Privacy Policy

NoCose Privacy Policy Effective Date: May 20, 2026 Taro Labs (hereinafter "Company") respects User privacy and complies with the Personal Information Protection Act and related laws. 1. Collection and Use of Personal Information Item Purpose Retention Period Name, email, password, university, department, student ID Account management and identity verification Until membership withdrawal (may be retained longer per law or policy) Linked service and timetable information Class schedule linkage and automatic file sorting Until membership withdrawal Lecture voice recording data Text conversion and AI note generation During service provision period Text conversion results, AI notes, edits, memos Service provision, quality improvement, AI training Up to 5 years after membership withdrawal Device information, IP address, access logs, cookies Service statistics, fraud prevention, personalized service Up to 5 years after membership withdrawal 2. Methods of Collection - Direct input during sign-up and service use - Automatic collection through linked platforms - Automatically generated data during service use (recordings, logs, cookies, etc.) - Collection through customer inquiries and events 3. Use of Voice Data and AI Training Data 3.1 The Company may freely use all voice data, text conversion results, and AI-generated notes for service provision, improvement, new feature development, and AI model training. 3.2 Service data may be anonymized or pseudonymized and used permanently for statistics, research, academic purposes, marketing, and commercial purposes. Anonymized data is not subject to personal information protection laws. 3.3 Even if the User deletes content, the Company may retain anonymized copies and continue to use them. 3.4 Data already used for AI training is not deleted even after membership withdrawal. 4. Provision to Third Parties and Cross-Border Transfer The Company may provide or entrust personal information to the following third parties: Recipient Purpose Items Retention AWS (USA) Data storage and server operation All data generated during service use During service period Google LLC (USA) Usage statistics analysis Device info, IP, usage records Until purpose is achieved Users agree to the transfer of personal information to the United States by using the Service. 5. Retention and Destruction of Personal Information Personal information is destroyed after the purpose is achieved, except when retention is required by law or for service improvement and AI training (in anonymized form). 6. User Rights Users may request access, correction, deletion, or suspension of processing of their personal information at any time. The Company may refuse requests in certain cases (legal retention obligations, technical difficulties, anonymized data, etc.). 7. Security Measures The Company implements SSL/TLS encryption, data encryption, access control, and regular security audits. However, the Company is not liable for information leaks caused by hacking or other force majeure events despite reasonable care. 8. Changes to Privacy Policy This Privacy Policy may be amended. Changes will be announced at least 7 days in advance (30 days for material changes). Continued use after announcement constitutes agreement to the revised policy.