Privacy Policy
Overview
주식회사 템플러아카이브 (the “Company”) processes the personal information of Archon users under the Personal Information Protection Act and discloses its purposes, items and retention periods as follows.
1. Purposes
- Sign-up, login and user identification
- Writing projects and generating AI work plans
- Publishing projects, receiving and selecting partner proposals, and sharing contacts between the parties to a deal
- Payment, cancellation, refunds and partner payouts
- Customer inquiries, dispute handling and abuse prevention
2. Personal information processed
- Members: basic Google account profile information such as email address and name
- Clients: project descriptions and attached document contents, contact email
- Partners: display name, introduction, contact email, specialties, experience, working style, website, work samples and evidence links, proposal contents, price and delivery time, and for AI-based providers the tools and models used and the level of human review
- Partner payouts: business type, legal or company name, representative name, business registration number, email, mobile number, bank, account number and holder (the mobile and account numbers are sent to Toss Payments; the Service database keeps only masked values showing the last digits)
- Payments: order number, payment method, amount and approval time, virtual-account details (card numbers and other payment credentials are handled by Toss Payments, not collected by the Company)
- Collected automatically: login session, language and share-link cookies, a hash of a random device identifier used for request limits, and access logs
3. Retention
The Company destroys personal information without delay when a member leaves or the purpose is fulfilled. However, under the Act on Consumer Protection in Electronic Commerce, the following records are kept for these periods:
- Records of contracts or withdrawals: 5 years
- Records of payments and supply of goods or services: 5 years
- Records of consumer complaints or dispute handling: 3 years
- Records of labeling and advertising: 6 months
- Items kept: contract, withdrawal, payment and supply records include the parties’ identifying and contact information, contract contents, and order, payment, cancellation and refund history; complaint and dispute records include the requester’s identifying and contact information and the inquiry and handling history. Labeling and advertising records retain personal information included in the published content.
4. Provision to third parties
When a partner submits a proposal, the partner’s public profile and proposal are provided to that project’s client so the client can compare and select proposals.
Once escrow funding is completed, the client’s and the partner’s contact emails are provided to the other party to carry out the deal. The recipient is the other party to that deal, the purpose is communication for the development service, and it is kept and used until the purpose of that deal is fulfilled.
Otherwise, personal information is not provided to third parties except where there is a legal basis for doing so.
5. Processors and overseas transfers
The Company entrusts processing to the following providers, some of which process data overseas. Overseas transfers happen over the network whenever the Service is used, and data is kept until the contract ends or the purpose is fulfilled. If you do not want overseas transfers, you can choose not to sign up or leave the Service, but you then cannot use it.
- Toss Payments Co., Ltd. (Republic of Korea): payments, cancellation and refunds, partner payouts
- Supabase Pte. Ltd. (data stored in Australia, privacy@supabase.com): authentication and Service data storage — the items in section 2 (payout account and phone numbers masked)
- Vercel Inc. (USA, privacy@vercel.com): Service hosting — authentication data, project descriptions and text extracted from attachments, revision requests and answers, partner profiles and proposals, payment, payout and refund processing data, and access logs (full account and phone numbers are processed on the server for payouts and refunds, not stored)
- OpenRouter, Inc. (USA, privacy@openrouter.ai): generating and revising AI work plans — project descriptions and text extracted from attachments, existing work plans and estimates, revision requests, answers, confirmed decisions and drafts, and a hashed request identifier
6. Destruction
Personal information whose retention period has ended or whose purpose is fulfilled is destroyed without delay. Electronic files are deleted so they cannot be recovered, and information kept by law is stored separately from other information.
7. Your rights
You can ask at any time to access, correct, delete or stop processing your personal information, or to leave the Service. Contact the privacy officer below by email or phone and the request will be handled without delay.
You can also exercise these rights through a legal representative or an authorized agent; the Company verifies identity and authority before acting. If a request is limited by a legal retention duty or similar reason, the Company explains the basis and reason.
9. Security measures
The Company manages access rights and separates administrator privileges, encrypts data in transit (HTTPS), encrypts payout information when sending it, and stores account and phone numbers masked.
10. Privacy officer
Privacy officer: 배경준 (CEO) · Email bkj@templararchive.com · Phone 010-5668-4042
11. Remedies
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
12. Changes to this policy
This policy applies from October 15, 2026; changes are announced on the Service 7 days before they take effect.