Privacy Policy

We collect the following to provide the Service:

• On sign-up: email, hashed password, display name, profile photo URL (when using social login).
• On payment: billing identifiers (Stripe customer/subscription IDs). Card details are not stored by the Company.
• Auto-collected during use: IP, cookies, access timestamps, browser metadata, usage statistics.
• Member-uploaded PPTX templates, binding data, and generated outputs.

• Identifying Members and preventing abuse
• Delivering core service (PPTX binding etc.)
• Processing payments and tracking usage
• Sending workspace invitation emails
• Statistical analysis for operations and quality
• Compliance with legal obligations (e-commerce, tax)

• Account info: until withdrawal, except where law requires extended retention.
• Payment/transaction records: 5 years (Korean e-commerce consumer protection law)
• Access logs: 3 months (Korean telecom secrecy law)
• Uploaded templates/data: until deleted by the Member or upon withdrawal
• Generated outputs: auto-deleted after 7 days by default

The Company does not provide personal data to third parties beyond the processors listed below.

The Company outsources the following to:

• Google LLC (Firebase Authentication, Firestore, Cloud Storage, Cloud Run) — auth, storage, hosting
• Stripe, Inc. — payment and subscription processing
• Resend, Inc. — email delivery (workspace invitations etc.)

These processors handle only minimum-necessary data under contract. Some are located overseas; data is transferred internationally.

Members may at any time request access, correction, deletion, or restriction of processing of their personal data via the settings page or the contact below. On withdrawal, all personal data is immediately destroyed, except where law requires retention.

We use cookies or similar technology to maintain login sessions and improve usability. Members may disable cookies in their browser settings; some features may then be limited.

• Passwords stored as bcrypt one-way hashes
• API keys stored as prefix + bcrypt hash; raw key shown only once at issue
• All transport over HTTPS/TLS
• Firestore Security Rules and Storage Rules govern data access
• Least-privilege access (workspace-member based)

The Company designates a privacy officer responsible for personal data processing.

• Email: babbage@owlgcorp.com

Members may report any privacy-related issue to the officer above.

This policy may be amended in line with law, policy, or security technology changes. We will give at least 7 days' notice in the service before amendments take effect.