1. Data we collect
- Account: email, name, organization, billing details
- Meeting (required): audio recording + STT result + corrected text + translation of both parties, timestamps, booth ID, meeting metadata
- Reports: summary, agreements, action items, prices mentioned
- Automatic: IP address, browser info, session times, cookies
- With optional consent: anonymized conversation text, anonymized audio files (for model training)
2. Why we collect it (granular by purpose)
Per Korean PIPA §15, we separate consent by processing purpose.
Required (necessary to use the service)
- data_processing: deliver real-time KO ↔ EN / JA / ZH translation — recording, STT, correction, translation
- cross_border_transfer: send data to overseas AI processors (see §4 for details)
Optional (declining doesnt affect translation)
- model_improvement: use anonymized conversation data to improve translation accuracy, update glossaries, learn mishearing patterns
- voice_corpus: use audio (separated from speaker identity) to fine-tune STT models
3. Retention
- Required-consent data (audio + text): auto-deleted 90 days after meeting end. Configurable by the super-admin in system settings; changes propagate to this policy and the consent modal.
- Reports: contract term + 1 year
- Optional-consent learning data (model_improvement / voice_corpus): permanent (corpus asset). Deleted immediately on consent withdrawal (see §6).
- Account: identifiable info removed within 14 days of a deletion request
4. Cross-border transfer (PIPA §28-8)
We rely on the following overseas processors to deliver real-time translation.
| Processor | Country | Purpose | Their retention |
|---|---|---|---|
| OpenAI Inc. | United States | STT, text correction, embeddings | discarded immediately (per their policy) |
| Anthropic PBC | United States | translation, summary, correction validation | discarded immediately (per their policy) |
| Google LLC | United States | STT support (Gemini) | discarded immediately (per their policy) |
| Supabase Inc. | Singapore / US | database hosting | contract term |
| Vercel Inc. | United States | web infrastructure | logs 30 days |
All transfers are under Standard Contractual Clauses (SCC) or separate data processing agreements. If you decline, the translation service is not available (overseas AI is required for processing).
5. Review and redaction
After every meeting, both parties review the auto-generated report line-by-line and can mask, edit, or remove any item before it leaves the booth. Reports are not published until both parties approve. With model_improvement consent, company / person names, email, phone, and numbers are auto-masked before any text enters the improvement corpus.
6. Your rights (PIPA §35-37, GDPR Art.15-22)
- Access / correction: email privacy@daehwa-ai.com; we respond within 30 days
- Withdraw consent: during a meeting, the “Learning ON/OFF” badge in the meeting screen header revokes immediately. After a meeting, the review screen has a “Delete this meetings learning data” button that surgically removes that meetings corpus contributions.
- Restriction / deletion: email the address above. Removed within 14 days unless legally required to retain.
- Data portability (GDPR): EU residents may request a structured copy of their personal data.
7. Marketing consent
Marketing communications are an optional separate consent, surfaced on the post-meeting satisfaction screen. You can unsubscribe at any time after opting in.
8. Data Protection Officer
Bae Seunghun · privacy@daehwa-ai.com
3 Stripe Co., Ltd. · Republic of Korea
9. Changes
We notify at least 7 days in advance of changes (30 days for material changes). Effective date (top) and the consent_records.consent_version field track which version of the policy you agreed to.