T flow Privacy Policy

1) Personal Information: Personal Information

Information that can identify an individual, such as name and email

2) Corporate Information: Corporate Information

Business registration details, trade related information, and other identifiers of a legal entity

3) Document Data: Document Data

Trade documents uploaded by users, including Letters of Credit (L/C), contracts, invoices, packing lists, etc.

4) Usage Data: Usage Data

Service usage records, logs, access information, and similar data

1) The Company may collect the following information:

• Name, email, password
• Company name, business registration information, job title

2) Payment Information

• Payment method details (credit card, payment account, etc.)

※ Actual payment information may be processed by a Payment Service Provider (PSP).

3) Documents and Data

• Uploaded documents such as L/Cs, contracts, and shipping documents
• Extracted data and analysis results derived from such documents

4) Usage Data

• Access logs, IP address, browser information
• Service usage patterns

2) Retention of Transaction Related Information

• Retained items: Transaction records
• Legal basis: Commercial Act, Act on Consumer Protection in Electronic Commerce
• Retention period:

3) Retention of System Access and Usage Records

• Retained items: Access and usage logs
• Retention period: 5 years

1) Service provision and feature operation

2) AI-based document analysis and automated document creation

3) Service improvement and feature enhancement

4) Customer support and inquiry handling

5) Security and prevention of fraudulent use

6) Record retention for dispute resolution

7) Marketing and Advertising Use (limited to account registration information and service usage records)

• Development and specialization of new services
• Service and advertisement delivery based on demographic characteristics
• Analysis of access frequency and service usage statistics
• Delivery of event and promotional information

(However, personal information is not provided to advertisers.)

Google user data, including Gmail data, is never used for marketing or advertising (see Article 12).

1) For Service Provision

• Payment Service Provider (PSP)
• Cloud service providers
• Email/SMS delivery services

2) External System Integration

• Korean Chamber of Commerce and Industry, Customs Service, shipping companies, forwarders, etc. for document issuance and submission purposes at user request

3) Legal Requirements

• When required by law

The Company applies reasonable security measures to protect personal information and document data.

However, due to the nature of the internet, complete security cannot be guaranteed.

1) Data Accessed

Requested permission: https://www.googleapis.com/auth/gmail.modify (read, compose, send, and change the labels of email; it does not allow permanent deletion).

• The email address of the connected Gmail account
• Message metadata: sender, recipients, subject, date, labels (read, starred, important, spam, inbox categories), and attachment names
• Message bodies and attachments

2) How We Use Google User Data

Google user data is used only to provide and improve the user-facing features of the T flow email feature:

• Showing the user's mailbox, messages, and attachments inside T flow
• Applying the user's actions to Gmail: marking as read or unread, starring, marking as important, reporting spam, and moving to trash
• Sending email that the user writes, only when the user clicks Send
• AI analysis: when messages are synced, the subject, sender, and a short preview are processed by AI to identify trade-related emails; for those emails, the content is analyzed to produce summaries, classifications, and links to the user's trade projects, which are shown to the user
• Saving an attachment to a trade project, only when the user chooses to do so

3) Storage and Retention

• Message metadata and a preview of up to the first 500 characters of each message body are stored to display the mailbox and to support search and AI classification.
• The full body is fetched from Gmail when the user opens a message and is cached temporarily for up to about one hour. Full bodies of received messages are not stored permanently.
• Copies of emails the user sends through T flow (recipients, subject, and body) are kept in the user's T flow mailbox.
• AI analysis results are stored and shown to the user.
• Attachments are not stored unless the user saves them to a project.
• OAuth tokens are stored on the Company's servers and used only to access Gmail for the features above.

4) AI Processing

• AI analysis is performed by Amazon Web Services (AWS Bedrock) or by AI models that the Company runs on its own servers, solely to produce results for the user.
• Google user data is never used to develop, train, or improve AI or machine learning models, whether the Company's or a third party's. AWS Bedrock does not use the content it processes to train models.

6) Disconnecting and Deletion

• When the user disconnects a Gmail account in T flow, the Company revokes the OAuth token with Google and deletes the stored tokens. The user can choose to delete all synced email data at the same time; if the user keeps it, it remains in the user's T flow account until the user deletes it or requests deletion.
• Users can also revoke T flow's access at any time from their Google Account permissions page (myaccount.google.com/permissions).
• Upon account deletion or a deletion request to the contact below, all Google user data is deleted without delay.