Privacy Policy

1. Who we are

Seoul Miin is operated by OT MARKETING ("we", "us"). This policy explains what information we collect when you use this site (the "Service"), why, and what choices you have.

Privacy contact / data controller: 장은태 (Jang Euntae) — contact@onetrillion.app.

2. Information we collect

AI chat: the questions and answers you exchange with our AI concierge, the detected language, which procedures your question matched, and (for the AI's answer) token/cost metrics used for our own service monitoring.

Anonymous session identifier: a random ID stored in a cookie (no login required) so the AI chat can keep track of one conversation. It is not tied to a name or account.

IP address hash: we hash your IP address (a one-way transformation — we do not store the raw IP) and use it only to enforce a fair-use rate limit on the AI chat (a maximum number of questions per minute and per day).

Connection request ("leads") information — only if you choose to submit the "Connect me with a clinic" form: your contact method and contact value (e.g. email, WhatsApp, LINE, WeChat, KakaoTalk ID), the procedures you're interested in, your country and intended visit timing if you provide them, and a short AI-generated summary of your chat for the clinic's reference.

We do not collect your name, date of birth, payment information, or government ID through this Service. We do not currently ask for or store facial photos or health/medical history.

3. How we use this information

To answer your questions in the AI chat, using only our procedure database as the factual source.

To prevent abuse of the AI chat (the rate limit described above).

To connect you with a partner clinic, if and only if you submit the connection request form.

To measure and improve the Service (e.g. which languages and procedures are asked about most, response quality, cost monitoring) using aggregated statistics.

4. When we share information with others

We share your contact information, the procedures you're interested in, and your chat summary with a partner clinic ONLY when you submit the connection request form and check the consent box on that form. We do not share this information with any clinic before you give that consent.

We send a notification to our internal team (via Telegram) when a connection request is submitted, so we can follow up — that internal notification masks your contact value (e.g. shows only the first character of an email address) rather than sending it in full.

We do not sell your information, and we do not use it for third-party advertising.

5. Service providers and international data transfer

We use the following service providers to operate the Service. Using the Service means your data may be processed by them as described:

- Hosting / serverless functions: Vercel Inc. (United States). The application servers for this Service run in the Seoul, South Korea region.

- Database: Supabase (database hosted in the Seoul, South Korea region — ap-northeast-2).

- AI processing: OpenAI. Your chat messages and connection-request chat summaries are sent to OpenAI's API to generate responses. OpenAI is based in the United States.

- Internal notifications: Telegram, used only to notify our own team (not a data recipient of your full information — see Section 4).

These providers process data on our behalf and are not authorized to use it for their own purposes.

6. Data retention

These are our default retention periods; we may delete data earlier upon request:

- AI chat history (questions, answers, session identifier, IP hash): retained for up to 12 months from your last activity, then deleted.

- Connection request ("leads") information: retained for up to 24 months from submission, or deleted sooner once the connected clinic's follow-up is complete, whichever is earlier.

These periods are a policy setting, not a fixed limit — you can ask us to delete your data sooner at any time (see Section 7).

7. Your rights

You can ask us to: (a) tell you what information we hold about your session or connection request, (b) correct inaccurate information, (c) delete your information, or (d) withdraw your consent to share information with a partner clinic (this does not affect a request already sent to a clinic before withdrawal). To do any of these, email contact@onetrillion.app with enough detail for us to locate your data (e.g. approximate date and time, or the contact value you submitted).

If you are located in the European Economic Area or the United Kingdom, you additionally have rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is your consent (for the AI chat and connection requests) and our legitimate interest in operating and securing the Service (for the IP hash rate limit).

8. Children

This Service is not directed at, and we do not knowingly collect information from, anyone under 18 years old. If you believe a minor has submitted information to us, contact us and we will delete it.

9. Cookies

We use one functional cookie to remember your anonymous AI chat session (see Section 2). It does not track you across other websites. We do not currently use advertising or analytics cookies.

10. Changes to this policy

We may update this policy as the Service changes. We will update the effective date above when we do. Continued use of the Service after a change means you accept the updated policy.

11. Contact

Questions about this policy: contact@onetrillion.app.