Pikurate Privacy Policy

Effective Date: April 11, 2025

Last Updated: December 2, 2025

Pikurate Inc. (“the Company”) is committed to protecting users’ personal information and complies with applicable privacy laws as well as the Google API Services User Data Policy. This Privacy Policy explains what information we collect, how we use it, and how we protect it across the Pikurate service (https://www.pikurate.com) and related applications.

1. Information We Collect

We collect only the minimum amount of personal information necessary to provide our service.

1. Account Registration & Login (including Google OAuth)
   1. Email address
   2. Google OAuth information: name, profile image, email, OpenID identifier
2. Automatically Collected Information
   1. IP address, device and browser information
   2. Access logs, page views, and feature usage logs
   3. Questions and responses generated when using the AI chatbot
3. Payment Information (for paid features)
   1. Payment, billing, and refund records
4. Customer Support
   1. Email address
   2. Inquiry content and any attachments

5. Google Drive Integration

   When users connect Google Drive and select files, we access only:

   1. File content (read-only)
   2. File metadata (title, type, last modified date)
   3. Authentication information required to maintain the connection

   ※ We do not modify or delete any Google Drive files, and we access only files explicitly selected by the user.

2. How We Use Personal Information

We use personal information solely for the following purposes:

1. Account identification and management (including Google OAuth)
2. Providing Pikurate’s link-based knowledge management and AI chatbot features
3. Personalized chatbot capabilities using user-selected Google Drive documents
4. Service improvement and analytics using non-identifiable data
5. Payment, subscription, and customer support
6. Security monitoring and service stability
7. Fulfilling legal obligations

3. Google API (OAuth / Drive) Data Handling Principles

We comply with the Google API Services User Data Policy, including the Limited Use Requirements.

1. Limited Use
   1. Data obtained using Google APIs is used only to provide and improve Pikurate’s user-facing features.
2. No Model Training
   1. Content from Google Drive or OAuth data is not used to train, fine-tune, or improve Pikurate’s or any third-party general-purpose AI or machine learning models.
3. No Advertising Use
   1. Google API–derived data is not used for targeted advertising, profiling, or marketing purposes.

4. Restricted Human Access

   Human access to Google user data is allowed only in the following cases:

   1. With the user’s explicit consent
   2. For security or abuse investigations
   3. To resolve service errors
   4. When required by law

4. Retention Period

Personal information is deleted immediately upon account deletion.

Google Drive access permissions are revoked immediately when the user disconnects access from their Google account settings. Service logs are retained for a limited period and then anonymized.

1. Legal retention requirements:
   1. Payment and transaction records: 5 years
   2. Customer inquiries and dispute records: 3 years

5. Sharing Personal Information With Third Parties

We do not share personal information with third parties except:

1. When the user provides explicit consent
2. When required by law
3. Data obtained through Google OAuth or Google Drive is not shared with any third party.

6. Service Providers (Data Processors)

We use the following service providers to operate Pikurate:

1. Service Provider / Purpose
   1. Google Cloud Platform – Hosting, server infrastructure, data storage
   2. Paddle – Payment and subscription processing
   3. Google Analytics – Usage analytics

※ The list may change, and updates will be announced in advance.

7. User Rights

Users may exercise the following rights at any time:

1. Access, correct, or delete personal information
2. Request suspension of processing
3. Disconnect Google Login or Google Drive integration
4. Delete their account

Requests may be submitted via email to the Privacy Officer, and we will respond promptly in accordance with applicable laws.

8. Security Measures

1. SSL/TLS encryption for all data transmission
2. Encryption of passwords and sensitive information
3. Strict access control following the principle of least privilege
4. Regular security reviews and anomaly detection
5. Compliance with Google API security requirements
6. Access logging and server-level protection

9. Privacy Officer

Name: Seokkue (Leo) Song, CEO

Email: leo.song@pikurate.com

10. Changes to This Policy

If the policy is updated, we will notify users through service announcements or email.

For significant changes, we will provide notice at least 7 days before the new policy takes effect.