What we collect

Account identifiers from Google OAuth; workspace and entitlement metadata; source files you deliberately upload; derived OCR, citation and knowledge artifacts; security and operational logs; billing identifiers supplied by Paddle; and the name, work email and message you submit through the contact form.

Why we process it

We process data to authenticate users, compile and return knowledge packages, secure and operate the service, provide support, prevent abuse, maintain transaction records and comply with law. We do not request sensitive source documents through the public inquiry form.

Storage and lifecycle

Document bytes are stored in tenant-scoped Cloudflare R2 quarantine and immutable result paths, not in the application database. Supabase stores account, entitlement and proof metadata. Data remains until workspace deletion, a verified deletion request, or a legal retention duty applies. Backup remnants expire on the provider backup schedule. Automated lifecycle enforcement is a general-availability launch gate and the service is currently a controlled private pilot.

International processing

Supabase is configured in Seoul. Vercel, Cloudflare, RunPod, Resend, Google and Paddle may process limited data through global infrastructure or support systems outside Korea. The exact processor, purpose and data category are listed on the subprocessors page. Cloudflare R2 location hints are best-effort and are not a promise of Korean data residency.

Your choices

You may request access, correction, export, restriction or deletion by writing to privacy@tavonel.com. We verify the requester before acting. Security reports should go to security@tavonel.com.

Contact

Privacy contact: privacy@tavonel.com. Service operator: TAVONEL Foundation private pilot, Republic of Korea. The legal operator name, business registration details and service address must be published before live paid sales open.