Privacy Policy

1. Purposes of Processing Personal Information

Yurasis processes personal information only as needed to provide AI blog generation, editing, publishing, payments, support, and service security.

• Account registration, identity checks, login sessions, email verification, and role management
• EDI blog generation, post editing, writing style model training, blog/team/invitation management
• Point top-ups, payment verification, refunds, and transaction history
• Support, notices, incident response, fraud prevention, quality improvement, and legal compliance

2. Categories of Personal Information

3. Retention Period

• Account information is retained until withdrawal or account deletion unless retention is required by law.
• Blog posts, samples, images, and style models are retained until the user deletes them or the service agreement ends.
• Payment and transaction records may be retained for up to five years under applicable e-commerce laws.
• Security and access logs are retained only for the legally required or security-necessary period.

4. Third-Party Provision

Yurasis does not provide personal information to third parties except with user consent, where required by law, or through lawful requests by competent authorities.

5. Delegated Processing and International Transfer

6. Destruction of Personal Information

Personal information is deleted without delay when the retention period expires or the processing purpose is achieved, unless separate retention is required by law.

7. User Rights

Users may request access, correction, deletion, suspension of processing, or withdrawal of consent through email or in-service support. Yurasis verifies the requester and responds under applicable law.

8. Cookies

Yurasis may use cookies for login persistence, security, and user experience. Users may reject or delete cookies in browser settings, but essential features may be limited.

9. Security Measures

• Password hashing, HttpOnly/SameSite session cookies, and role-based access control
• Admin access restrictions, audit logs, and login attempt controls
• Encrypted transport, infrastructure access control, and incident response procedures

10. Sensitive Information and Children

Yurasis does not intentionally collect resident registration numbers, health information, or other sensitive identifiers. Users must not include unnecessary personal information in prompts, writing samples, or images.

11. Privacy Officer

12. Remedies

Users may contact the Korea Internet & Security Agency privacy hotline or the Personal Information Dispute Mediation Committee for privacy-related remedies.

13. Changes to This Policy

This Privacy Policy is effective from May 12, 2026. Important changes will be announced in advance through the service or by email where appropriate.