Privacy Policy

1. Personal Information Collection Items

(1) Required Collection Items

• Google Login Information
  • When logging in through a Google account, we collect the user's unique identifier (ID) and email address.
  • Service accounts do not collect personal data other than your email.
• Installation link request email
  • When you request an installation link on the mobile homepage, we process the email address you enter.
• Career applications collect your name, email, optional phone number, and CV file.

(2) Data Collected to Improve the Service

• We collect your last access time, last chat time, Chrome/OS language, and extension version.

(3) Data Processed During Chat

• "Refer to the page I'm viewing" is on by default. While it is on, every message you send to the cat also sends the current tab's address (URL), title, page description, the text you selected (up to 2,000 characters), and part of the page's main text (up to 8,000 characters) to our server. If you turn it off in My Page, no page information is sent.
• Input fields, forms, areas being edited, and menu or ad regions are left out of the page text. No page information is sent from banking, card, securities, crypto, mail, payment, or government service sites, or from login and checkout screens.
• Sensitive sites are detected by automatic rules, which cannot catch every case. On pages that show personal data, passwords, health or financial information, or confidential work material, please turn the feature off or do not chat with the cat.
• Page text and selected text are used only to generate the reply and are not stored on our server. While page reference is on, however, the address (URL) of the page you chatted on is stored with your chat history.
• We store the messages you send, the cat's replies, and the "cat memory" built from your conversations (facts you shared, daily conversation summaries, and things to ask you about later).
• For questions that need a web search or weather, a search query or place name derived from your conversation is sent to the search or weather provider.

2. Purpose of Personal Information Collection and Use

The collected personal information is used for the following purposes:

• Service provision and management
  • Google account-based user authentication and service access provision
  • Service usage record management
  • Sending the requested Chrome extension installation link
  • Applicant verification, application review, and recruitment communication
• Personalized experience provision
  • Personalized cat friend character provision and conversation content storage
• Model Training
  • Kotoro does not use page information, your input, or generated replies to train AI models. The AI providers that receive this information to generate replies also do not use it for model training under their commercial API terms.
• Legal requirement compliance
  • Managing and protecting user information according to relevant laws and regulations

3. Retention, Storage, and Use Period

• User's Google account information is retained during the service usage period.
• When a user requests service withdrawal or personal information deletion, the information is immediately deleted.
• Page text and selected text are not stored after the reply is generated. While page reference is on, the address (URL) of the page you chatted on is kept with your chat history.
• Daily conversation summaries in the cat memory are deleted automatically after 180 days; other memories are kept for the same period as chat history. You can request deletion of memories at contact@kotoro.click.
• Chat history and usage logs are stored on AWS (Korea region) for service improvement.
• Conversation content is retained for service improvement. If you want conversation content deleted, you must request it separately at contact@kotoro.click.
• We use Chrome browser localStorage to improve service quality.
• Installation link request emails are not stored in a separate database after queue processing. Only a hashed value used to limit repeat requests is kept in memory for 5 minutes.
• Career application data and CVs are kept in encrypted private storage for 90 days from submission and then automatically deleted.

4. Outsourced Processing and Overseas Transfer

• Kotoro does not sell personal information or provide it to third parties for advertising. To provide the service, we entrust processing to the companies below, some of which are located outside Korea:
  • Amazon Web Services: service operation and data storage (Korea region)
  • Anthropic: generating the cat's replies and organizing the cat memory (Claude models)
  • Google: understanding the question, generating replies, and backup replies (Gemini models)
  • Brave Software: running web searches for questions that need them
  • OpenWeather: looking up weather for weather questions

Anthropic and Google process the conversation and page information they receive only to generate replies, do not use it for model training under their commercial API terms, and delete it after the period needed for purposes such as abuse prevention.

Service data is stored in the AWS Korea region, and only the information needed for processing is passed to the overseas companies above.

Overseas Transfer Details

The chat feature can only be provided through AI providers outside Korea, so the information below is transferred abroad to perform the service agreement. Transfers happen when you send a message (and nightly for memory organization) through encrypted (HTTPS) API calls.

If you do not want information transferred abroad, you can turn off "Refer to the page I'm viewing" in My Page to stop sending page information, or not chat with the cat. Because the chat feature cannot work without overseas AI providers, refusing the overseas transfer of conversations means the chat feature cannot be used.

5. Personal Information Protection Measures

• Data Encryption
  • We do not use Google login information and log in using Google OAuth 2.0.
• Access Permission Restrictions
  • Access to personal information is granted only to the service operation manager.
• Regular Security Audits
  • We regularly check the data protection level of the service and update as necessary.

6. Personal Information Management Officer

• Officer: JUNSEO KO
  Email: contact@kotoro.click
• If you have any questions or requests regarding your personal information, please contact us at the above email anytime.

7. User Rights

• Personal Information Access and Modification
  • You can view your Google account information including ID and email address, but we do not modify them.
• Personal Information Deletion Request
  • You can request personal information deletion through the methods provided in the service.

8. Changes to Privacy Policy

This privacy policy may be modified according to service operation and related law changes. If there are changes, we will notify you in advance through the extension or email.

9. Supplementary Provisions and Age Limit

• This revised Privacy Policy applies from October 10, 2026. (First effective: December 15, 2024)
• Users under the age of 14 are not allowed to use this service.