Privacy Policy

AIB, operated by AIB Inc. ("we," "us," or "our"), is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights.

1. Personal Information Collected

Automatically Collected Information

• Access logs (IP address, access time, page visits) — collected via Google Tag Manager / Google Analytics (in prior-consent regions only after analytics cookie consent; elsewhere until you decline)
• Service usage records (likes, bookmarks, notification reads, AI feature usage history) — automatically collected during use
• AI feature inputs and outputs — the questions, prompts, and pasted text you enter in AI Compare (text, image, speed, and lie comparisons), Cross-Check, the AI assistant, and similar features, together with the answers and images the AI models generate, are stored to improve the service, investigate misuse, and let you revisit your history. Stored whether or not you are logged in (guest runs are kept without a link to any account); retention and deletion follow Articles 3 and 9
• Behavioral analytics (content views, searches, bookmarks, shares) — collected for logged-in members only for personalized recommendations, retained until account deletion
• AI assistant profile extraction — profile information (occupation, age range, topics of interest, etc.) is automatically extracted by AI from conversation content (the assistant may also ask you directly) — used to personalize recommendations and AI model comparisons
• Location data (city level) — used for weather widget and location-based features, stored in cookies for 1 hour
• Cookies: Essential (session authentication, required), Functional (weather widget location, 1 hour), Analytics (Google Analytics, optional). You can block optional cookies in your browser settings.

Payment instrument details (card number, expiry date, security code, etc.) are collected and processed directly by our payment processor, Stripe Inc. AIB neither receives nor stores them.

2. Purpose of Processing

• Newsletter delivery — AI news and content via email
• Inquiry response — Replying to questions and consultation requests
• Member management — Identity verification, personalized content, usage records
• Billing and settlement — Processing subscription sign-up, automatic renewal, cancellation, and refunds, and retaining transaction records as required by law
• Personalized recommendations — Recommending content and AI models based on usage pattern analysis
• AI model evaluation — Calculating model performance rankings from comparison voting data
• Service improvement — Content and UX improvement through analytics
• AI training — Improving AI models using de-identified content from consenting users only
• AI assistant personalization — Tailoring answers, recommendations, and comparisons using profile information automatically extracted from conversations
• Newsletter delivery quality — Confirming that emails actually reach recipients and stopping delivery to addresses that show no engagement over an extended period

3. Retention Period

• Member data: Until account deletion (deleted without delay upon request, except for the records below that we are required by law to retain)
• Records of contracts and withdrawal of subscription: 5 years (Korean Act on Consumer Protection in Electronic Commerce)
• Records of payment and supply of goods or services: 5 years (same Act)
• Records of consumer complaints and dispute resolution: 3 years (same Act)
• Records of labelling and advertising: 6 months (same Act)
• Newsletter email: Until unsubscription
• Inquiry data: Retained for a reasonable period after resolution
• Access logs: Per Google Analytics retention policy
• Behavioral analytics: Until account deletion
• AI recommendation profile: Until account deletion
• AI assistant conversations and extracted profile: Until account deletion
• AI assistant attachments and audio files: Deleting the conversation also deletes the stored original (except files that failed to link to a conversation due to an error right after upload). On account deletion the conversation records are removed, and any remaining stored originals can be deleted via the erasure request in Article 9
• AI assistant transcription results: Retained in the transcription job record. The result is retained even if you close the screen before it is applied to the conversation; it can be deleted via the erasure request in Article 9
• Images generated by the AI assistant: Stored on a public CDN and retained regardless of conversation or account deletion. They can be deleted via the erasure request in Article 9
• Prompts and responses used for model comparison (A/B): Retained indefinitely for model evaluation. On account deletion the link to the author is removed, but the conversation content itself is not deleted (this is not anonymization); it can be deleted via the erasure request in Article 9
• AI model comparison records: Retained indefinitely after anonymization (for model evaluation)
• Cross-Check inputs and AI responses (your questions and pasted text): Retained for service improvement and misuse investigation. On account deletion the link to the author is removed (guest runs are never linked to an account); they can be deleted via the erasure request in Article 9
• Newsletter open and click records: Until unsubscribe (deleted together with the unsubscribe)
• Location cookies: 1 hour

Account withdrawal and erasure of personal information can be requested via the contact in Article 9, and such requests are processed without delay. However, as listed above, payment and contract records that applicable law requires us to keep are retained for the prescribed period even after withdrawal, and are not used for any purpose other than that retention.

4. Third-Party Disclosure

We do not share personal information with third parties without consent, except as required by law.

5. Service Providers

Service providers process data only within the scope necessary and are contractually bound to maintain security. Storage countries are stated based on each provider's published privacy policy, terms of service, and service region information.

6. International Data Transfer

Personal information is stored in Japan, the United States, Singapore, and the Asia-Pacific region through our service providers. These providers hold international security certifications (SOC 2, etc.) and maintain appropriate safeguards.

7. Data Deletion

Data is deleted without delay when the retention period expires or processing purpose is achieved.

• Electronic files: Deleted using irrecoverable methods

8. Cookies

• Essential cookies: Authentication cookies (Supabase) to maintain login sessions and a cookie that remembers your consent choice (aib_consent, 1 year).
• Functional cookies: Location cookies for the weather widget (geo-lat, geo-lon, geo-city; 1-hour retention) and a country-code cookie (geo-country; 24-hour retention, used to determine which consent model applies: prior consent or opt-out). Location and country are estimated from your IP address by our hosting provider (Vercel). Latitude, longitude and city are only passed to your browser in these cookies and are not stored on our servers; the country code is stored in the cookie above (24 hours) and in the consent records described below. Your raw IP address is not stored in consent records.
• Analytics cookies: When Google Analytics cookies are stored depends on the consent model for your region. In most regions, including Korea, Japan and the United States (and whenever the region cannot be determined), an opt-out model applies: analytics cookies may be stored until you decline. In prior-consent regions such as the EU, the United Kingdom and Switzerland, they are stored only after you consent in the cookie banner; before consent, only non-identifying aggregate signals are sent to Google without cookies or identifiers (Google Consent Mode). In every region, you can decline at any time in the notice banner or via "Do Not Sell or Share My Personal Information" in Cookie settings, and stored analytics cookies are deleted immediately when you decline.
• You can change your choice at any time via "Change cookie settings" on My Page. Records of consent and withdrawal are retained to meet legal obligations (proof of consent). Each record contains the time, your choice, the policy version, the consent model applied, the country code, the display language, browser information (User-Agent), a one-way hash derived from your IP address and browser information (for all visitors), and your account identifier if signed in. If your browser sends a Global Privacy Control (GPC) signal, we treat analytics cookies as declined in opt-out regions without any further action. When you decline analytics cookies, any Google Analytics cookies already stored (such as _ga) are deleted immediately. On account deletion or an erasure request, the account link is removed while the record itself is kept for proof purposes.
• You can refuse optional cookies through browser settings.
• Service usage is not restricted even if optional cookies are refused.

9. Your Rights

You may exercise the following rights at any time:

• Request access to your personal information
• Request correction or deletion
• Request suspension of processing
• Unsubscribe from newsletter
• Request account deletion and data removal

To exercise these rights, contact us at the address below. We will respond without delay.

10. Contact

For privacy-related inquiries, you may also contact the following organizations:

• FTC Consumer Information (ftc.gov)

11. Changes to This Policy

Changes to this policy will be announced on the website.