Privacy policy
Effective 2026-10-07
1. Personal data we process
| Category | Items | Purpose | Retention |
|---|---|---|---|
| Account | Sign-in provider and service identifiers, email and verification status (optional), sign-up, sign-in, and consent records | Sign-up, sign-in, account linking | Until you delete your account |
| Conversations | Questions and answers, conversation titles and map state, answer ratings and feedback | Generating answers, providing history and ratings, AI training | Until you delete the conversation or your account |
| ArchiBench | Uploaded drawing files, analysis results, job records | Providing drawing analysis | Deleted daily once 30 days have passed since the job was created (or since upload, for uploads not used in a job). Deleted immediately when you delete your account |
| ArchiBench processing logs | Drawing analysis processing logs | Incident response | Deleted daily once 30 days have passed since collection (up to 32 days, regardless of account deletion) |
| Operation logs | Account and conversation identifiers, questions and answers, screen state, lookup and error logs | Incident response, service improvement | 31 days from collection (backups up to 61 days) |
| Usage | Account identifier, usage time, usage and limit records | Managing usage limits | Until you delete your account |
| Billing | Paddle customer and subscription identifiers, plan and payment status (we never receive card details) | Providing paid plans, handling cancellations and refunds | Until you delete your account (or longer where the law requires) |
| MCP connections | API keys and their issue, use, and revocation records; OAuth connection and permission data | Authentication, connection, security | Until you delete your account |
| Shared map links | Link identifier, issuer, issue and lookup conditions, visitor identifier, visit records | Providing links | Until the issuer deletes their account |
| MCP usage logs | Call time, lookup conditions, results, connection identifier, IP address | Incident response, service improvement, personalized features | 90 days from collection |
| Connection data | Cookies, access time and path | Keeping you signed in, security | Up to 1 year |
| Usage analytics | Account and browser identifiers, referrer, navigation and time spent, browser language | Usage analysis, customer support | 3 years from collection |
| Deletion notices | Account identifier, delivery status | Deleting your data in connected services | Until delivered |
| Inquiries | Email, inquiry content | Answering inquiries | Until resolved |
2. Processors and international transfers
We entrust the work below to these processors and transfer data abroad under Article 28-8(1)(3) of the Korean Personal Information Protection Act (processing needed to perform our contract with you). Data is sent over the network each time you use the service. Recipients keep it until the contract ends or for the period in their own privacy policies, and input data may be used for AI training during processing (with your consent at sign-up). Their sub-processors are listed in each recipient’s privacy policy below.
| Recipient (contact) | Country | Data | Purpose |
|---|---|---|---|
| Cloudflare, Inc. ([email protected], https://www.cloudflare.com/privacypolicy/) | United States | Connection data, inquiry email | Web delivery and security, email forwarding |
| Anomaly Innovations, Inc. ([email protected], https://opencode.ai/legal/privacy-policy) · OpenAI OpCo, LLC ([email protected], https://openai.com/policies/privacy-policy/) · OpenRouter, Inc. ([email protected], https://openrouter.ai/privacy) | United States | Input data and results | Processing input data |
| Google LLC (https://support.google.com/policies?p=privpol_privts, https://policies.google.com/privacy) | United States and countries with Google data centers (https://www.google.com/about/datacenters/locations/) | Input data and results | Processing input data |
| Amazon Web Services, Inc. (https://aws.amazon.com/privacy/) | Republic of Korea or United States (by server location) | Personal data processed while you use the service | Running cloud servers and storage |
| Paddle.com Market Ltd (https://www.paddle.com/legal/privacy) | United Kingdom | Account email, payment details | Payment processing (Merchant of Record) |
If you do not want your data transferred abroad, you can stop using the service or delete your account. You will then be unable to use the service.
3. Deletion
We identify data whose retention period has ended or whose purpose has been met and delete it without delay. Electronic files are deleted so they cannot be recovered. Database backups for disaster recovery are kept for up to 6 months and then deleted in order.
4. Your rights
You or your legal representative can ask to access, correct, delete, or stop processing your personal data, or withdraw consent. You can delete your account on the My info screen; for other requests, contact us below.
5. Security and automatic collection
We protect data with access management, access control, and encryption. We use cookies to keep you signed in, for security, and to confirm visits to shared map links, and scripts and browser storage for usage analytics. You can block or delete cookies in your browser settings, and refuse usage analytics by blocking JavaScript on this site. If you do, some features may not work.
6. Privacy contact
Privacy team: Landbook service operations
Email: [email protected]
Phone: +82-2-2138-8030