Privacy Policy
Version v1.4-en · Effective 2026-09-15
Potential Labs Inc. ("Company") is committed to protecting your data and complies with applicable data-protection laws. This policy explains how personal data is collected, used, and protected in ReSPEC ("Service").
1. Personal data we collect and why
| Data | Purpose | Retention |
|---|---|---|
| Email address | Account identification, saving/re-opening reports, service notices, payment identification | Deleted without delay upon account withdrawal |
| Name, phone number (only for quick sign-up at offline events such as job fairs) | Identifying event participants, guidance on using your report, recruitment-related contact | Deleted without delay when you close your account |
| Conversation (chat) content | Strength analysis & report generation | Deleted after the purpose is fulfilled or upon withdrawal |
| Extracted text from supplements (resume, cover letter, portfolio) | Improving analysis quality | Original files discarded immediately after extraction; extracted text deleted after purpose fulfilled |
| Payment records (transaction ID, purchase status; card details are handled by Paddle, not stored by us) | Order processing, entitlement, refunds, dispute handling | Retained as required by applicable law |
| Service usage logs (incl. non-identifying device identifier) | Quality improvement, flow analysis | Auto-deleted 1 year after collection |
Automatically collected: access logs, IP address, cookies, visit timestamps, device/browser info, and a non-identifying device identifier (anonId). You may refuse cookies in your browser settings, though this may limit the Service.
2. Marketing & internship matching (optional)
| Data | Purpose | Retention |
|---|---|---|
| Email address | Product updates, events, and offers | Deleted without delay upon opt-out |
| Name, email address | Receiving your internship application, sharing match results, and recruitment-related contact | Deleted upon opt-out, or 1 year after the application date |
(Your name and phone number are collected only when you apply for an internship or use quick sign-up at an offline event such as a job fair (see Section 1). They are not collected for regular sign-up, payment, or use of the strength report.)
(You may decline optional items without any disadvantage to Service use.)
3. Retention required by law
- Access logs: 3 months. Records of consumer complaints/disputes: 3 years. Records of payment, contract, and withdrawal are retained for the period required by applicable law.
4. Provision to third parties
We do not provide your personal data to outside parties, except for lawful requests based on law (e.g., a valid investigative request).
5. Processing entrustment & cross-border transfer
We entrust the following tasks, which may involve transfer of data abroad.
| Processor | Task | Data transferred | Country |
|---|---|---|---|
| Supabase, Inc. | Authentication, database hosting | Email, conversation/report data | USA, etc. |
| Google LLC | AI (Gemini) analysis | Conversation, extracted supplement text | USA, etc. |
| Amplitude, Inc. | Product usage analytics, session replay analysis | Non-identifying device identifier, usage logs, screen interaction recordings (entered and displayed text is masked) | USA, etc. |
| Meta Platforms, Inc. | Ad performance measurement | Non-identifying device identifier, cookies, usage logs | USA, etc. |
| Paddle.com Market Ltd and affiliates | Payment processing (Merchant of Record), fraud prevention, refunds | Email, transaction data | UK, USA, etc. |
AI training notice: We use enterprise APIs; data you enter or upload is never used to train third-party AI models.
6. Destruction of personal data
We destroy personal data without delay once the retention period expires or the purpose is fulfilled. Electronic files are permanently deleted by irrecoverable technical means; printouts are shredded or incinerated.
7. Cookies and automatically collected data
We use cookies and a non-identifying device identifier to improve the Service and measure ad performance. You may allow/refuse cookies in your browser settings, and limit ad tracking via your device/browser settings.
Session replay: to find problems in the user flow, we may record screen interactions (clicks, scrolls, screen transitions). All entered and displayed text is masked in these recordings, so conversation content and other body text is not collected.
8. Your rights
You may at any time request access to, correction of, or deletion of your personal data, and withdraw consent (account withdrawal). Contact: privacy@potential-labs.com
9. Age limit
Children under the age of 14 are restricted from signing up for and using the Service.
10. Data protection officer
- Officer: Choonghwan Kim, CEO, Potential Labs Inc.
- Phone: +82-10-7940-5395
- Email: privacy@potential-labs.com
11. Security measures
- Administrative: internal management plan, regular staff training.
- Technical: least-privilege access, encryption of key data, security software operated and reviewed periodically.
12. Remedies
You may seek dispute resolution or counseling from the relevant Korean authorities (e.g., KISA Privacy Center 118, Personal Information Dispute Mediation Committee 1833-6972).
13. Changes to this policy
This policy applies from July 8, 2026. It may be amended per law or internal policy; changes are announced at least 7 days in advance (at least 30 days for material changes to your rights).