Privacy Policy

Personal Data Collected

We collect the following personal data.

A. Consultation inquiry (required)

• Name, email address, phone number
• Region of residence, preferred contact channel, language
• Space type, estimated area, budget, preferred timeline, household composition
• Message and file attachments (photos, drawings, etc.)
• Privacy collection & use consent

B. Automatically collected

• IP address, access timestamp, browser & device info, language setting
• Cookies and localStorage (for storing language preference)

C. AI tool usage

• Style chatbot — content of your messages
• AI Redesign — uploaded room photos (not stored, discarded immediately after processing)
• Auto estimator — non-identifying inputs (area, scope, material grade). Computation runs in your browser, never sent to server.

Purpose of Collection

• Responding to consultations and proposing designs
• Preparing estimates and contracts
• Scheduling and progress communication during construction
• Post-completion aftercare and customer satisfaction
• Generating AI tool results (never used for model training)
• Aggregated, de-identified statistics for service improvement

Retention and Disposal

We dispose of personal data without delay once the purpose of collection is achieved.

Disposal method: Electronic files are permanently deleted in an unrecoverable manner. Any paper printouts are shredded.

Data Processing Sub-Processors

We delegate certain operations to the following service providers. They handle data securely under this policy.

We disclose the cross-border transfer to these processors. All carry SOC 2 or equivalent security certifications. Per its terms, the Anthropic API does not use customer data for model training.

Third-Party Disclosure

We do not disclose personal data to external parties, except in the following cases.

• When the user has given prior consent
• When required by law or by an investigative authority (following due legal process)

Your Rights

You may exercise the following rights at any time.

• Right to access — view the personal data we hold about you.
• Right to correct / delete — request modification of inaccurate data, or full deletion.
• Right to restrict processing — request that we pause processing.
• Right to withdraw consent — withdraw your consent (note: ongoing consultations may be stopped).

How to exercise: send a written (email) request to the contact below. We respond within 7 business days.

AI Service — Special Notices

We offer three AI tools on this site. Each tool processes data as described below.

Cookies and Tracking

• localStorage — stores your language choice (ko/en/vi). Contains no personally identifying info.
• Google Analytics 4 + Vercel Speed Insights — used for visitor analytics and page-performance (Web Vitals) measurement. We ask for your consent via a banner on your first visit; trackers only load if you accept. IPs are anonymized before transmission and individuals are not identified.

You can change your cookie choice anytime via the "Cookie settings" link in the footer, and also disable cookies and localStorage from your browser settings.

Security Measures

• Transport-layer encryption (HTTPS / TLS 1.2+)
• Principle of least privilege for access (limited to CRM operators)
• Regular rotation of API keys and auth tokens (quarterly)
• Mandatory two-factor authentication for admin accounts
• Bot / spam protection (honeypot · rate limit · input validation)

Data Protection Officer

Policy Changes

This policy may be revised in response to legal, policy, or security-technology changes. When revised, we update the effective date at the top of this page; significant changes will be announced on the home page.

Revision history: First effective on 2026-05-20