Privacy Policy

Document version 2026-09-20.3 · Previous document

English translation of the Korean document. The original document and consent version are preserved.

1. Controller and contact

Simon West processes REAL VOICE account and service operation information. Privacy and complaint contact: Simon West / simonwest.research@gmail.com. The study creator or their organization determines the purpose and collected information for each study. REAL VOICE stores and processes study materials under their instructions and separately manages information needed to operate the service. Participants can first exercise their rights through the contact listed in the study information; the Operator also assists in forwarding and handling requests as necessary.

2. Account information: categories, purposes, and basis

Required information includes the authentication email, authentication provider and user identifiers, chosen display name, terms version, consent time, acknowledgment of the privacy notice, and confirmation of age 14 or older. This is processed for sign-in, registration, contract performance, and permission checks. When using Google sign-in, basic profile information supplied by Google, such as name and profile image, may be included in the shared authentication system; Google passwords are not received. Optional information includes profile image, language, time zone, notification preferences, and a separately registered contact email. Profile images are stored as reduced-size thumbnails with metadata removed. Marketing preferences are separately selected and withdrawn, not combined with required registration consent.

3. Team, study, and participation information

We manage team and project names, memberships, roles, invitations, permission-change history, study purposes, reference materials, questions, guides, and publication versions. Researchers choose participation with or without sign-in. Signed-in participation separately stores links between account and study-specific participation identifiers so responses can resume across devices. The researcher sets duplicate prevention and whether submitted surveys can be edited; these settings appear in the participation notice. Editing is possible before collection closes and before starting an interview or linked study. Guest participation resumes through a random participation cookie without account linkage, duplicate prevention, or post-submission editing. Deleting cookies or changing devices may prevent recovery of that response. Account linkage, sign-in email, and display name are not automatically provided in researchers' response views, exports, or AI input. If participants put identifying information in an answer, researchers can see it, so anonymity is not guaranteed. Future cross-study profiling, recommendations, or additional uses will have their actual purpose, scope, and legal basis separately explained; current registration or participation is not blanket consent. Participation processes a random identifier, notice and consent records, stages, timestamps, status, survey answers, interview questions and original answers, and structured records grounded in those originals. The researcher's purpose, fields, retention deadline, and lawful basis are described in the study notice. Sharing survey answers as interview context requires displaying the relevant questions and a separate choice. Interviews currently use text chat; microphone input and voice recordings are not collected. Do not include unnecessary identifying or sensitive information in answers or materials.

4. AI processing

When a member uses AI features or a participant answers an AI interview, necessary study context, authorized material sections, the same participant's conversation, and survey answers approved for sharing are sent through OpenRouter to the selected model provider. Other participants' conversations and entire team materials are not sent together. Sign-in itself does not call AI. Model and call IDs, token counts, costs, latency, errors, and attributable account, team, and study identifiers are recorded in the usage ledger; original answers are not copied into that ledger. REAL VOICE does not use original study materials to train general-purpose models and uses request settings that disallow model-provider collection for training. These settings do not guarantee immediate deletion or zero retention by every provider. Review the provider retention terms and transmission scope below.

5. Processors and external services

Supabase: authentication, database, and private material storage. The primary database region is currently Seoul, Republic of Korea. Vercel: web hosting, server request processing, delivery, security, and incident operation records. The configured application server region is currently Seoul; a global delivery network and provider operation systems may be used. OpenRouter and the model provider for each call: AI request routing, inference, and usage settlement. Only necessary inputs and results are processed when AI features are used. Resend (Plus Five Five, Inc.): registration, sign-in, and identity-verification emails. It processes email addresses, message bodies containing verification codes or links, and transmission and delivery status. Sending is from Tokyo, Japan; the provider's primary operations and processing are in the United States. Email open and click tracking are not used. Original study responses are not included in authentication emails. Google: the sign-in provider selected by the member, processing authentication under its own policies. The Operator reviews necessary processing arrangements and safeguards and does not sell materials for advertising. Disclosures required by law or third-party disclosures needing separate consent distinguish recipients, purposes, and information categories. Authorized project members can view materials within their configured scope.

6. International processing and verification status

A primary database in Seoul does not mean all information is processed only in Korea. Supabase's overseas operations and support, Vercel's network and operations, overseas processing routes of OpenRouter and model providers, and Resend's Japanese sending and US operations may be involved. Features requiring international transfers must identify recipients, countries, contact details, information categories, purposes, timing and methods, retention periods, and refusal methods, and apply notices or separate consent appropriate to the legal basis. The actual transfer countries, contractual retention periods, and contact details for each provider are currently undergoing final verification. We do not promise Korea-only processing, zero retention, or compliance with every country's laws for unverified routes. Until verification is complete, do not launch real studies containing external participants' personal information; contact the Operator first. If you do not want international processing, you can avoid the feature or request that processing stop. A feature may be unavailable if its necessary processing is not accepted.

7. Retention and deletion

Account-to-participation links: until the earlier of the response retention deadline or leaving the service. Links without started participation are cleaned up after two days. Leaving deletes the account link; lawfully collected original responses follow the disclosed retention period and deletion-request process. Account profiles, service registration consent, and preferences: until REAL VOICE account deletion is processed. Shared authentication accounts are handled after separately checking use of other services. Study responses, conversations, and structured records: until the retention deadline disclosed at participation or completion of a lawful deletion request. Access is blocked at expiration, and scheduled cleanup deletes originals, derived records, and linked files. Deletion failures are tracked operationally. Study designs and references follow study and project deletion rules and published-material retention conditions. Temporary signup input in the current tab: until registration completes or the tab closes. Participation recovery data is cleaned up at completion or expiration. Daily transformed identifiers for participation rate limits: records older than two days are periodically removed. Cost and operation histories are kept separately from originals for cost verification and recovery. Settled and canceled call records are periodically removed one year after the later of creation and settlement; operational change records are retained for one year after the event. Minimal records containing account, team, or study IDs may remain for these periods after account or product data deletion. Unconfirmed or processing cost records are kept until settlement or recovery completes and are not arbitrarily treated as free. Contact us for access, deletion, or suspension requests. Legally required retention distinguishes categories, grounds, and periods and is not used for other purposes.

8. Deletion process and shared materials

Account and data deletion requests are processed after verifying the person or authorized representative and the target materials. Electronic materials are deleted from operational storage, including private files, generated export files, and structured records. Leaving individually does not delete all shared materials belonging to other team members. Researchers holding downloaded copies must manage those copies. Provider backups are not represented as all disappearing at the same time as operational database deletion. If restoration is necessary, completed deletion requests are reapplied.

9. Cookies, devices, and access records

Authentication cookies maintain sign-in and verify permissions; signed-in studies resume responses using account-linked participation records. Guest studies use random identifiers in HttpOnly participation cookies and do not automatically link them to accounts. Participation cookies expire within one year, while response access is blocked earlier at the disclosed retention deadline. localStorage may hold display mode and necessary recovery state; sessionStorage may hold signup progress in the current tab. Display mode initially follows device preferences and can be changed in personal settings. Browsers can block or delete cookies and site data, but sign-in and resuming may then fail. REAL VOICE's device list records browser and device descriptions and recent activity without copying location or raw IP addresses. Participation rate limiting uses hashes that change daily rather than raw IP addresses. Hosting and authentication providers may process connection information needed for security and delivery in their own systems. Advertising tracking tools are not installed.

10. Safeguards and access scope

Safeguards include encrypted communications, server-side session and permission checks, team and project access controls, private file storage, server-side secret storage, and usage and change records. Service administrator status alone does not permit viewing original study materials; project permission is required. The Operator limits personnel and access to what is needed for incident response and rights requests. Confirmed security incidents trigger notification and reporting under applicable law, harm mitigation, and recovery.

11. Data subject rights

Individuals or their authorized representatives can request access, correction, deletion, processing suspension, withdrawal of consent, and account deletion. They can also ask about rights to personal information transfer or concerning automated decisions under applicable law. AI currently supports questions and record organization and is not offered for automated decisions producing legal or similarly significant effects on individuals. Requests are handled within statutory periods after minimal necessary identity verification. If restricted, the grounds and objection methods are explained. We aim to reply to general inquiries within ten days and provide progress updates when further checking is needed. Acknowledging that this policy was read is not blanket consent to collection, disclosure, or international transfer of personal information.

12. Changes and remedies

When this policy changes, we announce the changes and effective date and obtain any legally required separate consent. Previous documents and consent versions can be reviewed separately. Send privacy inquiries to simonwest.research@gmail.com. If the matter cannot be resolved with the Operator, remedies may be available through competent bodies such as the Personal Information Protection Commission, Privacy Infringement Report Center, or Personal Information Dispute Mediation Committee. Mandatory rights of overseas residents and rights to complain to a competent supervisory authority are not limited.