Privacy Policy

Effective: May 3, 2026 · Company: Lease Bot (leasebot.co.kr)

This policy describes how Lease Bot ("the Company") collects, uses, retains, and discloses personal information in connection with its Telegram-based managed AI bot intermediary service ("the Service"). The Company complies with the Republic of Korea's Personal Information Protection Act (PIPA) and the Act on Promotion of Information and Communications Network Utilization.

1. Information We Collect

Category	Items	Collection Point
Inquiry / Sales	Company name, contact name, phone, email, plan of interest, inquiry content	Inquiry form submission
Payment / Contract	Business information (name, representative, registration number), payment method (card details held by Toss Payments), billing info, tax invoice info	During subscription payment
Bot Usage	Telegram user ID/handle, bot conversation messages (Q&A), usage statistics (message count, tokens), timestamps, IP	During bot usage
Chat Widget	Input messages, session cookies (usage limit management)	Website chat usage
Auto-collected	Access logs, cookies, IP, browser/device information	Website access

2. Purpose of Collection and Use

Inquiry response and quote provision
Subscription contract execution, payment processing, tax invoice issuance
AI bot service provision (intermediation of external AI API calls), usage limit management, auto model switching
Incident response, fraud prevention, security/safety checks
Service improvement, statistical analysis (in non-identifiable form)
Compliance with legal obligations (E-Commerce Act, tax filings, etc.)

3. Retention Period

Item	Retention Period	Basis
Inquiry information	1 year from collection	Consent-based
Subscription / Payment records	5 years	E-Commerce Act §6
Tax invoice / Transaction records	5 years	Framework Act on National Taxes
Bot conversation history	Up to 30 days (operational), immediate deletion on request	Consent-based
Access logs	3 months	Communications Privacy Act

4. Disclosure to Third Parties

The Company does not disclose personal information externally as a rule. However, for the essential provision of the Service, bot conversation content is transmitted to external AI providers as follows.

Recipient	Items	Purpose	Retention
Anthropic, PBC (USA)	Bot input questions	Response generation by Claude models	Per Anthropic API policy (typically deleted within 30 days)
OpenAI, L.L.C. (USA)	Bot input questions	Response generation by GPT models (when selected)	Per OpenAI API policy
Google LLC (USA)	Bot input questions	Response generation by Gemini models (when selected)	Per Google API policy

⚠️ The above disclosures are intrinsic to the Service (external AI intermediation). Customer input is processed on external AI provider servers; non-consent makes the Service unusable. Never input sensitive personal data (resident registration number, account numbers, passwords).

5. Processing Entrustment

Entrusted Party	Entrusted Task
Toss Payments Co., Ltd.	Subscription payment processing, auto-billing, tax invoice issuance
Cloudflare, Inc.	Website / API hosting, DDoS protection, usage counter (KV) storage
Vercel, Inc.	Static website hosting
Telegram FZ-LLC	Bot / message delivery infrastructure (Telegram Bot API)

6. Data Subject Rights

Users may exercise the following rights at any time:

Request to access, correct, delete, or stop processing of personal information
Immediate deletion request for bot conversation history
Subscription termination and account deletion
Withdrawal of consent (note: withdrawal may limit Service use)

Request method: via Telegram @leasebot_official or email.

7. Security Measures

Technical: HTTPS encryption, access permission management, password hash storage
Administrative: Minimized processing personnel, periodic audits
Physical: Outsourced to certified cloud security providers (Cloudflare, Vercel)

8. Cookies

The Company uses essential cookies for usage limit management (chat widget) and session maintenance. No marketing or advertising tracking cookies are used. Cookie storage can be refused via browser settings, with possible feature limitations.

9. Privacy Officer

Role	Detail
Officer	Lease Bot Privacy Officer
Contact	Telegram @leasebot_official

10. Rights Violation Remedy

Personal Information Dispute Mediation Committee: 1833-6972 (privacy.kr)
Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)
Cyber Investigation Bureau, Supreme Prosecutors' Office: 1301 (spo.go.kr)
National Police Agency Cyber Bureau: 182 (ecrm.cyber.go.kr)

11. Policy Changes

If this policy changes, the changes will be posted on this page 7 days before the effective date. For changes that significantly affect user rights, 30 days' notice will be given.

Effective: May 3, 2026