PRIVACY / CAMBRAIN INC.
CAMBRAIN inc. processes personal information to provide website inquiries, account registration, email or social sign-in, and account management. The sections below distinguish inquiry records from account information.
CAMBRAIN inc. (주식회사 캠브레인) is responsible for the personal information processed through cambrain.app.
Privacy requests may be sent to contact@cambrain.app. Our address is 6/F, 602 Yeongdong-daero, Gangnam-gu, Seoul 06083, Republic of Korea.
The inquiry form processes the following information.
We process inquiry information only for the following purposes.
CAMBRAIN retains inquiry records for six months after handling is completed and then deletes them securely. We may retain information for a longer period only when required by law, needed to resolve a dispute, or separately agreed with the sender.
If consent is withdrawn before the inquiry is completed, we will delete the information without undue delay unless retention is legally required.
You may request access, correction, deletion, suspension of processing or withdrawal of consent by emailing contact@cambrain.app. Refusing consent prevents use of the web form, but you may contact us directly by email.
We limit access to inquiry information and use encrypted network transmission and service credentials restricted to the server environment.
Material changes to this policy will be announced on this page with a new effective date.
Email registration and sign-in use your email address, verification status and internal account identifier. Google sign-in also provides a Google account identifier, email and verification status, and basic profile information such as a name and profile image when supplied by Google. Apple sign-in provides an Apple account identifier and the email address or private relay address you choose to share. Provider-supplied identity information is stored with your authentication account in Supabase; not every profile field is displayed on the website.
We use this information to create and authenticate your account, maintain sign-in sessions, provide account settings and support, and protect access to your account. We also store the display name, language and preferences you submit, consent choices and their timestamps, and account-deletion requests. Authentication cookies, IP addresses and limited request/security logs support sign-in and abuse prevention. We do not receive your Google or Apple password.
Processing necessary to provide the account service is based on your request for that service and the applicable service contract. Optional marketing requires a separate choice; declining it does not prevent account use. Inquiry consent does not authorize account or future payment processing.
Account and linked sign-in information is retained while the account remains active. You may request account deletion in account settings or at contact@cambrain.app. The settings action records a request; it does not immediately erase data. After verifying the request and reviewing any retention obligation, we delete information no longer needed. Any necessary exception for legal obligations, security or a dispute is limited to the relevant records and purpose; we explain the reason and applicable period when responding. Provider logs and any backups follow the applicable provider retention cycle. The six-month inquiry period does not apply to account records.
You may request access, correction, deletion, restriction or withdrawal of optional consent through contact@cambrain.app. You can revoke Google access at https://myaccount.google.com/connections or manage Apple sign-in in your Apple account. Revoking a provider connection does not itself delete your CamBrain account or records. Email sign-in is available as an alternative to social sign-in.
Google access is limited to basic sign-in scopes (openid, email and profile). CamBrain does not request access to Gmail messages, Google Drive files, contacts or calendars for this sign-in flow.
Google sign-in data is used for authentication, account management and security as described above. We do not sell it, use it for advertising targeting, or use it to train AI models. We follow the Google API Services User Data Policy, including its Limited Use requirements, when using or transferring Google user data: https://developers.google.com/terms/api-services-user-data-policy .
We share only the information needed with the service providers listed below to operate authentication, storage, hosting and service email, or where disclosure is required by law. Access is limited to authorized personnel and providers supporting these purposes, with encrypted transmission and access controls.
Account registration and sign-in are available. Payment and software-license activation are separate services whose live integration is still being prepared. Creating an account or submitting an inquiry does not authorize a charge.
Before collecting information for purchases or license activation, we will explain the actual order, subscription, refund, billing, tax and device-activation data involved, the providers and their roles, applicable legal bases, transfer locations and safeguards, and retention/deletion rules. Paddle is the intended reseller and payment provider. This notice does not represent that those purchase services are already live.
The following providers process only the information needed for the described service over encrypted connections. Some processing occurs outside your country. Social sign-in is optional; without the processing necessary for email delivery, authentication and hosting, the corresponding service cannot operate.