Privacy Policy

Effective: 15 March 2026 | Last updated: 2 June 2026 | Korea Lotto 6/45

AILotto ("we", "Company") explains how we collect, use, store, and protect personal information when you use ailottoai.com for Korea Lotto 6/45, in accordance with the Personal Information Protection Act and related laws of the Republic of Korea.

1. Information we collect

We collect the following categories of information to operate the Service.

WhenDataHow
Sign-upEmail, display name, profile image, social provider user IDSocial login (Google, Kakao, Naver)
Using the ServiceUsage logs, AI analysis requests and results, IP address, device/browser dataAutomatic collection
PaymentTransaction records, billing status (card details handled by Lemon Squeezy)Lemon Squeezy (Merchant of Record)
Dream / birth-chart analysis (optional)Dream text, date of birth, birth time if you choose to enter themYou provide directly

2. Why we use it

  1. Service delivery: Account identification, AI analysis, history, and personalization
  2. Billing: Subscriptions, credits, refunds
  3. Improvement: Analytics, model quality, and product development
  4. Support: Responding to inquiries and resolving disputes
  5. Marketing (optional): Sending promotional information (new features, events, benefits, and win-back offers) only to users who opted in
  6. Legal compliance: Records required under Korean law

3. Retention

We delete personal information when it is no longer needed, unless retention is required under Korean law.

CategoryRetentionBasis
Contract and cancellation records5 yearsAct on the Consumer Protection in Electronic Commerce
Payment and supply records5 yearsAct on the Consumer Protection in Electronic Commerce
Consumer complaints3 yearsAct on the Consumer Protection in Electronic Commerce
Server access logs3 monthsProtection of Communications Secrets Act
Marketing consent / withdrawal recordsUntil withdrawal or account deletionNetwork Act

4. Deletion

  1. Process: When retention ends or you delete your account, we remove or anonymize data per internal policy.
  2. Method: Electronic records are securely erased; paper records are destroyed when applicable.

5. Sharing with third parties

We do not sell personal information. We share data only with your consent, to operate the Service, or when required by law.

  1. Processors listed below (hosting, payments, AI providers as needed for your request)
  2. Law enforcement when legally compelled

6. Processors

We use trusted vendors who process data on our instructions:

VendorPurposeRetention
Lemon SqueezyPayment processing (Merchant of Record)Per vendor policy / contract term
Amazon Web Services, Inc.Cloud hosting and storageContract term
Cloudflare, Inc.CDN, security (WAF), DDoS protectionContract term
AI model providers (OpenAI, Anthropic, Google, xAI, etc.)Running analyses you requestPer request / contract term
Resend, Inc.Email delivery (transactional and marketing)Per vendor policy / contract term
PostHog, Inc.Product analyticsContract term
Google LLC (Analytics)Web traffic analyticsContract term
Microsoft Corporation (Clarity)Service quality analyticsContract term

6.2 Overseas transfer

We may transfer personal information to processors located outside Korea (e.g. United States) as listed in section 6. Items, purposes, and retention follow sections 1–3.

RecipientCountryPurposeHow to object
Lemon SqueezyUS etc.PaymentsDo not purchase paid features
AWS / CloudflareUS etc.Hosting & securityStop using the Service / delete account
AI providersUS etc.AI analysisDo not use AI features / delete account
PostHog / Google / MicrosoftUS etc.AnalyticsBlock cookies / opt out in browser
ResendUSEmailUnsubscribe / delete account

7. Your rights

  1. You may request:
    • Access to your personal information
    • Correction of inaccurate data
    • Deletion
    • Suspension of processing
  2. Contact us via My Page (account deletion), marketing settings, or [email protected]. We respond without undue delay.

8. Security

We apply measures including:

  • TLS encryption in transit
  • Cloudflare WAF and DDoS protection
  • Access controls and least-privilege administration
  • Staff training and limited access to personal data

9. Cookies and personalized ads

  1. We use cookies for session management, locale preferences, and analytics (PostHog, Google Analytics, Microsoft Clarity).
  2. You can control cookies in your browser; blocking essential cookies may limit sign-in or checkout.
  3. To show ads to free users, we may display ads from third-party ad providers such as Kakao AdFit, Coupang Partners, and Google AdSense, which may collect behavioral data such as cookies and ad identifiers.
  4. Behavioral data is used only to serve personalized ads; we do not share identifiable personal information such as your name or email with ad providers.
  5. You can opt out of personalized ads via your browser cookie settings or each provider's ad settings page. Ads are not shown while you have an active paid subscription or weekly pass.

10. Privacy contact

For privacy questions or complaints, contact:

Privacy contact

Name: Jang Myung-ok (Representative)

Email: [email protected]

Phone: +82-2-955-8199

You may also contact the Personal Information Dispute Mediation Committee (privacy.kisa.or.kr / 118).

11. Marketing communications

  1. We send promotional emails (new features, events, benefits, and win-back offers) only to users who have opted in to marketing communications.
  2. Marketing consent is optional. Declining or withdrawing consent does not restrict your use of the Service in any way.
  3. When sending advertising, we comply with the Network Act (Act on Promotion of Information and Communications Network Utilization), including:
    • Labeling the email subject with "(광고)" (advertisement)
    • Including clear unsubscribe instructions in the body
    • Not sending advertising during night hours, from 9 PM to 8 AM (KST)
  4. You may withdraw consent at any time via the settings on My Page or the "Unsubscribe" link at the bottom of any marketing email; sending stops immediately upon withdrawal.

12. Changes

We may update this Policy. Material changes will be announced at least 7 days before they take effect via the Service.

This Privacy Policy was established on 15 March 2026; the amended version takes effect on 2 June 2026.