Privacy Policy
Effective Date: January 11, 2025
TOOEASY Inc. ("Company," "we," "us," or "our") operates the Junis AI Agent Platform (junis.ai). This Privacy Policy describes how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection Act (PIPA) of South Korea, the EU General Data Protection Regulation (GDPR), and other applicable privacy laws.
By using our Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
We collect the following information when you register and use our Service:
- Account Information: Email address, name, and profile picture (via Google OAuth 2.0)
- Organization Information: Organization name, description, logo (optional)
- Content Data: Conversations with AI agents, uploaded files (PDF, XLSX, PPTX, DOCX), voice recordings
- Agent Configurations: Prompts, tool settings, RAG knowledge base documents
1.2 Automatically Collected Information
- Usage Data: IP address, browser type, operating system, access times, pages viewed
- Cookies and Tokens: JWT authentication tokens (24-hour validity), browser cookies
- Device Information: Mobile device identifiers (when using mobile web)
- Service Logs: API call logs, token usage, error reports
1.3 Payment Information
- Subscription Data: Plan type, billing cycle, payment history
- Payment Methods: Processed by Lemon Squeezy (we do not store credit card information)
- Cryptocurrency Wallets: Ethereum/Base wallet addresses for USDC payments
2. How We Use Your Information
We use your personal information for the following purposes:
Service Provision
- Provide AI agent creation, management, and execution services
- Process conversations through LLM providers (Anthropic Claude, Google Gemini, and others)
- Integrate with external services via MCP (Notion, GitHub, Gmail, Salesforce, Slack, and 20+ platforms)
- Enable RAG (Retrieval-Augmented Generation) with your uploaded documents
Account Management
- Authenticate and verify your identity
- Maintain your account and preferences
- Communicate important service updates and notifications
Payment Processing
- Process subscription payments (Basic $20/month, Pro $195/month)
- Handle credit top-ups and usage-based billing
- Facilitate cryptocurrency payments (USDC) for agent marketplace
Service Improvement
- Analyze usage patterns and service performance
- Develop new features and improve existing ones
3. Information Sharing and Disclosure
We share your personal information with third parties only as necessary to provide our Service and as described below:
| Recipient | Purpose | Data Shared | Location |
|---|---|---|---|
| Anthropic PBC | Claude AI API service | Conversation text, file content | United States |
| Google Cloud Platform | Vertex AI Search, file storage | Uploaded documents, RAG queries | United States |
| Kakao Cloud | Object storage services | Uploaded files (PDF, XLSX, etc.) | South Korea |
| Lemon Squeezy | Payment processing | Email, payment information | United States |
| Coinbase (CDP) | Cryptocurrency payments | Wallet addresses, transaction history | United States |
| MCP Platforms | External service integrations | As configured by user | Various |
π MCP Integrations: Data is only shared with external platforms (Notion, GitHub, Gmail, and 20+ others) when you explicitly configure these integrations. You can disconnect them at any time.
4. Data Retention
4.1 Active Account Data
We retain your personal information for as long as your account remains active or as needed to provide you services:
- Account Information: Until account deletion
- Conversation History: Until account deletion or user-initiated deletion
- Uploaded Files: Until account deletion or user-initiated deletion
- Agent Configurations: Until account deletion
4.2 Legal Retention Requirements
We retain certain information as required by law, including:
- Transaction Records: 5 years (E-Commerce Act)
- Payment Records: 5 years (E-Commerce Act, Tax Law)
- Consumer Complaints: 3 years (E-Commerce Act)
- Access Logs: 30 days
4.3 Account Deletion
When you delete your account:
- Personal data is immediately removed from active systems (within 24 hours)
- Backup data is deleted within a necessary period
- Data required by law is securely archived and deleted after the legal retention period
5. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights:
π Right to Access
Request a copy of your personal information
βοΈ Right to Rectification
Correct inaccurate or incomplete data
ποΈ Right to Erasure
Request deletion of your personal information
β Right to Restrict Processing
Limit how we use your data
π¦ Right to Data Portability
Receive your data in a structured format
π« Right to Object
Object to certain types of processing
π§ How to Exercise Your Rights
Email: contact@junis.ai
Account Settings: My Profile β Settings β Privacy Management
Response Time: We will respond within a reasonable period
6. Security Measures
We implement industry-standard security measures to protect your personal information:
π Encryption
- In Transit: HTTPS/TLS 1.3 for all API communications
- At Rest: AES-256 encryption for sensitive data
- Passwords: Bcrypt hashing (cost factor 12)
π Access Controls
- JWT token-based authentication (24-hour expiry)
- Role-based access control (OWNER, ADMIN, MEMBER, VIEWER)
- Multi-tenant data isolation
π‘οΈ Infrastructure Security
- Secure cloud infrastructure (Google Cloud, Kakao Cloud, and other certified providers)
- Regular security audits and vulnerability assessments
- Automated backup and disaster recovery
7. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
Essential Cookies
Required for authentication and core functionality. These cannot be disabled.
- JWT authentication tokens (24-hour validity)
- Session identifiers
Preference Cookies
Store your preferences and settings.
- Theme preferences (light/dark mode)
- Language settings
Analytics Cookies
Help us understand how you use our Service and improve performance.
πͺ Cookie Management
You can control cookies through your browser settings:
- Chrome: Settings β Privacy and security β Cookies
- Safari: Preferences β Privacy β Manage Website Data
- Firefox: Settings β Privacy & Security β Cookies
β οΈ Note: Disabling essential cookies may prevent you from using certain features.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:
πΊπΈ United States
Providers: Anthropic (Claude API), Google Cloud Platform, Coinbase
Safeguards: Standard Contractual Clauses, GDPR-compliant data processing agreements
π°π· South Korea
Providers: Kakao Cloud (Object Storage)
Region: kr-central-2 (Seoul)
πΊπΈ United States
Providers: Lemon Squeezy (Payment Processing)
Safeguards: Standard Contractual Clauses (SCCs), adequate data protection framework
All international data transfers are encrypted using HTTPS/TLS and comply with applicable data protection laws including GDPR, PIPA, and other international standards.
9. Children's Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.
β οΈ Parental Consent Required: If you are between 16 and 18 years old, you must obtain consent from your parent or legal guardian before using our Service.
If we discover that we have collected information from a child under 16 without parental consent, we will take steps to delete that information as quickly as possible.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page with an updated "Effective Date"
- Sending you an email notification (for material changes)
- Displaying an in-service notification
π Notice Period:
- Minor changes: 7 days advance notice
- Material changes affecting your rights: 30 days advance notice
Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.
11. Contact Us & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
π Contact Information
South Korean Privacy Authorities:
Personal Information Infringement Report Center
β’ Phone: 118 (no area code)
β’ Website: privacy.kisa.or.kr
Personal Information Dispute Mediation Committee
β’ Phone: 1833-6972
β’ Website: www.kopico.go.kr
Last Updated: January 11, 2025
Effective Date: January 11, 2025
TOOEASY Inc.
ν¬μ΄μ§ μ£Όμνμ¬
Business Registration Number: 4148601444
511, Seolleung-ro, Gangnam-gu, Seoul, Korea
Contact: contact@junis.ai