Privacy Policy
Bizketch ("Company") has established this Privacy Policy to protect user personal information and to promptly handle related complaints in accordance with applicable laws.
Article 1 — Data We Collect
We collect the minimum personal information necessary to provide the service:
| Data | How | Purpose |
|---|---|---|
| Name, email, profile image | Social login (Google) | User identification, service delivery |
| Payment info (transaction ID, amount, status) | PayPal / payment processor | Payment processing, credit top-up |
| Usage logs (generation history, credit usage) | Auto-generated during use | Service improvement, usage analytics |
We do not store raw card numbers or CVCs. Payments are securely processed through our payment partners.
Article 2 — How We Use Your Data
- Account management: User identification and authentication
- Service delivery: AI generation, history management, credit tracking
- Payment processing: Credit top-up, subscription management, refunds
- Service improvement: Quality enhancement, usage analytics
- Customer support: Complaint handling, announcements
Article 3 — Data Retention
- Personal data is deleted immediately upon account deletion, except where retention is required by law.
- Inactive free accounts may be deleted after 1 year with prior notice.
Article 4 — Data Deletion
- Procedure: Data is deleted without delay once the purpose is fulfilled or retention period expires.
- Method: Electronic files are permanently deleted using technical methods that prevent recovery.
Article 5 — Third-Party Sharing
We do not share your personal data with third parties, except:
- When you have given prior consent
- When required by applicable law or a lawful government request
Article 6 — Data Processors
We use the following data processors to deliver our service:
| Processor | Purpose |
|---|---|
| PayPal | International payment processing |
| PortOne | Domestic payment processing (KRW) |
Article 7 — International Data Transfers
We transfer data internationally to the following processors, all located in the United States:
| Recipient | Data transferred | Purpose | Retention |
|---|---|---|---|
| Vercel Inc. | Usage logs, cookies | Hosting & CDN | Until account deletion or contract end |
| Supabase Inc. | User info, generation history, payment records | Database hosting | Until account deletion or contract end |
| Functional Software (Sentry) | IP address, browser info (on error) | Error monitoring | 90 days |
| Anthropic, PBC | User input text | AI generation (Claude) | Transient — not stored |
| Google LLC | User input text | AI generation (Gemini) | Transient — not stored |
| OpenAI, Inc. | User input text | AI generation (GPT) | Transient — not stored |
| Upstash, Inc. | API request metadata | Rate limiting & caching | Up to 24 hours |
None of the above companies use your data for AI model training.
Article 8 — Security Measures
- Technical: HTTPS/TLS encryption, 6 security headers (HSTS, X-Frame-Options, etc.), API rate limiting, input validation (Zod)
- Organizational: Minimum-privilege data access, application-level row isolation per user
- Payment: No raw card data stored; payments processed through PCI-DSS certified partners; webhook signature verification + amount double-check
Article 9 — Your Rights
You may exercise the following rights at any time:
- Access, correct, or delete your personal data
- Restrict or object to processing
- Delete your account (handled automatically on social login disconnect)
Exercise rights via your account settings or by contacting support.
Article 10 — Cookies
- We use essential cookies to maintain login sessions.
- Vercel Analytics collects anonymous, non-identifying usage data for service improvement.
- You may disable cookies via browser settings, but login functionality may be affected.
Article 11 — AI Services and Data
- Keywords and generation requests you enter are sent to AI models (Claude, Gemini, GPT) for processing.
- AI model providers (Anthropic, Google, OpenAI) do not use API-received data for model training.
- Generated content is saved to your account and is not used by us beyond service delivery.
Article 12 — Contact / Data Controller
- Name: Dongwon Yoon
- Title: CEO, Dale Company
- Phone: +82-70-8027-1474
- Email: support@bizketch.ai
Article 13 — California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell personal data)
- Non-discrimination for exercising your privacy rights
To exercise these rights, contact us at support@bizketch.ai.
Article 14 — Policy Changes
This Privacy Policy may be updated to reflect changes in law or service. We will notify you of any material changes via the service.
Effective date: March 11, 2026