Privacy Policy

JI Lab (business registration no. 719-08-03709) is the controller of the personal data described here.

122-dong 103-ho, Botdeul Maeul 1-danji, Sampyeong-dong, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea · jd@jidonglab.com · +82 10-6866-9282 · Weekdays 10:00–18:00 KST (closed weekends/holidays). Privacy contact: Ji Dongseok.

We have not appointed a representative under Article 27 GDPR. Our processing of EU, EEA and UK residents’ data is occasional, limited to what the Service needs, involves no large-scale processing of special-category data, and is unlikely to result in a risk to your rights, so the Article 27(2)(a) exemption applies. Write to jd@jidonglab.com in English and the controller answers you directly, within one month.

· Account: email, password (stored one-way hashed), name (optional).

· Service content: resumes, portfolios, job postings you paste, and the answers you give in a mock interview.

· Voice and transcripts: if you answer by speaking, your browser’s own speech recognition turns your speech into text. The audio does not reach our servers — we receive and store the resulting text only (Section 4).

· Reviews (optional): the rating, text, display name and job label you submit.

· Payment: handled by our payment processors (PortOne/NHN KCP in Korea, Polar as Merchant of Record overseas). We do not store card or bank details — only transaction records (payment identifier, amount, timestamp).

· Automatically: access logs, a visitor-ID cookie, device and browser info, IP address.

· Performance of our contract with you (Art. 6(1)(b) GDPR): creating and managing your account, delivering resume and portfolio reviews and AI mock interviews, granting and deducting passes, taking payment, refunds, and support.

· Legal obligation (Art. 6(1)(c)): keeping the transaction, withdrawal and dispute records that Korean e-commerce and tax law require (Section 6).

· Legitimate interests (Art. 6(1)(f)): preventing abuse and fraudulent payment, keeping the Service secure, and producing aggregate usage statistics to improve it. You may object at any time (Section 7).

· Consent (Art. 6(1)(a)): advertising-performance cookies, publishing a review you submit, reusing that review in our marketing, and contributing pseudonymised interview signals to aggregate benchmarks (off unless you turn it on). You may withdraw consent at any time; withdrawal does not affect processing already carried out.

We do not sell your personal data, and we do not give it to AI providers for training their models. AI-generated questions, evaluations and reports are reference material — they are not automated decisions that produce legal effects for you.

· Payments (Korea): PortOne (NHN KCP) — payment and settlement.

· Payments (overseas): Polar (Merchant of Record) — payment, settlement and tax.

· AI analysis: Anthropic (Claude API) — AI analysis/generation of your content.

· Interviewer voice: OpenAI — text-to-speech of the interviewer’s questions. The question text is sent to OpenAI; your own audio is not.

· Infrastructure: Vercel (hosting), Turso (database).

· Email: Resend — verification and notification emails.

· Advertising measurement, where configured: Google, Meta, Naver — conversion events. Browser-side events fire only after you accept the cookie banner; for a completed purchase we may also send a server-side event carrying your email and account identifier in hashed, irreversible form.

Speech recognition is a feature of your browser, not a processor we engage: Chrome sends the audio to Google, Safari to Apple, under their own privacy policies. Type your answers instead if you would rather not use it.

Anthropic, OpenAI, Vercel, Turso, Resend and Polar operate servers outside Korea (mainly in the United States). The data the Service needs — email, the content you enter, interview text, payment identifiers — is transferred over the network (API calls) at the moment you use the feature that needs it, and is held until the processing contract ends or you delete your account. Transfers rely on the standard contractual clauses and data processing agreements we have with each processor. You may decline international transfer by contacting jd@jidonglab.com, in which case the features that depend on it (AI analysis, interviewer voice, payment) become unavailable.

· Account data and the content you enter: until you delete your account.

· Accounts that never complete email verification: deleted automatically 24 hours after sign-up.

· Records Korean law requires us to keep after that: contract, withdrawal-of-purchase and payment records — 5 years; consumer complaint and dispute records — 3 years (Act on Consumer Protection in Electronic Commerce); access logs — 3 months (Protection of Communications Secrets Act).

· Visit analytics (page views) and the visitor-ID cookie: 180 days.

· Reviews: published until you or we take them down. We keep a record of every takedown — the text, rating, and when and by whom it was taken down — as evidence that we do not suppress reviews. When the author’s account is deleted, the review itself is deleted and that record is stripped of the author’s name and re-keyed to an irreversible hash.

· What outlives account deletion: payment and settlement records, pass grant and spend ledgers, service usage logs (feature used, model, timestamp, cost), and activity history (the type, score, role label and time of each interview or portfolio review) are kept for accounting reconciliation and usage statistics. The account identifier in them is replaced with an irreversible hash, so they no longer point to a person. What you entered and the body of what came back — résumé, portfolio, interview answers, the report text, the role title you typed — is deleted with the account.

Once a purpose is fulfilled we delete the data without undue delay and irrecoverably.

Wherever you live, you can ask us to give you access to your personal data, correct it, delete it, restrict our processing of it, or hand you a portable machine-readable copy. You can object to processing we base on legitimate interests, and withdraw any consent you have given.

Email jd@jidonglab.com from your account address — there is no fee, and we answer within one month. You can edit your profile in account settings and delete your account there yourself; data export is handled on request at that address.

You can also complain to a supervisory authority: in the EU/EEA, your national data protection authority (list at edpb.europa.eu); in the UK, the ICO (ico.org.uk); in Korea, the Personal Information Dispute Mediation Committee (privacy.go.kr, 1833-6972) or the KISA report centre (privacy.kisa.or.kr, 118).

Categories of personal information we collect: identifiers (email, name, visitor ID, IP address), commercial information (purchases and passes), internet activity (pages viewed, referrer), professional information (resume, portfolio, interview answers), and audio-derived content (your spoken answers as text) — for the business purposes in Section 3.

We do not sell personal information for money, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit. If you accept advertising cookies, advertising platforms receive event data, which California law may treat as “sharing” for cross-context behavioural advertising — declining or withdrawing that consent (Section 10) is your opt-out.

You may exercise the rights to know, delete, correct and opt out, and we will not discriminate against you for doing so. Email jd@jidonglab.com; an authorised agent may act for you with your written permission.

We apply one-way password hashing, access control, encryption in transit (HTTPS), and access-log retention as administrative and technical safeguards.

A first-party visitor-ID cookie (httpOnly, 180 days) lets us count visits and popular pages; it holds no email or IP address and is not used to follow you across other sites. Advertising-performance cookies are set only if you accept them below, and you can change or withdraw that choice at any time. You can also refuse cookies in your browser settings, though some features may then be limited.

The Service is intended for job seekers. Do not create an account if you are under 16 (under 14 in Korea) without your legal guardian’s consent; if we learn we hold such data without that consent, we delete it.

This policy takes effect on the day it is posted. We announce material changes at least 7 days before they take effect.

This English text is provided for convenience only. In case of any conflict, the Korean version prevails. Nothing in this policy limits the rights you have under the mandatory law of your country of residence.