VoiceNote Privacy Policy

TexTory Corporation ("Company") complies with the Personal Information Protection Act of Korea and other applicable laws, and processes the personal information of VoiceNote ("Service") users as follows.

1. Information We Collect

Regarding device contacts: The Service accesses your device's address book only when you use the "Find from contacts" feature. Contact data is read and matched entirely on your device and is never transmitted to or stored on our servers. Only when you link a specific contact to a record are that contact's name and phone number sent to and stored on our (TexTory) server, so that records can be grouped by person and seen in the TexTory app and web. The app asks for separate consent before sending. Without consent the link stays on your device only and nothing is sent. You can withdraw consent at any time in Settings > Privacy. Your whole address book is never uploaded.

2. Purposes of Processing

1. Account identification, management, and session maintenance
2. Providing speech-to-text conversion, summarization, and classification results
3. Storing and synchronizing user records, customer information, and schedules
4. Service improvement, error analysis, and prevention of misuse
5. Delivering notices and responding to inquiries
6. Providing marketing information about new features and plans (only with consent)

3. Special Provisions on Voice Data

1. Recordings are transmitted to and stored on Company servers over encrypted connections (HTTPS) for AI transcription and summarization. Speech-to-text is performed on servers operated directly by the Company, and audio files are never sent to any third party. AI analysis of the transcript (such as summaries) takes place only with the user's consent as described in Section 7.
2. The Company does not use user voice data or transcription results to train artificial intelligence models.
3. The Company does not access voice data except to the minimum extent necessary to provide the Service and respond to incidents.
4. Recordings may include the voices of third parties; responsibility for the lawfulness of recording rests with the user (Terms of Service, Article 6).

4. Retention and Destruction

1. Personal information is retained while the account remains active. Upon a deletion request, the account is deactivated immediately and stored recordings, transcripts, and records are processed for deletion after the request is received.
2. The following are retained separately for the periods required by law:
   • Records of contracts and withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
   • Records of payment and supply of goods: 5 years (same Act)
   • Records of consumer complaints or dispute resolution: 3 years (same Act)
   • Service access logs: 3 months (Protection of Communications Secrets Act)
3. Electronic files are deleted using non-recoverable methods; printed materials are shredded or incinerated.

5. Entrustment of Processing

Entrustment agreements include provisions on the secure handling of personal information. Any change of processor will be disclosed through this Policy.

6. Cross-Border Transfer

• Recipient: Amazon Web Services, Inc.

• Country/location: United States (AWS region)

• Items transferred: Account information, voice and record data described in Section 1

• Time and method: Transferred as needed during use of the Service over encrypted connections

• Purpose: Data storage and operation of AI processing infrastructure

• Retention: Until account deletion or termination of the processing agreement

• Recipient: OpenAI, L.L.C.

• Country/location: United States

• Items transferred: Transcribed text only (audio files are NOT transferred)

• Purpose: AI summaries, schedule extraction, lecture notes — only with the user's in-app consent (Section 7)

You may refuse cross-border transfer; in that case server-based features (AI transcription, summarization, synchronization) will be unavailable.

7. Notice on Use of Third-Party AI Services

The Company uses a third-party AI service as described below only when the user has separately consented in the app.

1) Data collected and transferred The transcript text produced from a recording. Original audio files are never transferred.

2) How it is collected Audio created when the user records in the app or imports a call recording is converted to text on servers operated directly by the Company (self-hosted GPU, WhisperX). No third party is involved in speech recognition.

3) Purpose Generating summaries, extracting schedule and to-do items, and organizing lecture notes.

4) Third-party recipient and cross-border transfer

5) Level of protection OpenAI publicly states that data submitted through its API is not used to train or improve its models, and that abuse-monitoring logs are retained for up to 30 days and then deleted. (Policy: https://developers.openai.com/api/docs/guides/your-data)

6) Consent and withdrawal Transcript text is sent only after the user has opted in within the app, and consent can be withdrawn at any time in Settings › Privacy › AI analysis. After withdrawal, no further data is sent. If you do not consent, recording, storage, playback, and transcription continue to work in full.

8. Provision to Third Parties

Except as described in Section 7, the Company does not provide personal information to third parties, except where required by law or requested by investigative authorities through lawful procedures.

9. Your Rights

1. You may request access, correction, deletion, or suspension of processing of your personal information at any time.
2. Account information can be reviewed and modified, and the account deleted, in the app's Settings screen; requests may also be made by email.
3. See the Account Deletion page for the deletion procedure.
4. We do not collect personal information from children under 14.

10. Security Measures

1. Passwords are stored using irreversible encryption.
2. HTTPS encryption is applied to all communications.
3. Access to processing systems is limited to the minimum number of personnel, with access logs maintained.
4. Authentication tokens are stored in the device's secure storage (Keystore/Keychain).

11. Data Protection Officer and Contact

• Data Protection Officer: Lee Seong Roh / CEO
• Contact: help@textory.io

For assistance with privacy concerns in Korea, you may contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

12. Changes to This Policy

This Policy applies from its effective date. Any additions, deletions, or modifications will be announced in the Service at least 7 days before the effective date (30 days for material changes).

TexTory Corporation · Business Registration No. 733-87-00284 · Address: 304-A2, 3F, Bldg. A, Convergence Technology Institute, CBNU Ochang Campus, 45 Yangcheong 4-gil, Ochang-eup, Cheongwon-gu, Cheongju-si, Chungcheongbuk-do, Republic of Korea · Contact: help@textory.io