Legal / Privacy notice, Republic of Korea

Privacy notice, Republic of Korea

Last updated 2026-07-14

This notice supplements the Privacy Policy for users in the Republic of Korea, under the Personal Information Protection Act (PIPA · 개인정보 보호법).

Items collected, purpose, and retention

• Items, email address and display name (and, if you enable it, a two-factor secret); the content you add to your account; standard server logs (IP address, access time).
• Purpose, creating and operating your account, providing the service's features, and keeping the service secure. Nothing is collected for advertising or profiling.
• Retention, for the life of your account. When you delete your account your data is destroyed without delay (electronic files are deleted irreversibly); copies in routine backups age out on the backup cycle. Where Korean law requires a retention period (e.g. records under the Act on Consumer Protection in Electronic Commerce for paid services), that period is honoured and the data is then destroyed.

Consent to this collection is given when you create an account; you may refuse, but the service cannot be provided without these minimum items.

Entrusted processing and overseas transfer

To operate the service, processing is entrusted to the providers listed in the Privacy Policy, and your data is processed outside Korea:

• Render (United States), hosting and storage, for the life of the account.
• Anthropic (United States), the text you submit when you invoke an AI feature, processed at that moment only.
• Cloudflare (United States), TLS for custom domains, if you connect one.
• Any backup or mailing destination the account owner configures.

The transfer happens over encrypted connections at the time you use the service. If you do not wish your data processed overseas, you may refuse by not using the service or by deleting your account; overseas processing is inherent to how the service is hosted.

Your rights

Under PIPA you (or your legal representative) may at any time request access to your personal information, correction, deletion, or suspension of processing, and you may withdraw consent. The app covers most of these directly, edit anything, export your complete account as a portable archive, delete your account. For anything else, contact the privacy officer below; requests are honoured without delay and you will not be disadvantaged for making them.

Privacy officer and disputes

• Privacy officer (개인정보 보호책임자), the operator of 1BURO, hello@1buro.app.
• If a dispute is not resolved, you may contact the Personal Information Dispute Mediation Committee (kopico.go.kr · 1833-6972), the KISA Privacy Call Center (privacy.kisa.or.kr · 118), or the Personal Information Protection Commission (pipc.go.kr).