개인정보처리방침 · Privacy Policy (Korea)

Wordmuse Labs LLC, a Wyoming limited liability company, provides an AI-assisted platform that helps students prepare college-admissions essays and related materials (the “Service”), available at wordmuse.ai. Wordmuse is the personal information controller (개인정보처리자) for the personal information described here.

This policy applies to users located in South Korea and is written to Korea’s Personal Information Protection Act (PIPA). It is a separate document from our United States privacy policy, not a translation of it.

Wordmuse accepts Korean users aged 14 and over. If you are under 19, your legal guardian must approve your account and enter into the subscription contract, because under the Korean Civil Act a minor’s contract may otherwise be cancelled. See our separate policy for children and adolescents, written in plainer language.

• Account — name, email, date of birth, password (stored only as a one-way hash); from you at signup, or from Google if you use Google sign-in.
• Guardian — guardian name, contact details, and verification of the relationship; from the guardian during the approval flow.
• Profile (optional) — pronouns, grade, graduation year, academic records, intended major.
• Essays and writing content — essays, drafts, notes, mind maps, and conversations with the coach.
• AI-inferred information (“Memories”) — themes, personal stories, values and interests our AI derives from your writing, stored to give continuity across sessions.
• Usage and technical — activity logs, session timestamps, IP address, browser and device information, approximate location for eligibility.
• Payment — billing details, handled by our payment processor. We do not store full card numbers.

PIPA requires that the retention period be stated at the point consent is taken, not only here, so the same figure appears on the consent screen.

Purpose

Providing the AI writing-coaching Service; account and guardian administration; billing; security and abuse prevention

Retention

3 years

Legal basis

Your consent (and your guardian's, if you are under 19)

Right to refuse

You may refuse, and you may withdraw consent at any time. The Service cannot be provided without the consents marked required

When the retention period ends, or when you withdraw consent or delete your account, we destroy the personal information without delay — electronic files are deleted irrecoverably, and any printed material is shredded or incinerated. We keep information longer only where another law requires it, and only for as long as that law requires.

Separately, accounts inactive for 12 months have their content scrubbed on a different schedule. That is a distinct clock over different data, not the retention period above.

We entrust parts of the processing to the companies below. They act on our instructions only, and may not use the information for their own purposes. We require confidentiality and security terms from each, and we supervise them.

• Anthropic — AI processing, to generate coaching feedback on your writing
• Supabase — Database hosting and authentication
• Vercel — Application hosting and infrastructure
• Stripe — Payment processing for paid plans
• Perplexity — School-research feature; the research prompt you submit is sent to generate the response
• AssemblyAI — Live speech-to-text for voice dictation. Your browser streams audio directly to AssemblyAI; the audio does not pass through our servers
• Resend — Transactional email, including verification, billing, and guardian-approval notices
• Upstash — Rate limiting. Sees request identifiers such as your user ID or IP address; does not receive the content of your messages or essays

Wordmuse operates from the United States, so your personal information is transferred outside South Korea. We ask for this consent separately, as PIPA requires.

Recipients

Anthropic, and the infrastructure providers listed in Section 4

Destination

United States

Items transferred

Account information, essay and conversation content, and the AI-inferred Memories derived from it

Purpose

AI processing to generate coaching feedback, and hosting the Service

Method and timing

Transmitted over encrypted network connections as you use the Service

Retention

3 years

Right to refuse

You may refuse. The Service cannot be provided without it, because the AI processing itself happens outside Korea

We do not provide your personal information to third parties for their own purposes. The companies in Section 4 are processors acting on our instructions, which is a different thing. If you join a classroom, the educator running it is a user of the Service under our control rather than a third-party recipient. Should this ever change, we will ask for your separate consent first, naming the recipient, their purpose, the items provided, and their retention period.

• Your coach is an AI, not a human, and its responses are machine-generated.
• We do not use your essays, conversations, or Memories to train any AI model. We keep only de-identified, aggregate patterns that cannot identify you.
• We do not sell your personal information.
• We do not use your personal information to make any automated decision that produces legal effects for you. The AI generates writing feedback; it does not decide anything about your account, your eligibility, or your admission anywhere.

You may exercise the following rights at any time, in the app or by writing to contact@wordmuse.ai.

• Access — ask what personal information we hold about you and obtain a copy.
• Correction and deletion — have inaccurate information corrected, or have information deleted.
• Suspension of processing — require that we stop processing your personal information while keeping it.
• Withdrawal of consent — withdraw any consent you gave, including the cross-border transfer consent. Withdrawal does not affect processing that already happened.

We respond within 10 days. We may verify that the request comes from you, and we may refuse or partly refuse where another law requires it — if we do, we will tell you why and how to object. If you are under 19, you may exercise these rights yourself; your guardian may also exercise them on your behalf.

Wordmuse does not accept users under 14. Signup is refused before any information is stored. Because nearly all of our Korean users are adolescents, we publish a separate policy for children and adolescents in plainer language, as the Personal Information Protection Commission’s guidelines recommend. Where the two differ in wording, they are meant to say the same thing; tell us if they do not.

• Encryption of passwords (one-way hash) and of data in transit.
• Access control, so that staff and systems reach only the data they need. Memories carry additional access controls because they can contain sensitive personal themes.
• Access logging, retained for audit.
• Separation of the production environment, and vulnerability management on the systems that run the Service.

We use cookies to keep you signed in and to remember your language preference, and aggregate site-level analytics to understand which pages are used. You can refuse or delete cookies in your browser settings; if you refuse the ones needed to keep a session, you will not be able to stay signed in.

If your personal information is leaked, we will notify you without delay of what was leaked, when and how, what you can do to limit the harm, our response, and where to report damage. Where the law requires it we will also report to the Personal Information Protection Commission or the Korea Internet & Security Agency.

Wordmuse has designated a privacy officer responsible for handling personal information and for your complaints and remedies relating to it.

Privacy officer

Chaim Durst

Position

Privacy Officer

Contact

contact@wordmuse.ai

You may direct any question, request, or complaint about your personal information to the officer above. We will respond without delay.

Domestic representative: Wordmuse has not designated a domestic representative in Korea. Whether one is required depends on thresholds that apply to overseas operators, and that determination is outstanding.

If you are not satisfied with how we handled your request, you may seek redress from the following bodies. Wordmuse is subject to the supervision of the Personal Information Protection Commission (PIPC) in respect of Korean users.

• Privacy Infringement Report Centre (KISA) — 118, privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee — 1833-6972, kopico.go.kr
• Personal Information Protection Commission — pipc.go.kr

If we change this policy we will post the change here at least seven days before it takes effect, and longer for changes that affect your rights meaningfully. Where a change requires it, we will ask you to review and accept the new version before you continue using the Service. Contact: contact@wordmuse.ai.