• Destroyed without delay once the retention period expires or the purpose is achieved
• Electronic files: deleted in a manner that prevents recovery
• Paper documents: shredded or incinerated

8. Your Rights

You may at any time request access to, correction or deletion of, or suspension of processing of your personal data, and request an explanation of, or object to, automated decisions (AI analysis). Contact uttalab@gmail.com or +82-1577-3874; we will act without delay as required by law.

9. Security Measures

• SHA-256 cryptographic sealing of the agreement ledger — tamper prevention
• Full HTTPS (TLS) encryption in transit; security headers (HSTS and others)
• Access log retention and review; least-privilege access to personal data
• AI API keys stored in server environment variables (never exposed to clients)

10. Cookies and Local Storage

The Service uses an essential session cookie to keep you logged in (HTTPS-only, 30 days). We do not use advertising or tracking cookies. Browser local storage may hold your name, conversation IDs, and profile image on your device (not transmitted to servers); you can delete these at any time via your browser settings.

11. Privacy Officer

12. Remedies

• Privacy Infringement Report Center (KISA): ☎ 118
• Personal Information Dispute Mediation Committee: ☎ 1833-6972
• Supreme Prosecutors' Office Cybercrime Dept.: ☎ 1301
• National Police Agency Cyber Bureau: ☎ 182

13. Changes to This Policy

• First effective: June 14, 2026
• Last updated: July 4, 2026 (social login, TalkTak ID, connections, push notifications, message deletion)