ChatAllo
PRIVACY POLICY
Privacy Policy
센티브인컴 ("we") operates ChatAllo and protects your personal information in line with the Korean Personal Information Protection Act and other applicable laws. If the Korean and English versions differ, the Korean version prevails to the extent permitted by law.
1. What we process and why
| Category | Data | Purpose |
|---|---|---|
| Sign-up and login | Email, sign-up method (email, Google, Kakao), display name, authentication identifier, sign-up and login times | Identify you, log you in, manage your account, prevent abuse |
| Using the Service | Questions and AI answers, text of attached documents, projects and instructions, generated or edited images, canvas, member memory (if enabled), photos attached in chat (used only to answer, not stored), voice input recordings (deleted as soon as they are transcribed), display settings and language | Provide the AI features you request; store, search and export your history |
| Usage | Request time, model used, allowance records, processing state and cost | Calculate plan allowances, apply limits, prevent duplicate requests |
| Payments | Subscription, payment and refund records; payment provider customer, transaction and subscription IDs; amount, currency, date | Provide subscriptions, handle refunds and disputes, keep statutory transaction records. Card details are passed to the payment gateway only at the moment of payment and never stored; we keep only a billing key for renewals. |
| Optional updates | Your channel and purpose choices and their history; phone number (only if you enter and verify it) | Send the updates you chose; keep proof of consent and withdrawal |
| Support | Your support emails | Respond to you |
| Automatic | Access logs, browser and device information, error logs | Security and troubleshooting |
Phone numbers, member memory and optional updates are processed only if you choose them. We do not use your chats for advertising or AI training.
2. Retention and deletion
When you confirm account closure, access ends immediately and your subscription is cancelled. Personal information is then deleted without delay so that it cannot be recovered, except for the records below that Korean law requires us to keep.
| Record | Legal basis | Period |
|---|---|---|
| Contracts and withdrawal of offers | Act on the Consumer Protection in Electronic Commerce | 5 years |
| Payments and supply of goods or services | Same Act | 5 years |
| Consumer complaints and disputes | Same Act | 3 years |
| Labelling and advertising | Same Act | 6 months |
- Retained records contain only the minimum fields, are kept separately from service data, and are deleted when the period ends. Chats, documents, images and memory are not retained.
- Files are removed through the storage provider's delete function and the deletion is verified.
- Data remaining in encrypted backups is access-restricted and destroyed after 30 days. If a backup is ever restored, deletions are re-applied first.
- Chats, documents and images you delete disappear from the Service immediately; usage records needed for billing may remain without the content.
3. Sharing with third parties
We do not provide your personal information to third parties, except where required by law or requested by authorities through lawful procedures. Card details you enter at checkout (card number, expiry, date of birth and the first two PIN digits) pass through our server over an encrypted connection to PortOne and the payment gateway (NHN KCP or KG Inicis) and are never stored by us. Renewals use only the billing key the gateway issues.
4. Processors and international transfers
We use the processors below to run the Service; some process data outside Korea. Transfers happen over encrypted connections when you use the Service.
| Processor | Task | Location | Data | Retention |
|---|---|---|---|---|
| Supabase, Inc. | Member database, authentication, file storage | Stored in Korea (Seoul region); company in the USA | Account, service and payment records in section 1 | Until account closure or end of contract |
| Korea PortOne Co., Ltd. (PortOne) | Payment integration, scheduled renewals and cancellation relay | Korea | Order number, amount and date, card details passed at payment (not stored), billing key | Until end of contract (statutory records as required by law) |
| NHN KCP, KG Inicis | Card payments, recurring payments and cancellations | Korea | Order number, amount and date, card issuer, partial card number | Until end of contract (statutory records as required by law) |
| Oracle Corporation | Application servers | Korea (Seoul region) | Data in transit, server logs | Until end of contract |
| OpenRouter, Inc. and the model provider you choose (OpenAI, Google, Anthropic, DeepSeek, ByteDance) | AI answers, image generation and voice input transcription | USA and each provider's country | Questions, chat context, attachment text, image descriptions, attached photos, member memory (if enabled), voice input recordings | Per each provider's policy after processing |
| Zoho Corporation | Support email | USA | Support emails | 3 years after resolution |
| Resend (Plus Five Five, Inc.) | Email delivery | USA | Email address, message content | Per provider policy after delivery |
| SOLAPI (Nurigo Inc.) | SMS and KakaoTalk notices (if you opt in) | Korea | Phone number, message content | Per provider policy after delivery |
| Google LLC, Kakao Corp. | Social login | USA, Korea | Email and identifier provided at login | Per each company's policy |
If you do not want your data transferred abroad, you may choose not to use the affected features (such as AI answers) or not to sign up; those features will then be unavailable.
5. Your rights
- You can ask to access, correct, delete or stop processing your information, and withdraw consent, at any time.
- Export your data (JSON, ZIP) and delete chats yourself under Settings > Data Controls.
- Change update choices in Settings or use the unsubscribe link in any email.
- Send account closure and other requests to support@chatallo.com. We act without delay and explain any records we must keep by law.
6. Security
Database permissions restrict member data to its owner, and operator access is separated. Server secrets are kept apart from code and all traffic is encrypted with HTTPS. The database and files are backed up in encrypted form with regular restore tests. Generated images are stored in private storage.
7. Cookies and browser storage
We use browser storage to keep you logged in and remember display settings. We do not use advertising or tracking cookies. You can clear this storage in your browser; you will then need to log in again.
8. Children
The Service is not intended for children under 14. If we learn that an account belongs to a child under 14, we delete its personal information.
9. Privacy officer and complaints
Privacy officer: 정재현 (representative) · support@chatallo.com · +82 505-994-0110
You may also contact the Korean Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr).
10. Changes
We announce changes in the Service and on this page 7 days before they take effect (30 days for material changes to your rights).