Article 1 (Categories of Personal Data Processed and Collection Methods)
- Sign-up (required): email address, social login identifier, name or nickname (where provided by the social account profile) (collection method: the sign-up process)
- Business profile (optional): industry, business form, years in business, business concerns and other business information entered by the member (collection method: entered directly by the member)
- Revenue and outcome records (optional): revenue amounts and action results entered by the member at the member's option (collection method: entered directly by the member; entry is not compulsory)
- On requesting a consultation: mobile phone number, preferred call time (collection method: the consultation request form)
- On paid payment: payment approval information (payment instrument details are handled directly by the electronic payment agency; the Company does not store full card numbers) (collection method: the payment process)
- Automatically collected: access logs, service usage records (screen views and feature use events), device and browser information, cookies (collection method: in the course of using the Service)
* Content entered by a member into the AI conversation and document generation features may contain personal data, and such content is processed within the scope of the AI processing entrustment in Article 5 below. AI conversation content in the dashboard of a logged-in member is stored only in that member's own account so that conversations can be resumed; no one other than the member (including operators) reads it, and it is destroyed immediately when the member deletes it. Operational statistics do not use the original conversation text; only question-topic labels and usage statistics are aggregated anonymously. Public chatbot conversations while not logged in are not stored. Only for members who have separately consented to "use of conversation data for more accurate answers" (optional), a copy of the conversation with identifying information such as phone numbers and email addresses automatically masked is used to improve answer quality and for AI training; if consent is withdrawn, new collection stops and previously collected data is destroyed immediately. This data is not provided externally without separate consent to external sale or provision. Only for members who apply to withdraw partner rewards, the bank name, account number and account holder are collected, used solely for paying rewards and for tax handling such as withholding, and destroyed once the retention period prescribed by applicable law has passed. Where a member enters another person's personal data (such as customer contact details), the member must hold lawful authority to do so, and operators do not read the original customer lists registered by members.
Article 2 (Purposes of Processing Personal Data)
- Member management: confirming intent to join, identifying the person, maintaining and managing membership, notices and notifications
- Service provision: providing services such as AI coaching, briefs and content generation, personalisation based on industry and profile, managing passes and credits
- Payment and settlement: payment for paid services, refund handling
- Consultation and complaint handling: responding to consultation requests, handling enquiries and complaints
- Sending notifications: informational notifications related to the Service (in-app notifications, email, and KakaoTalk notification messages where consent to receive has been given)
- Service improvement: analysis of usage statistics, feature improvement (pseudonymised or anonymised where processed for statistical purposes)
- Statistics and data products: compiling anonymous statistics from which individuals cannot be identified (by industry, region and question topic) and using them to provide data products such as service improvement, research and market trend reports
Article 3 (Processing and Retention Period of Personal Data)
The Company destroys personal data without delay once the purpose of collection has been achieved. On withdrawal of membership, the Company destroys the personal data it holds without delay, except that it retains the following for the periods stated.
- Records on contracts or withdrawal of subscription: 5 years under the Act on Consumer Protection in Electronic Commerce
- Records on payment and the supply of goods: 5 years under the Act on Consumer Protection in Electronic Commerce
- Records on consumer complaints or dispute handling: 3 years under the Act on Consumer Protection in Electronic Commerce
- Records on access: 3 months under the Protection of Communications Secrets Act
A history of use restrictions may be retained for one year to prevent misuse.
Article 4 (Provision of Personal Data to Third Parties)
The Company processes a data subject's personal data only within the scope of the purposes in Article 2, and does not provide it to third parties except with the data subject's consent or as provided by law.
Article 4-2 (Processing of Pseudonymised Data and Anonymous Statistics)
Under Article 28-2 of the Personal Information Protection Act, the Company may pseudonymise and use personal data for the purposes of compiling statistics, scientific research and preservation of records in the public interest. Safety measures such as storing additional information separately are applied to pseudonymised data, and no attempt is made to re-identify it.
Statistics provided by the Company externally cover only anonymous information from which individuals cannot be identified, and the following principles apply.
- Identifiable information such as the original text of AI conversations, names and contact details is not used to generate statistics.
- Statistics are aggregated only by industry, region (province or metropolitan city), question topic and period.
- Segments where the sample is small enough to raise a risk of re-identification are excluded from aggregation.
- Information about customers (third parties) registered by members is not used in any statistics or data product.
Article 5 (Entrustment of Processing and Cross-Border Transfer)
To provide the Service, the Company entrusts the processing of personal data as follows, and some processors handle information outside Korea.
- Supabase Inc. (United States and others): operation of database and authentication infrastructure. Items transferred: member information and all service data
- Vercel Inc. (United States and others): web service hosting. Items transferred: access information
- OpenAI, L.L.C. and Anthropic, PBC (United States and others): AI conversation and text generation processing. Items transferred: conversation and document content entered by members into AI features
- Google LLC (United States and others): AI image generation, web analytics for marketing pages (Google Analytics), advertising on landing and free-use screens (Google AdSense). Items transferred: content entered by members for image generation, access device, browser, referral path and page view records, and cookie and device information necessary for serving advertisements
- Kakao Corp. (Republic of Korea): advertising on landing pages and free-use screens (Kakao AdFit). Items transferred: cookie and device information necessary for serving advertisements
- Toss Payments Co., Ltd. (Republic of Korea): electronic payment processing. Items transferred: payment-related information
- AtoZsoft Co., Ltd. (Alltalk, Republic of Korea): agency for sending KakaoTalk notification messages. Items transferred: mobile phone numbers of members who consented to receive them, and the content of the messages sent
KakaoTalk notification messages are sent only to members who have consented to receive them, and members may refuse receipt at any time.
* The Company applies settings and contractual terms under which AI processors do not use members' input to train their own models.
* Google Analytics web analytics applies only to marketing pages; dashboard usage records after login are not sent to external analytics tools.
* Google AdSense advertisements are shown only on landing pages, or on service screens in a free-use state (free trial, trial ended, pass expired), in ad slots separately configured by the Company as approved ad units; they are not shown on screens while a paid plan is in use. Personalised advertising and cookies can be managed in Google's ad settings and in browser settings.
* Kakao AdFit advertisements are shown only on landing pages, or on service screens in a free-use state, in ad slots separately configured by the Company as approved ad units; they are not shown on screens while a paid plan is in use. Only one advertising tool is used per ad slot, and Google AdSense and Kakao AdFit may appear together only where they are configured on different slots. Personalised advertising and cookies can be managed in Kakao's ad settings and in browser settings.
* If you do not wish your data to be transferred outside Korea, use of all or part of the Service (AI features) may be restricted.
Article 6 (Destruction of Personal Data)
Destruction procedure: personal data is destroyed without delay in accordance with internal policy once the purpose has been achieved or the retention period has passed.
Destruction method: electronic files are deleted by a method that makes recovery impossible, and printed materials are shredded or incinerated.
Article 7 (Rights and Obligations of Data Subjects and How to Exercise Them)
A data subject may at any time request access to, correction of, deletion of, or suspension of processing of their personal data.
Rights may be exercised through the settings in the Service or by written or email request to the privacy officer below, and the Company takes action without delay.
Rights may also be exercised through a legal representative or an authorised agent.
Members may withdraw directly in the settings in the Service; on withdrawal, personal data other than the items subject to statutory retention under Article 3 is destroyed.
Article 8 (Measures to Ensure the Safety of Personal Data)
- Administrative measures: minimising the number of persons handling personal data, establishing an internal management plan
- Technical measures: access rights management (row-level access control in the database), encrypted storage of sensitive items such as phone numbers, encryption in transit (TLS), retention of access records
- Physical measures: application of the physical security systems of the cloud infrastructure providers
Article 9 (Cookies and Other Automatic Collection Devices)
The Company uses cookies to keep members logged in and to analyse use of the Service.
A data subject may refuse the storage of cookies through browser settings; in that case there may be limits on using services that require login.
The Company uses service usage statistics collected by its own means, and advertising tools limited to approved ad slots (Google AdSense, Kakao AdFit). A data subject may limit personalised advertising and cookie storage in Google's and Kakao's ad settings and in browser settings.
Article 10 (Privacy Officer)
Privacy officer: Sangwan Kim (Chief Executive Officer)
Contact: support@datamingo.com
Data subjects may direct enquiries, complaints and requests for remedy relating to personal data to the contact above, and the Company answers and handles them without delay.
Article 11 (Remedies for Infringement of Rights)
Where a report or consultation regarding infringement of personal data is required, you may contact the following organisations.
- Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)
- Personal Information Infringement Report Centre: 118 (no area code) (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (no area code) (www.spo.go.kr)
- National Police Agency: 182 (no area code) (ecrm.police.go.kr)
Article 12 (Changes to this Privacy Policy)
This Privacy Policy applies from 11 August 2026 (first effective 27 July 2026).
Where content is added, deleted or amended, notice is given through announcements from seven days before the effective date.