Sign In

Privacy Policy (2023-10-21)

Article 1 ( Information on the Collection and Use of Personal Information)

The collection of personal information is required to use "LilysAI".
1.
The personal information collected is as follows and is collected after user consent.
Purpose of collecting personal information
Collected items
Retention and Usage Period
Membership registration and user identification for service provision
Nickname/Name, Email, Password
Until membership withdrawal
Social (SNS) sign-up
All information allowed by the linked social media, such as user account information and friend relationship information provided by the social media.
Until membership withdrawal
Response to service inquiries
Nickname/Name, Email, Mobile Phone Number
Until withdrawal of membership or up to 3 years in accordance with relevant laws
Transmission of information regarding event operations and benefits, and transmission of service-related update news and information
Nickname/Name, Email, Mobile Number, Company Name, Job Title, and Department
Until withdrawal of consent
Payment card registration, payment, and refund
Payment information transmitted to the contracted PG company
Until withdrawal of membership or up to 5 years in accordance with relevant laws.
Identity verification
Birth date
Until membership withdrawal
Accumulation of statistical data for service improvement
IP information, device and browser information, retrieved domains, visited webpages, carrier identification, usage history, misuse history
Until membership withdrawal
Prevention of fraudulent use
Email
Up to 30 days after membership withdrawal
2.
The company collects personal information in the following ways.
a.
The company [referring to] the method of input by the user during the course of using the service (e.g., user consultation at the customer center, activity on the bulletin board, information for issuing cash receipts)
b.
Delivered from linked services such as SNS-linked sign-up
c.
Collected from usage statistics collection tools for service improvement and understanding user responses
d.
Automatically generated and collected, such as cookies and access logs, during the process of using the service
e.
Methods of collecting personal information in writing offline, such as at fairs, seminars, and events.
f.
For children under the age of 14, the following information may be collected from their legal representative.
i.
Name, date of birth, gender, nationality (Korean/foreign), mobile phone number, mobile carrier information, i-PIN information (if i-PIN verification), identity verification values ​​(CI, DI) of the legal representative (guardian)
3.
The personal information collected by the company is processed within the personal information retention and usage period agreed upon by the user at the time of collection or within the personal information retention and usage period in accordance with relevant laws and regulations, and when the purpose is achieved or the retention and usage period expires, the relevant personal information is destroyed without delay in a manner that makes it impossible to recover or reproduce.

Article 2 ( Matters concerning the processing of pseudonymized information)

The Company processes pseudonymized information with user consent for the purpose of improving model performance and quality as follows. Pseudonymized information refers to information that, through pseudonymization of personal information, cannot identify a specific individual without the use or combination of additional information to restore it to its original state.
1.
The company does not use users' pseudonymized information under any circumstances, except for the purpose of improving model performance and quality.
2.
The use of pseudonymized information applies only while your consent remains valid. If you do not wish to use it, please change your consent status. Your changes will take effect from the time of the change.
3.
The pseudonymized information collected is as follows.
Items of personal information subject to pseudonymization
Processing and Retention Period of Pseudonymized Information
Information converted by AI (input information and output information)
Up to 5 years from the time of pseudonymization conversion
4.
We are taking the following measures to ensure the safety of pseudonymized information.
a.
The Company is taking measures to ensure the safety of pseudonymized information and additional information for restoring pseudonymized information to its original state (hereinafter referred to as “additional information” in this Article).
b.
Pseudonymized information and additional information are stored separately. However, if the additional information is unnecessary, it is destroyed.
c.
We manage and control access rights by separating access permissions for pseudonymized information and additional information, granting the minimum access rights necessary for performing tasks, and maintaining records of access rights status.
d.
The Company establishes relevant records in this Privacy Policy to manage the processing of pseudonymized information.
e.
We strictly prohibit the processing of pseudonymized information for the purpose of identifying specific individuals.
f.
If information capable of identifying a specific individual is generated during the process of handling pseudonymized information, the processing of such information is immediately stopped, and it is retrieved and destroyed without delay.

Article 3 ( Matters concerning the refusal of installation and operation of automatic personal information collection devices)

The Company may automatically generate/collect the following information from users during the course of service use and use it for the following purposes.
1.
Purpose of use of automatically collected personal information
a.
Compliance with Relevant Laws: The Company has an obligation to retain user access records (logins) to comply with relevant laws.
b.
Web Usability Analysis and Improvement: Visit date and time, service usage records, and Cookie IDs are collected and retained for up to 5 years from the date of collection, after which they are immediately deleted.
2.
Notice on Automatic Collection of Personal Information and How to Refuse
a.
We collect and analyze users' key behaviors (behavioral information) using the analysis tools below. The likelihood of identifying individuals from the collected information is low.
i.
Trustee Name: Mixpanel
ii.
Trustee Name: Google LLC
b.
Installation, Operation, and Refusal Methods for Automatic Personal Information Collection Devices (Cookies, etc.): You can refuse the storage of cookies, etc., or delete them using the methods below.
[Web]
•
For the Internet Explorer web browser: Option settings in the Tools > Internet Options > Privacy menu at the top of the web browser
•
For the Microsoft Edge web browser: Web browser top menu > Settings > View advanced settings > Option settings in the Cookies menu
•
For the Chrome web browser: Web browser top menu > Settings > Advanced > Content settings > Option settings in the Cookies menu
•
For Chrome mobile: Chrome App > More (top right) > Clear browsing history > Select time period > Check the checkboxes next to 'Cookies and site data' and 'Cached images or files' > Clear browsing history
•
For Safari mobile: Safari App > Clear history and website data > Confirm
•
For Naver Mobile: Naver App > Settings > Clear Cache + Browsing History > Clear Cookies
[App]
•
Android: Settings > Applications > LilysAI (Lilys AI) > Storage > Clear Data
•
IOS: Settings > General > iPhone Storage > LilysAI (Lilys AI) > Delete App

Article 4 ( Outsourcing of Personal Information Processing)

The Company entrusts certain personal information processing tasks to ensure smooth handling of personal information, and upon concluding entrustment contracts, supervises the trustees to ensure the safe processing of personal information in accordance with relevant laws and regulations. If the details of the entrusted tasks or the trustees are added or changed, we will disclose this without delay through prior consent notices in accordance with relevant laws or through this Privacy Policy.
Fiduciary
Outsourcing
Tally
Data collection using forms
Google Firebase (FCM)
Membership registration and user identification for service provision

Article 5 ( Provision of Personal Information to Third Parties)

The Company processes the personal information of data subjects only within the scope specified in 'Article 1 (Guide on the Collection and Use of Personal Information),' and provides personal information to third parties only with the user's separate prior consent or when there is a special requirement under relevant laws and regulations.

Article 6 ( Transfer of Personal Information Abroad)

The Company does not provide personal information to other business operators abroad. However, for the fulfillment of contracts regarding the provision of information and communication services and the enhancement of user convenience, the Company transmits personal information processing tasks abroad as follows:
Purpose
Item
Date and method
Retention period
Companies and countries
Data collection using forms
Name, mobile phone number, email
Transmitted via an encrypted network when providing the service
Until the earlier of the termination of the contract or withdrawal of membership or
Up to 3 years in accordance with relevant laws and regulations
Tally / Belgium
Collecting User Feedback
Email
Transmitted via an encrypted network when providing the service
Up to 5 years from the date of receipt or the date of collection, whichever comes first of the termination of the contract.
Canny / USA
Web usability analysis and improvement
Date and time of visit, service usage history, Cookie ID
Transmitted via an encrypted network when providing the service
Up to 5 years from the date of receipt or the date of collection, whichever comes first of the termination of the contract.
Mixpanel / USA
User registration and identification for web usability analysis, improvement, and service provision
Date and time of visit, service usage history, Cookie ID
Transmitted via an encrypted network when providing the service
Up to 5 years from the date of receipt or the date of collection, whichever comes first of the termination of the contract.
Google / USA

Article 7 ( Rights of Users and Legal Representatives and Method of Exercising Them)

For users and users under the age of 14, a legal representative can view, modify, and delete personal information and accounts.
1.
When a representative, such as a legal representative or an authorized agent, exercises the user's rights (access, correction, suspension of processing, deletion), they must submit a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act.
2.
The Company verifies whether the person making the request for access, correction, deletion, or suspension of processing in accordance with user rights is a legitimate representative.

Article 8 ( Personal Information Management Officer)

The Company assumes overall responsibility for the processing of personal information and designates a Chief Privacy Officer as follows to handle user complaints and provide relief for damages related to the processing of personal information.
Name: Oh Hyun-soo
Affiliation : LilysAI
Position: Representative
Contact: admin@lilys.ai

Article 9 ( Matters concerning changes to the Privacy Policy)

1.
The Privacy Policy is subject to change to provide more convenient services.
2.
When there are significant changes, we will notify users of the revisions in an easy-to-understand manner prior to the revision.
Made with Slashpage