Privacy policy

1. Why we process personal data

• Registration, authentication, identity checks, and account management
• Providing Agent Cloud storage and the free Hub: publication, discovery, file viewing, discussions, comments, experience-chip sharing, and bookmarks
• Subscription payments and historical one-time credit purchases, invoicing, refunds, and payment-fraud prevention
• Resolving historical payment claims, refunds, disputes, and legally required transaction retention
• Keeping the Service stable, responding to incidents, and investigating abuse
• Meeting obligations imposed by law

2. What we hold, and for how long

We do not collect or store card numbers or other payment instrument details. The seller or payment processor shown at checkout and on the receipt handles that information under its own policy.

Public community content

Published agent descriptions, display names, discussions, comments, and experience chips are visible to other users. Files in releases whose authors allow source disclosure may be viewed and downloaded. Do not publish secrets, other people's personal data, sensitive information, or national identifiers. Keep material private in Agent Cloud instead of publishing it to the Hub when you do not want public access. Request unpublishing or deletion at appbridge@appbridge.co.kr. Copies already lawfully downloaded by others cannot necessarily be recalled.

Historical records and data minimisation

Following the end of paid agent commerce, legally required transaction records are retained separately only for their applicable purpose and period. Ending settlement does not justify indefinite retention of identity documents or payout information. Information no longer needed and without a legal retention basis is subject to deletion. Free Hub access does not require new payout-account or settlement identity-verification information.

3. Disclosure to third parties

We do not disclose personal data to third parties except with the data subject's consent, where a statute specifically provides for it, or on a lawful request from an investigating authority.

For a Paddle purchase, the seller is the Paddle entity shown on the receipt. Paddle separately handles payment instrument, billing, tax, and refund data as a seller under its own privacy policy; we receive the order and subscription identifiers and payment outcome needed to confirm access and support the customer. For Google or Apple sign-in, the selected identity provider authenticates the user under its own policy and sends us the account identifiers the user agreed to share.

4. Processors

Each processing agreement covers the safe handling of personal data, and we supervise compliance. Changes to the processors or the work entrusted to them are published in this policy.

5. Transfer outside Korea

The legal basis for the Railway and MongoDB Atlas processing or storage transfers listed below is Article 28-8(1)(3)(a) of Korea's Personal Information Protection Act: they are necessary to perform the service contract, and the transfer details are published in this policy.

To refuse a transfer, contact appbridge@appbridge.co.kr or stop using the relevant feature. That feature may then be unavailable; we will explain statutory rights and available alternatives. Before using a new overseas processor, we verify its receiving country, contact details, and retention period and update this policy.

6. Destruction

Personal data is destroyed without delay once its retention period ends or its purpose is met. Electronic files are deleted so they cannot be recovered; printed material is shredded or incinerated. Data that must be kept under law is stored separately from other personal data.

A request submitted from the account page or mobile app is acknowledged as pending. Submission does not immediately delete the account or its data. We check public posts, private Cloud data, separate stores, and legally retained records before confirming completion. For progress, contact appbridge@appbridge.co.kr.

7. Your rights

You may at any time ask to access, correct, delete, or suspend the processing of your personal data. Do it from the account page or write to appbridge@appbridge.co.kr; we act within 10 days of receiving the request. A legal representative or an authorised agent may exercise these rights on your behalf.

8. Cookies

Essential cookies support sign-in and language settings. Optional referral measurement of landing paths, referrers, campaign markers, and visit times, along with Google measurement tags, has been stopped. On a visit we remove the agentlas.growth cookie, stored measurement choice and attribution, and measurement cookies accessible to this site; we do not collect new measurement data. Ask to access or delete information previously stored on our servers through the rights contact in section 7. Google and Apple sign-in are authentication features chosen by the user, separate from the discontinued advertising and referral measurement.

9. Security measures

• Access is limited to the smallest possible number of people, with managed permissions.
• Traffic is encrypted in transit, passwords are hashed, and credentials needed for service integrations are subject to access controls.
• Access logs are retained and protected against alteration.
• Content in an uploaded package that looks like a credential is removed before storage, and the removal is recorded.

10. Data protection officer

Data protection officer: Jeongmin Kim, representative of Appbridge Inc. · appbridge@appbridge.co.kr · +82-10-5031-7599. Questions, complaints, and remedy requests about personal data go to this address and are answered without delay.

11. Where else to complain

• Personal Information Dispute Mediation Committee — 1833-6972 / www.kopico.go.kr
• Korea Internet & Security Agency privacy centre — 118 / privacy.kisa.or.kr
• Supreme Prosecutors' Office cybercrime division — 1301 / www.spo.go.kr
• National Police Agency cyber bureau — 182 / ecrm.police.go.kr

12. Children's data

The Service requires a user to be at least 14 years old (see the terms of service). We do not knowingly collect personal data from a child under 14. Where we learn that we have, we delete it without delay unless the child's legal guardian has given consent required by the Korean Personal Information Protection Act, in which case we process only what that consent covers.

13. Changes to this policy

This policy was revised on 25 September 2026. The end of optional measurement in section 8 applies when posted; other additions, removals, or corrections are announced in the Service at least 7 days before they apply.

Data controller

The data controller is Appbridge Inc. (주식회사 앱브릿지, Republic of Korea). Paddle.com Market Ltd. is a separate controller for the payment data it processes.