Terms of service
Version 2026-07-20
Privacy Policy
Privacy terms for trusted cultural exchange.
This launch notice explains what saii collects, why it is used, and which account controls are available before final Korean counsel review.
Current required consents
Privacy policy
Version 2026-07-20
Sensitive data processing
Version 2026-07-20
Terms of Service, Privacy Policy, and sensitive-data processing acceptance are recorded as versioned consent evidence.
Data we collect
Account identity, social-login references, verified phone status, school or work affiliation-verification metadata, profile details, interests, posts, comments, chat metadata, profile-view analytics, reports, blocks, device registrations, consent records, safety moderation/throttle metadata, identity-verification metadata, and subscription entitlement state.
School and work email verification
The full email address and one-time code are encrypted only while Brevo delivers the verification email, then redacted. We retain a masked address, keyed digest, domain, verification status, review history, and expiry so we can prevent duplicate claims and show an accurate organization email badge.
Profile-view analytics
Public profile opens are stored as one aggregate row per viewer and viewed profile, including view count and last-viewed time. These include profile views you made and profile views received.
Sensitive-data processing
Identity verification is vendor-SDK based. Rails stores verification metadata only, rejects direct document uploads, and keeps production KYC provider work behind the post-review webhook boundary.
Provider and billing posture
Premium access, calling, push delivery, and identity checks use provider boundaries so sensitive data and account controls stay separated.
OpenStreetMap tiles
When you use the city map, OpenStreetMap tile requests may receive your IP address, browser and request data, and the requested city-centroid map area. No precise device location is sent. Read OpenStreetMap's privacy policy.
Your controls
The account deletion page explains the web request path, the 30-day recovery window, and which data may be retained for security, fraud prevention, legal, or audit reasons.
Can't sign in, or need a copy of your data? Email us and we'll handle it as a manual request.
PIPA counsel review
This page is the product-facing implementation surface for launch review. Final legal copy, retention periods, deletion wording, and Korean PIPA consent language still need Korean counsel approval before public launch.