Privacy Policy
Last updated: May 15, 2026 · 최종 업데이트: 2026년 5월 15일
1. Who We Are
GloSource AI (“we”, “us”) operates the sourcing research tool at glosource-ai.vercel.app. Questions about this policy can be sent to glosourceai@gmail.com.
2. Data We Collect
| Data | Why | Retention |
|---|---|---|
| Email address | Account creation, subscription management, support | Until account deletion + 30 days |
| Search queries | Delivering sourcing results, improving AI output quality | 12 months |
| Usage logs (timestamp, result count) | Quota tracking, abuse prevention | 6 months |
| Payment reference (not card data) | Subscription verification, refund processing | 5 years (legal requirement) |
| IP address (anonymised) | Security, rate limiting | 90 days |
We do not collect payment card numbers, passport or ID numbers, or sensitive personal data.
3. How We Use Your Data
- To deliver sourcing search results via the Gemini API (Google).
- To manage your account, subscription, and quota.
- To send transactional emails (verification, password reset, subscription receipts).
- To improve the quality and accuracy of AI-generated supplier results.
- To detect and prevent abuse or fraud.
We do not sell your personal data. We do not use your data for advertising profiling.
4. Third-Party Services
We share data with the following processors solely to operate the Service:
Google (Gemini API) — US
AI supplier analysis and search grounding — your search queries are processed to generate results. Google does not use these queries to train its models under its API terms.
Vercel — US / EU
Hosting and serverless infrastructure
Neon (PostgreSQL) — US (AWS us-east-1)
Account and usage log storage
Resend — US
Transactional email delivery
5. Cookies and Tracking
We use session cookies for authentication only. We do not use advertising cookies, cross-site tracking pixels, or behavioral profiling SDKs.
We use Vercel Analytics, a cookieless, privacy-first analytics service. It collects only aggregate page-view counts and Web Vitals — no cookies, no fingerprinting, no personal identifiers. Query parameters (which could contain search terms) are stripped before any data is sent. See vercel.com/docs/analytics/privacy-policy.
6. Your Rights
Depending on your jurisdiction (including EU/EEA GDPR, UK GDPR, and Korean PIPA), you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate data.
- Erasure (“right to be forgotten”): Request deletion of your account and associated data.
- Portability: Receive your search history in a machine-readable format (JSON or CSV).
- Restriction: Ask us to pause processing while a dispute is resolved.
- Objection: Object to processing based on our legitimate interests.
To exercise any right, email glosourceai@gmail.com with the subject line “Privacy Request — [Your Right]”. We will respond within 30 days (GDPR standard).
Supervisory authorities: EU/EEA users may lodge a complaint with their national data protection authority via edpb.europa.eu. UK users may contact the Information Commissioner's Office (ICO) at ico.org.uk. Korean users may contact the Personal Information Protection Commission at pipc.go.kr.
7. Data Transfers
Your data is processed in the Republic of Korea and the United States (Vercel, Neon, Google). Transfers to the US are conducted under Standard Contractual Clauses (SCCs) with Vercel, Neon, and Google. GloSource AI does not currently designate an EU representative under GDPR Art. 27; EU/EEA residents may contact us directly at glosourceai@gmail.com for any data requests. We are working toward full EU representative designation.
8. Children
The Service is not directed at children under 14. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us for deletion.
9. Changes to This Policy
We may update this Privacy Policy. We will notify you of material changes via email or an in-app notice. Continued use after 7 days from the notice constitutes acceptance.
한국어 요약 (Korean Summary)
수집 데이터: 이메일, 검색 쿼리, 사용 로그, 결제 참조번호(카드번호 미수집)
이용 목적: 소싱 결과 제공, 구독 관리, 서비스 개선. 광고 목적 제3자 제공 없음.
제3자 처리자: Google(Gemini AI), Vercel(호스팅), Neon(DB), Resend(이메일)
정보주체 권리: 열람·수정·삭제·이동·처리 정지 요청 가능. 이메일로 30일 내 처리.
보존 기간: 계정 삭제 후 30일 내 이메일 삭제, 검색 기록 12개월, 결제 정보 5년(법적 의무)
문의: glosourceai@gmail.com (제목: 개인정보 요청 — 요청 유형)