Privacy Policy

SOL LABS AI (the "Company") complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws, and establishes and discloses this Privacy Policy to protect users' personal information.

Effective date: October 13, 2026 (change notice: October 6, 2026 · previous policy effective January 1, 2025) · Instagram comment auto-DM items effective: October 18, 2026 (change notice: October 11, 2026)

Art. 1 (Personal information collected)

The Company collects the following personal information to provide its services.

[Required items]

• Consultation request: name, email (optional: company name, phone number, inquiry type, how you found us, message)

• AI Readiness Check detailed report request: email and answers (choices for each question such as industry, headcount and repetitive tasks) (optional: company name, name, a one-line task to fix, consent to marketing messages)

• New post and news alerts: email, whether and when marketing consent was given

• Online payment: orderer's name, email, mobile number, ordered product and amount, payment method and approval details (optional: company name, requests, tax invoice details — business registration number, company name, representative, invoice email). Card numbers and other payment details are processed directly by Toss Payments and are not stored by the Company.

• AI demo services: information contained in uploaded files (company profiles, recordings, contracts, etc.) and entered text

• Member sign-in (customer portal): name (nickname), email, profile picture URL, sign-in method (Google · Kakao · email link) and the account identifier provided by that method

• Instagram comment auto-DM (when you comment with a keyword announced on an Instagram @ai.worktip post): Instagram user ID, username, comment text, sending record (comment and post numbers, date and time, result) — the comment text is used only to check the keyword and is not stored.

[Automatically collected items]

• Service usage records, access logs, IP address, browser type and OS

• Referral information: campaign values from ad links (utm, etc.), landing page and referring page — sent along with consultation and AI Readiness Check report requests.

• Visit records: page addresses viewed, actions such as button clicks, referral source, device type (mobile · PC) and a random number created per browser session — no IP address, name or other personally identifiable information is stored.

Art. 2 (Purposes of collection and use)

The Company uses the collected personal information for the following purposes.

① Service delivery: AI adoption consulting analysis and tailored solution proposals

② Customer support: receiving and handling inquiries, running consultations

③ Service improvement: understanding usage and improving service quality

④ Payment and contract performance: order confirmation, payment approval, cancellation and refund, tax invoices, schedule updates

⑤ Marketing: announcing new posts and services, measuring ad performance (marketing messages only with prior consent)

⑥ Customer portal: providing signed-in customers with purchase and consultation history, weekly project reports, notes and files

⑦ AI Readiness Check: sending the detailed report and consultation guidance based on the results

⑧ Instagram comment auto-DM: sending the requested material by Instagram DM, and preventing duplicate sends for the same comment

Art. 3 (Retention period)

In principle, personal information is destroyed without delay once the purpose of collection and use is achieved. However, where retention is required by law, it is kept as follows.

• Records on contracts or withdrawal of subscription: 5 years (E-Commerce Act)

• Records on consumer complaints or disputes: 3 years (E-Commerce Act)

• Access logs: 3 months (Protection of Communications Secrets Act)

• Records on payment and supply of goods: 5 years (E-Commerce Act)

• Tax records such as tax invoices: 5 years (Value-Added Tax Act · Framework Act on National Taxes)

• Inquiry and consultation records: 1 year

• AI Readiness Check report request information (email, company name, name, answers): 1 year from the request date

• New post and news alert subscriptions: until you unsubscribe

• Member information (customer portal): until you request account deletion (deleted without delay upon email request)

• Visit records: 1 year from collection

• Instagram comment auto-DM records (user ID, username, sending record): 90 days after sending (deleted automatically every day once the period ends)

• Files uploaded to AI demos: used only for analysis and not kept. Recordings are deleted immediately after transcription. Demo results are stored only in your browser.

Art. 4 (Provision to third parties)

In principle, the Company does not provide users' personal information to third parties, except in the following cases.

① When the user has given prior consent

② When required by law, or when requested by investigative authorities following legal procedures and methods for investigation purposes

Art. 5 (Outsourcing of processing)

The Company may outsource the processing of personal information as follows to improve its services.

Personal information is transferred to the overseas processors above over the network at the time the service is used, solely to perform the outsourced tasks. If you do not want this transfer, you may refrain from using the relevant services (such as AI demos) or request suspension of processing by email.

Contracts with processors include provisions to keep personal information safe, and any change of processor will be announced through notices or this policy.

Art. 6 (User rights and how to exercise them)

Users may exercise the following privacy rights against the Company at any time.

① Request access to personal information

② Request correction of errors

③ Request deletion

④ Request suspension of processing

Requests can be made by email (contact@sollabsai.com), and the Company will notify you of the result within 10 days of receiving the request.

To request deletion of Instagram comment auto-DM records, see the Data Deletion Instructions.

Art. 7 (Destruction of personal information)

The Company destroys personal information without delay when it is no longer needed, such as when the retention period expires or the purpose of processing is achieved.

• Electronic files: permanently deleted using technical methods that prevent recovery

• Paper documents: shredded or incinerated

Art. 8 (Privacy officer)

The Company designates the following privacy officer, who is responsible for overseeing personal information processing and for handling user complaints and remedies related to it.

• Name: Dongkwang Lee

• Title: CEO

• Email: contact@sollabsai.com

Art. 9-2 (Cookies, analytics and ad tools)

The Company uses Vercel Web Analytics for visit statistics; it does not use cookies and aggregates data in a non-identifying form. If the Company uses Google Analytics, Google Ads, Naver, Kakao or Meta Pixel to measure ad performance, those tools may collect visit and conversion information through cookies or similar technologies, and the tools in use will be added to this policy. You can refuse cookies in your browser settings.

Art. 9 (Changes to this policy)

This Privacy Policy applies from its effective date. Any additions, deletions or corrections due to laws or policy will be announced through notices at least 7 days before they take effect.

This policy takes effect on October 13, 2026. (Main changes: consultation, alert, online payment, member sign-in (customer portal) and AI Readiness Check items, visit records, processors (Neon added), and notice of analytics and ad tools added)

Items related to the Instagram comment auto-DM (Articles 1, 2, 3, 5 and 6) were announced on October 11, 2026 and take effect on October 18, 2026.