Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you use Quotato, we collect information you provide directly to us, including:

• Account information: When you sign in with Google, we receive your name, email address, profile picture, and a unique Google account identifier (subject identifier).
• Content inputs: Topics, prompts, and instructions you enter to generate blog articles.
• Generated content: Articles, keywords, FAQs, and other outputs produced through the Quotato workflow, which are saved to your account.

1.2 Information Collected Automatically

When you use our service, we automatically collect certain information, including:

• Usage data: Pages visited, features used, workflow steps completed, timestamps, and navigation patterns.
• Device and browser information: Browser type, operating system, device identifiers, IP address, and language settings.
• Performance data: Error logs, response times, and other diagnostic data to maintain and improve the service.
• Country/market preference: The market or locale you select, stored in your browser's local storage to personalize content generation.

1.3 Information from Third Parties

We receive information from Google when you authenticate via Google Sign-In, including your Google Account profile data as described in Section 1.1. We also use third-party APIs (such as search and AI model providers) as part of the content generation workflow; we do not store your personal data with those providers beyond what is necessary to fulfill the service request.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the service: Authenticate your account, execute the article generation workflow, and deliver results.
• Save and retrieve your work: Store generated articles, keywords, and FAQs so you can access them from your account dashboard (My Page).
• Personalize your experience: Apply market or language preferences to tailor generated content for your target audience.
• Improve and develop the service: Analyze usage patterns, diagnose issues, and enhance the quality and accuracy of content generation.
• Communicate with you: Send important service-related notices, updates to this policy, and (where permitted) product updates.
• Ensure security and prevent abuse: Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Comply with legal obligations: Meet applicable laws, regulations, and legal processes.

We do not sell your personal information. We do not use your generated article content to train AI models without your explicit consent.

3. How We Share Your Information

We do not share your personal information with third parties except in the following circumstances:

• Service providers: We engage trusted vendors who help us operate the service (e.g., cloud hosting providers, AI API providers, analytics tools). These vendors are contractually bound to use your data only to perform services on our behalf.
• AI model providers: Your topic inputs are transmitted to AI model APIs (such as OpenAI) to generate content. Please review those providers' privacy policies. We minimize personal information in these requests.
• Search data providers: Anonymized keyword and topic data may be sent to search volume data providers to perform keyword research. No personally identifying information is included.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or other governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of users.
• Business transfers: If Quotato is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.
• With your consent: We may share information for any other purpose with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the service. Specifically:

• Account data: Retained while your account exists and for a reasonable period after account deletion to fulfill legal obligations.
• Generated articles: Stored on our servers linked to your account. You may delete specific articles from your My Page dashboard.
• Request logs: Retained for up to 90 days for security, debugging, and service improvement purposes.
• Aggregated analytics: Retained indefinitely in anonymized, aggregated form that cannot identify you.

You may request deletion of your account and associated data by contacting us at pluszero@pluszero.co.kr. We will respond within 30 days.

5. Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data in transit.
• Secure token-based authentication via Google OAuth 2.0 — we never store your Google password.
• Access controls that limit employee access to personal data on a need-to-know basis.
• Regular security reviews and monitoring.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at pluszero@pluszero.co.kr.

6. Third-Party Services

Quotato integrates with the following third-party services that have their own privacy practices:

• Google Sign-In (Google LLC): Used for authentication. Governed by Google's Privacy Policy.
• OpenAI API: Used to power AI content generation. Governed by OpenAI's Privacy Policy. API usage data may include your topic prompts.
• Search and keyword data APIs: Used to retrieve real-time search volume data for keyword selection. Topic data is sent but no personal identifiers are included.

We encourage you to review the privacy policies of these third parties. We are not responsible for the privacy practices of external services.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at pluszero@pluszero.co.kr. We will respond within 30 days. We may need to verify your identity before processing your request.

Browser and Local Storage

Quotato stores your authentication state and market preference in your browser's local storage. You can clear this data at any time through your browser settings. Clearing local storage will sign you out of the service.

8. International Data Transfers

Quotato is operated from servers that may be located outside your country of residence. By using the service, you consent to the transfer of your information to countries that may have different data protection laws than your country. We take appropriate steps to ensure that transfers comply with applicable law, including relying on standard contractual clauses where required.

9. Children's Privacy

Quotato is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at pluszero@pluszero.co.kr and we will take prompt action to delete the information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the service after the changes take effect constitutes your acceptance of the revised policy.

We encourage you to periodically review this page to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us: