ValueLabs, represented by Taebeom Kim (the "Company"), respects the personal information of users of the ValueLabs website and related online functions (the "Service") and complies with the Personal Information Protection Act of the Republic of Korea and other applicable privacy laws. This Privacy Policy explains the personal information processed by the Company, the purposes of processing, retention periods, user rights, and safeguards.
The Service is the Company's agency website. Users may create an account, save planning work, try AI-assisted planning features, request a consultation, and, where they have opted in, receive optional marketing information. The Company does not process in-app payments through the Service and does not collect payment card information.
1. Data Controller
Data controller: ValueLabs
Representative: Taebeom Kim
Business address: 104, 19 Yuhyeon-ro, Gimpo-si, Gyeonggi-do, Republic of Korea
Business registration number: 216-29-00213
Privacy contact email: hello@valuelabs.kr
2. Purposes of Processing
The Company processes personal information for the following purposes.
1. Account: membership registration and identification, account creation and login, password reset, age confirmation, and management of required consents.
2. Save planning: storing, retrieving, and managing planning work that a user creates or uploads while using the Service.
3. AI trial: providing trial AI-assisted planning features, including processing user prompts and generating planning materials.
4. Consult: receiving and responding to contact inquiries, consultation requests, and related customer support.
5. Optional marketing: sending news, event, or service information only where the user has separately opted in.
6. Security and legal compliance: preventing misuse, investigating incidents, keeping access logs, and fulfilling obligations under applicable law.
The Company does not process personal information for in-app payment, billing, or paid plan management.
3. Personal Information Processed
The Company processes the following personal information.
1. Account: email address, password (stored in hashed form), name, phone number, and consent records, including agreement to the Terms of Service and this Privacy Policy, confirmation that the user is 14 years of age or older, and optional marketing opt-in status.
2. Access logs: access date and time, IP address, cookies, browser and device information, usage records, and error logs generated in the course of using the Service.
3. Planning content: ideas, service descriptions, planning details, project structures, information architecture, screen-planning requests, prompts, generated results, attachments, and other content entered, uploaded, or saved by the user.
4. Contact inquiries: inquirer name, email address, phone number, inquiry or consultation details, handling results, and supporting materials.
The Company does not collect social login identifiers, payment card numbers, or other payment-instrument details.
4. Retention and Use Period
The Company retains and uses personal information until the processing purpose is achieved. Upon account withdrawal or when personal information is no longer needed, the Company destroys it or stores it separately without delay. However, information required by law or necessary for dispute handling and prevention of misuse may be retained for the required period.
1. Account information and consent records: until account withdrawal, except where a longer period is required by law.
2. Planning content: until the user deletes it or withdraws from the Service. Backup copies may remain for a limited period according to the backup cycle and are then deleted.
3. Contact inquiries and consultation records: until the inquiry is resolved, and thereafter for up to 3 years where consumer complaint or dispute records must be retained, or up to 5 years where contract-related records must be retained under applicable law.
4. Access logs and communications confirmation data: for the period required by the Protection of Communications Secrets Act and other applicable law.
5. Minimum account identifiers needed to prevent misuse: for a reasonable period necessary to achieve that purpose.
6. Optional marketing information: from the date of consent until withdrawal of consent or account withdrawal.
5. Provision to Third Parties
The Company does not provide personal information to third parties except where the user has consented, where required by law, or where a competent authority requests information through lawful procedures.
6. Entrustment of Processing
The Company may use external service providers for the following processing activities.
1. Resend: delivery of Service-related emails, including account, notice, consultation-reply, and optional marketing emails.
2. AI model providers used for the AI trial and planning features, such as OpenAI, Anthropic, Google (Gemini), DeepSeek, MiniMax, Moonshot AI (Kimi), and Zhipu AI (GLM): processing of user requests for generative AI features.
3. Infrastructure and storage providers such as Railway and Cloudflare R2: server operation, file storage, and backups.
The Company manages entrusted processing through contracts or service terms that require appropriate safeguards, restrictions on processing beyond the entrusted purpose, and proper retention and deletion. If entrusted providers or tasks materially change, the Company will notify users through this Policy or the Service.
The Company does not entrust payment approval or billing to any payment processor.
7. International Transfer
Because the Company uses overseas infrastructure and solution providers, personal information or user-submitted content may be processed outside the Republic of Korea.
1. Resend: email address, recipient details, and delivery history / United States / transferred electronically when sending account, notice, consultation, or optional marketing emails.
2. AI model providers such as OpenAI, Anthropic, Google (Gemini), DeepSeek, MiniMax, Moonshot AI (Kimi), and Zhipu AI (GLM): prompts, attachments, planning content, and generated outputs / overseas regions, including the United States, China, or each provider's processing infrastructure location / transferred by API when a user runs an AI trial or planning feature.
3. Infrastructure providers such as Railway and Cloudflare R2: access logs, uploaded files, planning content, and technical logs / overseas regions, including the United States or each provider's processing location / stored electronically in the course of providing the Service.
International transfer details may change depending on actual operational services, and the Company will apply the notices and safeguards required by applicable law.
8. Destruction of Personal Information
The Company destroys personal information without delay when retention periods expire, processing purposes are achieved, or the user withdraws. Electronic files are deleted in a manner that prevents restoration, and paper documents are shredded or incinerated. Information required to be retained by law is stored separately.
9. User Rights
Users may request access, correction, deletion, suspension of processing, or withdrawal of consent regarding their personal information through Service settings or the privacy contact email. The Company will handle such requests without delay in accordance with applicable law. The Service is not intended for children under 14, and the Company does not knowingly collect personal information from children under 14.
10. Cookies and Similar Technologies
The Company may use cookies and similar technologies for sign-in maintenance, security, abuse prevention, storing cookie consent state, language settings, and service quality improvement. Essential cookies are always used to provide the Service, while preference, analytics, and marketing cookies are managed according to the user's choices. The Company does not currently add non-essential analytics or advertising retargeting scripts such as Google Analytics or Meta Pixel to the public site. If such tools are introduced later, they will only run for users who have consented to the relevant categories. Users may change or delete cookie choices through Cookie Settings in the Service footer or browser settings, but blocking essential cookies may limit functions such as sign-in, security, personalization, and parts of the Service.
11. Security Measures
The Company implements reasonable technical and managerial safeguards, including access control, password encryption or one-way hashing, encrypted transmission, access log retention and review, security updates, backups, internal management plans, and minimization of personnel handling personal information.
12. Privacy Officer
Privacy Officer: Taebeom Kim
Privacy contact email: hello@valuelabs.kr
Business address: 104, 19 Yuhyeon-ro, Gimpo-si, Gyeonggi-do, Republic of Korea
Users may contact the Privacy Officer for inquiries, complaints, or remedies related to personal information protection.
13. Remedies
Users who need consultation or dispute resolution regarding personal information may contact relevant authorities, including the Personal Information Infringement Report Center (privacy.kisa.or.kr / 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972), the Supreme Prosecutors' Office (www.spo.go.kr / 1301), and the National Police Agency (ecrm.police.go.kr / 182).
14. Changes to this Policy
The Company may amend this Privacy Policy due to changes in law, the Service, or personal information processing practices. Material changes will be announced through the Service, email, or notices.
Supplementary Provision
This Privacy Policy applies from the effective date.