Privacy Policy

Last updated: May 2026

1. Overview

Conc ("we", "us", "our") operates an AI-powered material recommendation service for interior and architecture designers. This Privacy Policy explains how we collect, use, and protect your personal information.

We are committed to complying with the Korean Personal Information Protection Act (PIPA) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

We collect the following categories of personal information:

  • Account information: Email address, name, and profile data via Google OAuth (processed by Better Auth)
  • Service data: Conversation history, AI recommendation results, and material search records (stored in Convex)
  • Analytics data: Usage events (signup, signin, signout, workspace creation, etc.) and AI quality metrics (processed by PostHog)
  • Payment information: Subscription and billing data (processed by Polar as Merchant of Record — we do not store card details directly)
  • Cookies: Session authentication cookie (Better Auth) and market preference cookie (CONC_MARKET)

3. Purpose of Collection

We use your information for the following purposes:

  • Providing and improving the AI material recommendation service
  • Account authentication and session management
  • Processing subscription payments
  • Analyzing service usage to improve quality
  • Monitoring AI recommendation accuracy and performance
  • Communicating service updates and support

4. Third-Party Sharing

We share personal information with the following third parties solely for service provision:

  • Google: OAuth authentication (profile data for login)
  • PostHog: Analytics events and AI quality monitoring
  • Polar: Payment processing (as Merchant of Record)
  • Convex: Database infrastructure (data storage and real-time sync)

5. Data Retention

We retain your personal information for as long as your account is active. Upon account deletion request, we will remove your personal data within 30 days. Anonymized analytics data may be retained for service improvement purposes.

6. Your Rights

You have the right to:

  • Access your personal information
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent for data processing
  • Request data portability (where technically feasible)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

8. International Transfers

Your data may be processed in countries outside Korea, including the United States (where our infrastructure providers operate). We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

9. Contact

For questions about this privacy policy or to exercise your rights, contact us at: support@concseoul.com

Conc / 콩크