Tarikh kuat kuasa: 12 Ogos 2026
This Privacy Policy explains how qtAI lab Co., Ltd. ("qtAI lab," "we," "us," or "our") collects, uses, shares, stores, and protects personal information in connection with qlot, our AI-powered document translation service.
We process personal information in accordance with the Korean Personal Information Protection Act ("PIPA"). Where applicable, we also follow the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA").
qlot is intended for users aged 14 or older. EU and EEA residents must be at least 16 years old. We do not knowingly collect personal information from children below these age limits.
When you create an Account, we collect information such as:
When you use the translation Service, we receive and process the documents you upload.
Uploaded documents may contain personal information about you or other people. We process file contents only as needed to provide translation and related Service functions.
We temporarily store translated documents so that you can retrieve them.
The applicable retention period depends on your Subscription Plan, as described in Section 5.
International payments are processed by Paddle, our Merchant of Record.
During checkout, Paddle may collect:
Paddle acts as an independent data controller for information it collects directly at checkout under Paddle's Privacy Policy .
qtAI lab does not receive or store your full card number, security code, or full bank-account details. We receive transaction identifiers, purchase details, payment status, billing country, and related records needed to provide the Service and manage your subscription.
Purchases made through the Korean-language Service are processed by Toss Payments under the Korean Privacy Policy.
We retain transaction identifiers, invoices, and related billing records for the periods required by applicable tax and commercial law, including the five-year period applicable to certain records under Korean law.
We collect technical and usage information such as:
We use this information to operate the Service, prevent fraud, investigate errors, maintain security, and plan system capacity.
We do not use server logs for advertising.
We use cookies and similar technologies needed to:
Cloudflare Turnstile may create a short-lived token when you submit a protected form.
Paddle Checkout may use cookies and related technologies needed for payment processing, checkout functionality, and fraud prevention. Paddle describes its use of these technologies in its own Privacy Policy .
We do not use third-party advertising cookies.
We use personal information to:
For users in the EU and EEA, we rely on the following legal bases under GDPR Article 6:
Where we rely on legitimate interests, we consider the effect of the processing on your rights and interests.
We do not use files or translation outputs from paid plans to train our AI models or third-party AI models.
Content submitted under the Preview plan may be used, after de-identification, to improve and train our translation models, on the legal basis described in Section 3.
You can exclude your content from training by using any paid plan. Paid-plan content is processed only to provide the translation and related Service functions and is never added to training, fine-tuning, or evaluation datasets.
We may use aggregated operational information, such as total characters translated by language pair or average file size, to understand demand, plan capacity, and improve the Service.
We remove identifying information before using these metrics and do not use them to reconstruct or identify individual files.
Retention depends on your plan:
After the retention period ends, files are automatically removed from primary storage.
Backup copies are removed on a rolling basis within an additional 30 days.
We retain Account information while the Account remains active.
After you delete your Account, we delete or anonymize Account information within 30 days unless we must retain specific information for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes.
We retain server and security logs for up to 90 days.
After that period, logs are deleted or anonymized unless a longer period is reasonably necessary to investigate a security incident, fraud, or legal claim.
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.
We use service providers to operate qlot. Providers acting on our behalf are required to process information under appropriate contractual, confidentiality, and security obligations.
Our providers include:
Paddle acts as an independent controller for information it collects directly during checkout.
A current list of relevant providers may be requested at support@qtailab.com .
We may also disclose information:
The Service is hosted in the Republic of Korea using the AWS Seoul region.
When you access qlot from another country, personal information is transferred to and processed in Korea.
The European Commission recognized the Republic of Korea as providing an adequate level of personal data protection in its adequacy decision of December 17, 2021.
Where a transfer falls outside an applicable adequacy decision, we use an appropriate transfer mechanism, such as Standard Contractual Clauses, where required.
Paddle processes payment information under the transfer safeguards described in Paddle's Privacy Policy .
The rights available to you depend on where you live and the laws that apply.
We provide the following privacy controls to all users, subject to identity verification and legal retention requirements:
EU and EEA residents may also have the right to:
We do not make decisions about users based solely on automated processing that produce legal or similarly significant effects.
Where the CCPA/CPRA applies, California residents may have the right to:
We do not sell personal information or share it for cross-context behavioral advertising.
Send a request to support@qtailab.com from the email address associated with your Account.
We may request information needed to verify your identity and protect the Account.
We respond to verified requests within 30 days. For a complex request, we may extend the response period by up to 60 additional days and will notify you of the extension.
For payment information collected directly by Paddle, you may also submit a request to Paddle under its Privacy Policy .
We use technical and organizational safeguards appropriate to the nature of the information and the risks involved.
These safeguards include:
No online service can guarantee complete security.
We review our safeguards as risks and technology change. Where required, we will notify affected users and authorities of a personal data breach.
When a personal data breach is likely to create a risk to individual rights and freedoms, we will take the steps required by applicable law.
These steps may include:
A notice may describe:
qlot is not directed to children under 14 years old or, for EU and EEA residents, children under 16 years old.
We do not knowingly collect personal information from children below these age limits.
Contact us if you believe a child has provided personal information through the Service. We will investigate and delete the information where appropriate.
qtAI lab has designated a Data Protection Officer who may be contacted at:
For questions about this Privacy Policy or to exercise a privacy right, contact:
You may submit a privacy complaint to the Korean Personal Information Protection Commission at www.pipc.go.kr .
Where GDPR Article 27 requires us to appoint an EU representative, we will publish the representative's contact details in this Privacy Policy.
Until then, EU and EEA users may contact our Data Protection Officer.
We may update this Privacy Policy.
We will announce material changes at least 7 days before they take effect and at least 30 days before a materially unfavorable change.
The effective date appears at the top of this page.
Continued use after the effective date means that you acknowledge the updated policy. Where applicable law requires consent for new processing, we will request that consent separately.
This English version governs personal-information processing for the international Service.
The Korean-language Service is governed by the Korean Privacy Policy published at /ko/privacy.
Translations may be provided for convenience. Unless applicable law requires otherwise, the English version controls for the international Service.
Cuba qlot secara percuma dan lihat cara AI mengekalkan konteks serta format dokumen anda.