ReleaseGate (the "Company") values the privacy of its users and complies with the Personal Information Protection Act and relevant data protection laws.
We collect the following personal information to provide our services:
| Item | Purpose | Retention Period |
|---|---|---|
| Google Account ID | User identification and login | 1 month after account deletion |
| Email Address | Service notifications, inquiry response | 1 month after account deletion |
| Name | Display within service | 1 month after account deletion |
| Profile Picture | Display within service | 1 month after account deletion |
| Item | Purpose | Retention Period |
|---|---|---|
| Phone Number | Emergency contact, service notifications | 1 month after account deletion |
| Company/Organization | Context for release evaluation | 1 month after account deletion |
| Domain (Industry) | Context for release evaluation | 1 month after account deletion |
| Position | Context for release evaluation | 1 month after account deletion |
| Item | Purpose | Retention Period |
|---|---|---|
| Payment information (card issuer, partial card number) | Payment processing and refunds | 5 years (E-commerce Act) |
| Billing address | Payment processing, invoice issuance | 5 years (E-commerce Act) |
| Payment history | Subscription management, customer support | 5 years (E-commerce Act) |
Note: Payment information is processed directly by payment service providers (Lemon Squeezy, Toss Payments). We do not directly store sensitive payment information such as full card numbers.
| Item | Purpose | Retention Period |
|---|---|---|
| IP Address | Service usage records, fraud prevention | 1 year |
| Browser Information | Service optimization | 1 year |
| Service Usage Records | Service improvement | 1 year |
| Error Information (stack traces, error messages) | Service stability improvement, bug fixing | 90 days |
| Session Replay Data | User experience analysis, error reproduction | 90 days |
| Performance Tracing Data | Service performance monitoring and optimization | 90 days |
Marketing Purpose: Use of personal information for marketing purposes, such as new feature announcements and promotional information, is only conducted with separate Marketing Communications Consent. Please refer to that agreement for details.
In principle, we do not share your personal information with third parties. However, exceptions apply in the following cases:
We delegate personal information processing to the following service providers for smooth service operation:
| Service Provider | Delegated Tasks | Retention Period |
|---|---|---|
| Google LLC | User authentication (Google OAuth), Cloud infrastructure (GCP) | Duration of service use |
| Sentry (Functional Software, Inc.) | Error monitoring, performance tracking, session replay | 90 days |
| OpenAI, Inc. | AI-based release evaluation analysis | 30 days (API logs) |
| Anthropic PBC | AI-based release evaluation analysis (planned) | 30 days (API logs) |
| Lemon Squeezy, LLC | International payment processing, subscription management (planned) | As required by law |
| Toss Payments (Viva Republica Inc.) | Domestic (Korea) payment processing (planned) | As required by law |
These service providers do not process personal information beyond the scope of their delegated tasks. We manage and supervise these providers to ensure the safe processing of personal information.
We use AI services from OpenAI, Anthropic, and others for release evaluation analysis. Release information entered by users (product name, test cases, risk information, etc.) may be transmitted to these services for AI analysis. However, users' personally identifiable information (name, email, etc.) is not transmitted to AI services.
We destroy personal information without delay after the purpose of collection and use has been achieved. However, information may be retained as required by applicable laws:
We destroy personal information without delay when it is no longer needed:
You may exercise the following rights at any time:
We have designated a Privacy Officer to handle personal information processing matters and address complaints:
Any additions, deletions, or modifications to this Privacy Policy due to changes in laws or policies will be announced through notices at least 7 days before implementation.
If you need to report or consult about personal information infringement, please contact the following organizations: