Privacy Policy

First-party service analytics

Updated · 29 October 2026

First-party improvement statistics run by default without a prior-choice popup. Views, impressions, clicks, scroll reach, active time and tracked arrivals are collected without a 90-day browser ID. Random visit groups stay in memory and rotate after 15 minutes of inactivity or 30 minutes. A single-use navigation handoff in sessionStorage is valid for at most 60 seconds and removed on arrival. Ordinary reloads and return visits are not persistently linked.

Only viewport device groups, language and classified acquisition channels are kept. Raw IPs, user agents, full URLs, search terms, names, contacts, birth inputs and member IDs are excluded from the analytics DB; collection requests omit authentication cookies. Existing event retention is up to 90 days. Actions within a short visit may be linked; these are not long-term profiles or unique-person counts.

Disable first-party statistics in the footer settings. DNT/GPC and previous explicit refusals are respected. Microsoft Clarity requires separate optional permission. Admin, login, account, relationship-map and survey-answer screens are excluded.

Article statistics use the same first-party setting: article ID, published revision, category, body reach, active time, section numbers, contents navigation, recommendation changes, share/copy attempts and outcomes, and service/related-article navigation and arrivals. Raw text/titles, external URLs and recipients are excluded.

Recommendation duplicate-prevention and undo use a separate functional cookie set for up to 90 days after recommending. The DB stores only its hash, article ID and vote time. Undo deletes the vote. Votes are not linked to analytics visit groups.

1. Controller

Aiaki Co., Ltd. (Representative: Nara Kim), Corporate Business Number 651-81-00409, Online Business Number 2021-Seoul-Gwanak-1410. Address: 4F, 1698 Nambusunhwan-ro, Gwanak-gu, Seoul, Republic of Korea. Tel. +82-2-752-0719, Fax +82-2-752-0718, email aeo@ai-archive.co.kr.

2. Information processed

For accounts we process the OAuth provider and user ID and, when supplied, email and verification status, name, profile image, locale, sign-in time, and session-token hash. With separate consent we save Saju nickname, gender, calendar settings, birth date, and birth time. Diagnosis uses name, phone, preferred time, purpose, and answers. Urgent consultation uses name, phone, concern, appointment, an optional note of up to 600 characters, and payment and service status. If analytics is accepted, Microsoft Clarity may collect IP address, browser/device details, visit time, page URL, clicks, scrolling, mouse movement, and session-replay usage data. Do not enter unnecessary sensitive information in free-text fields. The collection paths are the OAuth provider, service input, application, and consent screens, browser storage, and the optional analytics tool. When you consent and submit the market-research survey, we process your survey responses and any optional age range, gender, relationship or marital status, and time since your last relationship. The survey does not collect your name, contact details, IP address, or browser identifier.

3. Purposes and legal bases

Account information is used with sign-up consent and as needed for the contractual relationship for account creation, sign-in, administration, and security. Separately consented Saju data provides and manages the user's own profile. Diagnosis and consultation data is used with the request and consent for review, replies, schedule and payment confirmation, service delivery, and disputes. Clarity data is used only with optional consent for usage, error, and usability analysis. Market-research survey responses are processed with separate consent to analyze user experience and preferences and improve Regression Saju.

3-1. AI preparation chat

The Destiny Rewind V2 ‘preparation chat with Sihyeon’ generates a reply through the OpenAI, L.L.C. API only from conversation text that the user separately consents to send. It is an optional way to briefly organize a concern before applying for consultation; it is not used for Saju calculation or automated Saju results. Conversation text is not saved in our service database, and OpenAI response storage is disabled for the API request. Do not enter names, contact details, dates of birth, addresses, account information, or information that can identify the other person. Declining does not affect core functions such as the diagnosis form or consultation application.

3-1. Saju and relationship inputs

For Saju and relationship-flow features, we use the nickname, gender, solar or lunar calendar and leap-month setting, birth date and time, breakup date, and relationship notes that the user enters for themselves or another person to calculate and display the chart and relationship flow. This information is stored in the user's browser by default. Only the logged-in user's own Saju profile is saved to the account after separate storage consent. Another person's information and relationship notes are not automatically saved to the account profile. For published Saju Builder content and admin previews, however, inputs are sent to the server for temporary processing to calculate readings and check access. These inputs and personal reading results are not stored in the database. Inputs remain in the current browser tab for 30 minutes and can be cleared by the user.

4. Browser storage

Orthodox Saju input, calculated results, and saved targets are stored in localStorage. Relationship-flow drafts, including birth details, breakup dates, and relationship notes, may be stored in sessionStorage. Draft diagnosis answers are stored in localStorage before submission and deleted after a successful submission.

5. Retention

Browser data remains until deleted by the user; sessionStorage generally lasts until the tab session ends. Account, OAuth, session, and Saju profile data is deleted without delay at account deletion. De-identified consent and security audit records are retained for three years. Diagnosis and consultation operations records are deleted one year after collection. Statutory records are separately retained for five years for contracts, withdrawals, payments, and supply; three years for complaints and disputes; and six months for advertising. Clarity retains session recordings for 30 days and clicks, heatmaps, and favorites for up to nine months. Market-research survey responses are retained for one year from submission and then destroyed.

6. Third-party disclosure

id-api.luvd.kr and the urgent-consultation scheduling database are internal systems operated by Aiaki. If you opt in to analytics, Microsoft Corporation processes usage data as an independent controller and may use it under its own Privacy Statement, including for service improvement and advertising profiles. Other disclosures occur only with separate consent or a legal basis.

7. Processors

Aiaki entrusts server and network hosting to SmileServ Co., Ltd. Aiaki manages protective measures and subprocessors through contracts and reviews. Changes to processors or duties will be published in this Policy.

8. Overseas transfer

If you opt in to analytics, IP address, browser and device details, visit time, page URL, clicks, scrolling, mouse movement, and session-replay data are transferred over encrypted connections during the visit to Microsoft Corporation in the United States (privacy contact: clarityMS@microsoft.com). The purpose is usage, error, and usability analysis. Session recordings are retained for 30 days and clicks, heatmaps, and favorites for up to nine months. You may refuse or withdraw in ‘Analytics cookie settings’ without losing core service features. Google OAuth authentication takes place directly on the provider's screen under its privacy policy.

9. Deletion

Information is deleted without delay when its purpose or retention period ends and no legal duty remains. Electronic files are deleted to resist recovery; paper is shredded or incinerated. Statutory records are segregated with use restricted. Account deletion is available in the account page; request deletion of diagnosis or consultation records not directly linked to the account at aeo@ai-archive.co.kr.

10. Your rights

You or a lawful representative may request access, correction, deletion, restriction, withdrawal of consent, or account deletion through the account page, aeo@ai-archive.co.kr, or +82-2-752-0719. We verify identity only as necessary and respond within legal deadlines. Analytics consent may be withdrawn at any time through the footer settings.

11. Security

Session tokens are stored as hashes and session cookies use HttpOnly, Secure, and SameSite protections. We operate encrypted transport, least-privilege access controls, access-log management, vulnerability review, backups, and incident-response procedures as appropriate.

12. Cookies and analytics

The OAuth-state cookie lasts 10 minutes; member sessions default to 30 days and can range from one hour to 180 days; the locale cookie lasts one year. Blocking essential cookies may disable sign-in or language persistence. Microsoft Clarity loads only after separate consent by a user aged 18 or older. Advertising storage is denied, and pages and input fields are masked. Refusal or withdrawal does not affect core service features. The Saju Builder share-unlock cookie lasts 30 minutes. Blocking it may prevent the unlocked state from being maintained.

13. Minors

Registration, relationship diagnosis and consultation requests, and optional analytics are limited to users aged 18 or older. If we learn that personal information from a user under 18 was collected, we stop the relevant feature and delete information not subject to legal retention without delay. A guardian may request deletion at aeo@ai-archive.co.kr. The market-research survey may be submitted only by people aged 18 or older.

14. Privacy Officer and remedies

Privacy Officer: Jangwon Lee. Contact: aeo@ai-archive.co.kr, +82-2-752-0719. If the matter is not resolved, you may contact the KISA Privacy Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or the Personal Information Dispute Mediation Committee (kopico.go.kr, +82-1833-6972).

15. Policy changes

The effective date and changes will be posted when this Policy changes. Material changes will be announced using the method and period required by applicable law.