| Amazon Web Services Korea LLC (contracting party) and the AWS entity of the Region that processes the request (Amazon Bedrock) (aws-korea-privacy@amazon.com) | Countries covered by Amazon Bedrock global cross-Region inference: United States, Canada, Brazil, Mexico, Ireland, United Kingdom, Germany, France, Sweden, Switzerland, Italy, Spain, Israel, United Arab Emirates, Bahrain, South Africa, India, Singapore, Indonesia, Malaysia, Thailand, Japan, Republic of Korea, Taiwan, Australia, New Zealand (AWS determines the processing Region for each request) | Query information, instructions required for answer generation | AI answer generation | Encrypted transmission over the AWS network each time a question is asked | Not stored (discarded after the answer is generated) |
| Anthropic, PBC (privacy@anthropic.com) | United States | Query information, instructions required for answer generation | AI answer generation (fallback route when Amazon Bedrock cannot be used) | Transmitted over the network when a question is sent through the fallback route | Deleted within 30 days (up to 2 years if determined to violate the usage policy) |
| Vercel Inc. (privacy@vercel.com) | United States (server function execution), Republic of Korea (relay point for access from Korea) | Access records (IP address, browser information), application and consent submission information, consent screen sign-in information (name, email, profile photo URL, Google authentication token), query requests and responses (relay) | Website operation, relaying application and consent submissions, relaying service requests | Transmitted over the network when accessing the website, submitting, or using the service | Deleted after the request is processed; execution logs kept for up to 30 days |
| OpenAI OpCo, LLC (dsar@openai.com) | United States | Project-name expressions contained in questions and search terms (including English renderings produced by the AI app and project names extracted from questions) | Project-name search (sentence embedding: processing that converts sentences into numbers for search) | Transmitted over the network when searching for project names | Deleted within 30 days |
| Google LLC (Google Workspace) (Google privacy inquiry form) | United States | Email address, name, content of inquiry and notice emails | Receiving emails for inquiries and exercise of rights, sending notice emails about approvals, outages and policy changes, sending interview and survey participation request emails (to those who gave optional consent) | Transmitted over the network when emails are sent or received | Same as the retention period of application information |
| Slack Technologies Limited (privacy@slack.com) | United States (storage location) | Application number, individual/organization category, job/role category, times of receipt and processing (names and emails excluded) | Internal application notifications | Transmitted over the network when an application is received, approved or withdrawn | 1 year from the date the notification is posted |
| GitHub, Inc. (GitHub privacy inquiry form) | United States | Customer operations list (name, email, organization, role) | Keeping customer operations records | Transmitted over the network when the Company's staff in charge upload it to a private repository | Same as the retention period of application information |