AI-SAURUS Β· GLOBAL
Privacy Policy
Effective date: 2026-08-15
1. Who controls your data
μμ΄ν¬λΉμμ¬ operates AI-Saurus and is responsible for the personal information handled through the service, subject to applicable law.
2. Information we process
Account: user ID, email address, authentication/session information, preferred locale.
Service use: product name, 1688 source URL, actual sales options, language setting, generation job/status/cost metadata, uploaded or imported product images used for a generation request.
Outputs: generated detail-page image, representative/supplementary images, storage paths, quality and processing metadata.
Billing when enabled: credit package, payment order/transaction identifiers, currency, paid/refunded amount and refund status. Payment card details are entered with and handled by the payment provider, not stored in the AI-Saurus application database.
3. Purposes
We process information to create and authenticate accounts, run requested AI generations, preserve job/result history, prevent duplicate charging and abuse, operate credits and billing, provide refunds/support, secure the service, and comply with legal obligations.
4. Retention
Account and service data is retained while the account is active or until deletion is requested, unless a longer period is required by law or necessary to resolve a dispute.
Where Korean e-commerce record-retention rules apply, contract/withdrawal and payment/supply records may be retained for 5 years, and consumer complaint/dispute records for 3 years.
Browser-extension import packages are temporary and designed to expire from extension local storage after 30 minutes once not acknowledged. Final generated assets are kept in the user's account storage until deletion/retention handling is performed.
5. Service providers and international processing
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Account authentication, database, job/credit ledger, result storage | Account and service data as needed for the service |
| Vercel | Application hosting, network delivery, server execution | Request and technical service data |
| OpenAI | AI analysis, image generation, quality review | Product text/images and generation context submitted for the job |
| Paddle (when billing is enabled) | Checkout, payment, tax/invoice/refund processing | Billing and transaction information required for payment |
These providers may process data using infrastructure outside your country. Before live public launch, AI-Saurus will keep the legally required destination-country, timing/method, recipient, purpose, data categories and retention disclosures current for the operator's actual provider configuration.
6. Browser storage and tracking
AI-Saurus currently stores the authentication session in browser local storage so you can remain signed in. The MVP does not intentionally use advertising-tracking cookies. Infrastructure providers may process essential technical request information for security and delivery.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, suspension of processing, withdrawal of consent where applicable, and information about processing. Account/result deletion requests can be sent to the privacy contact below until self-service deletion is released.
8. Security and destruction
We use access controls, private result storage, authenticated APIs, server-only secrets, and least-privilege application design. When information is no longer required, it is deleted or made unrecoverable using methods appropriate to the storage medium, except records that must remain under law.
9. Privacy contact
Privacy officer: μ‘μΉμ€
Email: andy8010@naver.com
10. Changes
Material changes to this policy will be announced through the service before or when legally required. Mandatory privacy rights under applicable law remain unaffected.