KARXY
Privacy Notice
How KARXY handles information for chat, human handoff, and attachments.
This is a beta operating document under professional legal review. The data flows and rights-request method reflect the current implementation.
Published version: 2026-07-13.v2 · Last reviewed: 2026-07-13
1. Controller and request channel
KARXY is the controller. Privacy requests are accepted through the online form at the bottom of this page.
2. Data and purposes
- AI chat: question, language, generated answer, retrieved sources, and quality metadata
- Product analytics: per-tab session ID, locale, screen path, and diagnosis, chat, citation, and handoff events; analytics events exclude questions, answers, and contact data
- Human handoff: name, contact, note, and versioned Typebot consent receipt after explicit consent
- Attachments: filename, type, size, security status, and OCR result
- Operations: limited request, error, security, and administrator audit records
3. Retention
- Chat sessions and handoff consent receipts: up to 90 days from recent use
- Product usage events: up to 180 days
- Chat attachments: up to 30 days
- Diagnosis leads: up to 365 days
- Partner requests: up to 180 days
- Records may be segregated for a legally required period or an active dispute.
4. Vendors and overseas processing
KARXY uses Vercel for hosting, Supabase for database and storage, Typebot for chat UI, n8n for workflow orchestration, and Moonshot AI's Kimi for responses and OCR. Requests may be processed outside Korea on vendor infrastructure. Legal entities, countries, subprocessors, and provider retention details will be updated after contract confirmation and professional review.
5. Handoff consent
Contact data is collected only after explicit consent to the handoff purpose, data items, 90-day retention, and this notice version. Declining does not block general AI guidance.
6. Security and deletion
KARXY uses encrypted transport, encryption or masking for sensitive chat and contact fields, role-based administrator access, and audit records. Database records and stored files are deleted after retention or a verified deletion request.
7. Your rights
You may request access, correction, deletion, restriction of processing, and withdrawal of consent. Additional verification may be required to protect you and other people.
Exercise your data rights
You may request access, correction, deletion, restriction, or withdrawal of consent. We return the same receipt whether or not a matching record exists.