Privacy Policy

Sangse (hereinafter "Company") processes personal information for the following purposes:

• Member registration and management
• Provision of AI-based product detail page generation service
• Identity verification and personal identification for service use
• Prevention of fraudulent use and unauthorized access
• Service improvement and new service development
• Customer inquiry handling and customer service provision

Required Items:

• Email address
• Service usage records
• Access IP information
• Cookies, access logs

Optional Items:

• Profile photo
• Business information (when using business services)

The Company processes and retains personal information within the retention period prescribed by law or agreed upon at the time of collection:

• Member registration and management: Until membership withdrawal
• Service provision: Until termination of service agreement
• Legal retention obligations: Period prescribed by relevant laws

Data usage for AI model improvement:

• Product information entered by users may be used for AI model training
• Only data with personal information removed is used as training data
• Used for pattern analysis to improve generated content quality
• You can opt out of data usage in settings if desired

The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the data subject or special provisions of law.

The Company outsources personal information processing as follows for smooth business operations:

• Cloud Services: AWS, Google Cloud Platform (data storage and processing)
• Authentication Services: Google OAuth, GitHub OAuth (social login)
• AI Services: Google Gemini API (content generation)
• Email Services: Resend (service-related email delivery)

Data subjects may exercise the following rights regarding personal information protection at any time:

• Request notification of personal information processing status
• Request access to personal information
• Request correction or deletion of personal information
• Request suspension of personal information processing

Rights may be exercised through written request, email, or fax in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

The Company takes the following measures to ensure the security of personal information:

• Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
• Technical measures: Access control to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
• Physical measures: Access control to computer rooms, data storage rooms, etc.

The Company has designated the following Personal Information Protection Officer to oversee personal information processing and handle complaints and remedies related to personal information processing: