This is a draft. It has no effect until legal review is complete and an effective date is set.

Privacy Policy

Effective date: Not set (draft)

1. About this policy

MyOrange Co., Ltd. (the "Company") operates Impact Builder (the "Service") and processes users' personal information. This policy explains what we collect, how we use it, who we entrust it to, and when we delete it.

2. Information we collect

  • Google account information: name, email address, and Google account identifier. We receive these when you sign in with Google.
  • Consent records: your agreement to the Terms of Service and this Privacy Policy, your confirmation that you are 18 or older, and when you gave them
  • Content you enter: project information, conversations, uploaded files, and frameworks the Service generates
  • Usage records: IP address, login session identifier, access logs, credit usage history, and service usage events
  • Inquiries: the name, email, organization, and message you provide in a plan upgrade inquiry

We do not collect phone numbers or passwords.

3. How we use information

  • Providing the Service: generating AI responses, searching for evidence, and saving frameworks
  • Managing accounts and credits, and keeping you signed in
  • Responding to inquiries and sending service notices
  • Preventing misuse and maintaining security
  • Usage statistics to improve the Service

4. Service providers that process information

To provide the Service, we entrust the processing of personal information to the following providers. Each provider uses the information only for the work we entrust to it.

  • Amazon Web Services: servers, databases, and file storage (United States)
  • Google: Google sign-in, and processing your input with AI models (Gemini)
  • Anthropic: processing your input with AI models
  • Perplexity: searching for evidence (search queries may include project content)
  • Resend: sending welcome emails and inquiry confirmation emails
  • Mixpanel: service usage statistics
  • Cloudflare: domain management and network security

5. International transfers

The Company is based in the Republic of Korea, and the Service's data is stored on servers in the United States. The providers above may process information in their own countries, including the United States.

6. Retention and deletion

We keep your information while you have an account.

When you delete your account, we immediately de-identify your account information, and we delete your conversations, frameworks, and uploaded files within two days.

To prevent fraudulent sign-ups and handle disputes, we keep your email address and name separately for 1 year from the date you delete your account, then delete them.

An email address from a deleted account cannot be used to sign up again for 30 days.

7. Cookies

  • Login cookie: keeps you signed in.
  • Google sign-in cookie: used only briefly (up to 30 minutes) while you complete sign-in and sign-up.
  • Analytics cookie: used for service usage statistics (Mixpanel).

8. Your rights

You can ask to view, correct, or delete your information. You can view your information on My Page and delete it by deleting your account. Send any other requests to the contact below.

9. Users under 18

The Service is only for people 18 or older. If we learn that we have received information from someone under 18, we delete it.

10. Security measures

We protect information through encryption in transit, access control, and retention of access logs.

11. Changes to this policy

If we change this policy, we will notify you in the Service 7 days before the change takes effect.

12. Contact

Privacy inquiries: [email protected]

Company: MyOrange Co., Ltd., Republic of Korea