# Privacy Policy

## 1. Purpose of Personal Information Processing

Gilbreth ("the Company") processes users' personal information for the following purposes. Personal data will not be used for any purpose other than those listed below. If the purpose of use changes, the Company will obtain the user's separate consent in accordance with applicable laws.

- **Membership management and service provision:** Email-based login, user identification, and service usage record management

- **Automated content processing and publishing:** Converting user-provided content sources into Threads-style posts

- **Service improvement and analytics:** Analyzing user behavior and improving functionality using Firebase and Mixpanel

- **Customer support and inquiries:** Responding to questions and requests from users

## 2. Categories of Personal Information Collected

The Company collects and processes the following types of personal information in order to provide the Service.

| Category | Data Items | Method of Collection |
| --- | --- | --- |
| Required | Email address, login information (Firebase Auth) | When signing up or logging in |
| Optional | Content sources (text, URLs, YouTube links, etc.) | Automatically collected when provided by the user |
| Automatically Collected | Service usage logs, IP address, device information, analytics data | Automatically collected through Firebase and Mixpanel SDKs |

## 3. Retention and Processing Period of Personal Information

The Company destroys personal information without delay once the purpose of collection and use has been fulfilled.

However, data may be retained for a certain period if required by relevant laws.

| Data Type | Legal Basis | Retention Period |
| --- | --- | --- |
| Login email, usage history | Service operation and dispute prevention | Until membership withdrawal |
| Service usage logs (IP, connection records, etc.) | Communications Secrets Protection Act | 3 months |

## 4. Provision of Personal Information to Third Parties

The Company does not disclose users' personal information to any third party as a rule.

However, personal information may be provided in the following exceptional cases:

- When the user has given prior consent

- When required by law

## 5. Outsourcing of Personal Information Processing

To provide the Service efficiently, the Company entrusts certain personal data processing tasks to external service providers as follows.

| Contractor | Purpose of Processing |
| --- | --- |
| **Google LLC (Firebase)** | Data storage and backend infrastructure operation (Firestore, Functions, Auth, etc.) |
| **OpenAI, L.L.C.** | AI-based content processing and natural language generation |
| **Mixpanel, Inc.** | User behavior and analytics tracking |
| **Vercel, Inc.** | Web hosting and deployment management |

The Company ensures that entrusted partners comply with applicable privacy laws and supervises them to prevent unauthorized use or disclosure of personal data.

---

## 6. Cross-Border Data Transfer

The Company stores user data on servers located outside Korea as follows.

| Item | Details |
| --- | --- |
| Data recipients | Google LLC, OpenAI, L.L.C., Mixpanel, Inc., Vercel, Inc. |
| Destination country | United States |
| Purpose of transfer | Data storage, service operation, AI processing, analytics, and hosting |
| Transferred data | Email addresses, service usage logs, content data |
| Transfer method | Real-time transmission via secure network connections during service use |
| Retention and use period | Until account deletion or fulfillment of processing purpose |

## 7. User Rights and How to Exercise Them

Users have the following rights at any time:

- Request to access, correct, delete, or suspend processing of personal information

- Request account deletion to remove stored personal data

- Submit inquiries or complaints regarding personal data processing via email

The Company will respond to such requests without undue delay in accordance with applicable regulations.

## 8. Procedures and Methods of Data Destruction

When the retention period expires or the purpose of processing is achieved, the Company will immediately destroy the relevant data.

- **Electronic files:** Permanently deleted using technical measures to prevent recovery

- **Paper documents:** Destroyed through shredding or incineration

## 9. Personal Information Protection Officer

The Company designates the following person as its Data Protection Officer to handle personal data inquiries and complaints.

| Role | Information |
| --- | --- |
| Data Protection Officer | Yoonseo Kim |
| Email | [yoonseo.kim.kr@gmail.com](mailto:yoonseo.kim.kr@gmail.com) |

Users may contact the Data Protection Officer for any questions or concerns regarding personal information protection.

## 10. Changes to This Privacy Policy

This Privacy Policy takes effect on the date stated above.

Any additions, deletions, or modifications will be announced at least seven (7) days prior to implementation through an in-service notice.

## 11. Supplementary Provisions

This Privacy Policy is effective as of **October 8, 2025**.

---

**Effective Date:** October 8, 2025

**Last Updated:** October 8, 2025

For the site tree, see the [root Markdown](https://slashpage.com/nurly.md).