Privacy Policy

1. Purpose of Processing Personal Information

SimNabuleo AI is a service owned and operated by simcreatio (심크리티오) (hereinafter "the Service"). The Service processes personal information for the following purposes. Personal information collected shall not be used for purposes other than those stated below.

• Website operation and service provision
• Service usage statistical analysis and improvement
• Network security and prevention of unauthorized use
• Compliance with legal obligations
• Delivery of third-party advertising and ad performance measurement (Google AdSense)

2. Categories of Personal Information Processed

The Service does not require user registration. The following information is collected automatically.

• IP address
• Browser type and version
• Operating system information
• Date and time of access
• Visited page URLs and referring page URLs (referrer)
• Session cookies
• Advertising cookies and identifiers (e.g., __gads, IDE, DSID, ANID, NID)

3. Retention and Use Period of Personal Information

• Server access logs: Retained for three (3) months, then destroyed
• Session cookies: Automatically deleted upon browser closure
• Communication confirmation data under the Protection of Communications Secrets Act: Retained for three (3) months
• Records of display and advertising under the Act on Consumer Protection in Electronic Commerce: Retained for six (6) months (if applicable)
• Advertising cookies: Varies by cookie type — up to 13 months (EEA/UK) or 24 months (other regions)

4. Procedures and Methods for Destruction of Personal Information

• Timing of destruction: Upon expiration of the retention period, achievement of the processing purpose, or discontinuation of the Service
• Electronic files: Deleted using technical methods that prevent recovery and reproduction
• Physical records: Destroyed by shredding or incineration (if applicable)
• Where retention is required under other laws, such information shall be stored separately for the required period and destroyed upon expiration.

5. Provision of Personal Information to Third Parties

• As a matter of principle, the Service does not provide Users' personal information to third parties.
• Exceptions: Where required by law, or where the User has provided consent
• Third-party advertising: User browsing data may be collected by Google LLC through Google AdSense for the purpose of delivering personalized advertisements. For details, please refer to Google's Privacy Policy (https://policies.google.com/privacy).

6. Entrustment of Personal Information Processing

The Service entrusts the processing of personal information as follows for the operation of the Service.

• Web Hosting: Vercel Inc. (website hosting and content delivery)
• Database: Supabase Inc. (data storage and management)
• Advertising: Google LLC (ad serving, ad performance measurement, and personalization via Google AdSense)

Entrustment contracts specify the prohibition of processing personal information beyond the scope of the entrusted work and safety management measures, in accordance with the Personal Information Protection Act (PIPA).

7. Cross-Border Transfer of Personal Information

Personal information may be transferred overseas for the operation of the Service.

• Recipient: Vercel Inc., Supabase Inc.
• Destination country: United States
• Purpose of transfer: Web hosting and database operation
• Items transferred: Automatically collected information (IP address, access logs, etc.)
• Method of transfer: Transmission via network
• Retention period: In accordance with the retention periods specified in Section 3 above
• In addition, Google LLC (United States) may collect user data through advertising cookies for the purpose of ad serving and personalization.

8. Use of Cookies

Cookies are small text files sent by a website to the User's browser.

Purpose: Session management, language preference retention, service usage statistics

Cookie Types

• Essential Cookies: Cookies necessary for basic Service functionality (session management, language settings).
• Advertising Cookies: Cookies used by third-party advertising services (Google AdSense) to deliver and personalize advertisements. These cookies may track browsing activity across websites.

Third-Party Advertising Cookies (Google AdSense)

This Service uses Google AdSense to display advertisements. Google and its advertising partners may place and read cookies on your browser, or use web beacons to collect information. The following cookies may be used:

• __gads: First-party cookie for ad serving and efficiency experiments (duration: 13 months)
• IDE: Ad delivery, personalization, and measurement (duration: 13 months in EEA/UK, 24 months elsewhere)
• DSID: Identifies signed-in users to respect ad personalization settings (duration: 2 weeks)
• ANID: Supports ad personalization outside EEA/UK (duration: 13–24 months)
• NID: Stores preferences and personalizes ads in Google services (duration: 6 months)

How to Opt Out of Personalized Advertising

• Google Ads Settings: Visit https://adssettings.google.com to manage your ad personalization preferences.
• Digital Advertising Alliance: Visit https://www.aboutads.info to opt out of interest-based advertising.
• Network Advertising Initiative: Visit https://www.networkadvertising.org/choices/ to opt out of targeted advertising.

For more information on how Google uses data, please refer to Google's Privacy Policy (https://policies.google.com/privacy) and How Google Uses Cookies page (https://policies.google.com/technologies/cookies).

How to refuse cookies: You may refuse cookie storage through your browser settings. Refusing cookies may limit certain Service features.

• Chrome: Settings → Privacy and Security → Cookies and Other Site Data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and Website Data
• Edge: Settings → Cookies and Site Permissions → Manage and Delete Cookies

9. Rights and Obligations of Data Subjects and Methods of Exercise

Users (data subjects) may exercise the following rights.

• Right to request access to personal information (Article 35 of the Personal Information Protection Act)
• Right to request correction or deletion of personal information (Article 36)
• Right to request suspension of processing (Article 37)
• Right to withdraw consent

How to exercise rights: By email ([email protected]) or by phone ()

Processing deadline: Within ten (10) days of receiving the request

10. Measures to Ensure the Security of Personal Information

• Technical measures: SSL/TLS encrypted communication, access control systems, installation and updating of security programs
• Administrative measures: Minimization of access rights to personal information, regular security inspections

11. Privacy Officer

Company: simcreatio
Email: [email protected]
Phone:

For consultations and reports regarding personal information infringement

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
• Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)
• National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)

12. Changes to This Privacy Policy

This Privacy Policy may be amended in response to changes in laws, policies, or security technologies. Any changes shall be announced within the Service at least seven (7) days prior to the effective date.

13. Information for International Users

13-1. Users in the European Economic Area (EEA)

• Legal basis for data processing: Legitimate interests (GDPR Art. 6(1)(f))
• Data subject rights: Right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object
• Users have the right to lodge a complaint with a supervisory authority.
• The Republic of Korea received an EU adequacy decision in 2022, recognizing an adequate level of personal information protection.
• Advertising cookies require your explicit opt-in consent under the GDPR and ePrivacy Directive. You may manage your consent preferences at any time through the cookie consent banner or browser settings.

13-2. Users in California, United States

The Service does not sell Users' personal information. However, the use of third-party advertising services (Google AdSense) may constitute 'sharing' of personal information as defined by the CCPA. You may opt out of personalized advertising by visiting Google's Ads Settings (https://adssettings.google.com). To exercise your rights under the CCPA (California Consumer Privacy Act), please contact us using the information provided above.

You may also submit a 'Do Not Sell or Share My Personal Information' request. For additional opt-out options, visit the Network Advertising Initiative (https://www.networkadvertising.org/choices/) or the Digital Advertising Alliance (https://www.aboutads.info).

14. Children's Privacy

The Service does not knowingly collect personal information from children under the age of 13 (or under the age of 14 as defined by the Korean Personal Information Protection Act).

• The Service is not directed at children, and we do not knowingly collect personal information from or market to children.
• If we become aware that a child under 13 (or 14) has provided personal information, we will delete such information without delay.
• If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at [email protected] so that we may take the necessary actions.
• Under Article 22-2 of the Korean Personal Information Protection Act, processing the personal information of a child under 14 requires the consent of a legal guardian.

15. Rights Regarding Automated Decision-Making

In accordance with Article 37-2 of the Korean Personal Information Protection Act, where an automated decision significantly affects the rights or obligations of a data subject, the following rights may be exercised.

• Right to Explanation: You may request an explanation of the criteria and process of an automated decision.
• Right to Review: You may request a review of an automated decision through human intervention.
• Right to Refuse: You may refuse an automated decision where it significantly affects your rights or obligations.

The Service does not currently make automated decisions that significantly affect Users' rights or obligations. However, third-party advertising services (Google AdSense) may personalize advertisements based on your browsing data. For opt-out methods, please refer to Section 8.

16. Your Consent

By using the Service, you consent to the processing of your information as set forth in this Privacy Policy now and as amended by us. This Policy may be updated from time to time for any reason, and continued use of the Service is deemed approval of all changes.

17. Contact Us

If you have any questions regarding privacy while using the Service, or have questions about our practices, please contact the Operator via email at [email protected].