Privacy Policy
NeoAI ("we") operates promc.ai (the "site"). This policy explains what personal data we process, why, and the rights you have. It is written to comply with the Personal Information Protection Act of the Republic of Korea; the Korean version is the authoritative text.
1. Purposes
- Membership — identifying you, signing you in, providing member-only content (book updates), handling account deletion
- The letter (newsletter) — sent irregularly, only to members who opted in
- Enquiries — replying to email you send us
2. Data we process
| Context | Data | How |
|---|---|---|
| Membership | Email address, account ID, sign-in methods, language, optional display name | Registration, profile form or authentication service |
| Google sign-in | Google account ID, email address, name and profile image URL when supplied by Google | Google authentication |
| Consent | Terms and privacy-policy versions, acceptance times, newsletter opt-in and withdrawal history | Registration completion and account settings |
| Book practice | Per-member prompt-use records | Exercise use |
| Use of the site | Login times, IP address, browser information (access logs) | Generated automatically |
| Enquiries | Email address and message |
Email passwords are stored as hashes by Supabase Auth, not in the site’s member profiles. Your Google password is never passed to this site. Google sign-in is subject to the Google Privacy Policy.
3. Retention
- Member data: deleted without delay when you delete your account, which you can do at any time from "My account".
- Newsletter consent: sending stops immediately when you withdraw; the record is deleted with the account.
- Enquiry email: one year after the matter is closed.
- Statutory retention where Korean law requires it (e.g. access logs for three months).
4. Sharing with third parties
We do not share personal data with third parties, except where required by law or a lawful request from authorities.
5. Processors
| Processor | Task | Note |
|---|---|---|
| Supabase, Inc. | Member database and sign-in infrastructure | Data stored in Seoul, Republic of Korea |
| Vercel Inc. | Site hosting and request handling | |
| Google LLC | Sending sign-in links and the letter |
6. International transfers
| Recipient | Country | Data | When / how | Purpose | Retention |
|---|---|---|---|---|---|
| Vercel Inc. | United States | Access logs (IP, browser) | Network transfer when you access the site | Hosting | For the service period |
| Google LLC | United States | Email address | Network transfer when an email is sent | Email delivery | Until delivered |
The member database itself is stored in the Seoul region.
7. Your rights
You may access, correct, delete or restrict the processing of your data at any time:
- "My account": change your display name, language and newsletter preference, review consent history, and delete your account (immediate)
- Email: contact@promc.ai — we act without undue delay
8. Deletion
Data whose retention period has ended or whose purpose has been fulfilled is deleted without delay, using methods that prevent recovery.
9. Security
- Encrypted transport (HTTPS)
- Database access control (row-level: you can only read and change your own record)
- Email passwords are hashed by the authentication service; Google passwords are not collected by this site
- Data minimisation
10. Cookies
The site uses a session cookie to keep you signed in. You can refuse cookies in your browser, in which case sign-in will not work. We use no advertising or tracking cookies.
11. Data protection officer
- Officer: CEO, NeoAI
- Contact: contact@promc.ai
12. Remedies
Korea Internet & Security Agency privacy helpline 118 (privacy.kisa.or.kr) · Personal Information Dispute Mediation Committee 1833-6972 (kopico.go.kr) · Prosecution Service 1301 · Police 182.
13. Changes
This policy takes effect on 4 September 2026. Changes are announced on the site at least seven days before they take effect.