1. Introduction
AIRem ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.
2. Information We Collect
2.1 Account Information
When you sign up directly with email, we collect:
- Email address
- Password (stored securely hashed)
2.2 OAuth Information
If you sign in via third-party providers (Google, Kakao, Naver), we receive:
- Display name (nickname or name, depending on the provider)
- Email address
- Unique identifier from the provider
2.3 Usage Data
We automatically collect:
- Chat messages and conversation history
- Calendar events you create
- Service preferences and settings
- Session information (login times, duration)
2.4 Structured Memory Data
Through the structured memory feature, we store:
- User preferences and interests extracted from conversations
- Information you ask the servant to remember
Structured memory data is used solely to improve conversation quality and is deleted when you delete your account.
2.5 User-Uploaded Content
If you upload custom Live2D models, we store:
- Model files and associated assets
- Model configuration and metadata
2.6 Payment Information
When you subscribe to a paid plan, we collect information necessary for payment processing. Sensitive payment details such as card numbers are not stored by us directly; they are securely handled by our payment processor (PortOne).
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process your chat messages and generate AI responses
- Manage your calendar and schedule
- Provide personalized conversations through structured memory
- Process web search requests
- Process payments and manage subscriptions
- Authenticate your identity and secure your account
- Improve and personalize your experience
- Send service-related communications
- Comply with legal obligations
4. AI Processing
Your chat messages are processed by Google's Gemini AI to generate responses. Messages may be temporarily processed by Google's servers to provide the AI functionality. We do not use your conversations to train AI models.
5. Payment Processing
Payments for paid subscriptions are processed through the PortOne payment service. PortOne receives only the minimum information necessary for payment processing, and PortOne's own privacy policy applies. We do not directly store sensitive payment details such as card numbers or passwords.
6. Data Storage and Security
Your data is stored on secure servers hosted on Google Cloud Platform (GCP). We implement industry-standard security measures including:
- Encryption in transit (HTTPS/TLS)
- Secure password hashing (bcrypt)
- JWT-based authentication with HttpOnly cookies
- Regular security updates and monitoring
7. Data Retention
We retain your data for as long as your account is active. Conversation history is retained to provide context for ongoing interactions. You may delete your account at any time, which will result in deletion of your personal data.
8. Third-Party Services
We use the following third-party services:
- Google Cloud Platform: Hosting and infrastructure
- Google Gemini API: AI chat functionality
- Google OAuth: Optional sign-in method
- Kakao OAuth: Optional sign-in method
- Naver OAuth: Optional sign-in method
- PortOne: Payment processing
Each third-party service has its own privacy policy. We encourage you to review their policies.
9. Cookies and Local Storage
We use:
- HttpOnly cookies: For secure authentication tokens
- Local storage: For theme preferences and UI settings
We do not use tracking cookies or third-party analytics.
10. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Delete your account and associated data
- Portability: Export your data in a readable format
- Withdraw consent: Revoke OAuth permissions at any time
To exercise these rights, use the Settings menu or contact us at [email protected]
11. Children's Privacy
Our Service is not intended for children under 14. We do not knowingly collect personal information from children under 14. If you believe a child has provided us with personal data, please contact us immediately.
12. International Data Transfers
Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for any international transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service. Your continued use after changes constitutes acceptance.
14. Contact Us
For privacy-related questions or concerns, contact us at:
- Email: [email protected]