Consent for Cross-Border Transfer of Personal Information¶
This document is provided for users in the Republic of Korea in accordance with the Personal Information Protection Act (PIPA).
AI Castle Inc. ("Company") transfers your personal information to entities located outside the Republic of Korea as described below. Please review the details carefully.
Details of Cross-Border Transfers¶
| Recipient | Country | Items Transferred | Purpose | Method | Retention Period |
|---|---|---|---|---|---|
| OpenAI, Inc. | United States | Chat messages (text content only) | AI response generation using GPT models | Encrypted transmission via API (through Cloudflare AI Gateway) | Real-time processing; up to 30 days for abuse monitoring |
| Cloudflare, Inc. | United States (primary); Global edge network (300+ locations) | All data transmitted through the platform, including account information, session data, stored files | Platform hosting, CDN, edge computing, data storage (D1 database, KV store, R2 object storage), security services | Encrypted transmission and storage across global infrastructure | Duration of service provision; logs up to 12 months |
| Resend, Inc. | United States | Email address | Transactional email delivery (account verification, password reset) | Encrypted transmission via API | Duration of email delivery |
Data Protection Measures¶
The Company implements the following measures to protect your personal information during cross-border transfers:
- Encryption in Transit: All data is transmitted using TLS/HTTPS encryption.
- Encryption at Rest: Stored data is encrypted at rest where supported by the infrastructure provider.
- Access Controls: Access to personal information is restricted to authorized personnel and systems.
- Contractual Safeguards: We maintain data processing agreements with each third-party provider that include obligations regarding data protection.
- Security Standards: Our service providers maintain industry-standard security certifications and practices.
Contact Information of Recipients¶
| Recipient | Contact | Website |
|---|---|---|
| OpenAI, Inc. | privacy@openai.com | openai.com |
| Cloudflare, Inc. | privacyquestions@cloudflare.com | cloudflare.com |
| Resend, Inc. | privacy@resend.com | resend.com |
Right to Refuse and Consequences¶
You have the right to refuse consent for the cross-border transfer of your personal information. However, as these transfers are essential to the operation of the Service, refusal of consent means you will not be able to use the Service.
For questions about this consent, please contact contact@physicar.ai.
