Privacy Policy
This privacy policy includes information about what information Firstage collects, uses, and manages.
Firstage Inc. (hereinafter "Company") complies with personal information protection regulations under the Act on Promotion of Information and Communications Network Utilization and Information Protection, Personal Information Protection Act, and other relevant laws, and has established a personal information processing policy to do its best to protect user rights.
Through its personal information processing policy, the Company informs members and content subscribers (hereinafter "users") of the Firstage service (hereinafter "Service") about the items of personal information collected, the purpose of collection and use of personal information, the period of retention and use of personal information, and measures taken to protect personal information.
This privacy policy is effective from January 26, 2025.
Items of Personal Information Collected, Purpose of Use, and Method of Collection
The Company collects and processes the minimum personal information necessary for the smooth use of the service.
Member Registration and Management
- Purpose: Account creation, service access, identity verification, fraud prevention, customer support
- Required Collection Items: Name, email address, password, mobile phone number
- Optional Collection Items: Profile picture, company name, job title, department, affiliated organization, address, phone number
- Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1
AI Service Provision and Improvement
- Purpose: AI content generation, service quality enhancement, user experience improvement
- Generated Data: AI prompt history, generated content, service usage records, user settings and environment information
- Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1
Team/Organization Management
- Purpose: Collaboration features, workspace management, member permission management
- Collection Items: Team information, organizational structure, member permissions, shared content, workspace settings
- Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1
Service Advertising and Marketing
- Purpose: Personalized service provision, event notifications, new feature announcements
- Collection Items: Name, email address, mobile phone number, company information, service usage patterns
- Legal Basis: Personal Information Protection Act Article 22 (consent)
Payment and Settlement Processing
- Purpose: Payment processing, fee settlement, refund processing
- Required Items: For credit card payment - card number (partial), expiration date, first 2 digits of password, date of birth or business registration number
- Other Items: Billing address, payment history
- Legal Basis: Personal Information Protection Act Article 15 Paragraph 1 Item 1
For the purpose of analyzing usage behavior and handling errors for service improvement, IP address, cookies, service usage records may be collected during the service use process.
Cookie use: Users can choose whether to store cookies, and if they refuse to store cookies, there may be limitations in using services that require login.
Retention and Use Period of Personal Information
In principle, the Company destroys a member's personal information without delay when the member withdraws or the purpose of use is achieved. However, if relevant laws require retention of information for a certain period, the personal information is safely stored for that period.
Contract and Subscription Withdrawal Records
- Retention Reason: Act on Consumer Protection in Electronic Commerce, etc.
- Retention Period: 5 years
Payment and Supply Records
- Retention Reason: Act on Consumer Protection in Electronic Commerce, etc.
- Retention Period: 5 years
Consumer Complaints and Dispute Handling Records
- Retention Reason: Act on Consumer Protection in Electronic Commerce, etc.
- Retention Period: 3 years
Identity Verification Records
- Retention Reason: Act on Promotion of Information and Communications Network Utilization and Information Protection
- Retention Period: 6 months
Website Visit Records
- Retention Reason: Communications Secret Protection Act
- Retention Period: 3 months
Provision and Outsourcing of Personal Information
In principle, the Company does not provide personal information to external parties without the user's consent. However, exceptions include cases where there is a request under law or when statistical data is provided in a form that cannot identify specific individuals.
Google Cloud Platform (GCP)
- Outsourced Work: Cloud server operation and management, database management, Redis cache service
- Retention Period: Until member withdrawal or until the end of the outsourcing contract
Vercel
- Outsourced Work: Web application hosting and deployment service
- Retention Period: Until member withdrawal or until the end of the outsourcing contract
MIXPANEL, INC
- Outsourced Work: Service usage data analysis and user behavior pattern analysis
- Retention Period: Until member withdrawal or until the end of the outsourcing contract
Intercom, Inc
- Outsourced Work: Customer support, real-time chat, user communication
- Retention Period: Until member withdrawal or until the end of the outsourcing contract
AI Service Providers
- OpenAI, LLC: AI content generation and processing service (temporary processing, immediately deleted)
- Anthropic, PBC: AI content generation and processing service (temporary processing, immediately deleted)
- Google LLC (Gemini): AI content generation and processing service (temporary processing, immediately deleted)
AI Service Related Personal Information Processing
The Company processes personal information for AI-based service provision as follows.
AI Prompt and Generated Content Processing
- AI Prompts: User input prompts may be analyzed for service improvement and quality enhancement
- Generated Content: Text, images, etc. generated by AI are stored linked to user accounts
- No Use for Training Data: User prompts or generated content are not used for AI model training
Third-party AI Service Integration
- When using AI services such as OpenAI, Anthropic, Google Gemini, prompts are transmitted to those services
- Transmitted data is used only for AI response generation and is immediately deleted after processing completion
- Privacy policies of third-party AI service providers also apply
AI Data Retention and Deletion
- AI prompts and generated content are deleted together when the account is deleted
- Users can request deletion of their AI usage records at any time
Team/Organization Account Personal Information Processing
Team Administrator Rights
- Team administrators can check team members' service usage status
- Individual members' generated content or detailed activity history is viewable only by the member themselves
Data Processing when Organization Account is Terminated
- When an organization account is terminated, administrators are provided a 30-day data backup period
- All team data is completely deleted after the backup period ends
- Individual members can continue using the service with personal accounts after leaving the organization
Personal Information Destruction Procedure and Method
In principle, the Company destroys a user's personal information without delay when the user withdraws or the purpose of use is achieved.
- Electronic files: Deleted using technical methods that prevent recovery of records
- Paper documents: Shredded with a shredder or incinerated
Personal Information Protection Officer and Department
The Company has designated the following personal information protection officer to promptly and sincerely handle inquiries related to personal information.
- Name: Hoon Seol
- Position: CEO
- Inquiry:
- Email: support@firstage.ai
For other inquiries, you can contact the following institutions:
United States:
- Federal Trade Commission (FTC): https://www.ftc.gov/
- Consumer Financial Protection Bureau: https://www.consumerfinance.gov/
European Union:
- Your local Data Protection Authority: https://edpb.europa.eu/about-edpb/about-edpb/members_en
Other regions:
- Contact your local consumer protection or data protection authority
Request and Processing of Personal Information Deletion
The Company respects the user's right to self-determination of personal information and guarantees the right to request the deletion of personal information at any time.
Methods to Request Data Deletion
-
Deletion through Member Withdrawal
- Directly withdraw through the [My Page] > [Member Withdrawal] menu on the website
- All personal information related to the account is immediately deleted upon withdrawal
-
Deletion Request through Customer Center
- Email: support@firstage.ai
- Phone: [Phone number]
- Information required for request: Name, email address, range of data to be deleted
-
Deletion of Social Login Linked Data
- For data linked through social media such as Facebook, unlink from the app settings of the respective platform
- For Facebook: Facebook settings > Apps and Websites > Firstage > Remove
- Related data is immediately deleted when social media linking is removed
Processing Procedure and Time Required
- Processing begins within 24 hours after receiving the deletion request
- Processing is completed within a maximum of 7 days unless there are special circumstances
- The result is notified to the requester by email when processing is completed
Exceptions
Information that needs to be retained according to laws may be stored separately until the specified retention period, and this will be notified to the user when a deletion request is made.
Revision of Privacy Policy
The privacy policy may be changed according to laws and policies, and changes will be announced on the homepage from 7 days before implementation.
This privacy policy is effective from January 26, 2025.