Privacy Policy
Added a cookies and similar technologies section — essential cookies, first-party statistics, Kakao AdFit, Google reCAPTCHA and Funding Choices; added Google LLC to cross-border transfers
Erdmates Privacy Policy
Version 1.5 | Revised: October 16, 2026 | Effective: October 16, 2026
1. Overview
Erdmates (hereinafter "Company") complies with the Personal Information Protection Act and other applicable laws, and establishes this Privacy Policy to protect users' personal information and rights.
2. Purpose of Personal Information Processing
The Company processes personal information for: Member Management, Service Provision, Payment and Settlement, Marketing and Service Improvement.
3. Personal Information Collected
Upon Registration: Email, password, name (nickname). During Service Use: ERD data, collaboration information, chat history, AI usage records.
4. Children's Personal Information
Important: Our service is not intended for children under 14 years old.
5. Third-Party Provision
The Company does not provide users' personal information to third parties except as required by law or with separate consent.
6. Cookies and Similar Technologies
The Company uses cookies and browser storage (localStorage, sessionStorage) to keep you signed in, remember your language, measure service usage, prevent abuse and show ads.
| Type | Operated by | Purpose | Information and cookies |
|---|---|---|---|
| Essential cookies and storage | The Company | Keeping you signed in, language setting, server connection | Sign-in session cookie, language cookie (NEXT_LOCALE, deleted when the browser closes), load balancer cookies (AWSALB, AWSALBCORS, 7 days) |
| Usage statistics | The Company (not sent to third parties) | Visit and page usage statistics, service improvement | Visitor ID and session ID (browser storage), first-visit source (erdmates_first_touch cookie, 1 year), pages visited, time on page and scroll depth, usage events such as button clicks, referrer and UTM, device type, browser and operating system, screen size, language, country. Linked to your account when you are signed in. |
| Ads (Kakao AdFit) | Kakao Corp. | Banner ads for visitors who are not signed in and free-plan users | Kakao may collect and use internet usage information, including cookies, from your browser to improve ad quality. Not shown to users whose browser time zone is in Europe (EEA, UK, Switzerland). |
| Abuse prevention (Google reCAPTCHA) | Google LLC | Preventing automated abuse on login, sign-up, password reset and contact forms | Essential risk-analysis cookie (_GRECAPTCHA). Google processes it only to provide and maintain the service and for security, not for personalized ads. |
| Consent management (Google Funding Choices) | Google LLC | Showing cookie consent messages to users in Europe (EEA, UK, Switzerland) | FCCDCF (functionality, 13 months), FCNEC (analytics, 365 days) |
You can refuse cookies in your browser settings; refusing essential cookies prevents sign-in. Kakao personalized ads and ad cookies can be blocked at Kakao personalized ads settings.
7. Personal Information Protection Officer
- Name: Junghoe Choi
- Title: CPO (Chief Privacy Officer)
- Email: privacy@erdmates.com
Revision History
- Version 1.0.0 (February 9, 2026): Initial enactment
- Version 1.1.0 (February 10, 2026): Clarification of third-party data sharing and marketing consent
Addendum (Revision v1.2)
Detailed Cross-Border Data Transfer (PIPA §28-8)
The company transfers personal information abroad for AI features, cloud hosting, and payment processing as follows.
| Recipient | Country | Transferred Items | Purpose | Retention |
|---|---|---|---|---|
| OpenAI, Inc. | USA | AI prompt text | AI response generation (not used for model training per OpenAI API terms) | Per recipient policy |
| Google LLC (Gemini) | USA | AI prompt text, FCM tokens | AI responses, mobile push (paid API not used for training) | Per recipient policy |
| Anthropic, PBC (Claude API) | USA | AI prompt text, ERD schema | AI response generation (not used for model training per Anthropic commercial terms) | Per recipient policy (API inputs/outputs deleted after 30 days by default) |
| Amazon Web Services, Inc. | Japan/USA | All processed data | Cloud hosting, data storage | Until account deletion |
| Amazon SES (AWS) | USA | Email address, content | Transactional / marketing email delivery | 30 days after delivery |
| Stripe, Inc. | USA | Card tokens, payment metadata | International payment processing (PCI DSS Level 1) | Payment record retention (5 years) |
| Firebase (Google FCM) | USA | FCM tokens, push payloads | Mobile push notifications | Until token expiry or account deletion |
| Functional Software, Inc. (Sentry) | USA | Error data (error message, page URL), browser/OS information, IP address | Service error detection and analysis | Up to 90 days from collection |
| Google LLC (reCAPTCHA, Funding Choices) | USA | IP address, browser/device information, cookies | Abuse prevention on login, sign-up, password reset and contact forms; cookie consent management for users in Europe | Per recipient policy |
Transfer timing: Continuously upon service use after registration. Transfer method: Over the internet (HTTPS, TLS 1.2+ encryption).
Protection of Children Under 14 (PIPA §22-2)
The company restricts registration of children under 14 years of age. Users must confirm they are 14 or older during signup; if unchecked, registration is blocked. Any personal information of a child under 14 received in error will be destroyed immediately.
Effective Date
This revision takes effect immediately upon announcement, with separate email or in-app notice to members.
Addendum (Revision v1.3)
Functional Software, Inc. (Sentry, USA) has been added as an overseas processor for service error detection and analysis. This revision takes effect on October 3, 2026.
Addendum (Revision v1.4)
Anthropic, PBC (USA) has been added as an overseas processor for AI features. The year in the header and revision history has also been corrected (2025 → 2026). This revision takes effect on October 15, 2026.
Addendum (Revision v1.5)
Added Section 6 (Cookies and Similar Technologies), listing essential cookies, first-party usage statistics, Kakao AdFit (ads), Google reCAPTCHA (abuse prevention) and Google Funding Choices (consent management), and added Google LLC (reCAPTCHA, Funding Choices) to the cross-border transfer table. The Personal Information Protection Officer section is now Section 7. This revision takes effect on October 16, 2026.