Toggle AI Privacy Policy
Prism Labs (“Prism Labs”, “we”, “us”) operates Toggle AI (https://toggle-ai.prismlab.dev, the “Service”). We comply with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and we publish this Privacy Policy to explain how we handle your personal information.
1. What We Collect and Why
We process only the personal information needed for the following purposes.
| Category | Purpose | Information |
|---|---|---|
| Account registration and management | Creating your account, verifying your identity, providing the Service and responding to inquiries, detecting and preventing misuse, sending service notices | Email (ID), password, username / (social sign-in) linked account ID / (phone verification) mobile phone number |
| Providing and improving the Service | Generating AI responses, storing and retrieving conversations, improving service quality, detecting and preventing misuse, statistics and analytics | User content (prompts, uploaded documents and images, highlights, pins, and notes), usage records (visit timestamps, IP address, feature usage logs), cookies, device information (browser and OS type, unique identifiers), country of access |
| Marketing (optional) | Sending promotional information such as new feature and event announcements | Email, (phone verification) mobile phone number |
2. How Long We Keep It
- Account registration and management information: until you close your account. To prevent misuse, we keep your email for 30 days after account closure and then delete it.
- User content and usage records: until you close your account. After closure, conversation data is pseudonymized so that it cannot identify you and retained for statistics and analytics; it is deleted once that purpose is fulfilled.
- Marketing information: until you close your account or withdraw consent.
- Where applicable law requires retention, we keep the information for the required period:
- Access logs (Protection of Communications Secrets Act): 3 months
- Records of contracts and withdrawals, payments, and consumer complaints or disputes (Act on Consumer Protection in Electronic Commerce): 5 years, 5 years, and 3 years respectively (applies once paid services are introduced)
3. Processors and International Transfers
We entrust the following processors with personal information to provide the Service. These processors are located outside the Republic of Korea.
| Processor (country) | Entrusted task | Information transferred | When and how | Retention period |
|---|---|---|---|---|
| Anthropic, PBC (United States) | Generating AI responses | Prompts, conversation context, uploaded documents and images | Transmitted via encrypted API when you request an AI response | Until API processing is complete (retained up to 30 days for abuse detection under the processor’s policy) |
| xAI, Inc. (United States) | Generating AI responses | Prompts, conversation context, uploaded documents and images | Transmitted via encrypted API when you request an AI response | Until API processing is complete (per the processor’s policy) |
| Mixpanel, Inc. (United States) | Usage statistics and analytics | Usage records, device information, pseudonymized user ID | Transmitted over the network while you use the Service | Until you close your account or the processing agreement ends |
| Amazon Web Services, Inc. (United States) | Service infrastructure and data storage | All information listed in Section 1 | Transmitted and stored over the network while you use the Service | Until you close your account or the processing agreement ends |
Our agreements with processors require compliance with data protection laws, prohibit use for any other purpose, require security measures, and restrict sub-processing, and we supervise our processors accordingly. If you do not wish your information to be transferred abroad, you can stop the transfer by closing your account; the Service cannot be used without these transfers.
4. Sharing with Third Parties
We do not share your personal information with third parties beyond the purposes described in Section 1, except where you have separately consented or where a lawful request is made by a law enforcement agency or court under applicable law.
5. Deletion
We delete personal information without delay once the retention period has expired or the purpose has been fulfilled. Electronic files are deleted in a manner that prevents recovery, and printed materials are shredded or incinerated. Information that must be retained by law is stored separately.
6. Your Rights and How to Exercise Them
You may at any time request access to, correction or deletion of, or suspension of processing of your personal information, and you may withdraw consent. You can do this directly in your account settings or by emailing help@prismlab.dev; we will act on your request within 10 days. If you exercise these rights through a legal representative or an authorized agent, a power of attorney is required. Requests may be limited where applicable law restricts them.
7. Cookies and Analytics
We use cookies to keep you signed in and to analyze how the Service is used, and we use Mixpanel as our analytics tool. You can refuse or delete cookies in your browser settings. If you refuse cookies, some features such as sign-in may not work properly.
8. Security Measures
We take the following measures to keep your personal information secure:
- Encryption of passwords and sensitive information, and encryption in transit (TLS)
- Minimized access to personal information and retention of access logs
- Separate storage of the additional information needed to re-identify pseudonymized data, and a prohibition on re-identification
- Minimized number of staff handling personal information, and staff training
9. Children Under 14
The Service is not directed at children under 14, and we do not collect personal information from children under 14. If we learn that a child under 14 has registered, we delete the account without delay.
10. Privacy Officer
You may direct inquiries, complaints, and requests for remedy regarding personal information to our Privacy Officer.
- Privacy Officer: Hyukjun Kwon (Ringo Kwon), CEO
- Email: help@prismlab.dev
You may also contact the Korea Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 in Korea) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, +82-1833-6972).
11. Beta Notice
The Service is currently operated as a private beta, and data may be reset during the beta. We will give at least 14 days’ notice before the beta ends. If you do not keep your account after the beta ends, conversation data will be pseudonymized and retained as described in Section 2.
12. Changes to This Policy
If we add, remove, or change any part of this Policy, we will notify you in the Service or by email at least 7 days before the change takes effect. For changes that materially affect your rights, we will give at least 30 days’ notice.
13. Contact
Questions about this Policy: help@prismlab.dev
Related: Terms of Service · 서비스 이용약관 · Website privacy