Privacy Policy

Effective date: July 20, 2026

1. General Provisions and Purposes of Processing

Uniquegood Company Inc. (the "Company") complies with the Personal Information Protection Act (Korea) and other applicable laws, and processes personal information for the following purposes: account authentication and member management; provision of the Service and execution of agent tasks; fee payment and settlement (once billing features are introduced); usage metering and quota management; security and prevention of fraudulent use; customer support; and service improvement and statistical analysis. The Company does not sell personal information or share it with third parties for advertising purposes.

2. Items of Personal Information Collected and Collection Methods

(Required) Email address, name, and password (stored as an irreversible hash). (Optional) Profile photo; AI connection credentials, such as API keys, supplied by the user (stored encrypted with AES-256-GCM). (Collected automatically in the course of using the Service) IP address, cookies, device and browser information, access records, usage logs, audit logs, and (iOS app) device tokens for push notifications. (Generated in the course of use) Content entered by the user, such as workspaces, sessions, messages, files, and task outputs. (Once billing features are introduced) Payment information processed through a payment processor — the Company does not directly store sensitive payment information such as full card numbers, and will disclose the processor and the items collected in this Policy at the time of introduction. Collection takes place through sign-up, use of the Service, and automated collection tools.

3. Processing and Retention Period

In principle, personal information is retained until membership withdrawal and is deleted without undue delay upon withdrawal. However, the following records are stored separately for the applicable period as required by law and then destroyed: records on contracts and statutory cancellations (withdrawal within the statutory period), 5 years; records on payments and the supply of goods, etc., 5 years; records on consumer complaints or dispute resolution, 3 years; records on display and advertising, 6 months (all under the Act on the Consumer Protection in Electronic Commerce, etc. (Korea)); and access log records, 3 months (Protection of Communications Secrets Act (Korea)). Database backups maintained for service stability rotate on a 7-day cycle and are destroyed automatically, and usage and audit logs kept to prevent fraudulent use are retained until membership withdrawal.

4. Provision to Third Parties

The Company does not provide users' personal information to third parties without consent, except where there is a statutory basis or where an investigative authority makes a request in accordance with procedures prescribed by law.

5. Outsourcing of Processing

To the extent necessary to provide the Service, we engage the following service providers to process personal information: Cloudflare, Inc. (content delivery, security, and network tunneling; United States), Apple Inc. (iOS push notification delivery; United States), and Google LLC (web analytics — Google Analytics; United States). The payment processor will be disclosed and updated in this Policy when billing features are introduced. Outsourcing agreements incorporate the protective measures required by applicable law, and this Policy will be updated without undue delay if any service provider changes.

6. Cross-Border Transfer of Personal Information

The following cross-border transfers occur in the course of providing the Service. (1) Cloudflare, Inc. (United States): connection information and transmitted data pass through its network. (2) Google LLC (United States): cookies and usage data are transmitted for web analytics. (3) Apple Inc. (United States): device tokens are transmitted for iOS push delivery. (4) Anthropic PBC and OpenAI, LLC (United States), JINGSHENG HENGXING TECHNOLOGY PTE. LTD. / Z.ai (Singapore), X.AI LLC / xAI (United States), Moonshot AI PTE. LTD. / Kimi (Singapore), and Google LLC / Gemini API (United States): only when a user sets up the applicable AI connection and instructs execution, the execution content is transmitted to the selected provider, subject to that provider's privacy policy and retention terms. Users may refuse an optional transfer by disconnecting the relevant integration, although the related feature will then be unavailable.

7. Destruction Procedures and Methods

Personal information for which grounds for destruction have arisen is destroyed following an approval process by the department responsible for personal information protection. Electronic files are permanently deleted using methods that make recovery or restoration impossible, and printed materials are shredded or incinerated. Information subject to statutory retention obligations is stored separately in a dedicated storage space and destroyed by the same methods once the retention period has elapsed. Backups are destroyed automatically at the end of the backup rotation cycle (7 days).

8. Rights of Data Subjects and How to Exercise Them

Users may at any time request access to, correction of, deletion of, or restriction of processing of their personal information, and may withdraw consent (including membership withdrawal). Requests may be submitted via in-service settings, or in writing, by email (contact@uniquegood.biz), or by phone (070-8706-1010), and may also be exercised through a legal representative or an authorized agent who submits a power of attorney. The Company will act on a request within 10 days of receipt and, if it refuses the request, will notify the user of the reasons and how to appeal. The Company does not collect personal information of children under the age of 14; if it becomes aware that such information has been collected, it will be deleted without undue delay.

9. Cookies and Other Automated Collection Devices; Behavioral Information

The Company uses cookies to maintain the Service (login sessions) and for usage statistics. Through the web analytics tool Google Analytics (Google LLC, United States), cookie identifiers, visit and usage behavior, and device information are collected for statistical and service-improvement purposes. Users may refuse the storage of cookies in their browser settings or install the Google Analytics opt-out browser add-on to refuse collection. However, refusing essential cookies such as login cookies may limit use of the Service. The Company does not collect behavioral information for personalized advertising purposes.

10. Security Measures

The Company applies the following measures. (Administrative) Establishing and implementing an internal management plan; minimizing access privileges and conducting periodic reviews. (Technical) One-way hashed storage of passwords; AES-256-GCM encryption of connected credentials; encryption in transit (TLS); access controls; retention of access and audit records with protection against forgery and alteration; daily database backups. (Physical) Access control at server locations.

11. Department Responsible for Personal Information Protection

For inquiries, grievance handling, and requests for access and other rights regarding personal information, please contact: Department in charge of personal information protection: Operations Team, Uniquegood Company Inc. / Phone: 070-8706-1010 / Email: contact@uniquegood.biz (7F, Merry Here, 8, Yeonmujang 13-gil, Seongdong-gu, Seoul, Republic of Korea).

12. Remedies for Infringement of Rights

Reports and consultations regarding personal information infringement may be directed to the following bodies: Personal Information Dispute Mediation Committee (Korea) (1833-6972, www.kopico.go.kr), Personal Information Infringement Report Center (dial 118 without an area code, privacy.kisa.or.kr), Supreme Prosecutors' Office (Korea) (1301, www.spo.go.kr), and Korean National Police Agency (182, ecrm.police.go.kr). If you disagree with the Company's decision on a request for access or other rights, you may file an administrative appeal under the Administrative Appeals Act (Korea).

13. Notice to Users Outside Korea

The Company processes personal information on the legal bases of performance of a contract, legitimate interests, and user consent. The Company does not sell or share personal information (including sharing for personalized advertising purposes). Users residing outside Korea may exercise the rights granted under the laws of their place of residence (access, deletion, restriction of processing, etc.) through the contact details in Section 11 above, and the Company will respond within the time limits prescribed by applicable law. You also have the right to lodge a complaint with your local supervisory authority.

14. Changes to This Policy

When this Policy is changed, notice will be given within the Service at least 7 days before the effective date; changes material to the rights of data subjects, such as changes to the items collected or the purposes of processing, will be announced at least 30 days before the effective date and notified individually by email or similar means. Previous versions are available upon request to the Company.

The Korean text is the authoritative version of this Policy. This translation is provided for convenience; the Korean version prevails in case of any conflict. This Policy applies from July 20, 2026.