Personal data we collect
Linchpin AI (the "Company") collects only the minimum personal data necessary to provide the Service.
Collected at sign-up
- Email sign-up (required): email address, name, password (stored as a one-way hash), mobile phone number
- Kakao social login (required): Kakao account identifier, email address, nickname, mobile phone number
- Optional: company name
Collected automatically during use
- Translation history (file name, translation result, time of use)
- Payment records (amount, time of payment — card data is processed by TossPayments)
- Access logs, IP address, cookies, device information
Purpose of collection and use
The Company uses collected personal data only for the following purposes. If the purpose changes, the Company will obtain user consent in advance.
- Sign-up and identity verification via mobile phone number
- Service provision and storage of translation results
- Notifications for translation completion, review progress, and payment (via Kakao AlimTalk, SMS, and email)
- Payment and refund processing
- Customer support
- Statistical analysis to improve the Service
- Prevention of fraudulent sign-ups, enforcement of one-account-per-person policy, and compliance with legal obligations
Retention period
As a rule, the Company destroys personal data immediately upon a member's withdrawal. However, the following information is retained for the periods required by law.
- Payment and transaction records: 5 years (Act on Consumer Protection in Electronic Commerce, 전자상거래법)
- Records of consumer complaints and dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
- Access logs: 3 months (Protection of Communications Secrets Act, 통신비밀보호법)
Auto-deletion of uploaded files after 90 days: Uploaded source and translation files are automatically deleted 90 days after creation for security and storage management. Translation result text and history metadata are retained until the member deletes them or withdraws membership, and are not separately backed up.
Sharing with third parties
The Company does not share users' personal data with outside parties, except in the following cases.
-
TossPayments: for payment processing
- Items shared: payment amount, order information
- Retention: as required by the Act on Consumer Protection in Electronic Commerce
- Where required by law
- Where the user has consented in advance
Processors (delegation)
The Company entrusts personal data processing to the following providers in order to operate the Service.
| Processor | Delegated work | Retention |
|---|---|---|
| Supabase Inc. | Database hosting, authentication | Until member withdrawal |
| Anthropic, PBC | AI translation API (translation source text uploaded by users is sent — may include personal data) | Deleted immediately after processing |
| Vercel Inc. | Web hosting, CDN | For the duration of Service use |
| Resend | Email delivery (sign-up verification, payment notices, inquiry replies, etc.) | Deleted immediately after delivery |
| SOLAPI | SMS verification and Kakao AlimTalk delivery (mobile phone number transmission) | Deleted immediately after delivery |
| TossPayments | Payment processing | As required by the Act on Consumer Protection in Electronic Commerce |
User rights and how to exercise them
Users may exercise the following rights at any time.
- Request access to personal data
- Request correction or deletion of personal data
- Request suspension of personal data processing
- Withdraw membership (delete account)
The above rights can be exercised directly from My Page, or by contacting abcysl@gmail.com. The Company will act on requests without delay.
Cookies and similar storage technologies
The Company does not set its own cookies. Login state and temporary in-progress data are stored in the browser's localStorage and sessionStorage; this data stays in the user's own browser and is not automatically transmitted to the Company's servers. The Company does not use any cookies for analytics, advertising, or tracking purposes.
However, when using the external services below, those providers may set their own cookies on their own domains, in accordance with their respective privacy policies.
- Vercel: routing and cache identifier cookies for web hosting
- Kakao: during Kakao social login
- TossPayments: during payment
Users can disable localStorage or cookies in their browser settings, but doing so will prevent login state from being maintained and may limit some features.
Personal data of children under 14
The Company does not allow sign-ups by children under the age of 14. If the Company becomes aware that personal data of a child under 14 has been collected, it will destroy that data without delay and terminate the account.
Security measures
The Company takes the following technical and managerial measures to protect users' personal data.
- One-way password hashing: Passwords are stored using a hash algorithm that cannot be decrypted.
- Encryption in transit: All communications are encrypted with HTTPS (TLS).
- Minimized access rights: Permissions to handle personal data are granted only to the minimum number of people required.
- Access control: Row-Level Security (RLS) is applied to the database to block access to data other than one's own.
- Access logs: System access logs are retained for a set period to detect unauthorized access.
Data Protection Officer
For privacy-related inquiries, please contact:
- Officer: Imm Yesung (CEO)
- Email: abcysl@gmail.com
- Response time: within 1–2 business days
Reporting privacy violations
- Personal Information Protection Commission (개인정보보호위원회) — privacy.go.kr
- Korea Internet & Security Agency Privacy Center (개인정보침해신고센터) — privacy.kr
Effective date and changes
- This Privacy Policy (개인정보처리방침) takes effect on January 1, 2026.
- It may be revised in line with changes in law or in the Service. Material changes will be announced by email or in-Service notice.