Sign up and save materials to a board

Privacy Policy

Last updated: October 2026

1. Overview

Conc Corporation ("we", "us", "our") operates an AI-powered material recommendation service for interior and architecture designers. This Privacy Policy explains how we collect, use, and protect your personal information.

We are committed to complying with the Korean Personal Information Protection Act (PIPA) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

We collect the following categories of personal information:

  • Account information: Email address, name, and profile data via Google OAuth (processed by Better Auth)
  • Service data: Conversation history, photos you upload, AI recommendation results, and material search records (stored in Convex)
  • Analytics data: Usage events (signup, signin, signout, workspace creation, etc.), AI quality metrics, and session recordings of your interactions with the service (processed by PostHog)
  • Payment information: Subscription and billing data. Card details are processed by Polar (overseas cards) or PortOne and NICE Payments (Korean cards) — we do not store card numbers
  • Cookies: Session authentication cookie (Better Auth), market preference cookie (CONC_MARKET), and analytics cookies (PostHog)
  • Device information: The browser and operating system of each device signed in to your account, and when it was last used — to keep one account to two devices at a time (Terms, Account Responsibilities)
  • Supplier inquiries: The contact details and message you enter when sending an inquiry to a supplier, and the replies you receive

3. Purpose of Collection

We use your information for the following purposes:

  • Providing and improving the AI material recommendation service
  • Sending supplier inquiries on your behalf and keeping the replies on your board
  • Account authentication and session management
  • Processing subscription payments
  • Analyzing service usage to improve quality
  • Monitoring AI recommendation accuracy and performance
  • Communicating service updates and support

4. Sharing with Third Parties

We give personal information to a third party only in the following case:

  • Suppliers: When you send an inquiry, the supplier receives your name, contact details, and message so they can answer it. They keep it for as long as their own policy allows

5. Processors

We entrust the following companies with processing personal information to run the service. Each entry shows the company, where it processes data, how to contact it, and the work entrusted.

  • Vercel Inc. (United States, vercel.com): Website hosting
  • Convex, Inc. (United States, convex.dev): Database and file storage
  • Cloudflare, Inc. (United States and worldwide, cloudflare.com): Image delivery
  • PostHog Inc. (United States, posthog.com): Usage analytics, session recording, and AI quality monitoring
  • Anthropic PBC (United States, anthropic.com): AI responses to your conversations and photos
  • Google LLC (United States, google.com): AI image analysis and generation
  • Typesense, Inc. (United States, typesense.org): Material search
  • Mux, Inc. (United States, mux.com): Video playback
  • ActiveCampaign, LLC (Postmark, United States, postmarkapp.com): Email delivery and relaying supplier replies
  • Help Scout PBC (United States, helpscout.com): Customer support
  • Discord Inc. (United States, discord.com): Internal notifications to our team
  • Polar Software Inc. (United States, polar.sh): Overseas card payments
  • Stibee Inc. (Korea, stibee.com): Newsletter delivery
  • PortOne Korea and NICE Payments (Korea, portone.io, nicepay.co.kr): Korean card payments

6. International Transfers

Of the processors above, those outside Korea receive your personal information over the network, at the time you use the service, to perform the work listed for them. We transfer it under PIPA Article 28-8(1)(3), as it is needed to provide the service you signed up for.

They keep it until you delete your account or our contract with them ends.

You can refuse the transfer by contacting us at the address below or by deleting your account. Because these processors run the service itself, refusing means you cannot use the service.

7. Data Retention and Destruction

We retain your personal information for as long as your account is active. Upon account deletion request, we will remove your personal data within 30 days. Anonymized analytics data may be retained for service improvement purposes.

Records the law requires us to keep, such as contract and payment records under the Korean E-Commerce Act (5 years), are stored separately for that period only.

We destroy electronic data so that it cannot be recovered.

8. Your Rights

You have the right to:

  • Access your personal information
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent for data processing
  • Request data portability (where technically feasible)

9. How to Exercise Your Rights

Email support@concseoul.com to exercise any of these rights, including withdrawing consent. We will act on your request without delay.

10. Cookies

You can refuse cookies in your browser settings. If you refuse the session cookie, you cannot sign in.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

12. Privacy Officer and Contact

Privacy officer: Operations team, support@concseoul.com

For questions about this privacy policy, contact the address above.

Conc Corporation / 콩크 주식회사