Dreamyoungs Inc. (the ‘Company’) maintains the following privacy policy under the Personal Information Protection Act to protect users' personal information, rights and interests and to handle related complaints smoothly. This policy may change as relevant laws and guidelines change. Revisions will be announced through notices on the Cloudturing website (cloudturing.com) or individual notices.
1. In providing this service, the Company collects information required for basic service provision and optional information.
2. The following information may be collected while users use Cloudturing.
| Category | Items collected |
|---|---|
| Cloudturing service |
Information for building chatbot knowledge bases
Information for guidance when contacting sales
Information for service registration and use
Service inquiries and consultations
Service usage records
|
The Company obtains consent to collect users' personal information. During registration, users can select agreement or non-agreement to the privacy policy and terms of service; selecting agreement is regarded as consent to personal information collection.
The Company processes personal information for the following purposes only. Prior consent will be sought if the purpose of use changes.
The Company uses personal information within the scope stated in Article 4. Without prior user consent, it does not use information beyond that scope and, in principle, does not disclose it externally or provide it to third parties. The following are exceptions.
1. The Company entrusts personal information processing as follows to ensure smooth handling.
- Entrusted parties (processors): Google LLC (in Korea and abroad), Kakao (in Korea), Naver Cloud Platform (in Korea), Amazon Web Services (in Korea), Meta Platforms, Inc. (abroad)
| Company name | Entrusted tasks and purposes | Server location country | Entrustment period |
|---|---|---|---|
| Google LLC | Entrusted processing of registration information and operation and management of IT systems for chatting | Korea | Until the entrustment contract ends |
| Service provision using the AI model Gemini | United States | Until the entrustment contract ends | |
| Service usage statistical analysis (Google Analytics) | United States | Until the entrustment contract ends | |
| Kakao | Operation and management of IT systems for chatting and delivery of Alimtalk notifications | Korea | Until the entrustment contract ends |
| Naver Cloud Platform | Entrusted processing of registration information (email addresses), email delivery and Alimtalk notifications | Korea | Until the entrustment contract ends |
| Amazon Web Services | Entrusted processing of registration information (email addresses) and email delivery | Korea | Until the entrustment contract ends |
| Meta Platforms, Inc. | Advertising performance measurement and optimization (Meta Conversions API) | United States | Until the entrustment contract ends |
- Entrusted information: Data generated during user–chatbot conversations (informational guidance), including text, photos, location information, videos, web links, audio clips and images, and data reprocessed from those data may be included.
2. When entering entrustment contracts, the Company specifies in contracts or other documents the prohibition on processing outside the entrusted purpose, technical and administrative safeguards, limits on further entrustment, processor management and supervision, and liability including compensation under the Personal Information Protection Act. It supervises safe processing by processors. Business partner names are specified through web page links.
3. Changes to entrusted tasks or processors will be disclosed promptly through this privacy policy.
1. The Company retains and uses collected personal information only during service use (from registration to termination) or the dispute-handling period (retention period). Where a law specifies otherwise, information is retained under the relevant law.
- Retained items: name, ID, password, phone number, email address, address, department information, legal representative information, service usage records, access logs, access IP information, fee details (billed amount, VAT, received amount, billing and receipt dates), payment records, payer name, services used, reductions and reasons, and billing address
- Retention period: 5 years
2. After membership withdrawal or fulfillment of collection and use purposes, personal information is destroyed promptly without exception, except for the following grounds and periods.
a. Under internal Company policies
① Even after withdrawal, the Company retains user information as follows to provide services smoothly and prevent improper use.
② Improper use and misuse records (including personal information of improper users)
③ Chatbot training data and conversation logs
b. Where laws require retention without user consent
| Applicable law | Retained information | Retention period |
|---|---|---|
| Act on the Consumer Protection in Electronic Commerce, Etc. | Records concerning contracts or withdrawal of offers | 5 years |
| Act on the Consumer Protection in Electronic Commerce, Etc.; Commercial Act; Framework Act on National Taxes; Income Tax Act; Corporate Tax Act; Value-Added Tax Act | Records concerning payments and supply of goods, commercial books, business vouchers and supporting documents | 5 years |
| Act on the Consumer Protection in Electronic Commerce, Etc. | Records concerning consumer complaints or dispute handling | 3 years |
| Protection of Communications Secrets Act | Website visit records | 6 months |
Where a decision by a fully automated system such as a chatbot significantly affects a data subject's rights or obligations, the data subject may reject the decision or request an explanation from the Company. To exercise these rights, contact the personal information contact listed below.
In principle, the Company promptly destroys personal information once its processing purpose is fulfilled. The procedures, deadlines and methods are as follows.
1. Data subjects may request access, correction, deletion or suspension of processing of personal information from the Company at any time.
a. Rights under paragraph 1 may be exercised in writing, by email or by fax under Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. The Company will take action promptly.
b. Rights under paragraph 1 may be exercised through a legal representative or an authorized agent. A power of attorney in Form 11 attached to the Enforcement Rule of the Personal Information Protection Act must be submitted.
2. Rights to request access or suspension of processing may be restricted under the Personal Information Protection Act.
3. When requesting correction or deletion, deletion cannot be requested where another law expressly requires collection of the information.
4. For access, correction, deletion or processing suspension requests, the Company verifies that the requester is the data subject or an authorized representative.
The Company uses cookies to retrieve and store information as needed when operating its service website. Cookies are small text files sent by the service website's server to users' browsers and stored on their computer hard drives. Users may permit or refuse cookie-based collection through browser security settings.
- Collected information: service usage information such as ID, access IP, access logs and content used
- Purposes: analyzing access frequency, visit times, preferences and interests, visit counts and event participation, and supporting targeted marketing, service changes and personalized services
- Select [Tools] → [Internet Options] → [Security] → [Custom Level] in the browser to set the level of cookie-based collection.
- These menus allow confirmation each time a cookie is stored or refusal of all cookie storage. Refusing cookies may make service provision difficult.
Under Article 29 of the Personal Information Protection Act, the Company takes the following technical, administrative and physical measures necessary to ensure security.
1. The Company takes overall responsibility for personal information processing and designates the following department to handle complaints and remedies for data subjects.
Personal information protection department
2. Data subjects may contact this department regarding all personal information protection inquiries, complaints and remedies arising from service use. The Company will respond and handle inquiries promptly.
The organizations below are separate from the Company. Contact them if you are dissatisfied with the Company's complaint handling or remedies or need more detailed assistance.
Personal Information Infringement Report Center (operated by the Korea Internet & Security Agency)
Personal Information Dispute Mediation Committee
Supreme Prosecutors' Office Cybercrime Investigation Unit: 02-3480-3573 (www.spo.go.kr)
National Police Agency Cyber Safety Bureau: 182 (http://cyberbureau.police.go.kr)
1. Users may view or modify their registered personal information or request its deletion at any time.
2. Contact the personal information protection officer in writing, by phone or by email. Action will be taken promptly after identity verification.
3. When a user requests correction of errors, the information is not used or provided until correction is complete. If incorrect information has already been provided to third parties, the correction outcome is communicated promptly so that it can be corrected.
4. Information terminated or deleted at the request of a user or legal representative is handled under Article 7, ‘Processing and use periods’, and cannot be accessed or used for other purposes.
Users may withdraw consent to collection, use and provision of personal information given during registration at any time, including by emailing the personal information administrator (help@cloudturing.com). The Company takes action promptly after verifying identity.
Additions, deletions or changes to this privacy policy are announced on the Cloudturing service notice board at least 7 days before the effective date.
This privacy policy takes effect on April 9, 2026.