Privacy Policy
Nubint Inc. (the "Company") has established and operates the following Privacy Policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information and rights of users and to promptly handle related grievances.
1. Collection and Use of Personal Information
The collection of personal information is necessary for the use of the Nubint AI service. The following personal information is collected with user consent.
| Purpose of Collection | Items Collected | Retention Period |
|---|---|---|
| Membership registration and user identification | Name, email, password | Until account deletion |
| Social (SNS) sign-up | Account information provided by SNS (name, email, profile picture, etc.) | Until account deletion |
| AI service provision | Paper search queries, AI editor input text, AI-generated results, uploaded files (PDF, etc.) | Up to 30 days after account deletion |
| Payment processing | Payment information, billing address and country transmitted to a contracted payment gateway (PG) or merchant of record | Until account deletion or up to 5 years per applicable laws |
| Customer support | Name, email, phone number | Until account deletion or up to 3 years per applicable laws |
| Statistical analysis for service improvement | IP information, device and browser information, visited web pages, usage records | Until account deletion |
| Prevention of unauthorized use | Hashed email (irreversible) | As long as necessary to prevent fraudulent re-registration and duplicate benefit claims |
The Company collects personal information through the following methods:
- Direct input by users during service use
- Transfer from linked services such as SNS sign-up
- Automatic generation and collection of cookies, access logs, etc. during service use
- Collection through usage statistics tools for service improvement and user response analysis
For children under the age of 14, information such as the legal guardian's name and contact information may be collected from the legal guardian.
Collected personal information is processed within the retention period consented to by the user or required by applicable laws, and is destroyed without delay using methods that prevent recovery or restoration once the purpose has been achieved and the retention period has elapsed.
2. Use of Content and Your Right to Opt Out
Data sent to the external AI processors used to provide the Service (see Section 6, Cross-Border Transfer of Personal Information) is transmitted only under terms that prohibit its use for training those providers' AI models.
If you do not want your content used to train AI models, you can opt out at any time under Settings > Account > Service improvement.
3. Installation and Operation of Automatic Personal Information Collection Devices
The following information may be automatically generated/collected from users during service use:
- Legal compliance: User access records (login) are retained for compliance with applicable laws.
- Web usability analysis and improvement: Visit dates, service usage records, and Cookie IDs are collected and retained for up to 5 years from the date of collection, then immediately deleted.
The following analytics tools are used to collect and analyze user behavior:
- Microsoft Clarity
- Google Analytics
- Paddle.js (payment processing and failed-payment recovery)
How to Reject Cookies
Users can reject or delete cookies through their web browser settings:
Chrome
Click ⋮ in the top-right corner → Settings → Privacy and Security → Cookies and other site data → Configure cookie blocking settings
Microsoft Edge
Click ⋯ in the top-right corner → Settings → Cookies and site permissions → Manage and delete cookies and site data → Configure cookie blocking settings
Safari
Preferences → Privacy → Manage Website Data → Configure cookie blocking settings
Firefox
Settings → Privacy & Security → Cookies and Site Data → Configure cookie blocking settings
Please note that rejecting cookies may limit access to some services.
4. Provision of Personal Information to Third Parties
The Company processes personal information only within the scope specified in Section 1, and provides personal information to third parties only with the user's separate prior consent or when required by applicable laws.
5. Outsourcing of Personal Information Processing
The Company outsources some personal information processing tasks for smooth operations, and supervises processors to ensure safe handling of personal information in accordance with applicable laws.
| Processor | Outsourced Tasks |
|---|---|
| Google LLC | Membership registration/authentication (Firebase Auth), web usability analysis (Google Analytics) |
| Microsoft Clarity | User behavior analysis |
| Toss Payments | Payment processing |
| PortOne | Payment integration |
| PayPal | International payment processing |
Any additions or changes to outsourced tasks or processors will be promptly disclosed through this Privacy Policy.
6. Cross-Border Transfer of Personal Information
The Company transfers personal information processing tasks overseas for service provision as follows:
| Purpose | Items | Timing and Method | Retention Period | Company and Country |
|---|---|---|---|---|
| AI service processing | AI editor input text, paper search queries, generated results | Transmitted via encrypted network during service use | Up to 30 days after account deletion | OpenAI, Anthropic, Google / United States |
| Membership/authentication, web usability analysis | Email, visit dates, service usage records, Cookie ID | Transmitted via encrypted network during service use | Until account deletion or up to 5 years from collection | Google / United States |
| User behavior analysis | Visit dates, service usage records, screen recordings | Transmitted via encrypted network during service use | Up to 30 days from collection | Microsoft Clarity / United States |
| International payment processing | Payment information | Transmitted via encrypted network during payment | Until account deletion or up to 5 years per applicable laws | PayPal / United States |
| Payment processing (Merchant of Record) | Name, email, payment information, billing address and country, IP address | Transmitted via encrypted network during payment | Up to 5 years per applicable laws | Paddle.com Market Limited / United Kingdom (Paddle.com Inc. / United States for purchases made in the US; Paddle.com (Canada) Ltd. / Canada for purchases made in Canada) |
Contact details of the recipients are as follows.
- OpenAI, L.L.C. — privacy@openai.com (1455 Third Street, San Francisco, CA 94158, USA)
- Anthropic PBC — privacy@anthropic.com (548 Market St, PMB 90375, San Francisco, CA 94104, USA) / Korean representative: Anthropic Korea (anthropicprivacy@bkl.co.kr)
- Google LLC — data-access-requests@google.com (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
- Microsoft Corporation — https://aka.ms/privacyresponse (One Microsoft Way, Redmond, WA 98052, USA)
- PayPal, Inc. — https://www.paypal.com/us/legalhub/privacy-full (2211 North First Street, San Jose, CA 95131, USA)
- Paddle.com Market Limited — privacy@paddle.com (30 Old Bailey, London EC4M 7AU, United Kingdom)
- Paddle.com Inc. — privacy@paddle.com (3811 Ditmars Blvd #1071, Astoria, NY 11105-1803, USA)
- Paddle.com (Canada) Ltd. — privacy@paddle.com (22 Adelaide Street West, Suite 3400, Toronto, ON M5H 4E3, Canada)
Users may refuse the cross-border transfer of their personal information. To do so, please contact contact@nubint.ai. However, because each transfer listed above is essential to providing the Service — including AI feature processing, account authentication, and payment processing — refusing the transfer may make some or all of those features unavailable and may require termination of the service agreement.
7. Rights of Data Subjects and How to Exercise Them
Users may request access, correction, or deletion of personal information at any time, and the Company will take prompt action.
When a legal guardian or authorized representative exercises a user's rights (access, correction, suspension of processing, deletion), a power of attorney in accordance with Annexed Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
The Company verifies whether the person making the request is a legitimate representative.
8. Privacy Officer
The Company has designated a Privacy Officer to oversee personal information processing and handle user complaints and remedies related to personal information processing.
- Officer: Seunghyun Ha
- Affiliation: Nubint Inc.
- Email: contact@nubint.ai
9. Destruction Procedures and Methods
Collected personal information is securely deleted using methods that prevent recovery, following retention periods based on internal policies and applicable laws.
Upon account deletion, account information (name, email, profile) is deleted immediately. Documents written by the user, chat history, library materials, and uploaded files are destroyed within 30 days of account deletion using methods that prevent recovery.
10. Policy Changes
This policy may be modified in accordance with changes in laws or service policies. Any changes will be announced through means determined by the Company.
Last Updated: August 20, 2026