ProsodyPrivacy Policy
Last Updated: June 21, 2025
Humelo Corp. (hereinafter referred to as 'Company') establishes and discloses this Privacy Policy to protect users' personal information in accordance with relevant laws such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Personal Information Protection Act, and to handle related grievances promptly and smoothly.
This policy applies when using the Prosody service (console.humelo.com) provided by the Company, including the speech synthesis and speech recognition APIs and the AI consultation service (phone, web chat, and web widget consultations and consultation management), and the Company will notify any amendments to this Privacy Policy through website announcements.
The Company collects the minimum personal information necessary to provide services.
The following personal information items are collected:
Required Collection Items
- • Email address (account identification and service notifications)
- • Password (account security, encrypted storage)
- • API usage records (service provision and billing)
- • Service usage records (access logs, IP address, cookies)
Optional Collection Items
- • Name (service personalization)
- • Company name (B2B service provision)
Information Processed in the AI Consultation Service
While a business member (hereinafter 'Client') uses the AI consultation service, the Company processes the following information to consult with the Client's customers (hereinafter 'Consultation Users').
- • Phone consultations: caller phone number, call audio (used for speech recognition and not stored as a rule)
- • All consultations: consultation content (including speech recognition results), consultation summary, inquiry type
- • When a representative callback is requested: inquiry details, phone number to be contacted
- • When identity verification is required: mobile phone number, SMS verification code
- • Order requests when the Client has connected an online store: order number, ordered items, amount and delivery status, names, contact details and addresses of the buyer and recipient
- • When the Client turns on audio storage for quality improvement: short audio segments of the call (up to 30 seconds)
- • When using the web demo: cookie identifiers, access information
The collected personal information is used for the following purposes:
- Service Provision: Speech synthesis and speech recognition API service provision, usage management, billing processing
- AI Consultation Service: Responding to consultations, receiving inquiries and connecting representatives, identity verification, handling tasks the Client has connected (such as order lookup), summarizing consultation results and providing them to the Client
- Consultation Quality Improvement: Improving speech recognition and response quality (only when the Client turns on audio storage)
- Member Management: Member identification, account management, customer consultation
- Service Improvement: New service development, existing service improvement
- Marketing: Event information and promotional information transmission (only with consent)
The Company destroys the information without delay after the purpose of personal information collection and use is achieved.
However, the following information is retained for the specified period for the reasons stated below:
| 정보 유형 | 보유 기간 | 보유 근거 |
|---|---|---|
| Member Information | Immediate deletion upon membership withdrawal | Service contract fulfillment |
| Payment Information | 5 years | Electronic Commerce Act, Corporate Tax Act and other related laws |
| Service Usage Records | 3 years | Communications Secret Protection Act |
| Access Logs | 6 months | Information protection and prevention of service misuse |
| AI consultation records (consultation content, summaries, request records) | 1 year | Providing the AI consultation service and the Client's consultation management |
The Company does not provide users' personal information to third parties in principle.
- Payment Processing: Toss Payments (providing only minimum information for payment processing)
- Cloud Services: Supabase, Vercel (data processing for service operation)
- Email Delivery: SendGrid (service notification delivery)
- Legal Compliance: Requests from investigative agencies or requests according to procedures stipulated by law
The Company outsources personal information processing tasks to external specialized companies for service improvement.
When outsourcing, contracts regarding personal information processing are concluded with outsourcing companies in accordance with the Personal Information Protection Act to ensure personal information is safely managed.
Database management and backend service provision
Web hosting and CDN services
Payment processing and settlement
Data subjects can exercise the following personal information protection-related rights at any time:
- • Right to request access to personal information
- • Right to request correction of personal information
- • Right to request deletion of personal information
- • Right to request suspension of personal information processing
Rights can be exercised through written documents, telephone, email, fax, etc., and the Company will take action without delay.
The Company implements the following security measures in accordance with Article 29 of the Personal Information Protection Act:
Personal information is protected through technical, administrative, and physical measures including encryption of personal information, access restrictions, and physical security of storage facilities.
Technical Measures
- • Encrypted storage of personal information
- • API key hashing and encryption
- • Mandatory HTTPS communication
- • Database access restrictions
Administrative Measures
- • Designation of personal information processing managers
- • Access authority management
- • Regular security training
- • Establishment of internal personal information protection management plan
Physical Measures
- • Access control to computer rooms and data storage rooms
- • Verification of physical security of cloud services
For opinions or complaints regarding the Privacy Policy, please contact the department below:
Personal Information Protection Manager
개인정보 보호를 위해 연락처는 클릭 시 표시됩니다.
For other reports or consultations regarding personal information violations, please contact the following organizations:
www.kopico.go.kr
1833-6972 (toll-free)
privacy.kisa.or.kr
118 (toll-free)
www.spo.go.kr
1301 (toll-free)
ecrm.police.go.kr
182 (toll-free)