Privacy Policy
Tebahsoft, Inc. ("we" or "the Company") respects your privacy and complies with the Personal Information Protection Act (PIPA) of Korea, the EU GDPR where applicable, and other relevant laws. This Privacy Policy explains how we collect, use, store, and protect your personal information.
1. Purposes of Processing
We process personal data for the following purposes:
- Service delivery & operation: school adoption inquiries, quote responses, demo requests, chatbot consultation
- Customer support: email/phone replies, 1-on-1 inquiry handling
- Service improvement: usage analytics to improve site quality
2. Categories of Personal Data
We collect and use the following personal data:
- Submitted by you (chatbot, contact forms): name, affiliation (school/organization), email, phone, number of students, classes, period of use
- Automatically collected: IP address, cookies, service usage logs, browser/device information
3. Retention Period
- Chatbot conversation & inquiry records: 3 years after handling (per Korean E-Commerce and Telecommunications Privacy laws)
- Analytics cookies: until consent withdrawal or expiry (max 24 months)
- Cookie consent state: until you manually change it
4. Disclosure to Third Parties
We do not disclose your personal data to third parties, except:
- With your prior consent
- When legally required by statute or judicial/investigative authorities
5. Sub-processors
We use the following sub-processors to deliver the service. Each provider complies with applicable data protection laws.
- Supabase, Inc. (USA): database & serverless functions
- Anthropic, PBC (USA): chatbot response generation (Claude API)
- Google LLC (USA): site usage analytics (Google Analytics, consent-gated)
- NAVER Cloud Corp. (Korea): search advertising analytics (Naver Wcs, consent-gated)
- Cloudflare, Inc. (USA): site hosting & CDN
- GitHub, Inc. (USA): blog content hosting
6. Your Rights
You may exercise the following rights at any time:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure
- Right to restrict processing
Under GDPR, you also have the right to data portability and the right to object. Requests can be made via the contact in Section 9; we will respond without undue delay.
7. Cookies & Similar Technologies
We use cookies and local storage to improve user experience and operate the site.
- Necessary: site operation, chatbot abuse prevention, storing your consent choice. Rejecting may limit some features.
- Analytics: Google Analytics 4 (GA4), Naver Wcs. Loaded only after your explicit consent.
You can withdraw or change consent any time via the "Cookie Settings" link in the site footer, or your browser settings.
8. Security Measures
We protect personal data through:
- Technical: HTTPS encryption, access controls, API token protection
- Administrative: minimum-privilege access, periodic security reviews, staff training
- Physical: facility access controls at data-processing sites
9. Privacy Officer & Contact
- Officer: Jungsup Oh (CEO)
- Email: info@tebahsoft.com / Phone: +82-42-864-5566
- HQ: 99 Daehak-ro, Yuseong-gu, Daejeon, South Korea (TIPS Town #510)
10. Complaints & Remedies
For privacy complaints, you may contact:
- Korea Personal Information Protection Commission (privacy.go.kr / 182)
- Korea Internet & Security Agency (privacy.kisa.or.kr / 118)
- For EU residents: your local Data Protection Authority
11. Changes to This Policy
This Privacy Policy may be updated to reflect legal or service changes. Material changes will be announced on the site.