Terms of Service and Privacy Policy

Article 1 (Purpose and Scope of Application)

① These Terms govern the rights, obligations, and responsibilities between gaia (the "Company") and users regarding the use of the browser extension-based AI prompt improvement service (the "Service"), and other necessary matters.

② These Terms apply to all users who use the Service. By applying to use the Service, users are deemed to have agreed to these Terms.

③ The Company may modify these Terms as necessary. Any changes to the Terms will be announced through the Service's notice board or email. Modified Terms will take effect 7 days after the announcement date. If users do not agree to the changes, they may discontinue use of the Service.

Article 2 (Definitions)

① "Service" means the AI prompt automatic analysis and improvement service provided by the Company through Chrome browser extension and web application.

② "User" means any person who agrees to these Terms and uses the Service provided by the Company.

③ "Prompt" means user questions or instructions entered into AI platforms such as ChatGPT, Gemini, Claude, and Perplexity.

④ "Subscription" means purchasing a paid plan (Starter, Pro) to use the Service.

⑤ Definitions of other terms used in these Terms shall follow relevant laws and service guidelines.

Article 3 (Service Provision and Changes)

① The Company provides the following services:

• Automatic analysis and improvement of prompts used on AI platforms
• Chrome browser extension installation and management
• Web-based account management and subscription management services
• Service usage statistics and usage management

② The Company strives to provide the Service 24 hours a day, 365 days a year. However, service provision may be temporarily suspended in the following cases:

• When necessary for service operation, such as system maintenance, server expansion and replacement, network instability, etc.
• In cases of force majeure such as natural disasters, war, service suspension by telecommunications operators, etc.
• Other cases where the Company determines that service provision is difficult

③ The Company may change the content of the Service as necessary for quality improvement, technical specification changes, etc. However, if the changes are unfavorable to users, notice will be provided before the changes.

④ If service suspension is necessary, the Company will provide prior notice or notification. However, if prior notice is impossible due to unavoidable circumstances, notification may be provided afterward.

Article 4 (Member Registration and Account Management)

① Users must register as members to use the Service and must provide the following information when registering:

• Email address (required)
• Password (required, minimum 8 characters)
• Other information deemed necessary by the Company

② Users must maintain accurate and up-to-date information. Users bear responsibility for any disadvantages resulting from providing inaccurate information.

③ Users must regularly change their passwords for account security and must not share account information with third parties.

④ If users become aware that their account information has been stolen or is being used by a third party, they must immediately notify the Company and take measures according to the Company's guidance.

• When the applicant has violated these Terms
• When the applicant is under 14 years of age
• When the applicant has previously lost membership status (except when re-registration is approved by the Company)
• When false information is provided or required information is not provided
• Other cases where approval is impossible due to the applicant's fault or when the application violates other regulations

⑤ The Company may refuse membership registration or suspend or terminate accounts in the following cases:

Article 5 (Service Use and Usage Limitations)

① Users must not engage in the following activities when using the Service:

• Violating laws or these Terms
• Disrupting the stable operation of the Service or interfering with other users' use of the Service
• Infringing upon the Company's or third parties' intellectual property rights
• Distributing or transmitting malicious code, viruses, trojans, etc.
• Unauthorized reproduction, distribution, modification, reverse engineering, decompilation, or disassembly of the Service
• Unauthorized commercial use of the Service
• Unauthorized collection, use, or distribution of other users' personal information
• Activities that disrupt or may disrupt the operation or stable operation of the Service
• Other activities deemed inappropriate by the Company

② The Company may limit users' service usage to ensure stable operation of the Service. Usage limitations apply differently according to subscription plans:

• Free plan: 3 times per day
• Starter plan: 200 times per month
• Pro plan: Unlimited

③ If a user engages in activities specified in paragraph ①, the Company may restrict or suspend the user's service use without prior notice, and the Company is not liable for any damages resulting therefrom.

④ The Company may restrict additional usage if users attempt to exceed usage limitations.

Article 6 (Subscription and Payment)

① Users may choose to use the Service with either a free plan or a paid plan (Starter, Pro).

② If a paid plan is selected, users must proceed with payment through the payment processor designated by the Company. Currently, the Company uses Paddle as the payment processor.

③ Subscriptions are provided on a monthly auto-renewal basis, and users may cancel their subscription at any time in account settings within the Service. When a subscription is canceled, auto-renewal stops from the next billing cycle.

④ Payment is made monthly in advance according to the plan selected by the user, and the refund policy follows the separately established refund policy.

⑤ The Company provides support within a reasonable scope for problems users encounter related to payment, but is not liable for problems caused by payment processor system errors, etc.

⑥ Users may upgrade or downgrade their subscription plan at any time, and changes take effect immediately. In case of downgrade, the difference may be reflected in the next billing cycle or refunded.

Article 7 (Intellectual Property Rights)

① All content, software, programs, code, designs, logos, trademarks, service names, etc. included in the Service are protected by the Company's intellectual property rights or third-party intellectual property rights.

② Users may not, without the Company's prior written consent, reproduce, distribute, transmit, display, perform, broadcast, publish, modify, process, sell, rent, create derivative works, or otherwise use any part or all of the Service.

③ Users retain rights to improved prompts generated through the Service. However, the Company may use anonymized data for analysis purposes to improve the Service.

④ If users infringe upon third-party intellectual property rights through use of the Service, users bear all legal responsibility, and the Company is not liable therefor.

Article 8 (Disclaimer)

① The Company is not liable for service interruptions due to force majeure events such as natural disasters, war, service suspension by telecommunications operators, hacking, computer viruses, government regulations, etc.

② The Company does not guarantee the accuracy, completeness, usefulness, or legality of improved prompts generated through the Service. Users must review and modify improved prompts as necessary before use and bear responsibility for all results arising from their use.

③ The Company is not liable for damages caused by errors, delays, interruptions, changes, etc. in third-party services such as OpenAI API and Google API.

④ The Company is not liable for damages related to browser extension compatibility issues, extension conflicts, functional changes due to browser updates, etc.

Article 9 (Termination of Service Use Agreement)

① Users may terminate the service use agreement at any time and must notify the Company when terminating.

• When users violate important provisions of these Terms
• When false information is provided during membership registration
• When using another person's name
• When engaging in activities that disrupt the stable operation of the Service
• Other cases where the Company determines that continued service provision is difficult

② The Company may terminate the service use agreement after prior notice to users in the following cases:

③ When the service use agreement is terminated, user account information and service usage records are retained or deleted according to relevant laws.

④ When a subscribed user terminates the agreement, refunds follow the separately established refund policy.

Article 10 (Governing Law and Jurisdiction)

① Matters not specified in these Terms shall follow relevant laws and commercial practices.

② Disputes between the Company and users shall be governed by the laws of the Republic of Korea, and the competent court shall be the court having jurisdiction over the Company's headquarters.

③ Disputes between the Company and users shall first be resolved through sincere consultation.

④ These Terms are governed by and interpreted in accordance with the laws of the Republic of Korea.

Article 1 (Purpose of Collection and Use of Personal Information)

① The Company processes personal information for the following purposes. Personal information being processed is not used for purposes other than those stated below, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act:

• Service provision and contract fulfillment: Member registration, service provision, identity verification, subscription management, payment processing
• Service improvement and new service development: Usage statistics analysis, service quality improvement, new feature development
• Customer support: Inquiry response, complaint handling, notice delivery, customer satisfaction surveys
• Legal obligation fulfillment: Compliance with tax laws, e-commerce laws, Communications Secrets Protection Act, and other relevant laws
• Marketing and advertising: Providing customized services and advertisements to users (with consent)

Article 2 (Items of Personal Information Collected and Collection Methods)

① The Company collects the following personal information to provide the Service:

• Required items: Email address, password (stored encrypted), service usage records (access logs, usage, etc.)
• Optional items: Profile information, marketing consent
• Automatically collected items: IP address, cookies, access logs, device information (browser type, OS information), browser extension version information
• Payment information: Payment method information, payment history (sensitive information such as credit card numbers are managed by payment processors)
• Prompt data: Temporarily processed for service provision and deleted immediately after processing

② The Company collects personal information through the following methods:

• When users directly input information (member registration, profile modification, etc.)
• When automatically generated and collected during service use (access logs, cookies, etc.)
• When collected through payment processors (payment information)
• When processed through third-party services (OpenAI API, etc.) (temporary processing for prompt improvement)

③ The Company does not store users' original prompt content for extended periods and deletes it immediately after temporary processing for service improvement. However, anonymized statistical data may be retained for service improvement purposes.

Article 3 (Processing and Retention Period of Personal Information)

① The Company processes and retains personal information within the period of retention and use of personal information under applicable laws or the period of retention and use of personal information agreed upon at the time of collection from the information subject.

② The processing and retention period for each type of personal information is as follows:

• Member information: Until membership withdrawal (however, if retention is required under relevant laws, it will be retained for the required period)
• Payment information: Retained for 5 years under the E-Commerce Act
• Service usage records: Retained for 3 months under the Communications Secrets Protection Act
• Access logs: Retained for 3 months under the Communications Secrets Protection Act
• Prompt data: Not stored (deleted immediately after temporary processing)
• Marketing consent information: Until consent withdrawal or membership withdrawal

③ When users request membership withdrawal or withdraw consent for personal information collection and use, the Company destroys the personal information without delay. However, the following information is retained for the periods specified below for the reasons stated:

• Records related to contracts or withdrawal of offers under the E-Commerce Act: 5 years
• Records related to payment and supply of goods under the E-Commerce Act: 5 years
• Login records under the Communications Secrets Protection Act: 3 months

Article 4 (Provision of Personal Information to Third Parties)

① The Company does not provide users' personal information to external parties in principle. However, exceptions are made in the following cases:

• When users have consented in advance
• When required by law or when requested by investigative agencies in accordance with procedures and methods prescribed by law for investigative purposes
• When necessary for service provision (e.g., prompt improvement processing through OpenAI API, payment processing through payment processors)

② The Company uses the following third-party services to provide the Service, and personal information may be transmitted accordingly:

• OpenAI API: Transmits prompt data for prompt improvement. For details, please refer to OpenAI's Privacy Policy (https://openai.com/privacy).
• Paddle: Transmits payment information for payment processing. For details, please refer to Paddle's Privacy Policy (https://paddle.com/privacy).
• Supabase: Stores and processes personal information for database and authentication services. For details, please refer to Supabase's Privacy Policy (https://supabase.com/privacy).

③ When the Company provides personal information to third parties, it notifies users of the following matters and obtains consent:

• The recipient of personal information
• The purpose of use of personal information
• The items of personal information provided
• The retention and use period of personal information by the recipient

④ Users have the right to refuse consent to the provision of personal information to third parties. However, service use may be restricted if consent is refused.

Article 5 (Destruction of Personal Information)

① The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose.

② The procedures and methods for destroying personal information are as follows:

• Destruction procedure: Information entered by users is moved to a separate database (or separate documents in the case of paper) after the purpose is achieved and destroyed immediately or after a certain period in accordance with internal policies and other relevant laws.
• Destruction method: Information in electronic file format is deleted using technical methods that make it impossible to reproduce records. Personal information printed on paper is destroyed by shredding or incineration.
• Prompt data: Deleted immediately after temporary processing for service provision, and backup data is also regularly deleted.

③ When destroying personal information, the Company takes the following measures:

• Complete deletion of personal information from databases
• Deletion of personal information from backup systems
• Complete destruction if physical storage media exist

Article 6 (Rights of Users and Methods of Exercise)

① Users may exercise the following rights at any time:

• Request to access personal information
• Request correction in case of errors
• Request deletion
• Request suspension of processing
• Withdraw marketing consent

② Rights may be exercised by written request, email, or fax to the Company, and the Company will take action without delay.

③ When users request correction of personal information, the Company does not use or provide the personal information until correction is completed.

④ Users may exercise rights such as access, correction, deletion, and suspension of processing of personal information against the Company at any time, and the Company will take action without delay.

Article 7 (Measures to Ensure Safety of Personal Information)

The Company takes the following measures to ensure the safety of personal information:

• Administrative measures: Establishment and implementation of internal management plans, regular employee training, designation of personnel responsible for personal information processing and access rights management
• Technical measures: Access rights management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, regular security inspections and updates
• Physical measures: Access control for computer rooms, data storage rooms, operation of access control systems
• Network security: SSL/TLS encrypted communication, firewall operation, intrusion detection system operation

② The Company limits employees who process personal information to a minimum and conducts regular security training.

③ When a personal information breach occurs, the Company immediately notifies users and takes necessary measures such as reporting to relevant agencies.

Article 8 (Operation and Rejection of Cookies)

① The Company may use cookies to provide personalized services to users.

② Cookies are small text files that are automatically created when visiting a website and stored on the user's computer. Cookies identify the user's computer but do not personally identify the user.

③ The Company uses cookies for the following purposes:

• Maintaining login status
• Analyzing service usage patterns
• Providing customized services
• Improving service quality

④ Users have the right to choose whether to install cookies and can set cookie acceptance or blocking through web browser settings. However, if cookies are rejected, there may be difficulties in using the Service.

⑤ The Company may collect service usage information through users' browser extensions, which is used solely for service provision and improvement purposes.

Article 9 (Personal Information Protection Officer)

① The Company is responsible for overseeing all matters related to personal information processing and has designated a Personal Information Protection Officer as follows to handle complaints and damage relief related to personal information processing:

② Information subjects may contact the Personal Information Protection Officer regarding all matters related to personal information protection inquiries, complaint handling, and damage relief that occur while using the Company's Service.

③ Information subjects may contact the following agencies if they need to report or consult regarding personal information breaches:

• Personal Information Infringement Report Center (privacy.go.kr / 182 without area code)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
• Supreme Prosecutors' Office Cyber Crime Investigation Division (www.spo.go.kr / 02-3480-3573)
• National Police Agency Cyber Terror Response Center (www.netan.go.kr / 182 without area code)

Article 10 (Changes to Privacy Policy)

① This Privacy Policy will be notified through the Service's notice board 7 days before the implementation of any changes when additions, deletions, or modifications are made due to changes in laws, policies, or security technology.

② Previous Privacy Policies can be viewed below.

③ Users may discontinue use of the Service if they do not agree to the changed Privacy Policy.