Consent for Collection and Use of Personal Information¶
This document is provided for users in the Republic of Korea in accordance with the Personal Information Protection Act (PIPA).
AI Castle Inc. ("Company") collects and uses your personal information as described below. Please review the following details carefully.
Items of Personal Information Collected¶
| Category | Items |
|---|---|
| Required | Email address (stored with a normalized copy for duplicate detection), username (auto-generated if not chosen), password (stored only as a cryptographic hash), age attestation (confirmation of meeting the minimum age, with the time of attestation) |
| Automatically collected | Sign-up IP address, country (derived from your connection), browser language, sign-up time; sign-in IP address, country, language, and time (updated at each login) |
| Generated during use | Chat messages and attached images, AI responses, automatic conversation summaries, text transcripts of realtime voice sessions (voice audio is not stored), credit transaction and usage records (when gifting credits, the other party's email address is recorded in both parties' transaction history), session data, uploaded files, simulator workspace data |
| Guests (non-logged-in) | IP address (used as the guest identifier for conversation storage, daily usage limits, and rate limiting) |
About date of birth: We do not collect or store your date of birth or real name. If an older client application submits a date of birth, it is used solely to determine the age requirement and is immediately discarded — it is never stored.
Purpose of Collection and Use¶
| Purpose | Items Used |
|---|---|
| Account creation and management | Email, username, password |
| User authentication and security | Email, password, IP address, session data |
| Age verification per jurisdiction | Age attestation, country |
| Service provision (AI chat, voice, simulator) | Chat content, realtime transcripts, simulator workspace data |
| Billing (credit metering, purchases, gifts) | Credit transaction and usage records |
| Service improvement and analytics | Usage records (aggregated) |
| Communication (verification, notices) | Email address |
| Classroom management | Username, email, usage records |
| Legal compliance and dispute resolution | All collected items |
Retention and Use Period¶
- Account information: Retained until account deletion is completed. Deletion takes effect 7 days after your request (cancellable by signing in again during the grace period).
- Chat data (messages, images, AI responses, summaries, realtime transcripts): 7 days from last update, then automatically deleted.
- Session data: 7 days (session list: 30 days). API key authentication data: 30 days.
- Guest records: Conversations 7 days; daily usage counters 24 hours.
- Simulator data: Permanently deleted after 30 days without a simulator run (cannot be recovered).
- Credit transaction records: 5 years (in line with e-commerce consumer protection requirements).
- Uploaded files (cloud storage): Retained until you delete them or your account deletion is completed.
- Classroom membership history (join/leave records, user ID based): Retained for classroom statistics.
- Operational alert records: 90 days, then automatically deleted.
- Minimal record of deleted accounts (email, deletion date, reason): 5 years to prevent fraudulent re-registration, then destroyed.
Right to Refuse and Consequences¶
You have the right to refuse consent for the collection and use of your personal information. However, if you refuse consent for required items, you will not be able to create an account or use the Services.
Effective Date: July 29, 2026
For questions about this consent, please contact support@physicar.ai.
