Privacy Policy

Last updated: October 28, 2026

Leviosa AI Corp. ("Company") establishes and discloses the following Privacy Policy to protect the freedom and rights of data subjects and to handle personal information-related grievances smoothly.

Article 1 (General Provisions)

The Company complies with applicable laws including the Personal Information Protection Act and processes personal information collected during the use of Leviosa AI services lawfully and safely.

Article 2 (Items and Methods of Collection)

Required items collected during registration include name, email address, and password or social login identifiers. Optional items include phone number, company name, and marketplace information. Payment details, API integration data, IP addresses, cookies, and device information may also be collected.

When you ask the website for a download link, we collect your email address. When you visit the website (yomates.ai), we collect a random visitor identifier stored in your browser, the pages you visit, and a recording of your clicks and scrolls on them (a session recording); what you type into fields is not recorded. The Yomates desktop app sends a random identifier made on the device, the operating system, the app version, the language, counts of features used, and error information; it does not send your account, email address, or conversations.

Article 3 (Purpose of Processing)

Personal information is processed for identity verification, service provision, payment processing, external platform integration, security, service improvement, statistical analysis, and legal compliance.

Article 4 (Retention and Usage Period)

Information is destroyed without delay after collection purposes are fulfilled. However, certain records are retained as required by law: contract records (5 years), payment records (5 years), consumer complaint records (3 years), and advertising records (6 months).

Article 5 (Third-Party Disclosure)

Personal information is not disclosed to third parties in principle, except with prior consent, as required by law, or pursuant to lawful requests from investigative authorities.

Article 6 (Outsourcing of Processing)

Processing is outsourced to TossPayments (payment in won), Paddle.com Market Ltd (payment for plans bought on yomates.ai, as merchant of record: checkout, tax, receipts and refunds), AWS (cloud infrastructure), Kakao (notifications), Zerocall (customer support), Cloudflare (analytics and security), PostHog, Inc. (website and app usage analytics, session recordings, error analysis), and Plus Five Five, Inc. (Resend, sending the download link you request by email).

Article 7 (Overseas Transfer)

Personal information may be transferred overseas when using cloud services or AI models. Service data is stored and processed through the AWS Seoul Region. Three services transfer data abroad:

• PostHog, Inc. ([email protected]), Virginia, USA: IP address, visitor identifier, device, browser and OS information, pages visited, clicks, scrolls, session recordings and error information, sent over the network whenever you visit the website or use the app, for usage statistics, service improvement and error analysis. Session recordings are kept for 30 days; other usage records until the analysis purpose is fulfilled or the contract ends. You can stop it on the website with your browser's tracking protection or a blocker extension, and in the app by turning off Usage data under Settings > General. Refusing does not limit the service.
• Paddle.com Market Ltd, United Kingdom, with Paddle.com Inc., USA, for buyers in the United States: the name, email address, country and postcode and the payment details you enter in Paddle's checkout, and the record of your plan and payments, sent over the network when you buy a plan on yomates.ai, so Paddle can take the payment, charge tax, issue receipts, check for fraud and handle refunds as merchant of record. The Company receives from Paddle your email address, country, plan and payment records, never your card details. Kept as Paddle's privacy notice and tax law require. If you do not buy a plan on yomates.ai nothing is sent.
• Plus Five Five, Inc. (Resend, [email protected]), USA: your email address, sent over the network when you ask the website for a download link, to email you that link; kept until it is sent or the contract ends. If you do not enter an email address nothing is sent, and the app can be downloaded from the website directly.

Article 8 (Rights of Data Subjects)

Data subjects may request access, correction, deletion, suspension of processing, or withdrawal of consent at any time via email or written request.

Article 9 (Destruction Procedures)

Information is destroyed without delay when the retention period expires or processing purposes are fulfilled. Electronic files are destroyed using irrecoverable methods; paper documents are shredded or incinerated.

Article 10 (Security Measures)

Measures include access control, password encryption, access log management, security software, server access control, internal management plans, and staff training.

Article 11 (Cookies)

Cookies may be used for personalized service delivery, login maintenance, and usage analysis. The website (yomates.ai) stores a random visitor identifier in a PostHog cookie and in your browser's local storage, so that a visit, a click on the emailed download link and an app install count as one visitor; no name or email address is sent to PostHog. Users can reject or delete cookies and site data through browser settings, though some services may be limited.

Article 12 (Behavioral Information)

Usage records, access logs, and click data may be processed for service improvement, statistical analysis, and personalized content delivery. On the website, visits are recorded through PostHog (session recordings) to study how pages are used and where they break; what you type into fields is not recorded, and recordings are deleted after 30 days.

Article 13 (Data Protection Officer & Contact)

Company: Leviosa AI Corp.

CEO: Haram Joo

Business Registration No: 707-81-03878

Mail Order Business No: 2025-Seoul Gwanak-1720

Address: FRONT1, 122 Mapo-daero, Mapo-gu, Seoul, Korea

Phone: +82-10-4014-6022

Data Protection Officer: Haram Joo

Email: [email protected]

Article 14 (Policy Changes)

This policy may be updated due to changes in laws, policies, or services. Significant changes will be announced through in-service notifications.

Supplementary Provisions

This Privacy Policy takes effect on October 28, 2026. Earlier versions applied from March 24, 2026 to October 18, 2026 and from October 19, 2026 to October 27, 2026.